last executing test programs:

33m43.092911276s ago: executing program 32 (id=10):
r0 = socket$netlink(0x10, 0x3, 0xf)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=[{0x10, 0x11, 0x6}, {0x10, 0x108, 0x3}], 0x20}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
personality(0xbe4e602dc9e6c1d3)
uname(&(0x7f0000000040)=""/138)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = gettid()
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket(0x2, 0x2, 0x1)
r5 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, &(0x7f00000001c0), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000500)={r4}, 0x1)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r6, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c0000008000000007000000"], 0xc}}], 0x2, 0x4000000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b87", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="000000000200"/28], 0x50)
ioprio_set$pid(0x3, r3, 0x4003)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r8, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2})

33m38.474967358s ago: executing program 33 (id=12):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={0x0, 0x0, 0x8}, 0x14)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r2}}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x45)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x7fb}, &(0x7f0000000040)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ldst={0x1, 0x2, 0x6, 0xa, 0x9, 0x8, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x21}, 0x94)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x109400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x4be, 0x9, 0x8, 0x1100004, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x820b, 0x8, 0x9, 0x8, 0x8, 0x10000, 0xfffffff7]})
ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000000)={0x3, 0xbf1e, 0x101, 0x8})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x18)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r7}, 0xc)
socket$l2tp(0x2, 0x2, 0x73)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

31m36.656750178s ago: executing program 34 (id=21):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r6, 0x0)
setresuid(0xee01, 0xee00, 0x0)
setfsuid(0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r7, 0x402, 0x1a)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
read$FUSE(r6, &(0x7f00000015c0)={0x2020}, 0x2020)

30m39.675787582s ago: executing program 35 (id=147):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000)
socketpair(0x11, 0x6, 0x2, 0x0)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
r2 = epoll_create1(0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000000c0)={0x10000011})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r7 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, 0x0)

28m18.996277284s ago: executing program 36 (id=405):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000)
socketpair(0x11, 0x6, 0x2, 0x0)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
dup(r1)
r2 = epoll_create1(0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000000c0)={0x10000011})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r7 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, 0x0)

13m4.055203423s ago: executing program 9 (id=3228):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a00000001090212"], 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}})

13m1.482301858s ago: executing program 9 (id=3240):
syz_usb_connect(0x2, 0x3d, &(0x7f0000010a00)={{0x12, 0x1, 0x310, 0xe8, 0xa, 0x12, 0x10, 0xc6fc, 0xc78f, 0x5d62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x81, 0x5a, 0x10, 0xd3, [{{0x9, 0x4, 0x33, 0x1, 0x2, 0x8, 0x6, 0x62, 0x6, [], [{{0x9, 0x5, 0xa, 0x10, 0x200, 0x2, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x101}]}}, {{0x9, 0x5, 0x2, 0x1d, 0x40, 0x1, 0xd9}}]}}]}}]}}, &(0x7f0000011640)={0x0, 0x0, 0x0, 0x0})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)

12m58.975452047s ago: executing program 9 (id=3255):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, 0x0, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)

12m58.860681552s ago: executing program 9 (id=3257):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18)

12m58.703364598s ago: executing program 9 (id=3258):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="050316", 0x3, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

12m57.639112913s ago: executing program 9 (id=3264):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xaf86be13, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x27)

12m57.365200156s ago: executing program 37 (id=3264):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xaf86be13, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x27)

10m27.799284253s ago: executing program 4 (id=3744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="040006"], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0)

10m26.913215855s ago: executing program 4 (id=3747):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x89, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)

10m26.188202189s ago: executing program 4 (id=3749):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x91)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000080)={0x0, 0x10, 0x1, 0x2})

10m25.292059083s ago: executing program 4 (id=3753):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000020000/0x3000)=nil, 0x800000})

10m22.023805397s ago: executing program 4 (id=3762):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0x22, &(0x7f0000000300)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@mpls_mc={0x8848, {[], @ipv4=@generic={{0x5, 0x4, 0x3, 0x8, 0x14, 0x66, 0x0, 0xff, 0xc, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)

10m21.28531728s ago: executing program 4 (id=3767):
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x1})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000100))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34565348, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x5}})
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x473d, 0xfd, 0x6, 0x7}, {0x9, 0xf, 0x5, 0xb}]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00f625bd7000fddbdf250100000008000100710000000c00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r5, 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
writev(r9, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="08000000246837f7", 0x8}], 0x2)
ftruncate(r5, 0x40e73000)
modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101300, 0x0)

10m5.955806807s ago: executing program 38 (id=3767):
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x1})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000100))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34565348, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x5}})
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x473d, 0xfd, 0x6, 0x7}, {0x9, 0xf, 0x5, 0xb}]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00f625bd7000fddbdf250100000008000100710000000c00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r5, 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
writev(r9, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="08000000246837f7", 0x8}], 0x2)
ftruncate(r5, 0x40e73000)
modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101300, 0x0)

6m58.219329516s ago: executing program 8 (id=4520):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6m51.310856543s ago: executing program 8 (id=4535):
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
gettid()
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

6m49.857922929s ago: executing program 8 (id=4538):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

6m47.792481692s ago: executing program 8 (id=4545):
syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000002540)=[{0x6, 0x1, 0x5, 0x6}]})
epoll_create(0xaf2)
r0 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

6m46.723368877s ago: executing program 8 (id=4549):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

6m46.42618161s ago: executing program 8 (id=4550):
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

6m45.098372404s ago: executing program 1 (id=4555):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil})

6m44.331785957s ago: executing program 1 (id=4559):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0)

6m44.096067281s ago: executing program 1 (id=4560):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_io_uring_setup(0x49a, &(0x7f00000002c0)={0x0, 0x79b1, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6, 0x1})
io_uring_enter(r1, 0x627, 0x4c1, 0x63, 0x0, 0x0)

6m43.451933892s ago: executing program 1 (id=4563):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

6m43.187195106s ago: executing program 1 (id=4565):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000540)=[@code={0xa, 0x52, {"b3c9f0832f56360fc77cf10e66bad00466b8cc4466ef410f23346566420f38817c8aceb805000000b9006800000f01c1640fc76b25e900800000b97e0900000f32"}}], 0x52})
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x404, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x4, 0x4, 0x1}], 0x7})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000540)=[@in_dx={0x69, 0x20, {0xe3ce, 0x2}}, @code={0xa, 0x5a, {"420f23ecf047804f0000f38aaca8080000000f32c4a2d93a748d053e41c32e41a766420f38823bc441b1689c1b0000000048b885000000000000000f23d80f21f835800000000f23f8"}}, @uexit={0x0, 0x18, 0x800}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x40000000}}, @in_dx={0x69, 0x20, {0xb273, 0x1}}, @nested_load_code={0x12e, 0x91, {0x1, "48b8e41a0000000000000f23c80f21f8350c00e0000f23f866b823000f00d866baf80cb83c485284ef66bafc0c66b8020066ef8f6970013bc744240000000000c744240200000000c7442406000000000f011424f20f32b8010000000f01c166430f205d420f01cf66baf80cb84de13c86ef66bafc0cb00fee"}}, @uexit={0x0, 0x18, 0x5}, @rdmsr={0x66, 0x18, {0x924}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x7}, @rdmsr={0x66, 0x18, {0x203}}, @in_dx={0x69, 0x20, {0x1e53}}, @in_dx={0x69, 0x20, {0x8bcc}}], 0x243})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x404, 0xffffffffefffff14, 0x3, 0x100000000, 0x7, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m31.158738936s ago: executing program 39 (id=4550):
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

6m30.674990963s ago: executing program 1 (id=4588):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00'}, 0x18)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/63, 0x3f}], 0x1)

6m29.770333407s ago: executing program 40 (id=4588):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00'}, 0x18)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/63, 0x3f}], 0x1)

5m46.346614864s ago: executing program 3 (id=4665):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0)
getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50)
unlink(&(0x7f00000001c0)='./control/file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200)
rmdir(&(0x7f0000000040)='./control\x00')

5m46.209517712s ago: executing program 3 (id=4666):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept$packet(r2, 0x0, 0x0)
sendto$packet(r3, &(0x7f00000002c0)='H', 0x1, 0x4000, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0)

5m46.11231548s ago: executing program 3 (id=4667):
socket(0x2b, 0x80801, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
socket$packet(0x11, 0x3, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18)

5m45.914356539s ago: executing program 3 (id=4668):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7'])
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

5m45.798360606s ago: executing program 3 (id=4669):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x10, 0x803, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x3, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x0, 0x1000000}})

5m45.055603185s ago: executing program 3 (id=4673):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001700))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

5m29.962010814s ago: executing program 41 (id=4673):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001700))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

1m5.082745916s ago: executing program 5 (id=5783):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$setperm(0x5, r0, 0x10240d00)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "8402548cccea6fc247a52032a0d619fae38c49456594e5c96339ac05a7f19551fa064f937c5eece17954ee3c37c650e1c8069170f98c8977915b42b54f8708e9", 0x16}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "98c40d6bbcb1ddee6a07f865f5017ba5641caa20e7a8d9750ec7cd0112bd590300000038ac9ee3bae401c4050075470664dbd0d40d7301de76004e00", 0x23}, 0x48, r0)

1m4.984153719s ago: executing program 5 (id=5788):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
bind$inet(r0, 0x0, 0x0)

1m4.110391775s ago: executing program 5 (id=5801):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5c9b, 0x400, 0x5, 0x1000}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x400d, @fd=r4, 0x6, &(0x7f00000004c0)=[{&(0x7f00000000c0)="2758f0269b40e5f0a8e0f13eed3c42f6bd3ef7cea5b3c6fbd38b1941272e", 0x1e}, {&(0x7f0000000380)}], 0x2, 0x10, 0x1, {0x1}})
io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0)

1m0.751556216s ago: executing program 5 (id=5813):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)

56.467952221s ago: executing program 5 (id=5824):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x142)

56.247003572s ago: executing program 5 (id=5827):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}], [], 0x6b}})

47.975771415s ago: executing program 2 (id=5845):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)

45.824688959s ago: executing program 2 (id=5854):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1})

45.612350513s ago: executing program 2 (id=5855):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1, 0x3fb}, &(0x7f0000000080)=0x8)

45.408796622s ago: executing program 2 (id=5858):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)

44.629872163s ago: executing program 2 (id=5860):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="1c", 0x1}], 0x1)

44.444735954s ago: executing program 2 (id=5861):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8, 0xf}, {0xfff3, 0xf}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)

43.80155474s ago: executing program 7 (id=5863):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20000000)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

43.150937213s ago: executing program 7 (id=5868):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x1000040, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)

42.21667278s ago: executing program 7 (id=5871):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c8)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
read$FUSE(r1, &(0x7f0000002440)={0x2020}, 0x2020)

41.645856373s ago: executing program 7 (id=5874):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
ppoll(&(0x7f00000003c0)=[{r0, 0x2000}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0)

40.939085551s ago: executing program 42 (id=5827):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}], [], 0x6b}})

40.440338407s ago: executing program 7 (id=5878):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x9, 0x6d05, 0x6})

39.516568184s ago: executing program 7 (id=5880):
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16)
syz_clone(0x44800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04905b0c00"], 0x7)

29.227739655s ago: executing program 43 (id=5861):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8, 0xf}, {0xfff3, 0xf}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)

29.054236111s ago: executing program 0 (id=5904):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

28.690993593s ago: executing program 0 (id=5906):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008050}, 0x20044001)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

28.347472452s ago: executing program 0 (id=5907):
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040854)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7d, &(0x7f0000000180)={0x0, 0x71}, &(0x7f00000002c0)=0x8)

28.059365606s ago: executing program 0 (id=5908):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_adjtime(0x1, 0x0)

27.04710792s ago: executing program 0 (id=5911):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd00e93af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x0, 0x4, 0x61}, 0x3c)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)

23.980084594s ago: executing program 44 (id=5880):
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16)
syz_clone(0x44800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04905b0c00"], 0x7)

21.234982961s ago: executing program 0 (id=5916):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]})

18.131332206s ago: executing program 6 (id=5920):
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x100000001})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010001fff2cad70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c848010000010000200012800b000100697036746e6c000110000280050009002900000004001300080004"], 0x50}, 0x1, 0x0, 0x0, 0x20040081}, 0x14)

17.320945374s ago: executing program 6 (id=5921):
syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2)
r0 = syz_io_uring_setup(0x1e55, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x0, 0x11e}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0)

17.185982318s ago: executing program 6 (id=5922):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)='P', 0x1, 0x60000800, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x8}, 0x1c)
shutdown(r0, 0x1)
listen(r0, 0x100101)

16.970228546s ago: executing program 6 (id=5923):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {&(0x7f0000001840)="b792", 0x2}], 0x2}}], 0x1, 0x4000011)

15.642143345s ago: executing program 6 (id=5924):
inotify_init()
unshare(0x2040400)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

15.501189481s ago: executing program 6 (id=5925):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x80000008, 0xffffffff, 0x2, 0xd3, 0x101, 0x6, 0xd}, {0x80000000, 0x81, 0x8, 0xfffffffe, 0x2, 0xd663, 0x9}]})

5.874880722s ago: executing program 45 (id=5916):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]})

0s ago: executing program 46 (id=5925):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x80000008, 0xffffffff, 0x2, 0xd3, 0x101, 0x6, 0xd}, {0x80000000, 0x81, 0x8, 0xfffffffe, 0x2, 0xd663, 0x9}]})

kernel console output (not intermixed with test programs):

ses=4294967295 subj=_ pid=21272 comm="syz.0.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1875.384931][T21101] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1875.387140][T21101] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1875.387430][T21101] bridge_slave_0: entered allmulticast mode
[ 1875.389714][T21101] bridge_slave_0: entered promiscuous mode
[ 1875.473322][T21101] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1875.473478][T21101] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1875.473758][T21101] bridge_slave_1: entered allmulticast mode
[ 1875.476570][T21101] bridge_slave_1: entered promiscuous mode
[ 1876.358991][T21101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1876.832458][T21101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1877.887667][T21101] team0: Port device team_slave_0 added
[ 1877.900298][T21101] team0: Port device team_slave_1 added
[ 1878.892724][T21101] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1878.892739][T21101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1878.892759][T21101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1878.964356][T21101] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1878.964372][T21101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1878.964395][T21101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1879.898149][T21101] hsr_slave_0: entered promiscuous mode
[ 1879.899246][T21101] hsr_slave_1: entered promiscuous mode
[ 1879.940962][T20961] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1881.685878][T20961] 8021q: adding VLAN 0 to HW filter on device team0
[ 1881.898034][T21332] netlink: 'syz.0.4800': attribute type 2 has an invalid length.
[ 1881.997699][T21332] !: entered promiscuous mode
[ 1882.384300][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1882.384531][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1882.497440][T20827] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1882.497566][T20827] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1883.382081][T20958] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1883.668537][T20958] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1883.932176][T20958] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1884.148584][T20958] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1884.424660][T20955] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1884.465019][T20955] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1884.516966][T20955] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1884.566405][T20955] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1884.933032][ T6010] bridge_slave_1: left allmulticast mode
[ 1884.933066][ T6010] bridge_slave_1: left promiscuous mode
[ 1884.938417][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1885.168990][T20069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1885.184937][T20069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1885.186777][T20069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1885.188467][T20069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1885.190021][T20069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1885.433671][ T6010] bridge_slave_0: left allmulticast mode
[ 1885.433703][ T6010] bridge_slave_0: left promiscuous mode
[ 1885.434025][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1885.776535][ T6010] bridge_slave_1: left allmulticast mode
[ 1885.776567][ T6010] bridge_slave_1: left promiscuous mode
[ 1885.776819][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1885.872476][ T6010] bridge_slave_0: left allmulticast mode
[ 1885.872509][ T6010] bridge_slave_0: left promiscuous mode
[ 1885.872796][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1886.229149][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1886.248153][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1886.249750][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1886.282085][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1886.282953][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1886.352349][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1886.441877][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1886.503235][ T6010] bond0 (unregistering): Released all slaves
[ 1886.741377][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1886.843634][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1886.914222][ T6010] bond0 (unregistering): Released all slaves
[ 1886.952795][T20955] kthread_run failed with err -4
[ 1887.540689][ T5814] Bluetooth: hci2: command tx timeout
[ 1887.938415][T20069] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1887.970027][T20069] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1887.988246][T20069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1888.000682][T20069] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1888.002745][T20069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1888.423461][T20069] Bluetooth: hci4: command tx timeout
[ 1889.580638][T20069] Bluetooth: hci2: command tx timeout
[ 1890.060719][T20069] Bluetooth: hci5: command tx timeout
[ 1890.221672][ T6010] hsr_slave_0: left promiscuous mode
[ 1890.260670][ T6010] hsr_slave_1: left promiscuous mode
[ 1890.261554][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1890.291696][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1890.450636][ T6010] hsr_slave_0: left promiscuous mode
[ 1890.460640][T20069] Bluetooth: hci4: command tx timeout
[ 1890.480667][ T6010] hsr_slave_1: left promiscuous mode
[ 1890.481530][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1890.521399][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1891.322871][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1891.511454][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1891.660650][T20069] Bluetooth: hci2: command tx timeout
[ 1892.140721][T20069] Bluetooth: hci5: command tx timeout
[ 1892.540895][T20069] Bluetooth: hci4: command tx timeout
[ 1892.911191][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1893.414316][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1893.997013][T20069] Bluetooth: hci2: command tx timeout
[ 1894.220693][T20069] Bluetooth: hci5: command tx timeout
[ 1894.462530][   T37] kauditd_printk_skb: 23 callbacks suppressed
[ 1894.462552][   T37] audit: type=1107 audit(1767008058.478:2527): pid=21449 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 1894.620638][T20069] Bluetooth: hci4: command tx timeout
[ 1896.303455][T20069] Bluetooth: hci5: command tx timeout
[ 1896.451557][T21383] chnl_net:caif_netlink_parms(): no params data found
[ 1896.549851][T21396] chnl_net:caif_netlink_parms(): no params data found
[ 1897.070821][T21405] chnl_net:caif_netlink_parms(): no params data found
[ 1897.113002][T21101] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1897.320005][T21101] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1897.532781][T21101] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1897.601000][T21383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1897.601248][T21383] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1897.601533][T21383] bridge_slave_0: entered allmulticast mode
[ 1897.611692][T21383] bridge_slave_0: entered promiscuous mode
[ 1898.006813][T21101] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1898.330881][T21383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1898.332709][T21383] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1898.333013][T21383] bridge_slave_1: entered allmulticast mode
[ 1898.335801][T21383] bridge_slave_1: entered promiscuous mode
[ 1899.112807][T21396] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1899.113139][T21396] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1899.113874][T21396] bridge_slave_0: entered allmulticast mode
[ 1899.142047][T21396] bridge_slave_0: entered promiscuous mode
[ 1899.737097][T21396] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1899.739699][T21396] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1899.861990][T21396] bridge_slave_1: entered allmulticast mode
[ 1899.913270][T21396] bridge_slave_1: entered promiscuous mode
[ 1900.040138][T21383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1900.108161][T18039] IPVS: starting estimator thread 0...
[ 1900.190694][T21502] IPVS: using max 7 ests per chain, 16800 per kthread
[ 1900.746195][T21383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1901.122850][T21405] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1901.123063][T21405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1901.123293][T21405] bridge_slave_0: entered allmulticast mode
[ 1901.126069][T21405] bridge_slave_0: entered promiscuous mode
[ 1901.496851][T21396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1901.514534][T21405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1901.514664][T21405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1901.514907][T21405] bridge_slave_1: entered allmulticast mode
[ 1901.536642][T21405] bridge_slave_1: entered promiscuous mode
[ 1902.183705][T21396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1902.291350][T21383] team0: Port device team_slave_0 added
[ 1902.987151][T21383] team0: Port device team_slave_1 added
[ 1904.017261][T21405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1904.362675][T21396] team0: Port device team_slave_0 added
[ 1904.733406][T21405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1904.862215][T21396] team0: Port device team_slave_1 added
[ 1905.052622][T21383] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1905.052642][T21383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1905.052671][T21383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1905.498120][T21383] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1905.498140][T21383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1905.498170][T21383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1906.153622][T21405] team0: Port device team_slave_0 added
[ 1906.167143][T21396] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1906.167157][T21396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1906.167177][T21396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1906.177297][T21405] team0: Port device team_slave_1 added
[ 1906.187367][T21396] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1906.187423][T21396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1906.187529][T21396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1907.002398][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1907.025268][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1907.029085][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1907.030639][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1907.031581][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1907.763078][T21405] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1907.763097][T21405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1907.763126][T21405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1908.483272][T21405] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1908.483292][T21405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1908.483323][T21405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1908.498557][T21383] hsr_slave_0: entered promiscuous mode
[ 1908.503042][T21383] hsr_slave_1: entered promiscuous mode
[ 1908.506010][T21383] debugfs: 'hsr0' already exists in 'hsr'
[ 1908.506079][T21383] Cannot create hsr debugfs directory
[ 1909.103376][ T5814] Bluetooth: hci3: command tx timeout
[ 1909.248792][T21396] hsr_slave_0: entered promiscuous mode
[ 1909.260917][T21396] hsr_slave_1: entered promiscuous mode
[ 1909.262266][T21396] debugfs: 'hsr0' already exists in 'hsr'
[ 1909.262295][T21396] Cannot create hsr debugfs directory
[ 1910.307233][T21405] hsr_slave_0: entered promiscuous mode
[ 1910.308449][T21405] hsr_slave_1: entered promiscuous mode
[ 1910.309180][T21405] debugfs: 'hsr0' already exists in 'hsr'
[ 1910.309200][T21405] Cannot create hsr debugfs directory
[ 1911.180651][ T5814] Bluetooth: hci3: command tx timeout
[ 1913.115409][T21567] chnl_net:caif_netlink_parms(): no params data found
[ 1913.261088][ T5814] Bluetooth: hci3: command tx timeout
[ 1913.514715][T21567] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1913.514917][T21567] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1913.515274][T21567] bridge_slave_0: entered allmulticast mode
[ 1913.517208][T21567] bridge_slave_0: entered promiscuous mode
[ 1913.534205][T21567] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1913.546243][T21567] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1913.547835][T21567] bridge_slave_1: entered allmulticast mode
[ 1913.561551][T21567] bridge_slave_1: entered promiscuous mode
[ 1913.768771][T21567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1913.788236][T21567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1913.892205][ T6010] bridge_slave_1: left allmulticast mode
[ 1913.892228][ T6010] bridge_slave_1: left promiscuous mode
[ 1913.892426][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1914.525369][ T6010] bridge_slave_0: left allmulticast mode
[ 1914.525402][ T6010] bridge_slave_0: left promiscuous mode
[ 1914.525670][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1914.845427][ T6010] bridge_slave_1: left allmulticast mode
[ 1914.845460][ T6010] bridge_slave_1: left promiscuous mode
[ 1914.845721][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1915.058558][ T6010] bridge_slave_0: left allmulticast mode
[ 1915.058591][ T6010] bridge_slave_0: left promiscuous mode
[ 1915.058862][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1915.170001][ T6010] bridge_slave_1: left allmulticast mode
[ 1915.170033][ T6010] bridge_slave_1: left promiscuous mode
[ 1915.170311][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1915.450667][ T5814] Bluetooth: hci3: command tx timeout
[ 1915.552152][ T6010] bridge_slave_0: left allmulticast mode
[ 1915.552186][ T6010] bridge_slave_0: left promiscuous mode
[ 1915.552511][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1915.957838][   T37] audit: type=1326 audit(1767008079.988:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21636 comm="syz.0.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1915.958116][   T37] audit: type=1326 audit(1767008079.988:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21636 comm="syz.0.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1915.958791][   T37] audit: type=1326 audit(1767008079.988:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21636 comm="syz.0.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1915.959048][   T37] audit: type=1326 audit(1767008079.988:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21636 comm="syz.0.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1915.959480][   T37] audit: type=1326 audit(1767008079.988:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21636 comm="syz.0.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1915.959702][   T37] audit: type=1326 audit(1767008079.988:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21636 comm="syz.0.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1915.960116][   T37] audit: type=1326 audit(1767008079.988:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21636 comm="syz.0.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1919.986482][T21673] block nbd0: shutting down sockets
[ 1920.071039][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1920.292246][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1920.351542][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1920.393746][ T6010] bond0 (unregistering): Released all slaves
[ 1920.781424][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1920.861535][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1920.933358][ T6010] bond0 (unregistering): Released all slaves
[ 1921.191199][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1921.311368][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1921.403345][ T6010] bond0 (unregistering): Released all slaves
[ 1922.031341][T21567] team0: Port device team_slave_0 added
[ 1922.035731][T21567] team0: Port device team_slave_1 added
[ 1922.953410][T21567] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1922.953425][T21567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1922.953446][T21567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1923.124672][ T6010] hsr_slave_0: left promiscuous mode
[ 1923.161119][ T6010] hsr_slave_1: left promiscuous mode
[ 1923.161983][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1923.191492][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1923.910558][ T6010] hsr_slave_0: left promiscuous mode
[ 1924.200713][ T6010] hsr_slave_1: left promiscuous mode
[ 1924.201772][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1924.227329][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1924.890582][ T6010] hsr_slave_0: left promiscuous mode
[ 1924.931807][ T6010] hsr_slave_1: left promiscuous mode
[ 1925.212587][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1925.241539][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1928.101484][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1928.737244][ T5814] block nbd0: Receive control failed (result -32)
[ 1928.761024][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1935.994599][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1936.181258][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1937.701201][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1938.082796][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1940.140666][ T5814] Bluetooth: hci1: command 0x0406 tx timeout
[ 1940.307591][T21567] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1940.307607][T21567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1940.307631][T21567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1941.247188][T21567] hsr_slave_0: entered promiscuous mode
[ 1941.248294][T21567] hsr_slave_1: entered promiscuous mode
[ 1941.249038][T21567] debugfs: 'hsr0' already exists in 'hsr'
[ 1941.249056][T21567] Cannot create hsr debugfs directory
[ 1943.741240][   T37] audit: type=1326 audit(1767008107.778:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1943.791010][   T37] audit: type=1326 audit(1767008107.828:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1943.791309][   T37] audit: type=1326 audit(1767008107.828:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1943.791565][   T37] audit: type=1326 audit(1767008107.828:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1943.791901][   T37] audit: type=1326 audit(1767008107.828:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1943.792263][   T37] audit: type=1326 audit(1767008107.828:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1943.792616][   T37] audit: type=1326 audit(1767008107.828:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1943.793786][   T37] audit: type=1326 audit(1767008107.828:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1943.794187][   T37] audit: type=1326 audit(1767008107.828:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1943.794429][   T37] audit: type=1326 audit(1767008107.828:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21859 comm="syz.0.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f65b2f749 code=0x7ffc0000
[ 1946.378058][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1946.412319][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1946.414058][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1946.415311][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1946.416634][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1947.005525][T20069] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1947.041440][T20069] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1947.044450][T20069] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1947.181367][T20069] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1947.183324][T20069] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1947.727235][T20069] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1947.747199][T20069] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1947.748981][T20069] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1947.750295][T20069] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1947.751941][T20069] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1948.540721][T20069] Bluetooth: hci0: command tx timeout
[ 1949.260716][T20069] Bluetooth: hci6: command tx timeout
[ 1950.054912][T20069] Bluetooth: hci7: command tx timeout
[ 1950.753533][T20069] Bluetooth: hci0: command tx timeout
[ 1951.073859][T21928] kernel read not supported for file /file1 (pid: 21928 comm: syz.0.4979)
[ 1951.074053][   T37] kauditd_printk_skb: 14 callbacks suppressed
[ 1951.074067][   T37] audit: type=1800 audit(1767008115.118:2559): pid=21928 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.4979" name="file1" dev="mqueue" ino=84911 res=0 errno=0
[ 1951.350553][T20069] Bluetooth: hci6: command tx timeout
[ 1952.060850][T20069] Bluetooth: hci7: command tx timeout
[ 1952.219949][T21875] chnl_net:caif_netlink_parms(): no params data found
[ 1952.782088][T20069] Bluetooth: hci0: command tx timeout
[ 1952.846682][T21891] chnl_net:caif_netlink_parms(): no params data found
[ 1953.002368][T21884] chnl_net:caif_netlink_parms(): no params data found
[ 1953.420698][T20069] Bluetooth: hci6: command tx timeout
[ 1953.551186][T21875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1953.551335][T21875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1953.551559][T21875] bridge_slave_0: entered allmulticast mode
[ 1953.553557][T21875] bridge_slave_0: entered promiscuous mode
[ 1953.706862][T21875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1953.706955][T21875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1953.707173][T21875] bridge_slave_1: entered allmulticast mode
[ 1953.709107][T21875] bridge_slave_1: entered promiscuous mode
[ 1954.094883][T21875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1954.140848][T20069] Bluetooth: hci7: command tx timeout
[ 1954.204958][T21875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1954.292750][T21891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1954.292964][T21891] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1954.293229][T21891] bridge_slave_0: entered allmulticast mode
[ 1954.295744][T21891] bridge_slave_0: entered promiscuous mode
[ 1954.471652][T21891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1954.471801][T21891] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1954.472014][T21891] bridge_slave_1: entered allmulticast mode
[ 1954.474181][T21891] bridge_slave_1: entered promiscuous mode
[ 1954.475846][T21567] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1954.616174][T21884] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1954.616288][T21884] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1954.616526][T21884] bridge_slave_0: entered allmulticast mode
[ 1954.618880][T21884] bridge_slave_0: entered promiscuous mode
[ 1954.732256][T21567] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1954.776727][T21875] team0: Port device team_slave_0 added
[ 1954.804379][T21884] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1954.804503][T21884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1954.804673][T21884] bridge_slave_1: entered allmulticast mode
[ 1954.806902][T21884] bridge_slave_1: entered promiscuous mode
[ 1954.860597][T20069] Bluetooth: hci0: command tx timeout
[ 1954.974321][T21875] team0: Port device team_slave_1 added
[ 1954.974445][T21567] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1955.144113][T21891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1955.432535][T21567] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1955.618839][T20069] Bluetooth: hci6: command tx timeout
[ 1955.837845][T21891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1956.220994][T20069] Bluetooth: hci7: command tx timeout
[ 1956.259226][T21884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1956.343745][T21875] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1956.343766][T21875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1956.343795][T21875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1956.436391][T21884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1956.544056][T21875] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1956.544076][T21875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1956.544104][T21875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1957.004958][T21891] team0: Port device team_slave_0 added
[ 1958.605107][T21891] team0: Port device team_slave_1 added
[ 1958.719899][T21884] team0: Port device team_slave_0 added
[ 1958.847253][T21884] team0: Port device team_slave_1 added
[ 1959.211855][T21891] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1959.211869][T21891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1959.211890][T21891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1959.369479][T21875] hsr_slave_0: entered promiscuous mode
[ 1959.376576][T21875] hsr_slave_1: entered promiscuous mode
[ 1959.377360][T21875] debugfs: 'hsr0' already exists in 'hsr'
[ 1959.377380][T21875] Cannot create hsr debugfs directory
[ 1959.378515][T21891] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1959.378527][T21891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1959.378548][T21891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1959.405340][T21884] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1959.405361][T21884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1959.405390][T21884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1959.523178][T22000] input: syz0 as /devices/virtual/input/input35
[ 1959.855067][T21884] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1959.855087][T21884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1959.855117][T21884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1960.499725][T21891] hsr_slave_0: entered promiscuous mode
[ 1960.506876][T21891] hsr_slave_1: entered promiscuous mode
[ 1960.507691][T21891] debugfs: 'hsr0' already exists in 'hsr'
[ 1960.507716][T21891] Cannot create hsr debugfs directory
[ 1960.608761][T21884] hsr_slave_0: entered promiscuous mode
[ 1960.609834][T21884] hsr_slave_1: entered promiscuous mode
[ 1960.623702][T21884] debugfs: 'hsr0' already exists in 'hsr'
[ 1960.623723][T21884] Cannot create hsr debugfs directory
[ 1961.564618][ T6010] bridge_slave_1: left allmulticast mode
[ 1961.564649][ T6010] bridge_slave_1: left promiscuous mode
[ 1961.564923][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1961.641875][ T6010] bridge_slave_0: left allmulticast mode
[ 1961.641901][ T6010] bridge_slave_0: left promiscuous mode
[ 1961.642112][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1961.705951][ T6010] bridge_slave_1: left allmulticast mode
[ 1961.705977][ T6010] bridge_slave_1: left promiscuous mode
[ 1961.706161][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1961.771774][ T6010] bridge_slave_0: left allmulticast mode
[ 1961.771799][ T6010] bridge_slave_0: left promiscuous mode
[ 1961.772017][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1961.864994][ T6010] bridge_slave_1: left allmulticast mode
[ 1961.865020][ T6010] bridge_slave_1: left promiscuous mode
[ 1961.865209][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1961.921793][ T6010] bridge_slave_0: left allmulticast mode
[ 1961.921818][ T6010] bridge_slave_0: left promiscuous mode
[ 1961.922027][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1962.292406][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1962.371296][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1962.453087][ T6010] bond0 (unregistering): Released all slaves
[ 1962.701547][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1962.791574][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1962.852848][ T6010] bond0 (unregistering): Released all slaves
[ 1963.291374][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1963.391239][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1963.473944][ T6010] bond0 (unregistering): Released all slaves
[ 1964.114870][T21567] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1964.180245][T21567] 8021q: adding VLAN 0 to HW filter on device team0
[ 1964.195213][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1964.195424][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1964.490832][ T6010] hsr_slave_0: left promiscuous mode
[ 1964.530748][ T6010] hsr_slave_1: left promiscuous mode
[ 1964.531660][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1964.571594][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1964.770888][ T6010] hsr_slave_0: left promiscuous mode
[ 1964.800773][ T6010] hsr_slave_1: left promiscuous mode
[ 1964.801717][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1964.831282][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1964.970568][ T6010] hsr_slave_0: left promiscuous mode
[ 1964.990941][ T6010] hsr_slave_1: left promiscuous mode
[ 1964.991891][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1965.043478][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1965.861190][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1966.061413][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1967.309655][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1967.394756][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1967.402060][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1967.428290][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1967.430612][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1967.811784][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1968.573121][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1969.500660][T20069] Bluetooth: hci2: command tx timeout
[ 1970.132251][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1970.331436][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1971.304988][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1971.305152][ T6619] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1971.629311][T20069] Bluetooth: hci2: command tx timeout
[ 1972.816468][T22021] chnl_net:caif_netlink_parms(): no params data found
[ 1973.492140][T22021] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1973.492302][T22021] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1973.492524][T22021] bridge_slave_0: entered allmulticast mode
[ 1973.494463][T22021] bridge_slave_0: entered promiscuous mode
[ 1973.497154][T22021] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1973.497300][T22021] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1973.497450][T22021] bridge_slave_1: entered allmulticast mode
[ 1973.499418][T22021] bridge_slave_1: entered promiscuous mode
[ 1973.662136][T20069] Bluetooth: hci2: command tx timeout
[ 1973.847005][T22021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1973.852317][T22021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1974.267978][T22021] team0: Port device team_slave_0 added
[ 1974.277437][T22021] team0: Port device team_slave_1 added
[ 1974.707277][T22021] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1974.707296][T22021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1974.707320][T22021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1974.709422][T22021] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1974.709436][T22021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1974.709457][T22021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1975.271020][T22021] hsr_slave_0: entered promiscuous mode
[ 1975.272519][T22021] hsr_slave_1: entered promiscuous mode
[ 1975.745077][T20069] Bluetooth: hci2: command tx timeout
[ 1976.388553][T12427] kworker/0:16 (12427) used greatest stack depth: 15768 bytes left
[ 1976.782547][T22078] comedi comedi0: pcl724: I/O port conflict (0x3,4)
[ 1977.165807][T22084] netlink: 'syz.0.5032': attribute type 9 has an invalid length.
[ 1977.402323][T21875] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1978.109344][T21875] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1978.532692][T21875] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1978.589015][T21875] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1978.826982][T21891] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1978.860611][T22107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5039'.
[ 1978.860638][T22107] netlink: 'syz.0.5039': attribute type 8 has an invalid length.
[ 1978.924375][T21891] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1978.976687][T21891] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1979.155439][T21891] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1979.427363][T21884] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1979.478464][T21884] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1979.520147][ T6010] bridge_slave_1: left allmulticast mode
[ 1979.520172][ T6010] bridge_slave_1: left promiscuous mode
[ 1979.521068][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1979.661920][ T6010] bridge_slave_0: left allmulticast mode
[ 1979.661946][ T6010] bridge_slave_0: left promiscuous mode
[ 1979.662160][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1979.793756][ T6010] bridge_slave_1: left allmulticast mode
[ 1979.793782][ T6010] bridge_slave_1: left promiscuous mode
[ 1979.793958][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1979.890715][ T6010] bridge_slave_0: left allmulticast mode
[ 1979.890750][ T6010] bridge_slave_0: left promiscuous mode
[ 1979.891022][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1981.505154][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1982.781897][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1982.883616][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1982.943402][ T6010] bond0 (unregistering): Released all slaves
[ 1983.213117][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1983.312986][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1983.373017][ T6010] bond0 (unregistering): Released all slaves
[ 1983.421898][T21884] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1983.625034][T21884] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1983.736874][T22151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5057'.
[ 1984.361533][T22170] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5063'.
[ 1984.390793][ T6010] hsr_slave_0: left promiscuous mode
[ 1984.430671][ T6010] hsr_slave_1: left promiscuous mode
[ 1984.431786][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1984.471393][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1984.630849][ T6010] hsr_slave_0: left promiscuous mode
[ 1984.670602][ T6010] hsr_slave_1: left promiscuous mode
[ 1984.671744][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1984.706383][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1985.581556][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1985.771954][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1989.052014][ T6010] team0 (unregistering): Port device team_slave_1 removed
[ 1989.235378][ T6010] team0 (unregistering): Port device team_slave_0 removed
[ 1990.195832][T21875] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1990.455641][T21875] 8021q: adding VLAN 0 to HW filter on device team0
[ 1990.512923][T21891] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1990.724869][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1990.725085][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1990.893360][T22183] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1990.973173][T20827] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1990.973411][T20827] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1991.076905][T21891] 8021q: adding VLAN 0 to HW filter on device team0
[ 1991.284571][T20827] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1991.284683][T20827] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1991.315783][T21884] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1991.338423][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1991.353972][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1991.356998][T22190] IPVS: length: 66 != 8
[ 1991.357740][T22021] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1991.412687][T22021] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1991.518294][T22021] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1991.567666][T22021] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1991.644642][T22196] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1991.771967][T21884] 8021q: adding VLAN 0 to HW filter on device team0
[ 1991.844661][T22204] unsupported nla_type 52263
[ 1991.899953][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1991.904192][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1991.998541][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1991.998759][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1992.580896][T20069] Bluetooth: hci1: unexpected subevent 0x10 length: 244 > 2
[ 1992.683397][T20069] Bluetooth: hci1: unexpected event for opcode 0x0c47
[ 1992.813228][T22021] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1992.824121][T21875] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1992.882710][T22021] 8021q: adding VLAN 0 to HW filter on device team0
[ 1992.925244][T20836] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1992.938580][T20836] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1992.998334][T20836] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1992.998516][T20836] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1993.085745][T21891] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1993.385132][T21891] veth0_vlan: entered promiscuous mode
[ 1993.423009][T21884] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1993.425890][T21891] veth1_vlan: entered promiscuous mode
[ 1993.971717][T21891] veth0_macvtap: entered promiscuous mode
[ 1994.181558][T21891] veth1_macvtap: entered promiscuous mode
[ 1994.419993][T21891] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1994.480506][T21891] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1994.524948][T21875] veth0_vlan: entered promiscuous mode
[ 1994.541622][ T4830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1994.545783][ T4830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1994.548235][ T4830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1994.578362][ T4830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1994.714809][T21875] veth1_vlan: entered promiscuous mode
[ 1994.749701][T22021] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1995.300268][T21875] veth0_macvtap: entered promiscuous mode
[ 1995.348445][T21875] veth1_macvtap: entered promiscuous mode
[ 1995.361617][T21884] veth0_vlan: entered promiscuous mode
[ 1995.367618][T20836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1995.367641][T20836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1995.457335][T21884] veth1_vlan: entered promiscuous mode
[ 1995.514307][T21875] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1995.547857][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1995.547879][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1995.573564][T21875] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1995.619092][ T2232] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1995.623319][ T2232] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1995.639172][ T2232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1995.650087][ T2232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1995.816558][T21884] veth0_macvtap: entered promiscuous mode
[ 1995.977742][T21884] veth1_macvtap: entered promiscuous mode
[ 1996.102531][ T6010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1996.102553][ T6010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1996.160815][T21884] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1996.224715][T21884] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1996.254272][T22271] ªªªªª»: renamed from hsr0 (while UP)
[ 1996.284345][T22021] veth0_vlan: entered promiscuous mode
[ 1996.286536][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1996.286559][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1996.318623][ T6619] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1996.326408][ T6619] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1996.328202][ T6619] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1996.328314][ T6619] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1996.365378][T22021] veth1_vlan: entered promiscuous mode
[ 1996.748293][T22021] veth0_macvtap: entered promiscuous mode
[ 1996.776012][T22021] veth1_macvtap: entered promiscuous mode
[ 1996.988615][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1996.988648][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1997.057534][T22021] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1997.139633][T22021] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1997.186544][T22289] tmpfs: Bad value for 'mpol'
[ 1997.197711][ T6619] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1997.197839][ T6619] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1997.197900][ T6619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1997.197916][ T6619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1997.198174][ T6619] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1997.243271][ T6619] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1997.987423][T21197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1997.988645][T21197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1998.933627][ T5961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1998.933652][ T5961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1999.067094][T22314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5105'.
[ 1999.226389][T22312] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1999.711261][ T6256] usb 8-1: new full-speed USB device number 35 using dummy_hcd
[ 1999.766082][T22335] vlan0: entered promiscuous mode
[ 1999.872437][ T6256] usb 8-1: config 0 has an invalid interface number: 41 but max is 0
[ 1999.872559][ T6256] usb 8-1: config 0 has no interface number 0
[ 1999.872617][ T6256] usb 8-1: config 0 interface 41 has no altsetting 0
[ 1999.875475][ T6256] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1999.875504][ T6256] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1999.875524][ T6256] usb 8-1: Product: syz
[ 1999.875538][ T6256] usb 8-1: Manufacturer: syz
[ 1999.875554][ T6256] usb 8-1: SerialNumber: syz
[ 1999.962524][ T6256] usb 8-1: config 0 descriptor??
[ 2000.797266][ T6256] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 2000.863244][ T5975] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 2001.041909][ T5975] usb 6-1: Using ep0 maxpacket: 32
[ 2001.045480][ T5975] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2001.045590][ T5975] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2001.045630][ T5975] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00
[ 2001.045654][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2001.100213][ T5975] usb 6-1: config 0 descriptor??
[ 2001.200149][ T6256] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 2001.200183][ T6256] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 2001.200859][ T6256] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71
[ 2001.215749][ T6256] usb 8-1: USB disconnect, device number 35
[ 2001.588722][T22390] digital: digital_start_poll: Unknown protocol
[ 2001.755047][ T5975] usb 6-1: string descriptor 0 read error: -71
[ 2001.766764][ T5975] uclogic 0003:5543:006E.0026: failed retrieving string descriptor #200: -71
[ 2001.766833][ T5975] uclogic 0003:5543:006E.0026: failed retrieving pen parameters: -71
[ 2001.766851][ T5975] uclogic 0003:5543:006E.0026: failed probing pen v2 parameters: -71
[ 2001.766907][ T5975] uclogic 0003:5543:006E.0026: failed probing parameters: -71
[ 2001.767127][ T5975] uclogic 0003:5543:006E.0026: probe with driver uclogic failed with error -71
[ 2001.831409][ T5975] usb 6-1: USB disconnect, device number 2
[ 2002.104016][T22399] block device autoloading is deprecated and will be removed.
[ 2002.330649][T22411] netlink: 'syz.2.5152': attribute type 49 has an invalid length.
[ 2002.690507][ T5943] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 2002.745477][T22430] bridge0: port 3(ipvlan2) entered blocking state
[ 2002.760548][T22430] bridge0: port 3(ipvlan2) entered disabled state
[ 2002.760825][T22430] ipvlan2: entered allmulticast mode
[ 2002.760843][T22430] bridge0: entered allmulticast mode
[ 2002.775376][T22430] ipvlan2: left allmulticast mode
[ 2002.775445][T22430] bridge0: left allmulticast mode
[ 2002.840425][ T5943] usb 6-1: Using ep0 maxpacket: 16
[ 2002.843029][ T5943] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2002.843087][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2002.843116][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2002.843138][ T5943] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2002.843162][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2002.844631][ T5943] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2002.844659][ T5943] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2002.844680][ T5943] usb 6-1: Manufacturer: syz
[ 2002.853978][ T5943] usb 6-1: config 0 descriptor??
[ 2002.985112][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5163'.
[ 2003.170422][ T5943] rc_core: IR keymap rc-hauppauge not found
[ 2003.170462][ T5943] Registered IR keymap rc-empty
[ 2003.171186][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.200618][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.221949][ T5943] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2003.225178][ T5943] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38
[ 2003.270753][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.300651][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.320842][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.340637][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.360627][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.390693][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.410591][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.431298][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.460628][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.480860][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2003.622331][ T5943] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2003.622360][ T5943] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2004.323372][ T5943] usb 6-1: USB disconnect, device number 3
[ 2006.185431][T22487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5184'.
[ 2007.390597][ T6256] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[ 2007.588010][ T6256] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2007.588044][ T6256] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2007.613433][ T6256] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2007.613465][ T6256] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2007.613486][ T6256] usb 3-1: Product: syz
[ 2007.613500][ T6256] usb 3-1: Manufacturer: syz
[ 2007.613515][ T6256] usb 3-1: SerialNumber: syz
[ 2008.587387][ T6256] usb 3-1: config 0 descriptor??
[ 2008.714787][ T6256] usb 3-1: selecting invalid altsetting 0
[ 2009.042376][T11569] usb 3-1: USB disconnect, device number 4
[ 2009.620509][T11569] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 2009.810557][T11569] usb 6-1: Using ep0 maxpacket: 16
[ 2009.812880][T11569] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2009.812916][T11569] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 2009.812947][T11569] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2009.813098][T11569] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[ 2009.813123][T11569] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2009.819228][T11569] usb 6-1: config 0 descriptor??
[ 2009.820281][T22529] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2010.273410][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.273452][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.273496][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.273524][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.273552][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.273580][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.273609][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.273636][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.273664][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.273692][T11569] cougar 0003:060B:500A.0027: unknown main item tag 0x0
[ 2010.318105][   T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 2010.400140][T11569] cougar 0003:060B:500A.0027: hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.5-1/input0
[ 2010.500965][ T5887] usb 6-1: USB disconnect, device number 4
[ 2010.510506][   T31] usb 3-1: Using ep0 maxpacket: 32
[ 2010.523057][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2010.523092][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2010.523134][   T31] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 2010.523158][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2010.526949][   T31] usb 3-1: config 0 descriptor??
[ 2010.583034][T22549] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5210'.
[ 2010.583064][T22549] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5210'.
[ 2010.583083][T22549] netlink: 'syz.7.5210': attribute type 5 has an invalid length.
[ 2010.583097][T22549] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5210'.
[ 2012.451379][   T31] ft260 0003:0403:6030.0028: failed to retrieve chip version
[ 2012.451898][   T31] ft260 0003:0403:6030.0028: probe with driver ft260 failed with error -71
[ 2012.654741][   T31] usb 3-1: USB disconnect, device number 5
[ 2014.565038][T22604] netlink: 232 bytes leftover after parsing attributes in process `syz.6.5232'.
[ 2014.565073][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5232'.
[ 2014.650089][T22606] bond0: option miimon: invalid value (18446744073707978753)
[ 2014.650119][T22606] bond0: option miimon: allowed values 0 - 2147483647
[ 2014.962169][T22612] netlink: 67 bytes leftover after parsing attributes in process `syz.5.5236'.
[ 2015.131690][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5237'.
[ 2015.159877][T22617] batadv0: entered promiscuous mode
[ 2015.173494][T22617] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 2015.350925][T18039] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[ 2015.408234][T22628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5244'.
[ 2015.530527][T10221] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 2015.680505][T18039] usb 8-1: Using ep0 maxpacket: 32
[ 2015.682774][T18039] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2015.682809][T18039] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2015.684808][T18039] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2015.684838][T18039] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 2015.684861][T18039] usb 8-1: Product: syz
[ 2015.684877][T18039] usb 8-1: Manufacturer: syz
[ 2015.716883][T18039] hub 8-1:4.0: USB hub found
[ 2015.752169][T10221] usb 3-1: Using ep0 maxpacket: 8
[ 2015.801954][T10221] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[ 2015.801988][T10221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2015.802011][T10221] usb 3-1: Product: syz
[ 2015.802027][T10221] usb 3-1: Manufacturer: syz
[ 2015.802042][T10221] usb 3-1: SerialNumber: syz
[ 2015.848588][T10221] usb 3-1: config 0 descriptor??
[ 2016.011967][T18039] hub 8-1:4.0: 1 port detected
[ 2016.144210][T10221] gspca_main: sunplus-2.14.0 probing 04a5:3003
[ 2016.214917][T18039] hub 8-1:4.0: hub_hub_status failed (err = -71)
[ 2016.214946][T18039] hub 8-1:4.0: config failed, can't get hub status (err -71)
[ 2016.272656][T18039] usb 8-1: USB disconnect, device number 36
[ 2016.631218][T10221] gspca_sunplus: reg_w_riv err -71
[ 2016.631333][T10221] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 2016.634442][T10221] usb 3-1: USB disconnect, device number 6
[ 2019.167779][ T5975] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 2019.560406][ T5975] usb 6-1: Using ep0 maxpacket: 16
[ 2019.562862][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2019.562895][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2019.562919][ T5975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2019.562963][ T5975] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2019.562988][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2019.568449][ T5975] usb 6-1: config 0 descriptor??
[ 2020.001730][ T5975] hid_parser_main: 1262 callbacks suppressed
[ 2020.001757][ T5975] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[ 2020.001788][ T5975] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max
[ 2020.047528][ T5975] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0029/input/input39
[ 2020.176063][ T5975] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[ 2020.211648][ T5975] usb 6-1: USB disconnect, device number 5
[ 2020.370536][T22294] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 2020.526119][T22294] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 2020.526153][T22294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2020.530041][T22294] usb 3-1: config 0 descriptor??
[ 2020.567844][T22294] gspca_main: spca508-2.14.0 probing 8086:0110
[ 2020.572095][T22296] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[ 2020.730568][T22296] usb 8-1: Using ep0 maxpacket: 32
[ 2020.732965][T22296] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 2020.733069][T22296] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 2020.733088][T22296] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2020.733107][T22296] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 2020.736966][T22296] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 2020.737054][T22296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2020.737080][T22296] usb 8-1: Product: syz
[ 2020.737090][T22296] usb 8-1: Manufacturer: syz
[ 2020.737100][T22296] usb 8-1: SerialNumber: syz
[ 2020.842595][T22294] gspca_spca508: reg_read err -32
[ 2020.846230][    C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 2020.922487][T22296] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input40
[ 2021.048034][T22294] gspca_spca508: reg_read err -71
[ 2021.048454][T22294] gspca_spca508: reg_read err -71
[ 2021.048855][T22294] gspca_spca508: reg_read err -71
[ 2021.049249][T22294] gspca_spca508: reg write: error -71
[ 2021.049342][T22294] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[ 2021.071432][T22294] usb 3-1: USB disconnect, device number 7
[ 2021.084245][T22296] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 2021.084265][T22296]  (id 0x00)
[ 2021.200874][T22296] rc_core: IR keymap rc-imon-pad not found
[ 2021.200897][T22296] Registered IR keymap rc-empty
[ 2021.200999][T22296] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 2021.201019][T22296] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 2021.285169][T22296] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[ 2021.288662][T22296] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input41
[ 2021.329850][T22296] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:37> initialized
[ 2021.702459][ T5975] usb 8-1: USB disconnect, device number 37
[ 2024.490565][T22296] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 2024.653621][T22296] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[ 2024.653664][T22296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2024.659004][T22296] usb 7-1: config 0 descriptor??
[ 2024.672979][T22296] gspca_main: sunplus-2.14.0 probing 055f:c420
[ 2024.873098][T22296] gspca_sunplus: reg_w_riv err -71
[ 2024.873208][T22296] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[ 2024.901117][T22296] usb 7-1: USB disconnect, device number 6
[ 2026.998980][T22783] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5313'.
[ 2027.023513][T22782] pim6reg: entered allmulticast mode
[ 2030.286218][ T5944] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[ 2030.436008][ T5944] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 2030.436039][ T5944] usb 3-1: config 0 has no interface number 0
[ 2030.436090][ T5944] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 2030.436114][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2030.473908][ T5944] usb 3-1: config 0 descriptor??
[ 2030.490143][ T5944] usb 3-1: selecting invalid altsetting 1
[ 2030.500822][ T5944] dvb_ttusb_budget: ttusb_init_controller: error
[ 2030.500844][ T5944] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 2030.578418][ T5944] DVB: Unable to find symbol cx22700_attach()
[ 2030.698862][ T5944] DVB: Unable to find symbol tda10046_attach()
[ 2030.698882][ T5944] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 2030.866015][T22866] sctp: [Deprecated]: syz.5.5349 (pid 22866) Use of int in max_burst socket option.
[ 2030.866015][T22866] Use struct sctp_assoc_value instead
[ 2031.880888][ T5944] usb 3-1: USB disconnect, device number 8
[ 2032.220710][ T6592] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[ 2032.269821][T22879] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5354'.
[ 2032.269860][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5354'.
[ 2032.290439][ T5944] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 2032.370402][ T6592] usb 8-1: Using ep0 maxpacket: 16
[ 2032.379208][ T6592] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 2032.379243][ T6592] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2032.379265][ T6592] usb 8-1: Product: syz
[ 2032.379280][ T6592] usb 8-1: Manufacturer: syz
[ 2032.379295][ T6592] usb 8-1: SerialNumber: syz
[ 2032.431788][ T6592] r8152-cfgselector 8-1: Unknown version 0x0000
[ 2032.431818][ T6592] r8152-cfgselector 8-1: config 0 descriptor??
[ 2032.457480][ T5944] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2032.457572][ T5944] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2032.457623][ T5944] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2032.457647][ T5944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2032.515587][T22874] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 2032.556599][ T5944] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 2032.858282][T22294] r8152-cfgselector 8-1: USB disconnect, device number 38
[ 2032.960482][ T5944] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 2033.007447][T22898] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[ 2033.007479][T22898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2033.077290][T22898] vhci_hcd vhci_hcd.0: Device attached
[ 2033.131951][ T5944] usb 3-1: Using ep0 maxpacket: 16
[ 2033.164356][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2033.164392][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2033.164428][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2033.164480][ T5944] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2033.164506][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2033.170211][ T5944] usb 3-1: config 0 descriptor??
[ 2033.372025][T22296] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[ 2033.372156][T18039] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 2033.467089][ T6592] usb 7-1: USB disconnect, device number 7
[ 2033.528146][T18039] usb 6-1: config 0 has no interfaces?
[ 2033.528188][T18039] usb 6-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[ 2033.528269][T18039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2033.593509][T18039] usb 6-1: config 0 descriptor??
[ 2033.669813][ T5944] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0
[ 2033.669853][ T5944] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max
[ 2033.704929][ T5944] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002A/input/input42
[ 2033.776137][ T5944] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 2033.823257][T22899] vhci_hcd: cannot find a urb of seqnum 665751872 max seqnum 1
[ 2033.839176][ T6256] usb 6-1: USB disconnect, device number 6
[ 2033.864604][ T5961] vhci_hcd vhci_hcd.5: stop threads
[ 2033.867580][ T5961] vhci_hcd vhci_hcd.5: release socket
[ 2033.907247][ T5961] vhci_hcd vhci_hcd.5: disconnect device
[ 2033.942502][T22294] usb 3-1: USB disconnect, device number 9
[ 2034.019568][T22920] fuse: Bad value for 'user_id'
[ 2034.019591][T22920] fuse: Bad value for 'user_id'
[ 2034.343138][ T6101] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2034.348049][ T6101] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2034.348102][ T6101] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2034.348142][ T6101] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2034.940661][ T5944] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 2035.207704][ T5944] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2035.207778][ T5944] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2035.207855][ T5944] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2035.207913][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2035.344268][T22949] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2035.623142][ T5944] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 2037.933961][ T5944] usb 6-1: USB disconnect, device number 7
[ 2039.116174][T22296] vhci_hcd vhci_hcd.5: vhci_device speed not set
[ 2039.359037][T22983] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 2039.402392][T22983] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2039.475074][T22983] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2039.640541][T11569] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[ 2039.790501][T11569] usb 8-1: Using ep0 maxpacket: 16
[ 2039.793010][T11569] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2039.793044][T11569] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2039.793068][T11569] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2039.793113][T11569] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2039.793137][T11569] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2039.798595][T11569] usb 8-1: config 0 descriptor??
[ 2040.053706][ T5944] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 2040.203341][ T5944] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2040.203381][ T5944] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2040.203424][ T5944] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2040.203450][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2040.253322][T22989] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2040.267735][ T5944] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 2040.375022][T11569] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[ 2040.385439][T11569] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max
[ 2040.473084][T11569] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.002B/input/input43
[ 2042.589828][T11569] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[ 2042.895756][T11569] usb 8-1: USB disconnect, device number 39
[ 2042.947001][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 2043.050596][   T31] usb 3-1: USB disconnect, device number 10
[ 2043.096743][T23017] tipc: Enabled bearer <eth:geneve1>, priority 4
[ 2045.425188][   T31] tipc: Node number set to 2147483648
[ 2046.080458][ T9424] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[ 2046.230441][ T9424] usb 8-1: Using ep0 maxpacket: 32
[ 2046.233090][ T9424] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2046.233153][ T9424] usb 8-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[ 2046.233178][ T9424] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2046.246551][ T9424] usb 8-1: config 0 descriptor??
[ 2046.301615][ T9424] dvb-usb: found a 'TeVii S662' in warm state.
[ 2046.301667][ T9424] dw2102: su3000_power_ctrl: 1, initialized 0
[ 2046.301690][ T9424] dvb-usb: bulk message failed: -22 (2/0)
[ 2046.309064][ T9424] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2046.316497][ T9424] dvbdev: DVB: registering new adapter (TeVii S662)
[ 2046.316684][ T9424] usb 8-1: media controller created
[ 2046.316778][ T9424] dvb-usb: bulk message failed: -22 (6/0)
[ 2046.316821][ T9424] dw2102: i2c transfer failed.
[ 2046.319481][ T9424] dvb-usb: bulk message failed: -22 (6/0)
[ 2046.348562][ T9424] dw2102: i2c transfer failed.
[ 2046.348648][ T9424] dvb-usb: bulk message failed: -22 (6/0)
[ 2046.348692][ T9424] dw2102: i2c transfer failed.
[ 2046.348735][ T9424] dvb-usb: bulk message failed: -22 (6/0)
[ 2046.349007][ T9424] dw2102: i2c transfer failed.
[ 2046.349102][ T9424] dvb-usb: bulk message failed: -22 (6/0)
[ 2046.349156][ T9424] dw2102: i2c transfer failed.
[ 2046.349187][ T9424] dvb-usb: bulk message failed: -22 (6/0)
[ 2046.349231][ T9424] dw2102: i2c transfer failed.
[ 2046.349264][ T9424] dvb-usb: MAC address: 02:02:02:02:02:02
[ 2046.440238][T23068] sctp: [Deprecated]: syz.6.5436 (pid 23068) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2046.440238][T23068] Use struct sctp_sack_info instead
[ 2046.493693][T23053] dvb-usb: bulk message failed: -22 (7/0)
[ 2046.493716][T23053] dw2102: i2c transfer failed.
[ 2046.505895][ T9424] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2046.566020][T23070] tipc: Started in network mode
[ 2046.566040][T23070] tipc: Node identity , cluster identity 4711
[ 2046.566056][T23070] tipc: Failed to obtain node identity
[ 2046.566083][T23070] tipc: Enabling of bearer <eth:wg0> rejected, failed to enable media
[ 2046.577422][ T9424] dvb-usb: bulk message failed: -22 (3/0)
[ 2046.577476][ T9424] dw2102: command 0x0e transfer failed.
[ 2046.577508][ T9424] dvb-usb: bulk message failed: -22 (3/0)
[ 2046.577556][ T9424] dw2102: command 0x0e transfer failed.
[ 2046.882024][ T9424] dvb-usb: bulk message failed: -22 (3/0)
[ 2046.882052][ T9424] dw2102: command 0x0e transfer failed.
[ 2046.882063][ T9424] dvb-usb: bulk message failed: -22 (3/0)
[ 2046.882078][ T9424] dw2102: command 0x0e transfer failed.
[ 2046.882088][ T9424] dvb-usb: bulk message failed: -22 (1/0)
[ 2046.882102][ T9424] dw2102: command 0x51 transfer failed.
[ 2046.882113][ T9424] dvb-usb: bulk message failed: -22 (5/0)
[ 2046.882127][ T9424] dw2102: i2c probe for address 0x68 failed.
[ 2046.882140][ T9424] dvb-usb: bulk message failed: -22 (5/0)
[ 2046.882154][ T9424] dw2102: i2c probe for address 0x69 failed.
[ 2046.882166][ T9424] dvb-usb: bulk message failed: -22 (5/0)
[ 2046.882180][ T9424] dw2102: i2c probe for address 0x6a failed.
[ 2046.882192][ T9424] dw2102: probing for demodulator failed. Is the external power switched on?
[ 2046.882204][ T9424] dvb-usb: no frontend was attached by 'TeVii S662'
[ 2046.951002][   T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 2047.100494][ T9424] rc_core: IR keymap rc-tt-1500 not found
[ 2047.100517][ T9424] Registered IR keymap rc-empty
[ 2047.103401][ T9424] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[ 2047.106369][ T9424] input: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input44
[ 2047.117217][   T31] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 2047.117249][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2047.164928][ T9424] dvb-usb: schedule remote query interval to 250 msecs.
[ 2047.164951][ T9424] dw2102: su3000_power_ctrl: 0, initialized 1
[ 2047.164965][ T9424] dvb-usb: TeVii S662 successfully initialized and connected.
[ 2047.165754][   T31] usb 7-1: config 0 descriptor??
[ 2047.187983][ T9424] usb 8-1: USB disconnect, device number 40
[ 2047.218053][   T31] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 2047.379337][ T9424] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[ 2047.490554][   T44] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[ 2047.644626][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2047.644740][   T44] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[ 2047.644766][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2047.685248][   T44] usb 6-1: config 0 descriptor??
[ 2047.811189][   T31] gspca_cpia1: usb_control_msg 01, error -71
[ 2047.811213][   T31] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[ 2047.817586][   T31] usb 7-1: USB disconnect, device number 8
[ 2048.110175][   T44] kye 0003:0458:5016.002C: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 2048.111598][   T44] kye 0003:0458:5016.002C: item fetching failed at offset 2/5
[ 2048.112177][   T44] kye 0003:0458:5016.002C: parse failed
[ 2048.112232][   T44] kye 0003:0458:5016.002C: probe with driver kye failed with error -22
[ 2048.172651][T23107] tipc: Started in network mode
[ 2048.172677][T23107] tipc: Node identity 00000000000000000000ffff, cluster identity 4711
[ 2048.172723][T23107] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 2048.306245][   T44] usb 6-1: USB disconnect, device number 8
[ 2048.650471][T22296] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 2048.800510][T22296] usb 7-1: Using ep0 maxpacket: 8
[ 2048.802613][T22296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2048.802685][T22296] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 2048.802710][T22296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2048.806558][T22296] usb 7-1: config 0 descriptor??
[ 2049.171074][   T44] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 2049.233516][T22296] kone 0003:1E7D:2CED.002D: item fetching failed at offset 0/2
[ 2049.234328][T22296] kone 0003:1E7D:2CED.002D: parse failed
[ 2049.234408][T22296] kone 0003:1E7D:2CED.002D: probe with driver kone failed with error -22
[ 2049.324468][   T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2049.324500][   T44] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2049.324526][   T44] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2049.375990][   T44] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2049.376022][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2049.376044][   T44] usb 6-1: Product: syz
[ 2049.376058][   T44] usb 6-1: Manufacturer: syz
[ 2049.376071][   T44] usb 6-1: SerialNumber: syz
[ 2049.418382][   T44] hub 6-1:1.0: bad descriptor, ignoring hub
[ 2049.418424][   T44] hub 6-1:1.0: probe with driver hub failed with error -5
[ 2049.471211][T22296] usb 7-1: USB disconnect, device number 9
[ 2049.654099][   T44] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 2049.719250][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.719299][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.719328][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.719355][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.719383][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.719412][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.719440][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.719468][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.719496][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.719525][   T44] hid-generic 0000:0000:0004.002E: unknown main item tag 0x0
[ 2049.813680][   T44] hid-generic 0000:0000:0004.002E: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[ 2049.970901][ T9424] usb 6-1: USB disconnect, device number 9
[ 2049.977222][ T9424] usblp0: removed
[ 2050.169633][   T37] audit: type=1326 audit(1767008214.198:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.2.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245f4ff749 code=0x7ffc0000
[ 2050.200380][   T37] audit: type=1326 audit(1767008214.228:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.2.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245f4ff749 code=0x7ffc0000
[ 2050.201690][   T37] audit: type=1326 audit(1767008214.238:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.2.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f245f4ff749 code=0x7ffc0000
[ 2050.202588][   T37] audit: type=1326 audit(1767008214.238:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.2.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245f4ff749 code=0x7ffc0000
[ 2050.202640][   T37] audit: type=1326 audit(1767008214.238:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.2.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245f4ff749 code=0x7ffc0000
[ 2050.202688][   T37] audit: type=1326 audit(1767008214.238:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.2.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f245f4ff749 code=0x7ffc0000
[ 2050.202739][   T37] audit: type=1326 audit(1767008214.238:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.2.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245f4ff749 code=0x7ffc0000
[ 2052.770524][T23173] mkiss: ax0: crc mode is auto.
[ 2053.398289][T23187] x_tables: ip6_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 168
[ 2054.897030][T23197] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5493'.
[ 2058.081088][ T5944] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 2058.233431][ T5944] usb 6-1: Using ep0 maxpacket: 32
[ 2058.235949][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2058.235998][ T5944] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[ 2058.236022][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2058.298067][ T5944] usb 6-1: config 0 descriptor??
[ 2060.211692][ T5944] magicmouse 0003:05AC:0265.002F: item fetching failed at offset 2/5
[ 2060.212554][ T5944] magicmouse 0003:05AC:0265.002F: magicmouse hid parse failed
[ 2060.214902][T23281] overlayfs: overlapping lowerdir path
[ 2060.244771][ T5944] magicmouse 0003:05AC:0265.002F: probe with driver magicmouse failed with error -22
[ 2060.261534][ T5944] usb 6-1: USB disconnect, device number 10
[ 2062.390799][T22278] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 2062.500987][T18039] usb 8-1: new full-speed USB device number 41 using dummy_hcd
[ 2062.550511][T22278] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2062.550555][T22278] usb 6-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00
[ 2062.550579][T22278] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2062.557981][T22278] usb 6-1: config 0 descriptor??
[ 2062.656955][T18039] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 2062.656990][T18039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2062.657012][T18039] usb 8-1: Product: syz
[ 2062.657027][T18039] usb 8-1: Manufacturer: syz
[ 2062.657042][T18039] usb 8-1: SerialNumber: syz
[ 2062.701424][T18039] usb 8-1: config 0 descriptor??
[ 2062.791548][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5542'.
[ 2062.988269][T22278] hid_parser_main: 91 callbacks suppressed
[ 2062.988295][T22278] magicmouse 0003:05AC:0323.0030: unknown main item tag 0x0
[ 2062.988327][T22278] magicmouse 0003:05AC:0323.0030: unknown main item tag 0x0
[ 2062.988359][T22278] magicmouse 0003:05AC:0323.0030: unknown main item tag 0x0
[ 2063.033363][T22278] magicmouse 0003:05AC:0323.0030: hidraw0: USB HID v0.fd Device [HID 05ac:0323] on usb-dummy_hcd.5-1/input0
[ 2063.209925][ T5944] usb 6-1: USB disconnect, device number 11
[ 2063.225207][T18039] airspy 8-1:0.0: Board ID: 00
[ 2063.225230][T18039] airspy 8-1:0.0: Firmware version: 
[ 2063.431287][T18039] airspy 8-1:0.0: usb_control_msg() failed -71 request 11
[ 2063.451434][T18039] airspy 8-1:0.0: Registered as swradio24
[ 2063.451465][T18039] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 2063.454425][T18039] usb 8-1: USB disconnect, device number 41
[ 2064.048465][T23316] netlink: 'syz.2.5549': attribute type 2 has an invalid length.
[ 2064.139749][T23320] IPVS: Error connecting to the multicast addr
[ 2064.936818][T23358] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 2065.484178][T23371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'.
[ 2065.740112][T23377] sctp: [Deprecated]: syz.2.5576 (pid 23377) Use of int in maxseg socket option.
[ 2065.740112][T23377] Use struct sctp_assoc_value instead
[ 2067.184201][T23390] autofs: Unknown parameter '00000000000000000000'
[ 2068.469494][T18039] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 2068.644591][T18039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2068.644630][T18039] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2068.644675][T18039] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[ 2068.644700][T18039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2068.650096][T18039] usb 3-1: config 0 descriptor??
[ 2069.112276][T18039] waltop 0003:172F:0500.0031: unknown main item tag 0x0
[ 2069.112314][T18039] waltop 0003:172F:0500.0031: unknown main item tag 0x0
[ 2069.112344][T18039] waltop 0003:172F:0500.0031: unknown main item tag 0x0
[ 2069.112372][T18039] waltop 0003:172F:0500.0031: unknown main item tag 0x0
[ 2069.112399][T18039] waltop 0003:172F:0500.0031: unknown main item tag 0x0
[ 2069.112427][T18039] waltop 0003:172F:0500.0031: unknown main item tag 0x0
[ 2069.112456][T18039] waltop 0003:172F:0500.0031: unknown main item tag 0x0
[ 2069.126677][T18039] waltop 0003:172F:0500.0031: hidraw0: USB HID v0.00 Device [HID 172f:0500] on usb-dummy_hcd.2-1/input0
[ 2070.484078][T22975] usb 3-1: USB disconnect, device number 11
[ 2070.629224][T23419] Bluetooth: hci7: command 0x0406 tx timeout
[ 2070.629296][T23418] Bluetooth: hci0: command 0x0406 tx timeout
[ 2070.629330][T23418] Bluetooth: hci6: command 0x0406 tx timeout
[ 2070.650549][T18039] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[ 2070.903129][T23446] overlayfs: overlapping lowerdir path
[ 2070.930991][T18039] usb 8-1: Using ep0 maxpacket: 16
[ 2070.946671][T18039] usb 8-1: config 0 interface 0 has no altsetting 0
[ 2070.946712][T18039] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.0c
[ 2070.946736][T18039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2071.028583][T18039] usb 8-1: config 0 descriptor??
[ 2071.479679][T18039] hid (null): invalid report_size -625471215
[ 2071.479706][T18039] hid (null): unknown global tag 0x45
[ 2071.520189][T18039] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0032/input/input45
[ 2071.732654][T18039] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0032/input/input46
[ 2071.844527][T18039] kye 0003:0458:5013.0032: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0
[ 2071.875973][T18039] usb 8-1: USB disconnect, device number 42
[ 2075.454416][T23497] program syz.0.5627 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2076.130528][ T5944] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 2076.283428][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2076.283467][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2076.283508][ T5944] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[ 2076.283533][ T5944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2076.301659][ T5944] usb 7-1: config 0 descriptor??
[ 2076.761417][ T5944] playstation 0003:054C:0BA0.0033: unknown main item tag 0x0
[ 2076.812992][ T5944] playstation 0003:054C:0BA0.0033: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.6-1/input0
[ 2076.962182][ T5944] playstation 0003:054C:0BA0.0033: Invalid byte count transferred, expected 16 got 0
[ 2076.962215][ T5944] playstation 0003:054C:0BA0.0033: Failed to retrieve DualShock4 pairing info: -22
[ 2076.962277][ T5944] playstation 0003:054C:0BA0.0033: Failed to get MAC address from DualShock4
[ 2076.962294][ T5944] playstation 0003:054C:0BA0.0033: Failed to create dualshock4.
[ 2076.965226][ T5944] playstation 0003:054C:0BA0.0033: probe with driver playstation failed with error -22
[ 2077.183871][T18039] usb 7-1: USB disconnect, device number 10
[ 2077.335356][T23549] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5649'.
[ 2077.611214][T23559] bond0: option packets_per_slave: invalid value (18446744072268814746)
[ 2077.611247][T23559] bond0: option packets_per_slave: allowed values 0 - 65535
[ 2077.842627][T23563] team0: entered promiscuous mode
[ 2077.842652][T23563] team_slave_0: entered promiscuous mode
[ 2077.842899][T23563] team_slave_1: entered promiscuous mode
[ 2077.846624][T23563] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[ 2077.886225][T23563] hsr1: entered allmulticast mode
[ 2077.886251][T23563] team0: entered allmulticast mode
[ 2077.886265][T23563] team_slave_0: entered allmulticast mode
[ 2077.886285][T23563] team_slave_1: entered allmulticast mode
[ 2077.886332][T23563] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[ 2081.976348][T22296] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 2082.128388][T22296] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2082.128420][T22296] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2082.128445][T22296] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2082.141008][T22296] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2082.141078][T22296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2082.141099][T22296] usb 7-1: Product: syz
[ 2082.141123][T22296] usb 7-1: Manufacturer: syz
[ 2082.141175][T22296] usb 7-1: SerialNumber: syz
[ 2082.230524][T22296] hub 7-1:1.0: bad descriptor, ignoring hub
[ 2082.230571][T22296] hub 7-1:1.0: probe with driver hub failed with error -5
[ 2082.342252][   T37] audit: type=1326 audit(1767008246.378:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23646 comm="syz.5.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4495ef749 code=0x7ffc0000
[ 2082.345148][   T37] audit: type=1326 audit(1767008246.378:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23646 comm="syz.5.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4495ef749 code=0x7ffc0000
[ 2082.345909][   T37] audit: type=1326 audit(1767008246.378:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23646 comm="syz.5.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd4495ef749 code=0x7ffc0000
[ 2082.346334][   T37] audit: type=1326 audit(1767008246.378:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23646 comm="syz.5.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4495ef749 code=0x7ffc0000
[ 2082.346384][   T37] audit: type=1326 audit(1767008246.378:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23646 comm="syz.5.5690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4495ef749 code=0x7ffc0000
[ 2082.500677][T22296] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 2082.801499][ T5944] usb 7-1: USB disconnect, device number 11
[ 2082.806515][ T5944] usblp0: removed
[ 2083.837050][T23694] overlayfs: overlapping lowerdir path
[ 2083.950609][T22296] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 2084.051108][ T5944] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 2084.114443][T22296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2084.114480][T22296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2084.114519][T22296] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[ 2084.114543][T22296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2084.137766][T22296] usb 3-1: config 0 descriptor??
[ 2084.212639][ T5944] usb 6-1: Using ep0 maxpacket: 16
[ 2084.215211][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2084.215252][ T5944] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.0c
[ 2084.215277][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2084.252833][ T5944] usb 6-1: config 0 descriptor??
[ 2084.565635][T22296] playstation 0003:054C:0BA0.0034: unknown main item tag 0x0
[ 2084.600836][T22296] playstation 0003:054C:0BA0.0034: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0
[ 2084.735366][ T5944] hid (null): invalid report_size -625471215
[ 2084.735405][ T5944] hid (null): unknown global tag 0x45
[ 2084.759930][T22296] playstation 0003:054C:0BA0.0034: Invalid reportID received, expected 18 got 146
[ 2084.759959][T22296] playstation 0003:054C:0BA0.0034: Failed to retrieve DualShock4 pairing info: -22
[ 2084.760010][T22296] playstation 0003:054C:0BA0.0034: Failed to get MAC address from DualShock4
[ 2084.760026][T22296] playstation 0003:054C:0BA0.0034: Failed to create dualshock4.
[ 2084.772377][T22296] playstation 0003:054C:0BA0.0034: probe with driver playstation failed with error -22
[ 2084.813223][ T5944] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0035/input/input47
[ 2084.843145][ T5944] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0035/input/input48
[ 2084.890533][T10221] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[ 2084.951675][ T5944] kye 0003:0458:5013.0035: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0
[ 2084.956686][ T5944] usb 6-1: USB disconnect, device number 12
[ 2084.979727][T22296] usb 3-1: USB disconnect, device number 12
[ 2085.047570][T10221] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 2085.047602][T10221] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2085.047623][T10221] usb 8-1: Product: syz
[ 2085.047637][T10221] usb 8-1: Manufacturer: syz
[ 2085.047653][T10221] usb 8-1: SerialNumber: syz
[ 2085.069039][T10221] usb 8-1: config 0 descriptor??
[ 2085.109210][T10221] gspca_main: sq905c-2.14.0 probing 2770:9052
[ 2085.925079][T10221] usb 8-1: USB disconnect, device number 43
[ 2085.930686][T23741] overlayfs: overlapping lowerdir path
[ 2088.751067][T18039] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[ 2088.910164][T18039] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 2088.910194][T18039] usb 6-1: config 0 has no interface number 0
[ 2088.910243][T18039] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 2088.939251][T18039] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 2088.939287][T18039] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2088.965176][T18039] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 2088.965211][T18039] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 2088.965232][T18039] usb 6-1: Product: syz
[ 2088.965249][T18039] usb 6-1: SerialNumber: syz
[ 2089.004173][T18039] usb 6-1: config 0 descriptor??
[ 2089.052662][T18039] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 2089.067877][T18039] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input50
[ 2089.367627][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.373793][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.374088][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.374364][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.374611][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.374853][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.375097][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.375337][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.375576][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.375823][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2089.440703][T22294] usb 6-1: USB disconnect, device number 13
[ 2089.441001][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 2089.520877][T22294] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 2089.831356][T23810] netlink: 'syz.7.5761': attribute type 1 has an invalid length.
[ 2091.111007][T23415] Bluetooth: hci2: command 0x0406 tx timeout
[ 2091.930656][T22296] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 2092.063614][ T5814] Bluetooth: hci6: command 0x0406 tx timeout
[ 2092.080530][T22296] usb 3-1: Using ep0 maxpacket: 16
[ 2092.083203][T22296] usb 3-1: config 1 has an invalid interface number: 214 but max is 0
[ 2092.083233][T22296] usb 3-1: config 1 has no interface number 0
[ 2092.083282][T22296] usb 3-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 2092.083311][T22296] usb 3-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64
[ 2092.083336][T22296] usb 3-1: config 1 interface 214 has no altsetting 0
[ 2092.086414][T22296] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[ 2092.086445][T22296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2092.086467][T22296] usb 3-1: Product: syz
[ 2092.086481][T22296] usb 3-1: Manufacturer: syz
[ 2092.086497][T22296] usb 3-1: SerialNumber: syz
[ 2092.127653][T23888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2092.132265][T23888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2092.145037][T22296] ums-alauda 3-1:1.214: USB Mass Storage device detected
[ 2092.277846][T22296] scsi host1: usb-storage 3-1:1.214
[ 2092.350065][T22296] usb 3-1: USB disconnect, device number 13
[ 2093.071340][T23923] overlayfs: overlapping lowerdir path
[ 2102.159704][T23962] kthread_run failed with err -4
[ 2104.296333][T23991] misc userio: Begin command sent, but we're already running
[ 2104.390809][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 2109.977787][T22296] IPVS: starting estimator thread 0...
[ 2110.070734][T24029] IPVS: using max 7 ests per chain, 16800 per kthread
[ 2112.654970][T24060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5861'.
[ 2115.465190][T24087] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5877'.
[ 2115.852922][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2115.876171][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2115.878109][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2115.879537][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2115.894376][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2116.921113][ T5814] Bluetooth: hci2: unexpected event for opcode 0x0c5b
[ 2117.981912][ T5814] Bluetooth: hci3: command tx timeout
[ 2120.070581][ T5814] Bluetooth: hci3: command tx timeout
[ 2121.175672][T24102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5883'.
[ 2122.140497][ T5814] Bluetooth: hci3: command tx timeout
[ 2122.590438][T24089] chnl_net:caif_netlink_parms(): no params data found
[ 2124.221184][T20069] Bluetooth: hci3: command tx timeout
[ 2124.548073][T24137] Bluetooth: MGMT ver 1.23
[ 2126.620782][ T5814] Bluetooth: hci0: command 0x0406 tx timeout
[ 2126.730948][T24089] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2126.731136][T24089] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2126.731414][T24089] bridge_slave_0: entered allmulticast mode
[ 2126.740145][T24089] bridge_slave_0: entered promiscuous mode
[ 2126.803067][T24089] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2126.812652][T24089] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2126.813478][T24089] bridge_slave_1: entered allmulticast mode
[ 2126.846180][T24089] bridge_slave_1: entered promiscuous mode
[ 2127.124223][T24160] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2127.124635][T24160] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2127.349607][T24162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5906'.
[ 2127.349837][T24162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5906'.
[ 2127.573102][T20069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2127.618702][T20069] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2127.649904][T20069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2127.673720][T20069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2127.674802][T20069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2128.650589][T24089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2128.681704][T24089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2129.824554][ T5814] Bluetooth: hci4: command tx timeout
[ 2131.917673][ T5814] Bluetooth: hci4: command tx timeout
[ 2132.378478][T20069] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2132.419241][T20069] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2132.428970][T20069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2132.441590][T20069] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2132.442728][T20069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2133.980861][T20069] Bluetooth: hci4: command tx timeout
[ 2134.540731][T20069] Bluetooth: hci5: command tx timeout
[ 2134.692827][T24089] team0: Port device team_slave_0 added
[ 2134.952482][T24089] team0: Port device team_slave_1 added
[ 2136.063375][T20069] Bluetooth: hci4: command tx timeout
[ 2136.177280][T24089] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2136.177299][T24089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2136.177329][T24089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2136.248710][T24089] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2136.248731][T24089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2136.248761][T24089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2136.620544][T20069] Bluetooth: hci5: command tx timeout
[ 2137.866992][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5920'.
[ 2138.485609][T24089] hsr_slave_0: entered promiscuous mode
[ 2138.487299][T24089] hsr_slave_1: entered promiscuous mode
[ 2138.488324][T24089] debugfs: 'hsr0' already exists in 'hsr'
[ 2138.488352][T24089] Cannot create hsr debugfs directory
[ 2138.710401][T20069] Bluetooth: hci5: command tx timeout
[ 2140.782291][T20069] Bluetooth: hci5: command tx timeout
[ 2143.401750][T24163] chnl_net:caif_netlink_parms(): no params data found
[ 2148.596292][T24089] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2150.312427][ T5814] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2150.317153][ T5814] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2150.336470][ T5814] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2150.461763][ T5814] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2150.480619][ T5814] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2152.542224][ T5814] Bluetooth: hci8: command tx timeout
[ 2154.620497][ T5814] Bluetooth: hci8: command tx timeout
[ 2154.787798][T24186] chnl_net:caif_netlink_parms(): no params data found
[ 2154.817492][T24163] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2154.818754][T24163] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2154.819047][T24163] bridge_slave_0: entered allmulticast mode
[ 2154.852285][T24163] bridge_slave_0: entered promiscuous mode
[ 2154.899421][T24163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2154.899576][T24163] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2154.899859][T24163] bridge_slave_1: entered allmulticast mode
[ 2154.923936][T24163] bridge_slave_1: entered promiscuous mode
[ 2156.354134][T20069] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2156.387333][T20069] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2156.389231][T20069] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2156.405789][T20069] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2156.406734][T20069] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2156.700669][T20069] Bluetooth: hci8: command tx timeout
[ 2158.460694][T20069] Bluetooth: hci9: command tx timeout
[ 2158.780883][T20069] Bluetooth: hci8: command tx timeout
[ 2160.097978][T24163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2160.387794][T24163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2160.540741][T20069] Bluetooth: hci9: command tx timeout
[ 2162.621087][ T5814] Bluetooth: hci9: command tx timeout
[ 2164.700627][T20069] Bluetooth: hci9: command tx timeout
[ 2165.843252][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 2165.997846][T24163] team0: Port device team_slave_0 added
[ 2166.162176][T24186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2166.162560][T24186] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2166.163223][T24186] bridge_slave_0: entered allmulticast mode
[ 2166.166480][T24186] bridge_slave_0: entered promiscuous mode
[ 2166.214693][T24163] team0: Port device team_slave_1 added
[ 2166.232397][T24186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2166.232535][T24186] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2166.233161][T24186] bridge_slave_1: entered allmulticast mode
[ 2166.236548][T24186] bridge_slave_1: entered promiscuous mode
[ 2171.758193][T24163] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2171.758214][T24163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2171.758246][T24163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2171.892000][T24186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2171.898103][T24163] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2171.898123][T24163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2171.898153][T24163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2172.013645][T24186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2175.404461][ T5814] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 2175.437782][ T5814] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 2175.468579][ T5814] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 2175.494966][ T5814] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 2175.496781][ T5814] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 2177.580591][T20069] Bluetooth: hci10: command tx timeout
[ 2178.528862][T24186] team0: Port device team_slave_0 added
[ 2178.613945][T24186] team0: Port device team_slave_1 added
[ 2178.631379][T24163] hsr_slave_0: entered promiscuous mode
[ 2178.633221][T24163] hsr_slave_1: entered promiscuous mode
[ 2178.634410][T24163] debugfs: 'hsr0' already exists in 'hsr'
[ 2178.634438][T24163] Cannot create hsr debugfs directory
[ 2179.680402][T20069] Bluetooth: hci10: command tx timeout
[ 2181.740729][T20069] Bluetooth: hci10: command tx timeout
[ 2183.826960][T20069] Bluetooth: hci10: command tx timeout
[ 2187.273833][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2187.314945][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2187.316785][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2187.318895][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2187.319821][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2187.896846][T24186] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2187.896868][T24186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2187.896899][T24186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2189.420511][ T5814] Bluetooth: hci0: command tx timeout
[ 2191.078830][T24186] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2191.078851][T24186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2191.078889][T24186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2191.500636][ T5814] Bluetooth: hci0: command tx timeout
[ 2192.255709][T20069] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2192.286072][T20069] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2192.298319][T20069] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2192.320174][T20069] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2192.329629][T20069] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2193.582643][T20069] Bluetooth: hci0: command tx timeout
[ 2194.382137][T20069] Bluetooth: hci7: command tx timeout
[ 2194.444875][    C1] sched: DL replenish lagged too much
[ 2195.660792][T20069] Bluetooth: hci0: command tx timeout
[ 2196.460967][T20069] Bluetooth: hci7: command tx timeout
[ 2197.105950][T24224] chnl_net:caif_netlink_parms(): no params data found
[ 2198.540654][T20069] Bluetooth: hci7: command tx timeout
[ 2200.621140][T20069] Bluetooth: hci7: command tx timeout
[ 2208.268187][T24227] chnl_net:caif_netlink_parms(): no params data found
[ 2210.190112][T24224] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2210.198952][T24224] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2210.199284][T24224] bridge_slave_0: entered allmulticast mode
[ 2210.218870][T24224] bridge_slave_0: entered promiscuous mode
[ 2210.283867][T24224] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2210.284063][T24224] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2210.284443][T24224] bridge_slave_1: entered allmulticast mode
[ 2210.288324][T24224] bridge_slave_1: entered promiscuous mode
[ 2210.762430][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2210.777691][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2210.805684][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2210.838005][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2210.856795][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2212.942140][ T5814] Bluetooth: hci4: command tx timeout
[ 2213.429444][T24227] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2213.439428][T24227] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2213.439741][T24227] bridge_slave_0: entered allmulticast mode
[ 2213.457303][T24227] bridge_slave_0: entered promiscuous mode
[ 2213.496912][T24227] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2213.497167][T24227] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2213.497438][T24227] bridge_slave_1: entered allmulticast mode
[ 2213.532016][T24227] bridge_slave_1: entered promiscuous mode
[ 2215.021073][ T5814] Bluetooth: hci4: command tx timeout
[ 2216.307382][T20069] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2216.334242][T20069] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2216.335995][T20069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2216.338105][T20069] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2216.339007][T20069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2217.100853][T20069] Bluetooth: hci4: command tx timeout
[ 2217.483606][T24235] chnl_net:caif_netlink_parms(): no params data found
[ 2218.380850][T20069] Bluetooth: hci5: command tx timeout
[ 2219.180925][T20069] Bluetooth: hci4: command tx timeout
[ 2219.254935][T24239] chnl_net:caif_netlink_parms(): no params data found
[ 2220.460735][T20069] Bluetooth: hci5: command tx timeout
[ 2222.540700][T20069] Bluetooth: hci5: command tx timeout
[ 2224.630553][T20069] Bluetooth: hci5: command tx timeout
[ 2226.389477][T24244] chnl_net:caif_netlink_parms(): no params data found
[ 2227.177119][T24235] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2227.177300][T24235] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2227.177602][T24235] bridge_slave_0: entered allmulticast mode
[ 2227.211308][T24235] bridge_slave_0: entered promiscuous mode
[ 2227.266761][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 2227.302424][T24235] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2227.308345][T24235] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2227.308685][T24235] bridge_slave_1: entered allmulticast mode
[ 2227.335881][T24235] bridge_slave_1: entered promiscuous mode
[ 2232.184606][T24239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2232.185584][T24239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2232.185881][T24239] bridge_slave_0: entered allmulticast mode
[ 2232.188856][T24239] bridge_slave_0: entered promiscuous mode
[ 2232.362892][T24235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2232.385047][T24239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2232.385232][T24239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2232.385541][T24239] bridge_slave_1: entered allmulticast mode
[ 2232.388557][T24239] bridge_slave_1: entered promiscuous mode
[ 2232.491231][T24235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2235.527845][ T5814] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2235.569210][ T5814] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2235.579704][ T5814] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2235.603193][ T5814] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2235.604132][ T5814] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2237.740815][T20069] Bluetooth: hci8: command tx timeout
[ 2237.889583][T24239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2237.900591][T24244] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2237.900770][T24244] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2237.901100][T24244] bridge_slave_0: entered allmulticast mode
[ 2237.903409][T24244] bridge_slave_0: entered promiscuous mode
[ 2238.088913][T24239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2238.151545][T24244] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2238.151699][T24244] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2238.152046][T24244] bridge_slave_1: entered allmulticast mode
[ 2238.154988][T24244] bridge_slave_1: entered promiscuous mode
[ 2239.580732][T20069] Bluetooth: hci3: command 0x0406 tx timeout
[ 2239.831559][T20069] Bluetooth: hci8: command tx timeout
[ 2241.901015][ T5814] Bluetooth: hci8: command tx timeout
[ 2243.981146][ T5814] Bluetooth: hci8: command tx timeout
[ 2247.487853][T20069] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 2247.511352][T20069] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 2247.580817][T20069] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 2247.622740][T20069] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 2247.623721][T20069] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 2249.775045][ T5814] Bluetooth: hci9: command tx timeout
[ 2250.185656][T24256] chnl_net:caif_netlink_parms(): no params data found
[ 2250.232110][T24244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2250.299998][T24244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2251.821028][ T5814] Bluetooth: hci9: command tx timeout
[ 2252.417910][T20069] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2252.481078][T20069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2252.483066][T20069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2252.485035][T20069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2252.486625][T20069] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2253.915090][T20069] Bluetooth: hci9: command tx timeout
[ 2254.731100][T20069] Bluetooth: hci0: command tx timeout
[ 2255.990835][T20069] Bluetooth: hci9: command tx timeout
[ 2256.780736][T20069] Bluetooth: hci0: command tx timeout
[ 2258.860910][T20069] Bluetooth: hci0: command tx timeout
[ 2260.819243][T24264] chnl_net:caif_netlink_parms(): no params data found
[ 2260.940656][T20069] Bluetooth: hci0: command tx timeout
[ 2262.072816][T24256] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2262.073043][T24256] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2262.073317][T24256] bridge_slave_0: entered allmulticast mode
[ 2262.076408][T24256] bridge_slave_0: entered promiscuous mode
[ 2262.179650][T24256] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2262.179885][T24256] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2262.180167][T24256] bridge_slave_1: entered allmulticast mode
[ 2262.213793][T24256] bridge_slave_1: entered promiscuous mode
[ 2266.514239][T24256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2266.583423][T24256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2271.035068][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2271.073348][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2271.108194][ T5814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2271.109630][ T5814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2271.125144][ T5814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2271.296436][T24264] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2271.296650][T24264] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2271.296939][T24264] bridge_slave_0: entered allmulticast mode
[ 2271.324123][T24264] bridge_slave_0: entered promiscuous mode
[ 2271.397298][T24264] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2271.397437][T24264] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2271.397687][T24264] bridge_slave_1: entered allmulticast mode
[ 2271.422656][T24264] bridge_slave_1: entered promiscuous mode
[ 2273.180983][ T5814] Bluetooth: hci7: command tx timeout
[ 2273.821856][T24264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2273.889471][T24264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2275.309497][T20069] Bluetooth: hci7: command tx timeout
[ 2276.497416][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2276.531287][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2276.533882][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2276.536331][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2276.537303][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2277.340601][ T5814] Bluetooth: hci7: command tx timeout
[ 2278.706187][ T5814] Bluetooth: hci4: command tx timeout
[ 2278.887584][T24281] chnl_net:caif_netlink_parms(): no params data found
[ 2279.420445][ T5814] Bluetooth: hci7: command tx timeout
[ 2280.782454][ T5814] Bluetooth: hci4: command tx timeout
[ 2280.974088][T24287] chnl_net:caif_netlink_parms(): no params data found
[ 2282.860854][ T5814] Bluetooth: hci4: command tx timeout
[ 2285.000994][ T5814] Bluetooth: hci4: command tx timeout
[ 2286.834236][T24291] chnl_net:caif_netlink_parms(): no params data found
[ 2287.377449][T24281] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2287.377977][T24281] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2287.378328][T24281] bridge_slave_0: entered allmulticast mode
[ 2287.402456][T24281] bridge_slave_0: entered promiscuous mode
[ 2287.461508][T24281] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2287.461672][T24281] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2287.462018][T24281] bridge_slave_1: entered allmulticast mode
[ 2287.465485][T24281] bridge_slave_1: entered promiscuous mode
[ 2288.060920][   T38] INFO: task syz.6.5925:24214 blocked for more than 143 seconds.
[ 2288.060956][   T38]       Tainted: G             L      syzkaller #0
[ 2288.060970][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2288.060980][   T38] task:syz.6.5925      state:D stack:24952 pid:24214 tgid:24214 ppid:21884  task_flags:0x400040 flags:0x00080002
[ 2288.061053][   T38] Call Trace:
[ 2288.061065][   T38]  <TASK>
[ 2288.061081][   T38]  __schedule+0x145f/0x5070
[ 2288.061274][   T38]  ? try_to_take_rt_mutex+0x840/0xb00
[ 2288.061343][   T38]  ? __pfx___schedule+0x10/0x10
[ 2288.061394][   T38]  rt_mutex_schedule+0x77/0xf0
[ 2288.061471][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[ 2288.061500][   T38]  ? task_blocks_on_rt_mutex+0xf12/0x1380
[ 2288.061548][   T38]  rt_mutex_slowlock+0x2a8/0x6b0
[ 2288.061581][   T38]  ? rt_mutex_slowlock+0x1c9/0x6b0
[ 2288.061613][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2288.061642][   T38]  ? do_raw_spin_lock+0x121/0x290
[ 2288.061686][   T38]  ? rcu_barrier+0x4c/0x570
[ 2288.061730][   T38]  ? rcu_barrier+0x4c/0x570
[ 2288.061763][   T38]  ? rcu_barrier+0x4c/0x570
[ 2288.061784][   T38]  mutex_lock_nested+0x16a/0x1d0
[ 2288.061812][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2288.061849][   T38]  rcu_barrier+0x4c/0x570
[ 2288.061874][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2288.061897][   T38]  ? rt_write_unlock+0x191/0x230
[ 2288.061948][   T38]  kvm_mmu_uninit_vm+0x53/0x90
[ 2288.062008][   T38]  kvm_arch_destroy_vm+0x23d/0x280
[ 2288.062052][   T38]  kvm_put_kvm+0x6ca/0xa80
[ 2288.062091][   T38]  ? __pfx_kvm_vm_release+0x10/0x10
[ 2288.062120][   T38]  kvm_vm_release+0x46/0x50
[ 2288.062147][   T38]  __fput+0x45b/0xa80
[ 2288.062218][   T38]  task_work_run+0x1d4/0x260
[ 2288.062257][   T38]  ? __pfx_task_work_run+0x10/0x10
[ 2288.062306][   T38]  exit_to_user_mode_loop+0xef/0x4e0
[ 2288.062339][   T38]  ? rcu_is_watching+0x15/0xb0
[ 2288.062364][   T38]  do_syscall_64+0x2b7/0xf80
[ 2288.062413][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2288.062478][   T38]  ? trace_irq_disable+0x37/0x100
[ 2288.062518][   T38]  ? clear_bhb_loop+0x60/0xb0
[ 2288.062547][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2288.062571][   T38] RIP: 0033:0x7f1af3c8f749
[ 2288.062596][   T38] RSP: 002b:00007ffef5948948 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 2288.062620][   T38] RAX: 0000000000000000 RBX: 000000000020a769 RCX: 00007f1af3c8f749
[ 2288.062636][   T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 2288.062649][   T38] RBP: 00007f1af3ee7da0 R08: 0000000000000001 R09: 00000004f5948c3f
[ 2288.062664][   T38] R10: 0000001b33520000 R11: 0000000000000246 R12: 00007f1af3ee5fac
[ 2288.062680][   T38] R13: 00007f1af3ee5fa0 R14: ffffffffffffffff R15: 00007ffef5948a60
[ 2288.062716][   T38]  </TASK>
[ 2288.062769][   T38] 
[ 2288.062769][   T38] Showing all locks held in the system:
[ 2288.062783][   T38] 4 locks held by rcuc/1/28:
[ 2288.062799][   T38] 1 lock held by khungtaskd/38:
[ 2288.062812][   T38]  #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2288.062930][   T38] 5 locks held by kworker/u8:13/4830:
[ 2288.062946][   T38] 2 locks held by getty/5558:
[ 2288.062959][   T38]  #0: ffff8880341900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2288.063079][   T38]  #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460
[ 2288.063136][   T38] 4 locks held by kworker/u8:25/6850:
[ 2288.063149][   T38]  #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 2288.063206][   T38]  #1: ffffc90003a47bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 2288.063261][   T38]  #2: ffffffff8e8986e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0
[ 2288.063394][   T38]  #3: ffff88801ea860d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0
[ 2288.063508][   T38] 1 lock held by syz.5.5827/23970:
[ 2288.063522][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.063578][   T38] 1 lock held by syz.2.5861/24060:
[ 2288.063591][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+[ 2288.063591][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.063647][   T38] 7 locks held by syz-executor/24089:
[ 2288.063660][   T38]  #0: ffff888030012480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40
[ 2288.063728][   T38]  #1: ffff88805bbbdc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 2288.063808][   T38]  #2: ffff888026639878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 2288.063871][   T38]  #3: ffffffff8e12c6b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[ 2288.063986][   T38]  #4: ffff88801ea860d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800
[ 2288.064084][   T38]  #5: ffff888028723300 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[ 2288.064171][   T38]  #6: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064227][   T38] 2 locks held by syz.7.5880/24096:
[ 2288.064241][   T38]  #0: ffffffff8e8986e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[ 2288.064293][   T38]  #1: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064350][   T38] 1 lock held by syz-executor/24163:
[ 2288.064363][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064419][   T38] 1 lock held by syz-executor/24186:
[ 2288.064433][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064489][   T38] 1 lock held by syz.0.5916/24188:
[ 2288.064502][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064559][   T38] 1 lock held by syz.6.5925/24214:
[ 2288.064573][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064630][   T38] 1 lock held by syz-executor/24224:
[ 2288.064643][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064697][   T38] 1 lock held by syz-executor/24227:
[ 2288.064709][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064766][   T38] 1 lock held by syz-executor/24235:
[ 2288.064779][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064835][   T38] 1 lock held by syz-executor/24239:
[ 2288.064848][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064911][   T38] 1 lock held by syz-executor/24244:
[ 2288.064924][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.064981][   T38] 1 lock held by syz-executor/24256:
[ 2288.064995][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.065050][   T38] 1 lock held by syz-executor/24264:
[ 2288.065064][   T38]  #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 2288.065121][   T38] 2 locks held by syz-executor/24281:
[ 2288.065135][   T38]  #0: ffffffff8e021d48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 2288.065234][   T38]  #1: ffffffff8e8a57f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[ 2288.065291][   T38] 2 locks held by syz-executor/24287:
[ 2288.065304][   T38]  #0: ffffffff8edb4c40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 2288.065366][   T38]  #1: ffffffff8e8a57f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[ 2288.065422][   T38] 2 locks held by syz-executor/24291:
[ 2288.065435][   T38]  #0: ffffffff8e021d48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 2288.065497][   T38]  #1: ffffffff8e8a57f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[ 2288.065553][   T38] 1 lock held by syz-executor/24303:
[ 2288.065566][   T38]  #0: ffffffff8e8a57f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[ 2288.065621][   T38] 2 locks held by syz-executor/24310:
[ 2288.065635][   T38]  #0: ffffffff8e8986e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[ 2288.065688][   T38]  #1: ffffffff8e8a57f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60
[ 2288.065796][   T38] 
[ 2288.065803][   T38] =============================================
[ 2288.065803][   T38] 
[ 2288.065820][   T38] NMI backtrace for cpu 0
[ 2288.065848][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2288.065878][   T38] Tainted: [L]=SOFTLOCKUP
[ 2288.065887][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2288.065901][   T38] Call Trace:
[ 2288.065917][   T38]  <TASK>
[ 2288.065927][   T38]  dump_stack_lvl+0xe8/0x150
[ 2288.065974][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 2288.066050][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2288.066088][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2288.066121][   T38]  sys_info+0x135/0x170
[ 2288.066170][   T38]  watchdog+0xf95/0xfe0
[ 2288.066207][   T38]  ? watchdog+0x20a/0xfe0
[ 2288.066242][   T38]  kthread+0x711/0x8a0
[ 2288.066278][   T38]  ? __pfx_watchdog+0x10/0x10
[ 2288.066302][   T38]  ? __pfx_kthread+0x10/0x10
[ 2288.066332][   T38]  ? rt_spin_unlock+0x150/0x200
[ 2288.066367][   T38]  ? rt_spin_unlock+0x161/0x200
[ 2288.066395][   T38]  ? __pfx_kthread+0x10/0x10
[ 2288.066429][   T38]  ret_from_fork+0x510/0xa50
[ 2288.066466][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 2288.066489][   T38]  ? __switch_to+0xc9e/0x1480
[ 2288.066529][   T38]  ? __pfx_kthread+0x10/0x10
[ 2288.066562][   T38]  ret_from_fork_asm+0x1a/0x30
[ 2288.066614][   T38]  </TASK>
[ 2288.066623][   T38] Sending NMI from CPU 0 to CPUs 1:
[ 2288.066666][    C1] NMI backtrace for cpu 1
[ 2288.066686][    C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2288.066713][    C1] Tainted: [L]=SOFTLOCKUP
[ 2288.066720][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2288.066732][    C1] RIP: 0010:rcu_is_watching+0x10/0xb0
[ 2288.066754][    C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 d0 70 0d 10 <e8> 1b 0c 2c 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df
[ 2288.066772][    C1] RSP: 0000:ffffc90000a2e790 EFLAGS: 00000283
[ 2288.066788][    C1] RAX: 0000000000000001 RBX: ffffffff8fea6001 RCX: 0000000080000001
[ 2288.066802][    C1] RDX: ffffc90000a2e901 RSI: ffffffff8173dd35 RDI: ffffffff8d5ae940
[ 2288.066818][    C1] RBP: dffffc0000000000 R08: ffffc90000a2f390 R09: 0000000000000000
[ 2288.066831][    C1] R10: ffffc90000a2e938 R11: fffff52000145d29 R12: ffffc90000a2f3a0
[ 2288.066846][    C1] R13: ffffffff8173dd35 R14: ffffffff8d5ae940 R15: ffffffff8173dd35
[ 2288.066862][    C1] FS:  0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000
[ 2288.066878][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2288.066891][    C1] CR2: 00007f9375432fca CR3: 000000000d3a8000 CR4: 00000000003526f0
[ 2288.066910][    C1] Call Trace:
[ 2288.066918][    C1]  <TASK>
[ 2288.066926][    C1]  ? unwind_next_frame+0xa5/0x23d0
[ 2288.066977][    C1]  lock_release+0x4b/0x3b0
[ 2288.067004][    C1]  ? deref_stack_reg+0x19f/0x230
[ 2288.067032][    C1]  ? unwind_next_frame+0xa5/0x23d0
[ 2288.067057][    C1]  unwind_next_frame+0x1ab1/0x23d0
[ 2288.067087][    C1]  ? unwind_next_frame+0xa5/0x23d0
[ 2288.067112][    C1]  ? nft_do_chain+0x40c/0x1920
[ 2288.067184][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2288.067211][    C1]  arch_stack_walk+0x11c/0x150
[ 2288.067240][    C1]  ? nft_do_chain_inet+0x25d/0x340
[ 2288.067283][    C1]  stack_trace_save+0x9c/0xe0
[ 2288.067308][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 2288.067332][    C1]  ? do_raw_spin_lock+0x121/0x290
[ 2288.067359][    C1]  kasan_save_track+0x3e/0x80
[ 2288.067392][    C1]  ? kasan_save_track+0x3e/0x80
[ 2288.067419][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[ 2288.067446][    C1]  ? kmem_cache_alloc_noprof+0x18d/0x6c0
[ 2288.067488][    C1]  ? fill_pool+0x100/0x570
[ 2288.067565][    C1]  ? debug_objects_fill_pool+0x9b/0xd0
[ 2288.067588][    C1]  ? debug_object_activate+0x36/0x4e0
[ 2288.067611][    C1]  ? call_rcu+0x43/0x890
[ 2288.067628][    C1]  ? skb_release_head_state+0x71/0x360
[ 2288.067678][    C1]  ? consume_skb+0x60/0xf0
[ 2288.067697][    C1]  ? nft_synproxy_eval_v4+0x376/0x560
[ 2288.067748][    C1]  ? nft_synproxy_do_eval+0x345/0x570
[ 2288.067768][    C1]  ? nft_do_chain+0x40c/0x1920
[ 2288.067809][    C1]  ? __slab_alloc+0xc6/0x1f0
[ 2288.067830][    C1]  __kasan_slab_alloc+0x6c/0x80
[ 2288.067859][    C1]  ? fill_pool+0x100/0x570
[ 2288.067882][    C1]  kmem_cache_alloc_noprof+0x18d/0x6c0
[ 2288.067915][    C1]  fill_pool+0x100/0x570
[ 2288.067939][    C1]  ? debug_objects_fill_pool+0x73/0xd0
[ 2288.067964][    C1]  ? __pfx_fill_pool+0x10/0x10
[ 2288.067991][    C1]  ? debug_objects_fill_pool+0x73/0xd0
[ 2288.068014][    C1]  ? debug_objects_fill_pool+0x73/0xd0
[ 2288.068039][    C1]  debug_objects_fill_pool+0x9b/0xd0
[ 2288.068062][    C1]  debug_object_activate+0x36/0x4e0
[ 2288.068085][    C1]  ? __pfx_rcuref_put_slowpath+0x10/0x10
[ 2288.068142][    C1]  ? __pfx_dst_destroy_rcu+0x10/0x10
[ 2288.068191][    C1]  call_rcu+0x43/0x890
[ 2288.068212][    C1]  ? dst_release+0x126/0x1b0
[ 2288.068241][    C1]  skb_release_head_state+0x71/0x360
[ 2288.068265][    C1]  consume_skb+0x60/0xf0
[ 2288.068287][    C1]  nft_synproxy_eval_v4+0x376/0x560
[ 2288.068311][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[ 2288.068335][    C1]  ? nf_ip_checksum+0x13c/0x510
[ 2288.068383][    C1]  nft_synproxy_do_eval+0x345/0x570
[ 2288.068408][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 2288.068428][    C1]  ? ret_from_fork_asm+0x1a/0x30
[ 2288.068460][    C1]  ? arch_stack_walk+0x11c/0x150
[ 2288.068489][    C1]  nft_do_chain+0x40c/0x1920
[ 2288.068509][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 2288.068539][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[ 2288.068556][    C1]  ? kasan_save_track+0x4f/0x80
[ 2288.068586][    C1]  ? __local_bh_enable_ip+0x171/0x2c0
[ 2288.068608][    C1]  ? rcu_cpu_kthread+0xbec/0x1af0
[ 2288.068636][    C1]  ? smpboot_thread_fn+0x542/0xa60
[ 2288.068665][    C1]  ? kthread+0x711/0x8a0
[ 2288.068707][    C1]  nft_do_chain_inet+0x25d/0x340
[ 2288.068726][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 2288.068751][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 2288.068794][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 2288.068818][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 2288.068839][    C1]  nf_hook_slow+0xc5/0x220
[ 2288.068869][    C1]  NF_HOOK+0x206/0x3a0
[ 2288.068894][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 2288.068921][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 2288.068945][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[ 2288.068969][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[ 2288.068997][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 2288.069024][    C1]  ? skb_dst+0x4f/0xd0
[ 2288.069049][    C1]  ? ip_local_deliver+0x12a/0x1b0
[ 2288.069076][    C1]  NF_HOOK+0x30c/0x3a0
[ 2288.069101][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 2288.069126][    C1]  ? NF_HOOK+0x9a/0x3a0
[ 2288.069150][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[ 2288.069175][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 2288.069206][    C1]  ? __pfx_ip_rcv+0x10/0x10
[ 2288.069230][    C1]  __netif_receive_skb+0x143/0x380
[ 2288.069250][    C1]  ? process_backlog+0x272/0x8f0
[ 2288.069271][    C1]  process_backlog+0x315/0x8f0
[ 2288.069297][    C1]  __napi_poll+0xae/0x520
[ 2288.069317][    C1]  net_rx_action+0x64a/0xdb0
[ 2288.069345][    C1]  ? __pfx_net_rx_action+0x10/0x10
[ 2288.069364][    C1]  ? kvm_sched_clock_read+0x11/0x20
[ 2288.069400][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 2288.069440][    C1]  handle_softirqs+0x1df/0x650
[ 2288.069468][    C1]  __local_bh_enable_ip+0x171/0x2c0
[ 2288.069490][    C1]  ? rcu_cpu_kthread+0x211/0x1af0
[ 2288.069519][    C1]  rcu_cpu_kthread+0xbec/0x1af0
[ 2288.069553][    C1]  ? rcu_cpu_kthread+0x211/0x1af0
[ 2288.069589][    C1]  ? __pfx_rcu_cpu_kthread+0x10/0x10
[ 2288.069620][    C1]  ? preempt_schedule_common+0x83/0xd0
[ 2288.069650][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 2288.069684][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 2288.069707][    C1]  smpboot_thread_fn+0x542/0xa60
[ 2288.069731][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 2288.069760][    C1]  kthread+0x711/0x8a0
[ 2288.069788][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 2288.069812][    C1]  ? __pfx_kthread+0x10/0x10
[ 2288.069837][    C1]  ? rt_spin_unlock+0x150/0x200
[ 2288.069865][    C1]  ? rt_spin_unlock+0x161/0x200
[ 2288.069889][    C1]  ? __pfx_kthread+0x10/0x10
[ 2288.069917][    C1]  ret_from_fork+0x510/0xa50
[ 2288.069939][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 2288.069959][    C1]  ? __switch_to+0xc9e/0x1480
[ 2288.069991][    C1]  ? __pfx_kthread+0x10/0x10
[ 2288.070019][    C1]  ret_from_fork_asm+0x1a/0x30
[ 2288.070057][    C1]  </TASK>
[ 2288.550339][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 2288.550373][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2288.550405][   T38] Tainted: [L]=SOFTLOCKUP
[ 2288.550414][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2288.550428][   T38] Call Trace:
[ 2288.550438][   T38]  <TASK>
[ 2288.550449][   T38]  vpanic+0x1e0/0x670
[ 2288.550491][   T38]  panic+0xb9/0xc0
[ 2288.550533][   T38]  ? __pfx_panic+0x10/0x10
[ 2288.550584][   T38]  ? preempt_schedule_thunk+0x16/0x30
[ 2288.550616][   T38]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 2288.550653][   T38]  watchdog+0xfdf/0xfe0
[ 2288.550685][   T38]  ? watchdog+0x20a/0xfe0
[ 2288.550719][   T38]  kthread+0x711/0x8a0
[ 2288.550756][   T38]  ? __pfx_watchdog+0x10/0x10
[ 2288.550781][   T38]  ? __pfx_kthread+0x10/0x10
[ 2288.550811][   T38]  ? rt_spin_unlock+0x150/0x200
[ 2288.550847][   T38]  ? rt_spin_unlock+0x161/0x200
[ 2288.550876][   T38]  ? __pfx_kthread+0x10/0x10
[ 2288.550906][   T38]  ret_from_fork+0x510/0xa50
[ 2288.550933][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 2288.550956][   T38]  ? __switch_to+0xc9e/0x1480
[ 2288.550995][   T38]  ? __pfx_kthread+0x10/0x10
[ 2288.551030][   T38]  ret_from_fork_asm+0x1a/0x30
[ 2288.551079][   T38]  </TASK>
[ 2288.551681][   T38] Kernel Offset: disabled