last executing test programs:

27m55.954787726s ago: executing program 32 (id=74):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8)
sendfile(r3, r3, &(0x7f0000000080), 0x4d9b6eaf)

19m9.203786952s ago: executing program 33 (id=1048):
landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
open(0x0, 0x141080, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10})

18m1.453435679s ago: executing program 4 (id=1189):
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

18m0.659911728s ago: executing program 4 (id=1190):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)

17m59.54925874s ago: executing program 4 (id=1192):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)

17m58.201903813s ago: executing program 4 (id=1193):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r4=>0x0})
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r4}, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
clock_getres(0xfffffffffffffffb, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r5, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r6, 0x0, 0x0)
read$FUSE(r6, &(0x7f00000047c0)={0x2020}, 0x2020)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000740)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243001600ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000200000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x24000040, 0x0, 0x0)

17m56.998188144s ago: executing program 4 (id=1195):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000080), 0x4d9b6eaf)

17m54.859939211s ago: executing program 4 (id=1199):
landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10})

17m39.050648264s ago: executing program 34 (id=1199):
landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10})

12m24.85656432s ago: executing program 2 (id=1692):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4)
close(r2)
socket$inet_sctp(0x2, 0x1, 0x84)

12m23.435265818s ago: executing program 2 (id=1695):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810)

12m21.861827498s ago: executing program 2 (id=1697):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES16, @ANYBLOB="00000001e0000300"], 0x38}}, 0x0)

12m18.552302806s ago: executing program 2 (id=1699):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [<r7=>0x0, 0x0, 0x0, <r8=>0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]})

12m15.072882717s ago: executing program 2 (id=1704):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000b00)=ANY=[@ANYBLOB="401503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000005a000000040000000900000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
unshare(0x6020400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c000180380004002000010000004e2000000006ff020000000000000000000000000001000000001400020002000000e000000200000000000000000d0001007564703a73"], 0x60}}, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1100, &(0x7f00000001c0)={0xe, 0x10007c, 0x20000}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

12m12.474706708s ago: executing program 2 (id=1712):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x4)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

11m57.219121251s ago: executing program 35 (id=1712):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x4)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

6m50.597506255s ago: executing program 6 (id=2324):
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f00"], 0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x16)

6m49.653873265s ago: executing program 6 (id=2339):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000200)="12004305", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14)

6m49.588363577s ago: executing program 6 (id=2341):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040840}, 0x8000)

6m49.500592216s ago: executing program 6 (id=2344):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020)

6m49.294739295s ago: executing program 6 (id=2348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x9, 0xfffffff7, 0x1000, 0xd, 0x0, 0x74f, 0x3, 0xffffff65}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x3, 0xfff1}, {0xd, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080)

6m46.510239956s ago: executing program 6 (id=2370):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982})
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000140)={0x16, 0x4, 0xff})

6m46.163381449s ago: executing program 36 (id=2370):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982})
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000140)={0x16, 0x4, 0xff})

6m34.52143774s ago: executing program 0 (id=2473):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x800000000000004, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x0, 0x8, 0x5, 0x7c, 0x9, "26db3fb8"}, 0x5})
close_range(r0, 0xffffffffffffffff, 0x0)

6m34.400699926s ago: executing program 0 (id=2475):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001780), 0x0, 0xc040)
sendto$inet6(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0)

6m34.177701419s ago: executing program 0 (id=2480):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000080)

6m33.915629797s ago: executing program 0 (id=2483):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020)

6m33.632664841s ago: executing program 0 (id=2487):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0xa, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0)

6m20.449425127s ago: executing program 0 (id=2833):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10)

6m20.263171076s ago: executing program 37 (id=2833):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10)

5m44.193049373s ago: executing program 3 (id=3201):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0x8, 0x0, &(0x7f0000001200)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0})

5m44.051554647s ago: executing program 3 (id=3203):
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ppoll(&(0x7f0000000300)=[{r1, 0x7208}], 0x1, &(0x7f0000000340), 0x0, 0x0)

5m43.733510295s ago: executing program 3 (id=3204):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xfffffffffffffffd, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0)

5m43.31105208s ago: executing program 3 (id=3205):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)={0x120, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0xd4, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x14fa}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)

5m43.018570678s ago: executing program 3 (id=3207):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000080)={r3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)

5m42.71336941s ago: executing program 3 (id=3208):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x20004000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000000000003125ce882cbf490d908f1523f000000050000", 0x2e}], 0x1}, 0x4005)

5m27.718291384s ago: executing program 38 (id=3208):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x20004000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000000000003125ce882cbf490d908f1523f000000050000", 0x2e}], 0x1}, 0x4005)

4m25.375959043s ago: executing program 1 (id=3432):
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRES8], 0x0)
gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, &(0x7f0000000840)=""/188, 0xbc)
read$char_usb(r0, &(0x7f0000000100)=""/67, 0x43)

4m21.040689049s ago: executing program 1 (id=3437):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000006200)={0x2020}, 0x2020)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_getattr(0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000100000022bbd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="211000005400a90f880b1c0158e2a7d031b3d89c030000000a00010005a2aaaaaa0c5cf16e8c8d8659d80000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

4m19.816590621s ago: executing program 1 (id=3440):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)='trans=rdma,')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)

4m18.234438265s ago: executing program 1 (id=3441):
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfff)
write$ppp(r0, &(0x7f0000000200)="bc", 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0xa, 0x801, 0x84)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

4m16.549476906s ago: executing program 1 (id=3446):
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRES8], 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000840)=""/188, 0xbc)
read$char_usb(r2, &(0x7f0000000100)=""/67, 0x43)

4m13.250280933s ago: executing program 1 (id=3451):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff}, {0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

1m44.838313321s ago: executing program 9 (id=3716):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0)
socket(0x1e, 0x805, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10})
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

1m43.436106561s ago: executing program 9 (id=3718):
socket(0x2, 0x80805, 0x0)
mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x82000000)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000001080)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0)
close(r4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac1414", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c000)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000004840)={0x2020}, 0x2020)

1m41.51026181s ago: executing program 9 (id=3722):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x4ed, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x400253}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'geneve0\x00', {0x20000001}, 0x4})
io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)

1m37.525123305s ago: executing program 9 (id=3726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000006200)={0x2020}, 0x2020)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_getattr(0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000100000022bbd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="211000005400a90f880b1c0158e2a7d031b3d89c030000000a00010005a2aaaaaa0c5cf16e8c8d8659d80000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

1m30.335148157s ago: executing program 9 (id=3733):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004)
write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x2}, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)

1m28.843387692s ago: executing program 9 (id=3734):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = gettid()
sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x800000080000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54cdf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x8)
r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3})
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x2400c080)
r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000000))

1m13.435721911s ago: executing program 39 (id=3734):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = gettid()
sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x800000080000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54cdf, 0x70bd2a, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x8)
r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3})
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x2400c080)
r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000000))

16.485093964s ago: executing program 8 (id=3820):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0)
socket(0x1e, 0x805, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10})
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61]}}, 0x0, 0x3c, 0x0, 0x1}, 0x28)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

15.47722518s ago: executing program 5 (id=3822):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00b107471e52"], 0xfdef)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc04c561a, &(0x7f00000000c0))
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
syz_create_resource$binfmt(&(0x7f0000000400)='./file0\x00')
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_clone(0xa220480, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$cont(0x9, r6, 0x4, 0xfffffffffffffff9)

13.365870153s ago: executing program 7 (id=3824):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00b107471e52"], 0xfdef)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc04c561a, &(0x7f00000000c0))
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
syz_create_resource$binfmt(&(0x7f0000000400)='./file0\x00')
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x9, 0x0, 0x4, 0xfffffffffffffff9)

10.637458386s ago: executing program 8 (id=3825):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_dev$dri(0x0, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x2c2)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)

9.214550419s ago: executing program 7 (id=3826):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00b107471e52"], 0xfdef)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc04c561a, &(0x7f00000000c0))
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
syz_create_resource$binfmt(&(0x7f0000000400)='./file0\x00')
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0)
r6 = syz_clone(0xa220480, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x9, r6, 0x4, 0xfffffffffffffff9)

9.030439374s ago: executing program 8 (id=3827):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00b107471e52"], 0xfdef)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc04c561a, &(0x7f00000000c0))
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
syz_create_resource$binfmt(&(0x7f0000000400)='./file0\x00')
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0)
r6 = syz_clone(0xa220480, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$cont(0x9, r6, 0x4, 0xfffffffffffffff9)

9.012074956s ago: executing program 5 (id=3828):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000100)="5a34a10a1a0092d9221cc435275ce4526b204bcbe6673dff8d7f17ae2b0f7ef4b5bc88a9e935b67c44718620ab7eb58879b2bdfa6aec170031d8f4", 0x3b, 0x0, &(0x7f0000000240)={0x2, 0xc, @rand_addr=0x64010102}, 0x10)
listen(r3, 0xda90)
accept(r3, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
close(r3)

7.411085995s ago: executing program 5 (id=3829):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, 0x0, &(0x7f0000000700)={0x20, 0x81, 0x1, "13"}, &(0x7f0000000540)={0x20, 0x82, 0x1, "c8"}, &(0x7f0000000600)={0x20, 0x83, 0x1, 'q'}, 0x0, &(0x7f0000000680)={0x20, 0x85, 0x3, "67ba90"}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x10000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback={0x10000000000}, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20)

5.823797759s ago: executing program 8 (id=3830):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000100)="5a34a10a1a0092d9221cc435275ce4526b204bcbe6673dff8d7f17ae2b0f7ef4b5bc88a9e935b67c44718620ab7eb58879b2bdfa6aec170031d8f4", 0x3b, 0x0, &(0x7f0000000240)={0x2, 0xc, @rand_addr=0x64010102}, 0x10)
listen(r3, 0xda90)
accept(r3, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
close(r3)

4.195025968s ago: executing program 5 (id=3831):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000c80)='io\x00')
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_fuse_handle_req(r4, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r4, 0xffffffffffffffff, 0x1)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000840)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(r5, r3, 0x0, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.194381928s ago: executing program 8 (id=3832):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000100)="5a34a10a1a00", 0x6, 0x0, &(0x7f0000000240)={0x2, 0xc, @rand_addr=0x64010102}, 0x10)
listen(r0, 0xda90)
accept(r0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0)

4.19354745s ago: executing program 7 (id=3833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

3.183265537s ago: executing program 8 (id=3834):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
sendto$inet(r0, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0)

3.136231762s ago: executing program 7 (id=3835):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x82000000)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0)
close(r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r1, 0x0, 0x400c000)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000004840)={0x2020}, 0x2020)

2.970198576s ago: executing program 5 (id=3836):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
preadv(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1001000, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)

1.658381274s ago: executing program 7 (id=3837):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x82000000)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0)
close(r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f08864", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c000)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000004840)={0x2020}, 0x2020)

48.726521ms ago: executing program 7 (id=3838):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x4ed, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x400253}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)

0s ago: executing program 5 (id=3839):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00b107471e52"], 0xfdef)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc04c561a, &(0x7f00000000c0))
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
syz_create_resource$binfmt(&(0x7f0000000400)='./file0\x00')
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775)
socket$nl_route(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0)
r5 = syz_clone(0xa220480, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$cont(0x9, r5, 0x4, 0xfffffffffffffff9)

kernel console output (not intermixed with test programs):

[T15279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1416.303651][ T7932] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1416.324097][ T8621] usb 1-1: Using ep0 maxpacket: 32
[ 1416.326921][ T8621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1416.326950][ T8621] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1416.326973][ T8621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1416.329294][ T8621] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1416.329318][ T8621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1416.329338][ T8621] usb 1-1: Product: syz
[ 1416.329350][ T8621] usb 1-1: Manufacturer: syz
[ 1416.329363][ T8621] usb 1-1: SerialNumber: syz
[ 1416.370585][ T8621] usb 1-1: config 0 descriptor??
[ 1416.398573][ T8621] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[ 1416.487046][    C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[ 1416.724386][    C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[ 1416.727430][T10521] usb 1-1: USB disconnect, device number 44
[ 1416.728605][    C0] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[ 1416.931304][T15404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2381'.
[ 1416.970323][ T7932] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.811958][ T7932] bridge_slave_1: left allmulticast mode
[ 1417.811986][ T7932] bridge_slave_1: left promiscuous mode
[ 1417.812234][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1417.907714][ T7932] bridge_slave_0: left allmulticast mode
[ 1417.907740][ T7932] bridge_slave_0: left promiscuous mode
[ 1417.911593][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1418.412993][T15279] Bluetooth: hci2: command tx timeout
[ 1418.592993][ T5951] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1418.736444][ T7932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1418.753599][ T5951] usb 9-1: Using ep0 maxpacket: 8
[ 1418.755382][ T5951] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[ 1418.755407][ T5951] usb 9-1: config 179 has no interface number 0
[ 1418.755450][ T5951] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1418.755476][ T5951] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1418.755491][ T5951] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1418.755504][ T5951] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1418.755518][ T5951] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1418.755540][ T5951] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1418.755551][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1418.762189][T15438] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1418.903611][ T7932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1418.943610][T11390] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1418.961322][ T7932] bond0 (unregistering): Released all slaves
[ 1419.096217][T11390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1419.096247][T11390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1419.096267][T11390] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1419.096303][T11390] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1419.096324][T11390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1419.105672][T11390] usb 1-1: config 0 descriptor??
[ 1419.198590][T13995] usb 9-1: USB disconnect, device number 14
[ 1419.201245][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1419.201307][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1419.305797][ T5951] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input7
[ 1419.357229][ T7932] tipc: Disabling bearer <udp:syz2>
[ 1419.366956][ T7932] tipc: Left network mode
[ 1419.484980][T10521] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[ 1419.632094][T11390] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1419.673256][T10521] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1419.673306][T10521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1419.673332][T10521] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1419.673355][T10521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1419.673380][T10521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1419.675829][T10521] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1419.675877][T10521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1419.675902][T10521] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1419.675927][T10521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1419.675952][T10521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1419.677947][T10521] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[ 1419.677994][T10521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1419.678019][T10521] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1419.678042][T10521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1419.678066][T10521] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1419.768376][T10521] usb 8-1: string descriptor 0 read error: -22
[ 1419.768508][T10521] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1419.768531][T10521] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.896466][T10521] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux1
[ 1420.238310][T10521] usb 8-1: USB disconnect, device number 4
[ 1420.492902][T15279] Bluetooth: hci2: command tx timeout
[ 1421.591533][ T5951] usb 1-1: USB disconnect, device number 45
[ 1421.827517][T15390] chnl_net:caif_netlink_parms(): no params data found
[ 1422.372952][ T5951] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1422.528595][ T5951] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[ 1422.528650][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1422.528676][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1422.528693][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1422.528706][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1422.528727][ T5951] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1422.528738][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1422.573001][T15279] Bluetooth: hci2: command tx timeout
[ 1422.619812][ T5951] usb 2-1: config 0 descriptor??
[ 1422.621187][T15518] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1423.058033][ T5951] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd
[ 1423.074271][T15546] netlink: 'syz.8.2423': attribute type 30 has an invalid length.
[ 1423.122528][T15390] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1423.122600][T15390] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1423.122764][T15390] bridge_slave_0: entered allmulticast mode
[ 1423.163125][ T5951] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1423.211000][T15390] bridge_slave_0: entered promiscuous mode
[ 1423.294730][T15546] bond1: option arp_missed_max: invalid value (0)
[ 1423.294752][T15546] bond1: option arp_missed_max: allowed values 1 - 255
[ 1423.342278][T15546] bond1 (unregistering): Released all slaves
[ 1423.433815][T15390] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1423.434063][T15390] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1423.434356][T15390] bridge_slave_1: entered allmulticast mode
[ 1423.437730][T15390] bridge_slave_1: entered promiscuous mode
[ 1423.584477][T13995] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1423.749619][T13995] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1423.749647][T13995] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1423.749667][T13995] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1423.749769][T13995] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1423.749795][T13995] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1423.749820][T13995] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1423.751827][T13995] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1423.751854][T13995] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1423.751926][T13995] usb 8-1: Product: syz
[ 1423.751940][T13995] usb 8-1: Manufacturer: syz
[ 1423.860047][T15555] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1423.898526][T13995] cdc_wdm 8-1:1.0: skipping garbage
[ 1423.898543][T13995] cdc_wdm 8-1:1.0: skipping garbage
[ 1423.899665][T15390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1423.931969][T15390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1423.972018][T13995] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device
[ 1423.972045][T13995] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1424.123018][T11390] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1424.160328][T15562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1424.177504][T15562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1424.229195][T15390] team0: Port device team_slave_0 added
[ 1424.246106][T15390] team0: Port device team_slave_1 added
[ 1424.283004][T11390] usb 9-1: Using ep0 maxpacket: 8
[ 1424.285970][T11390] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1424.285999][T11390] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1424.286021][T11390] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1424.286181][T11390] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1424.286335][T11390] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1424.408520][T11390] usb 9-1: config 0 descriptor??
[ 1424.445883][ T5905] usb 8-1: USB disconnect, device number 5
[ 1424.655042][T15279] Bluetooth: hci2: command tx timeout
[ 1424.847180][T11390] hid_parser_main: 4 callbacks suppressed
[ 1424.847203][T11390] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1424.847234][T11390] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1424.847261][T11390] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1424.847288][T11390] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1424.847314][T11390] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1424.853635][T11390] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[ 1425.044127][ T7932] hsr_slave_0: left promiscuous mode
[ 1425.087256][ T7932] hsr_slave_1: left promiscuous mode
[ 1425.087679][T11390] usb 9-1: USB disconnect, device number 15
[ 1425.088121][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1425.088144][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1425.148832][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1425.148857][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1425.195532][ T5791] usb 2-1: USB disconnect, device number 70
[ 1425.256631][ T7932] veth1_macvtap: left promiscuous mode
[ 1425.258366][ T7932] veth0_macvtap: left promiscuous mode
[ 1425.258603][ T7932] veth1_vlan: left promiscuous mode
[ 1425.258763][ T7932] veth0_vlan: left promiscuous mode
[ 1425.544304][T13995] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1425.647993][ T7932] pim6reg99999999 (unregistering): left allmulticast mode
[ 1425.722977][T13995] usb 1-1: Using ep0 maxpacket: 32
[ 1425.733651][T13995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1425.733683][T13995] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1425.733708][T13995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1425.735908][T13995] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1425.735932][T13995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.735951][T13995] usb 1-1: Product: syz
[ 1425.735964][T13995] usb 1-1: Manufacturer: syz
[ 1425.735977][T13995] usb 1-1: SerialNumber: syz
[ 1425.745330][T13995] usb 1-1: config 0 descriptor??
[ 1425.762794][T13995] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9
[ 1426.055117][T10521] usb 1-1: USB disconnect, device number 46
[ 1426.055182][    C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[ 1426.055244][    C0] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[ 1426.688630][ T7932] team0 (unregistering): Port device team_slave_1 removed
[ 1426.754263][ T7932] team0 (unregistering): Port device team_slave_0 removed
[ 1427.201565][T15390] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1427.201582][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1427.201608][T15390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1427.260055][T15390] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1427.260071][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1427.260096][T15390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1427.776733][T15390] hsr_slave_0: entered promiscuous mode
[ 1427.778072][T15390] hsr_slave_1: entered promiscuous mode
[ 1427.779010][T15390] debugfs: 'hsr0' already exists in 'hsr'
[ 1427.779032][T15390] Cannot create hsr debugfs directory
[ 1427.780380][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'.
[ 1427.780408][T15665] netlink: 'syz.1.2468': attribute type 13 has an invalid length.
[ 1427.780421][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'.
[ 1427.840539][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'.
[ 1427.840568][T15665] netlink: 'syz.1.2468': attribute type 13 has an invalid length.
[ 1427.840581][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'.
[ 1427.868521][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1427.905608][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1427.942521][T12896] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1427.969535][T12896] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1428.101742][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.101822][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1428.799841][T15694] syzkaller0: entered promiscuous mode
[ 1428.799869][T15694] syzkaller0: entered allmulticast mode
[ 1440.614423][ T5789] bridge0: port 3(syz_tun) entered disabled state
[ 1440.724845][ T5789] syz_tun (unregistering): left allmulticast mode
[ 1440.724871][ T5789] syz_tun (unregistering): left promiscuous mode
[ 1440.728047][ T5789] bridge0: port 3(syz_tun) entered disabled state
[ 1441.088871][ T7932] IPVS: stop unused estimator thread 0...
[ 1441.158908][T15390] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1441.209905][T15390] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1441.240268][T15390] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1441.657124][T15390] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1441.951208][ T7932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.312621][ T7932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.316165][T10108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1442.319356][T10108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1442.319870][T10108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1442.321357][T10108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1442.322062][T10108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1442.689236][T16464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2849'.
[ 1442.716190][ T7932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1443.090088][ T7932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1443.345341][T15390] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1443.481840][T15390] 8021q: adding VLAN 0 to HW filter on device team0
[ 1443.541617][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1443.541863][ T7157] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1443.692379][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1443.692553][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1443.730192][ T7932] bridge_slave_1: left allmulticast mode
[ 1443.730217][ T7932] bridge_slave_1: left promiscuous mode
[ 1443.730434][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1443.824398][ T7932] bridge_slave_0: left allmulticast mode
[ 1443.824425][ T7932] bridge_slave_0: left promiscuous mode
[ 1443.824668][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1444.418536][T10108] Bluetooth: hci5: command tx timeout
[ 1444.793688][ T7932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1444.879815][ T7932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1444.914707][ T7932] bond0 (unregistering): Released all slaves
[ 1444.953631][ T7932] bond1 (unregistering): (slave dummy0): Releasing active interface
[ 1444.998934][ T7932] bond1 (unregistering): Released all slaves
[ 1445.242075][T16443] chnl_net:caif_netlink_parms(): no params data found
[ 1445.256350][ T7932] tipc: Disabling bearer <udp:syz2>
[ 1445.256544][ T7932] tipc: Left network mode
[ 1445.738645][T16443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1445.738834][T16443] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1445.738991][T16443] bridge_slave_0: entered allmulticast mode
[ 1445.741569][T16443] bridge_slave_0: entered promiscuous mode
[ 1445.863115][T16443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1445.863246][T16443] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1445.863424][T16443] bridge_slave_1: entered allmulticast mode
[ 1445.865420][T16443] bridge_slave_1: entered promiscuous mode
[ 1445.949650][T16443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1446.025640][T16443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1446.296688][T16443] team0: Port device team_slave_0 added
[ 1446.383587][T16443] team0: Port device team_slave_1 added
[ 1446.492967][T10108] Bluetooth: hci5: command tx timeout
[ 1446.673691][T16443] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1446.673707][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1446.673733][T16443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1446.805929][T16443] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1446.805946][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1446.805972][T16443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1447.272687][T16443] hsr_slave_0: entered promiscuous mode
[ 1447.275587][T16443] hsr_slave_1: entered promiscuous mode
[ 1447.276488][T16443] debugfs: 'hsr0' already exists in 'hsr'
[ 1447.276511][T16443] Cannot create hsr debugfs directory
[ 1447.406637][T15390] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1448.572894][T10108] Bluetooth: hci5: command tx timeout
[ 1449.372947][ T8621] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1449.546836][ T8621] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1449.546871][ T8621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1449.546896][ T8621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1449.546918][ T8621] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1449.546958][ T8621] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1449.546981][ T8621] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1449.625627][ T8621] usb 9-1: config 0 descriptor??
[ 1449.963542][ T7932] hsr_slave_0: left promiscuous mode
[ 1450.005631][ T7932] hsr_slave_1: left promiscuous mode
[ 1450.006972][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1450.038825][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.038860][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.038896][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.038923][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.038950][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.038976][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.039002][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.039027][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.039054][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.039079][ T8621] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[ 1450.070226][ T8621] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1450.133927][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1450.133952][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1450.215009][ T7932] veth1_macvtap: left promiscuous mode
[ 1450.215098][ T7932] veth0_macvtap: left promiscuous mode
[ 1450.215315][ T7932] veth1_vlan: left promiscuous mode
[ 1450.215475][ T7932] veth0_vlan: left promiscuous mode
[ 1450.238435][ T8621] usb 9-1: USB disconnect, device number 16
[ 1450.655983][T10108] Bluetooth: hci5: command tx timeout
[ 1450.685724][ T7932] pim6reg99999999 (unregistering): left allmulticast mode
[ 1451.423554][ T7932] team0 (unregistering): Port device team_slave_1 removed
[ 1451.444474][T12818] smc: removing ib device syz1
[ 1451.483470][ T7932] team0 (unregistering): Port device team_slave_0 removed
[ 1451.688251][ T7932] vcan0 (unregistering): left allmulticast mode
[ 1451.834224][ T8621] syz1: Port: 1 Link DOWN
[ 1452.216849][T15390] veth0_vlan: entered promiscuous mode
[ 1452.222930][T16589] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1452.374676][T16589] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1452.374708][T16589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1452.374732][T16589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1452.374753][T16589] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1452.374793][T16589] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1452.374814][T16589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.376830][T16901] team0 (unregistering): Port device team_slave_0 removed
[ 1452.478436][T16901] team0 (unregistering): Port device team_slave_1 removed
[ 1452.500531][T16589] usb 2-1: config 0 descriptor??
[ 1452.914855][T16589] usbhid 2-1:0.0: can't add hid device: -71
[ 1452.914948][T16589] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1453.005097][T16589] usb 2-1: USB disconnect, device number 71
[ 1453.041376][T15390] veth1_vlan: entered promiscuous mode
[ 1453.104580][T16927] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3048'.
[ 1453.405921][T15390] veth0_macvtap: entered promiscuous mode
[ 1453.415555][T15390] veth1_macvtap: entered promiscuous mode
[ 1453.487523][T15390] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1453.564543][T15390] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1453.581752][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1453.600592][ T7157] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1453.608141][ T7868] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1453.609264][ T7868] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1453.876126][ T8621] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1453.996532][T16956] tmpfs: Unsupported parameter 'huge'
[ 1454.022922][ T8621] usb 9-1: Using ep0 maxpacket: 32
[ 1454.025022][ T8621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1454.025052][ T8621] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1454.025076][ T8621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1454.025100][ T8621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1454.028533][ T8621] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1454.028559][ T8621] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.028578][ T8621] usb 9-1: Product: syz
[ 1454.028592][ T8621] usb 9-1: Manufacturer: syz
[ 1454.028606][ T8621] usb 9-1: SerialNumber: syz
[ 1454.184453][ T8621] usb 9-1: config 0 descriptor??
[ 1454.340372][ T8621] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input10
[ 1454.603341][ T8621] usb 9-1: USB disconnect, device number 17
[ 1454.926712][T16443] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1454.997438][T16443] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1455.116336][ T7157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1455.116353][ T7157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1455.126177][T16443] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1455.370909][T16443] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1455.612593][ T7157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1455.612613][ T7157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1455.742938][ T8621] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[ 1455.837813][T16443] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1455.883823][T16443] 8021q: adding VLAN 0 to HW filter on device team0
[ 1455.907212][ T8621] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1455.907235][ T8621] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1455.907276][ T8621] usb 9-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[ 1455.907298][ T8621] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1455.909031][ T7932] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1455.909156][ T7932] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1455.966566][ T8621] usb 9-1: config 0 descriptor??
[ 1455.975868][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1455.975994][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1456.203611][T10108] Bluetooth: hci1: Malformed LE Event: 0x0d
[ 1456.208339][ T8621] usb 9-1: string descriptor 0 read error: -71
[ 1456.230126][ T8621] usb 9-1: USB disconnect, device number 18
[ 1456.893706][T10521] usb 10-1: new low-speed USB device number 2 using dummy_hcd
[ 1456.977957][T16443] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1457.065751][T10521] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1457.065803][T10521] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1457.065829][T10521] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1457.065854][T10521] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1457.065877][T10521] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1457.066964][T10521] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1457.067009][T10521] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1457.067034][T10521] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1457.067057][T10521] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1457.067081][T10521] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1457.073281][T10521] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1457.073329][T10521] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1457.073355][T10521] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1457.073380][T10521] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1457.073402][T10521] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1457.093991][T10521] usb 10-1: string descriptor 0 read error: -22
[ 1457.094134][T10521] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1457.094157][T10521] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1457.122222][T10521] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1457.607734][T16443] veth0_vlan: entered promiscuous mode
[ 1457.622413][T16443] veth1_vlan: entered promiscuous mode
[ 1457.676718][T16443] veth0_macvtap: entered promiscuous mode
[ 1457.681765][T16443] veth1_macvtap: entered promiscuous mode
[ 1457.720158][T16443] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1457.756604][T16443] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1457.781696][   T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.800835][   T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.802718][   T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.805656][   T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1457.868206][T17074] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[ 1458.737601][T17087] overlayfs: missing 'lowerdir'
[ 1459.660260][T13995] usb 10-1: USB disconnect, device number 2
[ 1461.106547][ T7868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1461.106568][ T7868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1461.272200][ T7868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1461.272219][ T7868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1461.599273][T17129] batman_adv: batadv0: Adding interface: gretap1
[ 1461.599296][T17129] batman_adv: batadv0: Interface activated: gretap1
[ 1461.942899][T16586] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[ 1462.097532][T16586] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1462.097558][T16586] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1462.097594][T16586] usb 10-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[ 1462.097615][T16586] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1462.118482][T16586] usb 10-1: config 0 descriptor??
[ 1462.332208][T16586] usb 10-1: string descriptor 0 read error: -71
[ 1462.332921][T10108] Bluetooth: hci2: Malformed LE Event: 0x0d
[ 1462.370420][T16586] usb 10-1: USB disconnect, device number 3
[ 1462.754060][T15279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1462.765974][T15279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1462.773109][T15279] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1462.775304][T15279] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1462.775984][T15279] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1463.480658][T17185] tmpfs: Unsupported parameter 'huge'
[ 1463.793857][T16586] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1464.765240][T17188] batman_adv: batadv0: Adding interface: gretap1
[ 1464.765261][T17188] batman_adv: batadv0: Interface activated: gretap1
[ 1464.772968][T16586] usb 9-1: Using ep0 maxpacket: 8
[ 1464.775347][T16586] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1464.775373][T16586] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1464.775396][T16586] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1464.775419][T16586] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1464.775457][T16586] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1464.775479][T16586] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1464.892961][T10108] Bluetooth: hci6: command tx timeout
[ 1465.111659][T16586] usb 9-1: GET_CAPABILITIES returned 0
[ 1465.111708][T16586] usbtmc 9-1:16.0: can't read capabilities
[ 1465.231676][T17162] chnl_net:caif_netlink_parms(): no params data found
[ 1465.369380][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.369462][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.369530][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.369821][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.369888][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.369955][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.371271][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.371345][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.371414][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.373267][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.373340][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.373755][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.373824][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.373891][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.392779][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1465.392874][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[ 1465.599668][T16586] usb 9-1: USB disconnect, device number 19
[ 1466.224070][T17237] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[ 1467.759524][T10108] Bluetooth: hci6: command tx timeout
[ 1468.261789][T17263] binder: BINDER_SET_CONTEXT_MGR already set
[ 1468.261806][T17263] binder: 17262:17263 ioctl 4018620d 200000004a80 returned -16
[ 1468.351884][T17162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1468.352079][T17162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1468.352302][T17162] bridge_slave_0: entered allmulticast mode
[ 1468.375750][T17162] bridge_slave_0: entered promiscuous mode
[ 1469.166217][T17162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1469.166308][T17162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1469.166502][T17162] bridge_slave_1: entered allmulticast mode
[ 1469.170460][T17162] bridge_slave_1: entered promiscuous mode
[ 1469.393318][T17288] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1469.415839][T17290] binder: BINDER_SET_CONTEXT_MGR already set
[ 1469.415853][T17290] binder: 17289:17290 ioctl 4018620d 200000004a80 returned -16
[ 1469.471247][ T6407] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1469.609680][T17162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1469.655763][T17162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1469.773077][  T809] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1469.778895][T10108] Bluetooth: hci6: command tx timeout
[ 1470.229285][  T809] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1470.229315][  T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1470.262563][  T809] usb 4-1: config 0 descriptor??
[ 1470.278374][T16589] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1470.293974][T17162] team0: Port device team_slave_0 added
[ 1470.295402][  T809] cp210x 4-1:0.0: cp210x converter detected
[ 1470.436326][T16589] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1470.436358][T16589] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1470.436755][T16589] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1470.436798][T16589] usb 10-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 1470.436827][T16589] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1470.499017][T16589] usb 10-1: config 0 descriptor??
[ 1470.527842][  T809] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1470.538828][ T6407] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.613467][T17162] team0: Port device team_slave_1 added
[ 1470.895205][ T6407] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.920715][T16589] usbhid 10-1:0.0: can't add hid device: -71
[ 1470.920817][T16589] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1470.940517][T16589] usb 10-1: USB disconnect, device number 4
[ 1470.964384][T17162] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1470.964395][T17162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1470.964409][T17162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1470.975870][T17162] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1470.975884][T17162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1470.975909][T17162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1471.097017][T17162] hsr_slave_0: entered promiscuous mode
[ 1471.097745][T17162] hsr_slave_1: entered promiscuous mode
[ 1471.787079][ T6407] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1471.806539][ T8621] usb 4-1: USB disconnect, device number 2
[ 1471.833177][T17334] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1471.854951][ T8621] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1471.855658][ T8621] cp210x 4-1:0.0: device disconnected
[ 1471.858554][T10108] Bluetooth: hci6: command tx timeout
[ 1473.172120][T17366] tmpfs: Unsupported parameter 'huge'
[ 1473.905785][ T6407] bridge_slave_1: left allmulticast mode
[ 1473.905813][ T6407] bridge_slave_1: left promiscuous mode
[ 1473.906048][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1474.096010][ T6407] bridge_slave_0: left allmulticast mode
[ 1474.096037][ T6407] bridge_slave_0: left promiscuous mode
[ 1474.096263][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1475.462933][ T8621] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[ 1475.620364][ T8621] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1475.620392][ T8621] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1475.620427][ T8621] usb 10-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[ 1475.620449][ T8621] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1475.635566][ T8621] usb 10-1: config 0 descriptor??
[ 1475.863283][ T8621] usb 10-1: string descriptor 0 read error: -71
[ 1475.873178][ T8621] usb 10-1: USB disconnect, device number 5
[ 1475.952204][T17411] tmpfs: Unsupported parameter 'huge'
[ 1476.123226][ T6407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1476.216086][ T6407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1476.262062][T17419] fuse: Bad value for 'fd'
[ 1476.270706][ T6407] bond0 (unregistering): Released all slaves
[ 1477.415550][ T6407] tipc: Disabling bearer <udp:syz2>
[ 1477.415647][ T6407] tipc: Left network mode
[ 1477.751401][T17439] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1477.979696][T17446] tmpfs: Unsupported parameter 'huge'
[ 1478.150553][T17449] binder: BINDER_SET_CONTEXT_MGR already set
[ 1478.150569][T17449] binder: 17448:17449 ioctl 4018620d 200000004a80 returned -16
[ 1479.429379][T17162] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1479.545316][T17162] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1479.712904][T16589] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[ 1479.855982][T17487] fuse: Bad value for 'fd'
[ 1479.875766][T16589] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.875791][T16589] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1479.875824][T16589] usb 9-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[ 1479.875844][T16589] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1479.935203][T16589] usb 9-1: config 0 descriptor??
[ 1480.017026][T17162] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1480.192338][T16589] usb 9-1: string descriptor 0 read error: -71
[ 1480.224287][T16589] usb 9-1: USB disconnect, device number 20
[ 1480.407230][T17499] tmpfs: Unsupported parameter 'huge'
[ 1480.440658][T17491] syzkaller0: entered promiscuous mode
[ 1480.440683][T17491] syzkaller0: entered allmulticast mode
[ 1480.491819][T17162] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1480.557810][T17502] binder: BINDER_SET_CONTEXT_MGR already set
[ 1480.557825][T17502] binder: 17500:17502 ioctl 4018620d 200000004a80 returned -16
[ 1482.529769][T17529] fuse: Bad value for 'fd'
[ 1483.162924][T10521] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1483.330528][T10521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1483.330547][T10521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1483.330558][T10521] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1483.330580][T10521] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 1483.330593][T10521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1483.334634][T10521] usb 2-1: config 0 descriptor??
[ 1484.002977][T10521] usbhid 2-1:0.0: can't add hid device: -71
[ 1484.003081][T10521] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1484.010757][T10521] usb 2-1: USB disconnect, device number 72
[ 1484.390952][T17545] binder: BINDER_SET_CONTEXT_MGR already set
[ 1484.390967][T17545] binder: 17544:17545 ioctl 4018620d 200000004a80 returned -16
[ 1484.685154][ T5791] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1484.832950][ T5791] usb 9-1: Using ep0 maxpacket: 32
[ 1484.837518][ T5791] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255
[ 1484.858622][ T5791] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1484.858649][ T5791] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1484.858669][ T5791] usb 9-1: Product: syz
[ 1484.858682][ T5791] usb 9-1: Manufacturer: syz
[ 1484.858691][ T5791] usb 9-1: SerialNumber: syz
[ 1484.861962][ T5791] usb 9-1: config 0 descriptor??
[ 1484.862761][T17547] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1484.905378][T13995] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[ 1485.065810][T13995] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1485.065838][T13995] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1485.065872][T13995] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[ 1485.065890][T13995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.069148][T13995] usb 2-1: config 0 descriptor??
[ 1485.289503][T13995] usb 2-1: string descriptor 0 read error: -71
[ 1485.291945][T13995] usb 2-1: USB disconnect, device number 73
[ 1486.482488][T17552] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1487.476155][T16589] usb 9-1: USB disconnect, device number 21
[ 1488.995525][T17567] fuse: Bad value for 'user_id'
[ 1488.995538][T17567] fuse: Bad value for 'user_id'
[ 1489.720123][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1489.720652][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1494.702668][T15279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1494.727385][T15279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1494.727710][T15279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1494.728652][T15279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1494.729323][T15279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1496.315874][T17576] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3233'.
[ 1496.474588][T10521] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1496.521537][T17598] binder: BINDER_SET_CONTEXT_MGR already set
[ 1496.521550][T17598] binder: 17597:17598 ioctl 4018620d 200000004a80 returned -16
[ 1496.640301][T10521] usb 2-1: Using ep0 maxpacket: 32
[ 1496.648497][T10521] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255
[ 1496.663299][T10521] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1496.663326][T10521] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1496.663345][T10521] usb 2-1: Product: syz
[ 1496.663358][T10521] usb 2-1: Manufacturer: syz
[ 1496.663372][T10521] usb 2-1: SerialNumber: syz
[ 1496.669535][T10521] usb 2-1: config 0 descriptor??
[ 1496.670265][T17586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1496.732912][T10108] Bluetooth: hci3: command tx timeout
[ 1496.737361][T17604] fuse: Bad value for 'fd'
[ 1498.592910][ T6407] hsr_slave_0: left promiscuous mode
[ 1498.632936][ T6407] hsr_slave_1: left promiscuous mode
[ 1498.633826][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1498.633870][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1498.675517][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1498.675541][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1498.813084][T10108] Bluetooth: hci3: command tx timeout
[ 1498.817085][ T6407] veth1_macvtap: left promiscuous mode
[ 1498.817177][ T6407] veth0_macvtap: left promiscuous mode
[ 1498.817373][ T6407] veth1_vlan: left promiscuous mode
[ 1498.817531][ T6407] veth0_vlan: left promiscuous mode
[ 1499.231266][   T43] usb 2-1: USB disconnect, device number 74
[ 1499.313503][ T6407] pim6reg99999999 (unregistering): left allmulticast mode
[ 1499.610813][T17661] binder: BINDER_SET_CONTEXT_MGR already set
[ 1499.610828][T17661] binder: 17660:17661 ioctl 4018620d 200000004a80 returned -16
[ 1499.936138][T17669] overlayfs: conflicting lowerdir path
[ 1500.264513][ T6407] team0 (unregistering): Port device team_slave_1 removed
[ 1500.324109][ T6407] team0 (unregistering): Port device team_slave_0 removed
[ 1500.413197][   T43] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1500.584303][   T43] usb 10-1: Using ep0 maxpacket: 32
[ 1500.586051][   T43] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255
[ 1500.589895][   T43] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1500.589921][   T43] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1500.589940][   T43] usb 10-1: Product: syz
[ 1500.589954][   T43] usb 10-1: Manufacturer: syz
[ 1500.589968][   T43] usb 10-1: SerialNumber: syz
[ 1500.600319][   T43] usb 10-1: config 0 descriptor??
[ 1500.613459][T17677] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1500.720434][T17641] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3246'.
[ 1500.792893][ T5791] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1500.840164][T17694] binder: BINDER_SET_CONTEXT_MGR already set
[ 1500.840178][T17694] binder: 17692:17694 ioctl 4018620d 200000004a80 returned -16
[ 1500.893168][T10108] Bluetooth: hci3: command tx timeout
[ 1500.942878][ T5791] usb 2-1: Using ep0 maxpacket: 32
[ 1500.944928][ T5791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1500.944977][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 183, changing to 11
[ 1500.945004][ T5791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1500.948668][ T5791] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1500.948693][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1500.948741][ T5791] usb 2-1: Product: syz
[ 1500.948767][ T5791] usb 2-1: Manufacturer: syz
[ 1500.948780][ T5791] usb 2-1: SerialNumber: syz
[ 1501.034567][ T5791] usb 2-1: config 0 descriptor??
[ 1501.259349][ T5791] usb 2-1: USB disconnect, device number 75
[ 1501.573943][T17162] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1502.314974][T17162] 8021q: adding VLAN 0 to HW filter on device team0
[ 1502.485608][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1502.486052][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1502.514591][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1502.516468][ T7157] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1502.673235][T17578] chnl_net:caif_netlink_parms(): no params data found
[ 1502.706163][T17723] overlayfs: conflicting lowerdir path
[ 1502.982954][T10108] Bluetooth: hci3: command tx timeout
[ 1503.198352][ T5791] usb 10-1: USB disconnect, device number 6
[ 1503.310667][T17740] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[ 1503.416901][T17578] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1503.417065][T17578] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1503.417237][T17578] bridge_slave_0: entered allmulticast mode
[ 1503.424857][T17578] bridge_slave_0: entered promiscuous mode
[ 1503.436151][T17578] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1503.438136][T17578] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1503.438306][T17578] bridge_slave_1: entered allmulticast mode
[ 1503.461754][T17578] bridge_slave_1: entered promiscuous mode
[ 1503.930569][T17753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3267'.
[ 1503.950539][T17578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1504.647290][ T6407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1504.689566][T17578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1504.814954][T17772] overlayfs: conflicting lowerdir path
[ 1504.971660][ T6407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1505.820560][T17783] netlink: 'syz.9.3275': attribute type 4 has an invalid length.
[ 1505.820626][T17783] netlink: 1601 bytes leftover after parsing attributes in process `syz.9.3275'.
[ 1505.825199][T17578] team0: Port device team_slave_0 added
[ 1506.048776][T17578] team0: Port device team_slave_1 added
[ 1506.127851][   T36] audit: type=1326 audit(2000000750.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17784 comm="syz.9.3276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c4f9c799 code=0x0
[ 1507.337104][ T6407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.035320][ T6407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.076059][T17578] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1509.076075][T17578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1509.076100][T17578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1509.087379][T17578] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1509.087393][T17578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1509.087418][T17578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1509.126426][T17162] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1509.357833][T17796] syz.1.3279 (17796): drop_caches: 2
[ 1509.451390][T17578] hsr_slave_0: entered promiscuous mode
[ 1509.452612][T17578] hsr_slave_1: entered promiscuous mode
[ 1509.454993][T17578] debugfs: 'hsr0' already exists in 'hsr'
[ 1509.455015][T17578] Cannot create hsr debugfs directory
[ 1509.471657][T17807] overlayfs: conflicting lowerdir path
[ 1510.317364][T17819] fuse: Bad value for 'fd'
[ 1510.454046][   T36] audit: type=1326 audit(2000000755.100:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17824 comm="syz.8.3288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff91073c799 code=0x0
[ 1510.707689][ T6407] bridge_slave_1: left allmulticast mode
[ 1510.707715][ T6407] bridge_slave_1: left promiscuous mode
[ 1510.707933][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1510.804257][ T6407] bridge_slave_0: left allmulticast mode
[ 1510.804276][ T6407] bridge_slave_0: left promiscuous mode
[ 1510.804415][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1512.743540][ T6407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1512.803597][ T6407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1512.848151][ T6407] bond0 (unregistering): Released all slaves
[ 1513.770945][   T36] audit: type=1326 audit(2000000758.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17858 comm="syz.8.3300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff91073c799 code=0x0
[ 1515.985700][ T8621] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1516.060212][T17876] tmpfs: Unsupported parameter 'huge'
[ 1516.156799][T17878] 9pnet_virtio: no channels available for device syz
[ 1516.186779][ T8621] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1516.186808][ T8621] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1516.190415][ T8621] usb 9-1: config 0 descriptor??
[ 1516.215560][ T8621] cp210x 9-1:0.0: cp210x converter detected
[ 1516.405244][ T8621] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1516.568139][T17881] pim6reg: entered allmulticast mode
[ 1516.660055][T17873] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3304'.
[ 1516.953295][   T36] audit: type=1326 audit(2000000761.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17893 comm="syz.9.3313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c4f9c799 code=0x0
[ 1517.443658][ T6407] hsr_slave_0: left promiscuous mode
[ 1517.463579][ T6407] hsr_slave_1: left promiscuous mode
[ 1517.464187][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1517.464202][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1517.517827][ T8621] usb 9-1: USB disconnect, device number 22
[ 1517.528201][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1517.528224][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1517.546721][ T8621] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1517.549030][ T8621] cp210x 9-1:0.0: device disconnected
[ 1517.643894][ T6407] veth1_macvtap: left promiscuous mode
[ 1517.643988][ T6407] veth0_macvtap: left promiscuous mode
[ 1517.644213][ T6407] veth1_vlan: left promiscuous mode
[ 1517.644372][ T6407] veth0_vlan: left promiscuous mode
[ 1518.679371][ T6407] team0 (unregistering): Port device team_slave_1 removed
[ 1518.734754][ T6407] team0 (unregistering): Port device team_slave_0 removed
[ 1519.133630][T17162] veth0_vlan: entered promiscuous mode
[ 1520.015334][T17162] veth1_vlan: entered promiscuous mode
[ 1521.473857][T17162] veth0_macvtap: entered promiscuous mode
[ 1521.660035][T17162] veth1_macvtap: entered promiscuous mode
[ 1521.858512][T17578] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1521.982629][T17578] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1522.082935][T16586] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1522.101229][T17961] kvm: user requested TSC rate below hardware speed
[ 1522.134345][T17578] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1522.217349][T17578] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1522.255368][T16586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1522.255403][T16586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1522.255426][T16586] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1522.255467][T16586] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1522.255491][T16586] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.260633][T16586] usb 9-1: config 0 descriptor??
[ 1522.362939][ T8621] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1522.522976][ T8621] usb 2-1: Using ep0 maxpacket: 8
[ 1522.526799][ T8621] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1522.526826][ T8621] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1522.526851][ T8621] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1522.526874][ T8621] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1522.526913][ T8621] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1522.526935][ T8621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.839681][ T8621] usb 2-1: GET_CAPABILITIES returned 0
[ 1522.839728][ T8621] usbtmc 2-1:16.0: can't read capabilities
[ 1522.919681][T16586] plantronics 0003:047F:FFFF.0017: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1523.042333][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.042382][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.042638][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.042676][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.042710][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.043304][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.043374][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.043440][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.043505][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.043579][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.043635][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.045684][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.045729][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.046028][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.046068][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.046331][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1523.272875][T17578] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1523.351630][T15279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1523.375647][T15279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1523.376954][T15279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1523.398268][T15279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1523.399084][T15279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1523.472162][T17578] 8021q: adding VLAN 0 to HW filter on device team0
[ 1523.586213][T10026] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1523.619366][T10026] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1524.061036][T17574] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1524.061114][T17574] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1525.285210][T10521] usb 9-1: USB disconnect, device number 23
[ 1525.533152][T10108] Bluetooth: hci5: command tx timeout
[ 1526.573963][   T31] usb 2-1: USB disconnect, device number 76
[ 1527.614029][T10108] Bluetooth: hci5: command tx timeout
[ 1527.769411][T18021] pim6reg: entered allmulticast mode
[ 1529.152189][T18055] kvm: user requested TSC rate below hardware speed
[ 1529.354926][T18062] 9pnet_virtio: no channels available for device syz
[ 1529.402978][T10521] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1529.583923][T10521] usb 2-1: Using ep0 maxpacket: 8
[ 1529.587085][T10521] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1529.587111][T10521] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1529.587135][T10521] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1529.587158][T10521] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1529.587195][T10521] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1529.587216][T10521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1529.692995][T10108] Bluetooth: hci5: command tx timeout
[ 1529.913019][T10521] usb 2-1: GET_CAPABILITIES returned 0
[ 1529.913064][T10521] usbtmc 2-1:16.0: can't read capabilities
[ 1530.098326][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.098405][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.098473][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.098770][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.098847][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.098915][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.099222][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.099292][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.099637][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.099710][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.100047][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.100113][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.100397][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.100463][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.100523][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.100910][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1530.355242][T17975] chnl_net:caif_netlink_parms(): no params data found
[ 1531.030104][T18096] tipc: Started in network mode
[ 1531.030133][T18096] tipc: Node identity 7f000001, cluster identity 4711
[ 1531.030832][T18096] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1531.274718][ T6407] bridge_slave_1: left allmulticast mode
[ 1531.274737][ T6407] bridge_slave_1: left promiscuous mode
[ 1531.274885][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1531.369109][ T6407] bridge_slave_0: left allmulticast mode
[ 1531.369136][ T6407] bridge_slave_0: left promiscuous mode
[ 1531.369353][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1532.669670][T10108] Bluetooth: hci5: command tx timeout
[ 1532.863137][T18110] 9pnet_virtio: no channels available for device syz
[ 1533.288629][ T8621] usb 2-1: USB disconnect, device number 77
[ 1533.439063][ T6407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1534.475312][ T6407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1534.515786][ T6407] bond0 (unregistering): Released all slaves
[ 1534.621530][   T31] tipc: Node number set to 2130706433
[ 1534.635413][T18112] kthread_run failed with err -4
[ 1534.653097][T17975] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1534.653216][T17975] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1534.653375][T17975] bridge_slave_0: entered allmulticast mode
[ 1534.655584][T17975] bridge_slave_0: entered promiscuous mode
[ 1534.694873][T17975] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1534.695008][T17975] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1534.695215][T17975] bridge_slave_1: entered allmulticast mode
[ 1534.697713][T17975] bridge_slave_1: entered promiscuous mode
[ 1534.943162][ T6407] hsr_slave_0: left promiscuous mode
[ 1534.983406][ T6407] hsr_slave_1: left promiscuous mode
[ 1534.984276][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1535.024281][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1535.083016][T10521] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[ 1535.117619][ T6407] veth1_macvtap: left promiscuous mode
[ 1535.117712][ T6407] veth0_macvtap: left promiscuous mode
[ 1535.117942][ T6407] veth1_vlan: left promiscuous mode
[ 1535.118107][ T6407] veth0_vlan: left promiscuous mode
[ 1535.288252][T10521] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1535.288279][T10521] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1535.288319][T10521] usb 9-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[ 1535.288342][T10521] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1535.351967][T10521] usb 9-1: config 0 descriptor??
[ 1535.732262][T10521] usb 9-1: string descriptor 0 read error: -71
[ 1535.741650][T10521] usb 9-1: USB disconnect, device number 24
[ 1537.285263][ T8621] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1537.351588][T18148] 9pnet_virtio: no channels available for device syz
[ 1537.444977][ T8621] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1537.445003][ T8621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1537.448556][ T8621] usb 2-1: config 0 descriptor??
[ 1537.452620][ T8621] cp210x 2-1:0.0: cp210x converter detected
[ 1537.483388][ T6407] team0 (unregistering): Port device team_slave_1 removed
[ 1537.544121][ T6407] team0 (unregistering): Port device team_slave_0 removed
[ 1537.687258][ T8621] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1537.896699][T17578] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1537.896957][T18140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3370'.
[ 1537.924776][T17975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1537.937259][T17975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1538.024783][T17975] team0: Port device team_slave_0 added
[ 1538.043358][T17975] team0: Port device team_slave_1 added
[ 1538.168854][T17975] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1538.168868][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1538.168890][T17975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1538.199618][T17975] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1538.199633][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1538.199659][T17975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1538.495135][T17975] hsr_slave_0: entered promiscuous mode
[ 1538.499120][T17975] hsr_slave_1: entered promiscuous mode
[ 1538.527018][   T31] usb 2-1: USB disconnect, device number 78
[ 1538.543092][   T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1538.546479][   T31] cp210x 2-1:0.0: device disconnected
[ 1539.918756][T18186] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1540.289306][T18197] pim6reg99999999: entered allmulticast mode
[ 1542.286080][T17578] veth0_vlan: entered promiscuous mode
[ 1542.324622][T17578] veth1_vlan: entered promiscuous mode
[ 1542.580623][T18228] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1543.998921][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3396'.
[ 1544.737407][T15279] Bluetooth: hci2: command 0x0406 tx timeout
[ 1545.043902][T17578] veth0_macvtap: entered promiscuous mode
[ 1545.295178][T17578] veth1_macvtap: entered promiscuous mode
[ 1546.413612][T17578] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1546.421753][T17578] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1546.459121][   T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1546.719673][T12896] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1546.815983][T12896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1546.845162][T12896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1547.565127][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1547.565146][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1547.889324][ T6055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1547.889345][ T6055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1547.994109][T17975] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1548.045726][T17975] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1548.098120][T17975] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1548.157949][T17975] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1548.533722][T18293] netlink: 'syz.9.3406': attribute type 4 has an invalid length.
[ 1548.533745][T18293] netlink: 1601 bytes leftover after parsing attributes in process `syz.9.3406'.
[ 1549.460036][T17975] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1549.596240][T17975] 8021q: adding VLAN 0 to HW filter on device team0
[ 1549.620828][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1549.638941][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1549.726237][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1549.726365][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1551.051252][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1551.051318][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1551.375711][T18323] fuse: Bad value for 'rootmode'
[ 1552.106415][T18341] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1553.282906][T16589] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1553.613163][T16589] usb 2-1: Using ep0 maxpacket: 32
[ 1554.295555][T16589] usb 2-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config
[ 1554.295621][T16589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1554.295647][T16589] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1554.298699][T16589] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1554.298724][T16589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1554.298744][T16589] usb 2-1: Product: syz
[ 1554.298758][T16589] usb 2-1: Manufacturer: syz
[ 1554.298771][T16589] usb 2-1: SerialNumber: syz
[ 1554.378707][T16589] usb 2-1: config 0 descriptor??
[ 1554.665866][   T36] audit: type=1326 audit(2000000799.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18374 comm="syz.5.3426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4d7dec799 code=0x0
[ 1554.760103][T16589] usb 2-1: USB disconnect, device number 79
[ 1555.711772][T17975] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1557.566069][T18406] binder: 18398:18406 ioctl c0306201 0 returned -14
[ 1558.462934][ T5791] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1558.886470][ T5791] usb 2-1: Using ep0 maxpacket: 32
[ 1560.592844][ T5791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255
[ 1560.599472][ T5791] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1560.599498][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1560.599525][ T5791] usb 2-1: Product: syz
[ 1560.599537][ T5791] usb 2-1: Manufacturer: syz
[ 1560.599550][ T5791] usb 2-1: SerialNumber: syz
[ 1560.624978][ T5791] usb 2-1: config 0 descriptor??
[ 1560.867692][T17975] veth0_vlan: entered promiscuous mode
[ 1560.881647][T17975] veth1_vlan: entered promiscuous mode
[ 1560.915400][T17975] veth0_macvtap: entered promiscuous mode
[ 1560.920767][T17975] veth1_macvtap: entered promiscuous mode
[ 1560.950262][T17975] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1560.962324][T17975] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1561.325818][ T5791] usb 2-1: can't set config #0, error -71
[ 1561.387622][ T5791] usb 2-1: USB disconnect, device number 80
[ 1561.647927][   T44] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1562.438948][T18437] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1562.456062][   T44] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1562.462384][   T44] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1562.462611][   T44] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1563.883039][T18447] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1565.541226][T12896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1565.541246][T12896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1565.781282][ T6407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1565.781302][ T6407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1566.257473][T18482] tipc: Started in network mode
[ 1566.257505][T18482] tipc: Node identity 7f000001, cluster identity 4711
[ 1566.258249][T18482] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1567.428811][T11390] tipc: Node number set to 2130706433
[ 1567.892885][   T43] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1568.337908][   T43] usb 2-1: Using ep0 maxpacket: 32
[ 1568.441315][   T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255
[ 1568.539232][   T43] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1568.539332][   T43] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1568.539377][   T43] usb 2-1: Product: syz
[ 1568.539438][   T43] usb 2-1: Manufacturer: syz
[ 1568.539477][   T43] usb 2-1: SerialNumber: syz
[ 1568.915037][T16589] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[ 1568.940212][   T43] usb 2-1: config 0 descriptor??
[ 1568.972288][   T43] usb 2-1: can't set config #0, error -71
[ 1569.007618][   T43] usb 2-1: USB disconnect, device number 81
[ 1569.105901][T16589] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1569.105962][T16589] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1569.105987][T16589] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1569.123200][T16589] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1569.123251][T16589] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1569.123276][T16589] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1569.129113][T16589] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1569.129161][T16589] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1569.129186][T16589] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1569.155579][T16589] usb 6-1: string descriptor 0 read error: -22
[ 1569.155719][T16589] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1569.155741][T16589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.753553][T16589] adutux 6-1:168.0: interrupt endpoints not found
[ 1571.182884][   T43] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1571.221512][T11390] usb 6-1: USB disconnect, device number 5
[ 1571.904752][   T43] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1571.904805][   T43] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1571.904846][   T43] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1571.904868][   T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1572.083003][   T43] usb 10-1: config 0 descriptor??
[ 1572.107335][   T43] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1575.417883][T16586] usb 10-1: USB disconnect, device number 7
[ 1576.284742][ T6122] bridge0: port 3(syz_tun) entered disabled state
[ 1576.390608][ T6122] syz_tun (unregistering): left allmulticast mode
[ 1576.390624][ T6122] syz_tun (unregistering): left promiscuous mode
[ 1576.390687][ T6122] bridge0: port 3(syz_tun) entered disabled state
[ 1576.587562][T15279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1576.596362][T15279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1576.600981][T15279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1576.654520][T15279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1576.667953][T15279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1578.294871][T18570] netlink: 'syz.9.3466': attribute type 11 has an invalid length.
[ 1578.294891][T18570] netlink: 'syz.9.3466': attribute type 23 has an invalid length.
[ 1578.294904][T18570] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3466'.
[ 1578.629908][T17574] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1578.629929][T17574] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1578.843427][T10108] Bluetooth: hci4: command tx timeout
[ 1581.254761][T10108] Bluetooth: hci4: command tx timeout
[ 1581.382012][T17574] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1581.382046][T17574] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1582.592929][T18596] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1582.631102][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3473'.
[ 1585.464753][T10108] Bluetooth: hci4: command tx timeout
[ 1587.286798][T17574] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1587.286833][T17574] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.554447][T10108] Bluetooth: hci4: command tx timeout
[ 1589.608317][T17574] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1589.608351][T17574] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1589.747074][T18650] netlink: 'syz.7.3487': attribute type 11 has an invalid length.
[ 1589.747096][T18650] netlink: 'syz.7.3487': attribute type 23 has an invalid length.
[ 1589.747110][T18650] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3487'.
[ 1589.821628][T18643] syz.5.3486 (18643): drop_caches: 2
[ 1593.618010][T18685] netlink: 'syz.9.3497': attribute type 11 has an invalid length.
[ 1593.618031][T18685] netlink: 'syz.9.3497': attribute type 23 has an invalid length.
[ 1593.618044][T18685] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3497'.
[ 1593.902792][T18556] chnl_net:caif_netlink_parms(): no params data found
[ 1594.071741][T18556] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1594.071926][T18556] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1594.072096][T18556] bridge_slave_0: entered allmulticast mode
[ 1594.095344][T18556] bridge_slave_0: entered promiscuous mode
[ 1594.101245][T18556] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1594.101440][T18556] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1594.123120][T18556] bridge_slave_1: entered allmulticast mode
[ 1594.128291][T18556] bridge_slave_1: entered promiscuous mode
[ 1594.198027][T18556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1594.217751][T18556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1594.276190][T18556] team0: Port device team_slave_0 added
[ 1594.289771][T18556] team0: Port device team_slave_1 added
[ 1594.341178][T18556] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1594.341192][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1594.341218][T18556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1594.516327][T18556] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1594.516343][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1594.516370][T18556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1600.284132][T18732] hub 8-0:1.0: USB hub found
[ 1600.290992][T18732] hub 8-0:1.0: 1 port detected
[ 1601.339901][T18556] hsr_slave_0: entered promiscuous mode
[ 1601.358606][T18556] hsr_slave_1: entered promiscuous mode
[ 1601.364406][T18556] debugfs: 'hsr0' already exists in 'hsr'
[ 1601.364429][T18556] Cannot create hsr debugfs directory
[ 1601.741938][T17574] bridge_slave_1: left allmulticast mode
[ 1601.742046][T17574] bridge_slave_1: left promiscuous mode
[ 1601.742273][T17574] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1601.829749][T17574] bridge_slave_0: left allmulticast mode
[ 1601.829779][T17574] bridge_slave_0: left promiscuous mode
[ 1601.830032][T17574] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1604.249613][T18754] 9pnet_virtio: no channels available for device syz
[ 1604.696742][T18760] blktrace: Concurrent blktraces are not allowed on loop16
[ 1605.943499][T17574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1606.534661][T17574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1606.906353][T17574] bond0 (unregistering): Released all slaves
[ 1607.133464][T17574] tipc: Disabling bearer <udp:syz2>
[ 1607.134650][T17574] tipc: Left network mode
[ 1607.172868][T16589] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1607.412832][T16589] usb 9-1: Using ep0 maxpacket: 16
[ 1609.097564][T16589] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1609.098578][T16589] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1609.098611][T16589] usb 9-1: can't read configurations, error -71
[ 1609.516332][T18796] blktrace: Concurrent blktraces are not allowed on loop18
[ 1610.422928][T18792] netlink: 'syz.5.3525': attribute type 11 has an invalid length.
[ 1610.422949][T18792] netlink: 'syz.5.3525': attribute type 23 has an invalid length.
[ 1610.422963][T18792] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3525'.
[ 1613.267074][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1613.275471][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1615.053419][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3534'.
[ 1615.132956][  T809] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1615.400359][  T809] usb 9-1: device descriptor read/all, error -71
[ 1615.465246][T18836] fuse: Unknown parameter '0x0000000000000004'
[ 1618.077625][T18854] binder: BINDER_SET_CONTEXT_MGR already set
[ 1618.077640][T18854] binder: 18853:18854 ioctl 4018620d 200000004a80 returned -16
[ 1620.246096][T18869] fuse: Unknown parameter 'use00000000000000000000'
[ 1622.442907][T11390] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1623.607319][T11390] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1623.607362][T11390] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1623.607383][T11390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1623.656655][T11390] usb 6-1: config 0 descriptor??
[ 1623.697000][T11390] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1624.042870][T16586] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1624.176108][T16586] usb 9-1: device descriptor read/64, error -71
[ 1624.328814][T18894] blktrace: Concurrent blktraces are not allowed on loop14
[ 1624.513268][T16586] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1625.154241][T16586] usb 9-1: device descriptor read/64, error -71
[ 1625.330137][T16586] usb usb9-port1: attempt power cycle
[ 1625.724869][T16586] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1625.999157][T16586] usb 9-1: device descriptor read/8, error -71
[ 1626.145527][  T809] usb 6-1: USB disconnect, device number 7
[ 1626.233055][T16586] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1626.238129][T18905] binder: 18904:18905 ioctl c0306201 0 returned -14
[ 1626.263791][T16586] usb 9-1: device descriptor read/8, error -71
[ 1626.374140][T16586] usb usb9-port1: unable to enumerate USB device
[ 1626.467624][T18556] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1627.500877][T18921] netlink: 'syz.9.3558': attribute type 4 has an invalid length.
[ 1627.500900][T18921] netlink: 1601 bytes leftover after parsing attributes in process `syz.9.3558'.
[ 1627.827057][T18556] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1628.748795][T18928] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1628.822245][T18556] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1629.929146][T11390] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1630.096050][T18556] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1630.355181][T11390] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1630.355227][T11390] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1630.355249][T11390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1630.402964][T11390] usb 6-1: config 0 descriptor??
[ 1630.410178][T11390] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1632.904398][T18153] usb 6-1: USB disconnect, device number 8
[ 1633.316717][T18556] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1633.337742][T18556] 8021q: adding VLAN 0 to HW filter on device team0
[ 1633.378745][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1633.379961][ T6407] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1633.686874][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1633.702485][ T6407] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1635.615140][T19006] netlink: 'syz.8.3577': attribute type 4 has an invalid length.
[ 1635.615163][T19006] netlink: 1601 bytes leftover after parsing attributes in process `syz.8.3577'.
[ 1638.411946][T15279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1638.422051][T15279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1638.429980][T15279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1638.451061][T15279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1638.470323][T15279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1638.730420][T19019] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3582'.
[ 1639.208856][T19040] blktrace: Concurrent blktraces are not allowed on loop18
[ 1640.662834][T10108] Bluetooth: hci0: command tx timeout
[ 1642.838077][T10108] Bluetooth: hci0: command tx timeout
[ 1643.763811][T19072] netlink: 'syz.5.3591': attribute type 4 has an invalid length.
[ 1643.763875][T19072] netlink: 1601 bytes leftover after parsing attributes in process `syz.5.3591'.
[ 1644.593748][T19094] blktrace: Concurrent blktraces are not allowed on loop16
[ 1646.001723][T15279] Bluetooth: hci0: command tx timeout
[ 1646.001748][T15279] Bluetooth: hci3: command 0x0406 tx timeout
[ 1646.126208][T17574] hsr_slave_0: left promiscuous mode
[ 1646.418715][T17574] hsr_slave_1: left promiscuous mode
[ 1646.423157][T17574] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1647.265252][ T5905] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1647.322146][T17574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1647.322164][T17574] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1647.331585][T19114] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1647.419091][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1647.419122][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1647.419144][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1647.419184][ T5905] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1647.419205][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.444218][ T5905] usb 6-1: config 0 descriptor??
[ 1647.530176][T17574] veth1_macvtap: left promiscuous mode
[ 1647.530491][T17574] veth0_macvtap: left promiscuous mode
[ 1647.532398][T17574] veth1_vlan: left promiscuous mode
[ 1647.542017][T17574] veth0_vlan: left promiscuous mode
[ 1648.782819][ T5905] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1650.181725][T19150] blktrace: Concurrent blktraces are not allowed on loop18
[ 1650.293873][T17574] pim6reg (unregistering): left allmulticast mode
[ 1650.826921][T10108] Bluetooth: hci5: command 0x0406 tx timeout
[ 1650.985260][T19160] blktrace: Concurrent blktraces are not allowed on loop16
[ 1651.681934][T16589] usb 6-1: USB disconnect, device number 9
[ 1654.442566][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3615'.
[ 1654.594545][T17574] team0 (unregistering): Port device team_slave_1 removed
[ 1654.643723][T17574] team0 (unregistering): Port device team_slave_0 removed
[ 1654.735983][T17574] vcan0 (unregistering): left allmulticast mode
[ 1657.003005][  T809] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1657.222989][  T809] usb 8-1: Using ep0 maxpacket: 8
[ 1658.015221][  T809] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1658.015252][  T809] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1658.015275][  T809] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1658.015298][  T809] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1658.015336][  T809] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1658.015358][  T809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.448059][T19031] chnl_net:caif_netlink_parms(): no params data found
[ 1659.545882][T19031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1659.546174][T19031] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1659.546405][T19031] bridge_slave_0: entered allmulticast mode
[ 1659.550158][T19031] bridge_slave_0: entered promiscuous mode
[ 1659.588871][T19031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1659.589159][T19031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1659.589373][T19031] bridge_slave_1: entered allmulticast mode
[ 1659.613582][T19031] bridge_slave_1: entered promiscuous mode
[ 1659.697349][T19031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1659.712595][T19031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1660.888530][T19031] team0: Port device team_slave_0 added
[ 1660.910849][T19031] team0: Port device team_slave_1 added
[ 1660.920845][T17574] IPVS: stop unused estimator thread 0...
[ 1660.952818][ T5905] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1661.018762][T19031] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1661.018773][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1661.018787][T19031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1661.075859][T19031] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1661.075875][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1661.075901][T19031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1661.127928][ T5905] usb 10-1: Using ep0 maxpacket: 16
[ 1661.183425][ T5905] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1661.184407][ T5905] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1661.184446][ T5905] usb 10-1: can't read configurations, error -71
[ 1661.456494][T19031] hsr_slave_0: entered promiscuous mode
[ 1661.469751][T19031] hsr_slave_1: entered promiscuous mode
[ 1661.470753][T19031] debugfs: 'hsr0' already exists in 'hsr'
[ 1661.470776][T19031] Cannot create hsr debugfs directory
[ 1662.525266][  T809] usb 8-1: can't set config #16, error -71
[ 1662.530217][  T809] usb 8-1: USB disconnect, device number 6
[ 1662.926309][T18153] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1664.264655][T18153] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.264681][T18153] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1664.268341][T18153] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1664.268367][T18153] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1664.268386][T18153] usb 9-1: Product: syz
[ 1664.268399][T18153] usb 9-1: Manufacturer: syz
[ 1664.268413][T18153] usb 9-1: SerialNumber: syz
[ 1664.326185][T18153] usb 9-1: config 0 descriptor??
[ 1664.543113][T19245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1664.544688][T19245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1664.550670][  T809] usb 9-1: USB disconnect, device number 33
[ 1667.373691][T19287] fuse: Bad value for 'fd'
[ 1671.944620][T19347] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1671.944620][T19347]    program syz.9.3649 not setting count and/or reply_len properly
[ 1673.843046][T17574] bridge_slave_1: left allmulticast mode
[ 1673.843159][T17574] bridge_slave_1: left promiscuous mode
[ 1673.847066][T17574] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1673.956115][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1673.956898][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1674.818482][T17574] bridge_slave_0: left allmulticast mode
[ 1674.818509][T17574] bridge_slave_0: left promiscuous mode
[ 1674.818726][T17574] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1675.674573][T19375] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1677.522265][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3656'.
[ 1677.631805][T19389] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[ 1678.018016][T19397] blktrace: Concurrent blktraces are not allowed on loop18
[ 1679.268384][T17574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1680.436450][T17574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1682.575291][T17574] bond0 (unregistering): Released all slaves
[ 1682.749900][T19401] netlink: 'syz.7.3661': attribute type 11 has an invalid length.
[ 1682.749919][T19401] netlink: 'syz.7.3661': attribute type 23 has an invalid length.
[ 1682.749932][T19401] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3661'.
[ 1684.234651][T19435] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1686.166492][T19445] netlink: zone id is out of range
[ 1686.166508][T19445] netlink: zone id is out of range
[ 1686.166515][T19445] netlink: zone id is out of range
[ 1686.166523][T19445] netlink: zone id is out of range
[ 1686.166530][T19445] netlink: zone id is out of range
[ 1686.166546][T19445] netlink: zone id is out of range
[ 1686.166555][T19445] netlink: zone id is out of range
[ 1686.166563][T19445] netlink: zone id is out of range
[ 1686.166570][T19445] netlink: zone id is out of range
[ 1686.166577][T19445] netlink: zone id is out of range
[ 1688.606004][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3671'.
[ 1688.749706][T19464] binder: BINDER_SET_CONTEXT_MGR already set
[ 1688.749715][T19464] binder: 19463:19464 ioctl 4018620d 200000004a80 returned -16
[ 1688.792818][T10521] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1688.843032][T17574] hsr_slave_0: left promiscuous mode
[ 1688.865447][T17574] hsr_slave_1: left promiscuous mode
[ 1688.866385][T17574] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1688.899821][T17574] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1688.944886][T10521] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.944939][T10521] usb 9-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[ 1688.944961][T10521] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1688.982118][T10521] usb 9-1: config 0 descriptor??
[ 1689.326228][T17574] team0 (unregistering): Port device team_slave_1 removed
[ 1690.341067][T17574] team0 (unregistering): Port device team_slave_0 removed
[ 1690.343641][T10521] usb 9-1: string descriptor 0 read error: -71
[ 1690.466787][T10521] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1690.471374][T10521] usb 9-1: USB disconnect, device number 34
[ 1693.649582][T18153] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1693.879700][T19499] netlink: 'syz.7.3683': attribute type 11 has an invalid length.
[ 1693.879721][T19499] netlink: 'syz.7.3683': attribute type 23 has an invalid length.
[ 1693.879739][T19499] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3683'.
[ 1695.633199][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3685'.
[ 1696.599347][T19518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3686'.
[ 1698.472866][T16586] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[ 1698.516588][T10108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1698.521737][T10108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1698.522395][T10108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1698.533082][T10108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1698.539249][T10108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1698.625480][T16586] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1698.626328][T16586] usb 10-1: not running at top speed; connect to a high speed hub
[ 1698.627848][T16586] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1698.627872][T16586] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1698.627930][T16586] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[ 1698.627954][T16586] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1698.668626][T16586] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1698.668667][T16586] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1698.668688][T16586] usb 10-1: Product: syz
[ 1698.668702][T16586] usb 10-1: Manufacturer: syz
[ 1698.668716][T16586] usb 10-1: SerialNumber: syz
[ 1699.996430][T16586] usb 10-1: 0:2 : does not exist
[ 1700.371010][T16586] usb 10-1: USB disconnect, device number 10
[ 1700.672908][ T5805] Bluetooth: hci4: command tx timeout
[ 1702.501878][T19564] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3693'.
[ 1703.329782][ T5805] Bluetooth: hci4: command tx timeout
[ 1707.470137][ T5805] Bluetooth: hci4: command tx timeout
[ 1708.299645][T19584] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3698'.
[ 1708.565584][T19533] chnl_net:caif_netlink_parms(): no params data found
[ 1710.146818][T19611] blktrace: Concurrent blktraces are not allowed on loop14
[ 1710.783297][ T5805] Bluetooth: hci4: command tx timeout
[ 1715.157670][ T7157] bridge_slave_1: left allmulticast mode
[ 1715.157705][ T7157] bridge_slave_1: left promiscuous mode
[ 1715.158321][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1715.371427][ T7157] bridge_slave_0: left allmulticast mode
[ 1715.371445][ T7157] bridge_slave_0: left promiscuous mode
[ 1715.371584][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1716.392780][T11390] usb 9-1: new full-speed USB device number 35 using dummy_hcd
[ 1716.934732][T11390] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1716.935213][T11390] usb 9-1: not running at top speed; connect to a high speed hub
[ 1716.936201][T11390] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1716.936214][T11390] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1716.936247][T11390] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[ 1716.936260][T11390] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1716.944876][T11390] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1716.944902][T11390] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1716.944920][T11390] usb 9-1: Product: syz
[ 1716.944933][T11390] usb 9-1: Manufacturer: syz
[ 1716.944947][T11390] usb 9-1: SerialNumber: syz
[ 1717.465264][ T7157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1717.720769][T11390] usb 9-1: 0:2 : does not exist
[ 1718.843525][ T7157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1719.074855][T11390] usb 9-1: USB disconnect, device number 35
[ 1719.103305][ T7157] bond0 (unregistering): Released all slaves
[ 1719.389136][T19665] blktrace: Concurrent blktraces are not allowed on loop14
[ 1723.733784][T19533] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1723.733977][T19533] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1723.734164][T19533] bridge_slave_0: entered allmulticast mode
[ 1723.736623][T19533] bridge_slave_0: entered promiscuous mode
[ 1724.712914][T19533] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1724.713027][T19533] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1724.713244][T19533] bridge_slave_1: entered allmulticast mode
[ 1724.733213][T19533] bridge_slave_1: entered promiscuous mode
[ 1728.586653][ T7157] hsr_slave_0: left promiscuous mode
[ 1728.684201][ T7157] hsr_slave_1: left promiscuous mode
[ 1728.685116][ T7157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1728.743306][ T7157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1730.503312][T19728] netlink: 'syz.5.3731': attribute type 4 has an invalid length.
[ 1730.503334][T19728] netlink: 1601 bytes leftover after parsing attributes in process `syz.5.3731'.
[ 1731.684232][ T7157] team0 (unregistering): Port device team_slave_1 removed
[ 1731.825678][ T7157] team0 (unregistering): Port device team_slave_0 removed
[ 1735.306223][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1735.306301][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1736.350992][T19533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1736.387211][T19533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1736.616248][T19533] team0: Port device team_slave_0 added
[ 1736.619972][T19533] team0: Port device team_slave_1 added
[ 1739.273619][T11390] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1739.449635][T19533] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1739.449653][T19533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1739.449669][T19533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1739.451524][T19533] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1739.451534][T19533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1739.451547][T19533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1739.492761][T11390] usb 8-1: Using ep0 maxpacket: 32
[ 1739.494430][T11390] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1739.494457][T11390] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1739.497798][T11390] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1739.497831][T11390] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1739.497851][T11390] usb 8-1: Product: syz
[ 1739.497864][T11390] usb 8-1: Manufacturer: syz
[ 1739.497877][T11390] usb 8-1: SerialNumber: syz
[ 1739.534605][T11390] usb 8-1: config 0 descriptor??
[ 1739.751195][T16589] usb 8-1: USB disconnect, device number 7
[ 1740.757109][T19533] hsr_slave_0: entered promiscuous mode
[ 1740.775502][T19533] hsr_slave_1: entered promiscuous mode
[ 1740.776352][T19533] debugfs: 'hsr0' already exists in 'hsr'
[ 1740.776375][T19533] Cannot create hsr debugfs directory
[ 1741.273617][   T31] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1742.383032][   T31] usb 10-1: Using ep0 maxpacket: 8
[ 1747.411058][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3749'.
[ 1747.783520][   T31] usb 10-1: device descriptor read/all, error -110
[ 1748.192807][   T31] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1748.332790][   T31] usb 10-1: device descriptor read/64, error -32
[ 1748.454286][   T31] usb usb10-port1: attempt power cycle
[ 1748.555200][T19533] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1748.710328][T19533] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1748.802962][   T31] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1748.824272][   T31] usb 10-1: device descriptor read/8, error -32
[ 1748.927683][T19533] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1749.061736][T19533] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1749.063095][   T31] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1749.093080][   T31] usb 10-1: device descriptor read/8, error -32
[ 1749.203057][   T31] usb usb10-port1: unable to enumerate USB device
[ 1749.239128][T10108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1749.283308][T10108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1749.289571][T10108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1749.311133][T10108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1749.312926][T10108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1750.465494][T19838] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1751.372843][ T5805] Bluetooth: hci0: command tx timeout
[ 1753.136116][T19533] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1753.265277][T19533] 8021q: adding VLAN 0 to HW filter on device team0
[ 1753.278120][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1753.319132][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1753.459055][T19819] chnl_net:caif_netlink_parms(): no params data found
[ 1753.459593][ T5805] Bluetooth: hci0: command tx timeout
[ 1753.484634][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1753.484776][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1754.357208][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3746'.
[ 1755.532770][ T5805] Bluetooth: hci0: command tx timeout
[ 1755.569294][T19819] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1755.569474][T19819] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1755.569642][T19819] bridge_slave_0: entered allmulticast mode
[ 1755.572231][T19819] bridge_slave_0: entered promiscuous mode
[ 1755.649087][T19819] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1755.649213][T19819] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1755.649440][T19819] bridge_slave_1: entered allmulticast mode
[ 1755.652087][T19819] bridge_slave_1: entered promiscuous mode
[ 1756.298050][T19884] Bluetooth: MGMT ver 1.23
[ 1756.298075][T19884] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[ 1756.446264][T19819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1756.618249][T19819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1756.839723][T19819] team0: Port device team_slave_0 added
[ 1756.850983][T19819] team0: Port device team_slave_1 added
[ 1757.507300][T19901] blktrace: Concurrent blktraces are not allowed on loop14
[ 1758.362030][ T5805] Bluetooth: hci0: command tx timeout
[ 1760.811281][T10108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1761.037010][T10108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1761.037713][T10108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1761.039969][T10108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1761.071073][T10108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1762.800413][T19819] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1762.800430][T19819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1762.800457][T19819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1763.142384][T10108] Bluetooth: hci2: command tx timeout
[ 1763.703603][   T68] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1763.957565][T19819] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1763.957581][T19819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1763.957608][T19819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1764.559190][T19948] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1766.625679][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3764'.
[ 1766.632533][T10108] Bluetooth: hci2: command tx timeout
[ 1767.553820][   T68] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1768.127646][T19819] hsr_slave_0: entered promiscuous mode
[ 1768.128898][T19819] hsr_slave_1: entered promiscuous mode
[ 1768.129760][T19819] debugfs: 'hsr0' already exists in 'hsr'
[ 1768.129783][T19819] Cannot create hsr debugfs directory
[ 1768.677809][T10108] Bluetooth: hci2: command tx timeout
[ 1769.503239][   T68] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1770.732839][T10108] Bluetooth: hci2: command tx timeout
[ 1772.273727][   T68] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1775.745768][T20020] tipc: Started in network mode
[ 1775.745798][T20020] tipc: Node identity 7f000001, cluster identity 4711
[ 1775.746499][T20020] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1776.053023][   T68] bridge_slave_1: left allmulticast mode
[ 1776.053048][   T68] bridge_slave_1: left promiscuous mode
[ 1776.053271][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1776.174168][   T68] bridge_slave_0: left allmulticast mode
[ 1776.174194][   T68] bridge_slave_0: left promiscuous mode
[ 1776.174418][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1776.286564][   T68] batman_adv: batadv0: Interface deactivated: gretap1
[ 1779.978707][   T68] batman_adv: batadv0: Removing interface: gretap1
[ 1780.164524][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1780.236298][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1780.267856][   T68] bond0 (unregistering): Released all slaves
[ 1780.303279][  T809] tipc: Node number set to 2130706433
[ 1780.304451][T20059] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1781.649248][   T68] tipc: Disabling bearer <udp:syz2>
[ 1781.649456][   T68] tipc: Left network mode
[ 1781.663269][T19916] chnl_net:caif_netlink_parms(): no params data found
[ 1782.732175][T20087] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1783.630191][T19916] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1783.630356][T19916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1783.630565][T19916] bridge_slave_0: entered allmulticast mode
[ 1783.639558][T19916] bridge_slave_0: entered promiscuous mode
[ 1783.720821][T19916] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1783.720938][T19916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1783.721171][T19916] bridge_slave_1: entered allmulticast mode
[ 1783.724765][T19916] bridge_slave_1: entered promiscuous mode
[ 1784.241391][T20102] netlink: 'syz.5.3792': attribute type 4 has an invalid length.
[ 1784.241414][T20102] netlink: 1601 bytes leftover after parsing attributes in process `syz.5.3792'.
[ 1785.062200][T19916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1786.906474][T19916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1787.675559][   T68] hsr_slave_0: left promiscuous mode
[ 1787.713062][   T68] hsr_slave_1: left promiscuous mode
[ 1787.714081][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1787.714104][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1787.767349][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1787.767372][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1787.895572][   T68] veth1_macvtap: left promiscuous mode
[ 1787.895666][   T68] veth0_macvtap: left promiscuous mode
[ 1787.895907][   T68] veth1_vlan: left promiscuous mode
[ 1787.896066][   T68] veth0_vlan: left promiscuous mode
[ 1788.787108][T20144] blktrace: Concurrent blktraces are not allowed on loop16
[ 1790.024578][   T68] pim6reg99999999 (unregistering): left allmulticast mode
[ 1790.031050][   T68] pim6reg (unregistering): left allmulticast mode
[ 1792.315234][   T68] team0 (unregistering): Port device team_slave_1 removed
[ 1792.737801][   T68] team0 (unregistering): Port device team_slave_0 removed
[ 1793.020064][T20145] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1795.379453][T19916] team0: Port device team_slave_0 added
[ 1795.400816][T19916] team0: Port device team_slave_1 added
[ 1795.541141][T19819] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1795.571930][T19916] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1795.571945][T19916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1795.571972][T19916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1795.616791][T19819] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1795.875468][T19916] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1795.875484][T19916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1795.875510][T19916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1795.876931][T19819] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1796.113796][T19916] hsr_slave_0: entered promiscuous mode
[ 1796.119407][T19916] hsr_slave_1: entered promiscuous mode
[ 1796.124588][T19916] debugfs: 'hsr0' already exists in 'hsr'
[ 1796.124612][T19916] Cannot create hsr debugfs directory
[ 1796.247933][T19819] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1797.168644][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1797.168708][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1797.696862][T20194] blktrace: Concurrent blktraces are not allowed on loop10
[ 1803.095484][T19819] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1803.404986][T19819] 8021q: adding VLAN 0 to HW filter on device team0
[ 1803.418916][T10025] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1803.419189][T10025] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1803.455729][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1803.455803][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1804.280677][T20224] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3819'.
[ 1804.592264][   T68] bridge_slave_1: left allmulticast mode
[ 1804.592293][   T68] bridge_slave_1: left promiscuous mode
[ 1804.592524][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1804.665316][   T68] bridge_slave_0: left allmulticast mode
[ 1804.665334][   T68] bridge_slave_0: left promiscuous mode
[ 1804.665480][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1806.144311][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1806.223422][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1806.255437][   T68] bond0 (unregistering): Released all slaves
[ 1806.293067][T20232] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1806.625691][T19916] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1806.865531][T20251] blktrace: Concurrent blktraces are not allowed on loop14
[ 1807.818409][T19916] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1807.943328][T19916] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1809.102783][   T68] hsr_slave_0: left promiscuous mode
[ 1809.368592][   T68] hsr_slave_1: left promiscuous mode
[ 1809.369239][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1809.450281][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1810.143640][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1810.162583][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1810.170717][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1810.171935][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1810.177774][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1811.942177][   T68] team0 (unregistering): Port device team_slave_1 removed
[ 1812.027738][   T68] team0 (unregistering): Port device team_slave_0 removed
[ 1812.252736][ T5805] Bluetooth: hci4: command tx timeout
[ 1812.373927][T19916] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1814.752824][ T5805] Bluetooth: hci4: command tx timeout
[ 1815.274055][T16586] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1815.434421][T16586] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1815.434437][T16586] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1815.436374][T16586] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1815.436390][T16586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1815.436400][T16586] usb 6-1: Product: syz
[ 1815.436407][T16586] usb 6-1: Manufacturer: syz
[ 1815.436414][T16586] usb 6-1: SerialNumber: syz
[ 1815.439912][T16586] usb 6-1: config 0 descriptor??
[ 1816.231468][T19916] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1816.964743][ T5805] Bluetooth: hci4: command tx timeout
[ 1817.025847][T19916] 8021q: adding VLAN 0 to HW filter on device team0
[ 1817.667958][T20283] chnl_net:caif_netlink_parms(): no params data found
[ 1817.899197][   T31] usb 6-1: USB disconnect, device number 11
[ 1819.197893][ T5805] Bluetooth: hci4: command tx timeout
[ 1819.305777][T10108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1819.323954][T10108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1819.324383][T10108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1819.325504][T10108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1819.326528][T10108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1822.082783][T10108] Bluetooth: hci0: command tx timeout
[ 1822.333431][    C1] ==================================================================
[ 1822.333448][    C1] BUG: KASAN: slab-use-after-free in detach_timer+0xc8/0x300
[ 1822.333475][    C1] Read of size 8 at addr ffff88805d1fc0d0 by task ktimers/1/29
[ 1822.333494][    C1] 
[ 1822.333518][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1822.333548][    C1] Tainted: [L]=SOFTLOCKUP
[ 1822.333556][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1822.333574][    C1] Call Trace:
[ 1822.333584][    C1]  <TASK>
[ 1822.333593][    C1]  dump_stack_lvl+0xe8/0x150
[ 1822.333626][    C1]  print_report+0xba/0x230
[ 1822.333654][    C1]  ? detach_timer+0xc8/0x300
[ 1822.333671][    C1]  kasan_report+0x117/0x150
[ 1822.333703][    C1]  ? detach_timer+0xc8/0x300
[ 1822.333724][    C1]  detach_timer+0xc8/0x300
[ 1822.333742][    C1]  __run_timer_base+0x624/0x9f0
[ 1822.333772][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1822.333805][    C1]  run_timer_softirq+0xb7/0x170
[ 1822.333835][    C1]  handle_softirqs+0x1de/0x6f0
[ 1822.333867][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[ 1822.333896][    C1]  run_ktimerd+0x69/0x100
[ 1822.333923][    C1]  smpboot_thread_fn+0x541/0xa50
[ 1822.333954][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[ 1822.333989][    C1]  kthread+0x388/0x470
[ 1822.334009][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1822.334039][    C1]  ? __pfx_kthread+0x10/0x10
[ 1822.334061][    C1]  ret_from_fork+0x51e/0xb90
[ 1822.334092][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1822.334119][    C1]  ? __switch_to+0xc7d/0x1450
[ 1822.334146][    C1]  ? __pfx_kthread+0x10/0x10
[ 1822.334168][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1822.334195][    C1]  </TASK>
[ 1822.334202][    C1] 
[ 1822.334208][    C1] Allocated by task 19003:
[ 1822.334218][    C1]  kasan_save_track+0x3e/0x80
[ 1822.334245][    C1]  __kasan_kmalloc+0x93/0xb0
[ 1822.334269][    C1]  __kmalloc_cache_noprof+0x3a6/0x690
[ 1822.334297][    C1]  rose_add_node+0x26f/0xf50
[ 1822.334320][    C1]  rose_rt_ioctl+0xdc1/0x1350
[ 1822.334342][    C1]  rose_ioctl+0x3fb/0x8f0
[ 1822.334373][    C1]  sock_do_ioctl+0x101/0x320
[ 1822.334404][    C1]  sock_ioctl+0x5c9/0x7f0
[ 1822.334431][    C1]  __se_sys_ioctl+0xff/0x170
[ 1822.334459][    C1]  do_syscall_64+0x14d/0xf80
[ 1822.334486][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1822.334513][    C1] 
[ 1822.334518][    C1] Freed by task 29:
[ 1822.334527][    C1]  kasan_save_track+0x3e/0x80
[ 1822.334552][    C1]  kasan_save_free_info+0x46/0x50
[ 1822.334573][    C1]  __kasan_slab_free+0x5c/0x80
[ 1822.334600][    C1]  kfree+0x1c1/0x6c0
[ 1822.334623][    C1]  rose_timer_expiry+0x4cb/0x600
[ 1822.334649][    C1]  call_timer_fn+0x192/0x640
[ 1822.334666][    C1]  __run_timer_base+0x6a3/0x9f0
[ 1822.334694][    C1]  run_timer_softirq+0xb7/0x170
[ 1822.334723][    C1]  handle_softirqs+0x1de/0x6f0
[ 1822.334750][    C1]  run_ktimerd+0x69/0x100
[ 1822.334780][    C1]  smpboot_thread_fn+0x541/0xa50
[ 1822.334809][    C1]  kthread+0x388/0x470
[ 1822.334828][    C1]  ret_from_fork+0x51e/0xb90
[ 1822.334854][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1822.334871][    C1] 
[ 1822.334876][    C1] The buggy address belongs to the object at ffff88805d1fc000
[ 1822.334876][    C1]  which belongs to the cache kmalloc-512 of size 512
[ 1822.334895][    C1] The buggy address is located 208 bytes inside of
[ 1822.334895][    C1]  freed 512-byte region [ffff88805d1fc000, ffff88805d1fc200)
[ 1822.334918][    C1] 
[ 1822.334923][    C1] The buggy address belongs to the physical page:
[ 1822.334944][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d1fc
[ 1822.334963][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1822.334980][    C1] flags: 0x80000000000040(head|node=0|zone=1)
[ 1822.335001][    C1] page_type: f5(slab)
[ 1822.335020][    C1] raw: 0080000000000040 ffff88813fe1cc80 dead000000000100 dead000000000122
[ 1822.335039][    C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1822.335059][    C1] head: 0080000000000040 ffff88813fe1cc80 dead000000000100 dead000000000122
[ 1822.335078][    C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1822.335097][    C1] head: 0080000000000002 ffffea0001747f01 00000000ffffffff 00000000ffffffff
[ 1822.335115][    C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[ 1822.335127][    C1] page dumped because: kasan: bad access detected
[ 1822.335141][    C1] page_owner tracks the page as allocated
[ 1822.335149][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5794, tgid 5794 (syz-executor), ts 82106306961, free_ts 0
[ 1822.335187][    C1]  post_alloc_hook+0x231/0x280
[ 1822.335216][    C1]  get_page_from_freelist+0x28bb/0x2950
[ 1822.335234][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1822.335253][    C1]  allocate_slab+0x77/0x660
[ 1822.335275][    C1]  refill_objects+0x334/0x3c0
[ 1822.335295][    C1]  __pcs_replace_empty_main+0x328/0x5f0
[ 1822.335317][    C1]  __kmalloc_noprof+0x530/0x7b0
[ 1822.335345][    C1]  fib6_info_alloc+0x30/0xf0
[ 1822.335368][    C1]  ip6_route_info_create+0x142/0x860
[ 1822.335395][    C1]  ip6_route_add+0x49/0x1d0
[ 1822.335420][    C1]  addrconf_add_mroute+0x2d1/0x370
[ 1822.335445][    C1]  inet6_addr_add+0x2e4/0xbd0
[ 1822.335465][    C1]  inet6_rtm_newaddr+0xa17/0xe30
[ 1822.335494][    C1]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1822.335520][    C1]  netlink_rcv_skb+0x232/0x4b0
[ 1822.335538][    C1]  netlink_unicast+0x831/0x9f0
[ 1822.335568][    C1] page_owner free stack trace missing
[ 1822.335575][    C1] 
[ 1822.335580][    C1] Memory state around the buggy address:
[ 1822.335592][    C1]  ffff88805d1fbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1822.335607][    C1]  ffff88805d1fc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1822.335621][    C1] >ffff88805d1fc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1822.335633][    C1]                                                  ^
[ 1822.335645][    C1]  ffff88805d1fc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1822.335658][    C1]  ffff88805d1fc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1822.335669][    C1] ==================================================================
[ 1822.335692][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1822.335710][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1822.335740][    C1] Tainted: [L]=SOFTLOCKUP
[ 1822.335748][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1822.335761][    C1] Call Trace:
[ 1822.335768][    C1]  <TASK>
[ 1822.335776][    C1]  vpanic+0x56c/0xa60
[ 1822.335811][    C1]  ? __pfx_vpanic+0x10/0x10
[ 1822.335847][    C1]  panic+0xc5/0xd0
[ 1822.335877][    C1]  ? __pfx_panic+0x10/0x10
[ 1822.335909][    C1]  ? detach_timer+0xc8/0x300
[ 1822.335928][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1822.335952][    C1]  ? detach_timer+0xc8/0x300
[ 1822.335971][    C1]  ? detach_timer+0xc8/0x300
[ 1822.335989][    C1]  check_panic_on_warn+0x89/0xb0
[ 1822.336014][    C1]  ? detach_timer+0xc8/0x300
[ 1822.336032][    C1]  end_report+0x73/0x180
[ 1822.336063][    C1]  ? detach_timer+0xc8/0x300
[ 1822.336081][    C1]  kasan_report+0x128/0x150
[ 1822.336113][    C1]  ? detach_timer+0xc8/0x300
[ 1822.336136][    C1]  detach_timer+0xc8/0x300
[ 1822.336156][    C1]  __run_timer_base+0x624/0x9f0
[ 1822.336193][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1822.336232][    C1]  run_timer_softirq+0xb7/0x170
[ 1822.336276][    C1]  handle_softirqs+0x1de/0x6f0
[ 1822.336310][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[ 1822.336341][    C1]  run_ktimerd+0x69/0x100
[ 1822.336373][    C1]  smpboot_thread_fn+0x541/0xa50
[ 1822.336406][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[ 1822.336442][    C1]  kthread+0x388/0x470
[ 1822.336463][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1822.336494][    C1]  ? __pfx_kthread+0x10/0x10
[ 1822.336523][    C1]  ret_from_fork+0x51e/0xb90
[ 1822.336553][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1822.336581][    C1]  ? __switch_to+0xc7d/0x1450
[ 1822.336608][    C1]  ? __pfx_kthread+0x10/0x10
[ 1822.336630][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1822.336657][    C1]  </TASK>
[ 1822.336988][    C1] Kernel Offset: disabled