last executing test programs:

21m37.047189897s ago: executing program 32 (id=111):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x3, 0x6, @local}, 0x14)

21m36.004323656s ago: executing program 33 (id=112):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008045}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)="f6", 0x1}], 0x1}, 0x0)

21m35.071192682s ago: executing program 34 (id=116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @ntf_ch_w={0x7, 0x0, 0x1}}}]}, 0x3c}}, 0x0)

21m35.009794612s ago: executing program 35 (id=118):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = io_uring_setup(0x5e4b, &(0x7f0000000200)={0x0, 0xdba3, 0x3, 0x0, 0x1c4})
io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000500)=@xdp, 0x80, &(0x7f0000000480)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/122, 0x7a}], 0x4, &(0x7f0000001c80)=""/145, 0x91}}, {{&(0x7f0000000700)=@caif=@dbg, 0x80, &(0x7f0000001fc0), 0x0, &(0x7f0000002000)=""/241, 0xf1}, 0x11b2}, {{&(0x7f0000002100)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/61, 0x3d}, {&(0x7f00000031c0)=""/36, 0x24}, {&(0x7f0000003200)=""/74, 0x4a}], 0x4, &(0x7f00000032c0)=""/201, 0xc9}, 0xfff}], 0x3, 0x2, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f00000001c0)=0x1, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x19, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x6}})
io_uring_enter(0xffffffffffffffff, 0x6e2, 0xc5fb, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb9947e4e408004500007000000000fe00900100ac1414aa0bba90780300589f45000000000000000089000000000000e0000001862a00000003020d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a9383fbffac1414007f000001e0000001e0000002000000000000"], 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x141802, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[], 0x4c}}, 0x0)

21m25.982516815s ago: executing program 36 (id=131):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa9, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94)
fsetxattr$trusted_overlay_redirect(r4, 0x0, 0x0, 0x0, 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
unshare(0x40020000)
r7 = syz_io_uring_setup(0x558f, &(0x7f0000000300)={0x0, 0xa359, 0x4000, 0x1, 0x37a}, 0x0, &(0x7f0000000380))
userfaultfd(0x800)
socket$nl_sock_diag(0x10, 0x3, 0x4)
io_uring_register$IORING_REGISTER_FILES(r7, 0x2, 0x0, 0x0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004)

19m53.945714478s ago: executing program 37 (id=157):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x33)
close(0xffffffffffffffff)
listen(0xffffffffffffffff, 0x4)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0)
ftruncate(r2, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r3, r2, 0x0, 0x578410eb)

18m24.14679876s ago: executing program 38 (id=211):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x2, 0xff}, 0x8)

18m23.988176852s ago: executing program 7 (id=235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="a8"], 0xa8)
getresuid(&(0x7f00000001c0), &(0x7f00000004c0), &(0x7f0000000180))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
stat(&(0x7f0000005a80)='./file0\x00', &(0x7f0000005ac0))

18m23.613974089s ago: executing program 7 (id=237):
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(0xffffffffffffffff, 0x1)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)

18m19.58522095s ago: executing program 2 (id=243):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

18m19.297457795s ago: executing program 2 (id=245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

18m19.136219805s ago: executing program 7 (id=246):
r0 = socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x21, 0x3, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"})
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)

18m18.730664382s ago: executing program 2 (id=250):
sched_setscheduler(0x0, 0x1, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)

18m17.80146524s ago: executing program 7 (id=251):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x5e, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400304"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

18m16.844960251s ago: executing program 2 (id=253):
r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 0000000000000'], 0x86)
dup3(0xffffffffffffffff, r4, 0x0)

18m15.613889206s ago: executing program 2 (id=256):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000003c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20})

18m15.317343641s ago: executing program 2 (id=258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4)
socket$unix(0x1, 0x5, 0x0)

18m14.005492318s ago: executing program 8 (id=259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

18m13.684755086s ago: executing program 8 (id=260):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)

18m13.386222832s ago: executing program 8 (id=261):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x400000000000021e})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x200, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x4})

18m13.215439515s ago: executing program 8 (id=262):
sched_setscheduler(0x0, 0x1, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)

18m13.101912471s ago: executing program 7 (id=263):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(0x0, 0x100)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
close(0xffffffffffffffff)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000300)=0x20, 0x4)

18m11.978559469s ago: executing program 7 (id=265):
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'xfrm0\x00', <r4=>0x0})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4)
sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r4}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0)

18m11.872099152s ago: executing program 8 (id=266):
r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 0000000000000'], 0x86)
dup3(0xffffffffffffffff, r4, 0x0)

18m10.045031324s ago: executing program 8 (id=268):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0)

18m0.241584751s ago: executing program 39 (id=258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4)
socket$unix(0x1, 0x5, 0x0)

17m56.746716636s ago: executing program 40 (id=265):
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'xfrm0\x00', <r4=>0x0})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4)
sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r4}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0)

17m54.779632225s ago: executing program 41 (id=268):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0)

6m6.564123735s ago: executing program 0 (id=1294):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x2)

6m5.948116614s ago: executing program 0 (id=1296):
openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405000000000c24020106020604800e0509090401000001020000090401010101020000090501090800000000072501010000000904020000010200000904020101010200000b2402016f0200018b7e8e0724010000000009058209100000000007250181"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

6m3.107593475s ago: executing program 0 (id=1304):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

6m1.99363596s ago: executing program 0 (id=1310):
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x13)

5m56.878026993s ago: executing program 0 (id=1318):
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket(0x29, 0x5, 0x3)
r2 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x26}}, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf)

5m56.799643244s ago: executing program 1 (id=1319):
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

5m56.531834604s ago: executing program 1 (id=1320):
gettid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

5m55.922428259s ago: executing program 0 (id=1321):
mremap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000fee000/0x4000)=nil)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x9, {"0e000000000000000000000004000001"}}}}, 0x118)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2)
ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB])
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c000}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r10 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x8, @local}}}, 0x90)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x2, 0xd1, {"004ccc9e5ba574381fdf26c53ab1a606"}, 0x3, 0x7, 0x4}}}, 0x90)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

5m55.560556402s ago: executing program 1 (id=1324):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}], 0x1, 0x8040010)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0)

5m54.597765368s ago: executing program 1 (id=1325):
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20)
read$dsp(r1, &(0x7f00000001c0)=""/179, 0xb3)
mmap$dsp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x200000f, 0x11, r1, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000)
ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@md0, r0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x11e, 0x2, 0x0, &(0x7f0000000000)=0xfffffffffffffff5)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x803, 0x2)
connect$netlink(r3, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
statfs(0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000040)={0x1})
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xd03, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x22186, 0x28000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035570970880)

5m53.603625314s ago: executing program 1 (id=1327):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400010000000900020073797a32000000001400078004001500180000000800124000000000050005000200000005000100060000000d000300686173683a6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

5m53.245977625s ago: executing program 1 (id=1328):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$key(r0, 0x0, 0x80)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
socket$inet6(0xa, 0x805, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x782002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c800)

5m40.541307046s ago: executing program 42 (id=1321):
mremap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000fee000/0x4000)=nil)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x9, {"0e000000000000000000000004000001"}}}}, 0x118)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2)
ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB])
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c000}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r10 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x8, @local}}}, 0x90)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x2, 0xd1, {"004ccc9e5ba574381fdf26c53ab1a606"}, 0x3, 0x7, 0x4}}}, 0x90)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

5m37.463991633s ago: executing program 43 (id=1328):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$key(r0, 0x0, 0x80)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
socket$inet6(0xa, 0x805, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x782002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c800)

16.151586878s ago: executing program 6 (id=2141):
pipe(&(0x7f00000007c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
copy_file_range(r1, 0x0, r1, 0x0, 0x7, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f00000003c0)={0x0, 0xec25, 0x400, 0x0, 0x24d}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

15.963955942s ago: executing program 6 (id=2143):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x3d, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

15.764318768s ago: executing program 5 (id=2145):
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

15.59865174s ago: executing program 6 (id=2146):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x2040400)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x118a, &(0x7f00000000c0)={0x0, 0x5d97, 0x80, 0x0, 0xee, 0x0, r3}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
epoll_create1(0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0)

15.249224395s ago: executing program 5 (id=2148):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x70bd29, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000040"], 0x0)

12.258332127s ago: executing program 4 (id=2156):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40010002, 0x0, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1)

11.306576613s ago: executing program 5 (id=2160):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11.12250774s ago: executing program 4 (id=2161):
r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x204031, 0xffffffffffffffff, 0xafe09000)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3})

11.035779912s ago: executing program 5 (id=2162):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084)
r5 = socket$packet(0x11, 0xa, 0x300)
setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4)
recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYBLOB], 0x3}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x880, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x22000000)
splice(r3, 0x0, r6, 0x0, 0x4ffe6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100))
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x1f004, 0x2000, &(0x7f0000000000/0x2000)=nil})

10.822342678s ago: executing program 4 (id=2164):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

10.682330225s ago: executing program 6 (id=2166):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x1, 0x0, 0x25a}, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r3, 0x0, &(0x7f0000002280))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$revoke(0x3, r4)
keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x3})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x50)
unshare(0x62040200)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x17, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106d042bc50000000000010902240001000040000904004081030000000921f9000001220500090581034000000076840000000000008de64bf7b7799e12bb5985c692d4493112a970e53fb5319c4f4712ada82f3d1fbc579781dcb50037157fa7d7e56b15605a5f830210da62018cdfd5111a7cd0ae4c5ae52879bb"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
r7 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r9, 0x100000000000f7)
read$watch_queue(r8, &(0x7f00000000c0)=""/16, 0x10)
keyctl$revoke(0x3, r7)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x240102, 0x0)
fsmount(r10, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "0e233cc0"}]}}, 0x0}, 0x0)

10.070517647s ago: executing program 3 (id=2167):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x2c0000, 0x0)
fallocate(r0, 0x11, 0x4, 0x7)

9.958513474s ago: executing program 4 (id=2168):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f00000004c0)=""/215, 0xd7}], 0x2)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")

9.379266426s ago: executing program 3 (id=2169):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf1995688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfce9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238501000000aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b8456931d2ea726ba9609d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7ded2dc47ec13c0f6af88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1acffa8054e9559dfae4697aa00b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e9798d4ec856993d53b9038ab44fdb0", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2)

6.552669435s ago: executing program 4 (id=2170):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x70bd29, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000040"], 0x0)

6.550539162s ago: executing program 9 (id=2171):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40010002, 0x0, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1)

5.847834326s ago: executing program 5 (id=2172):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.659632109s ago: executing program 3 (id=2173):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.636495206s ago: executing program 6 (id=2174):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
lseek(r5, 0xffffff60, 0x1)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0xe}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x1c, 0x25, 0x301, 0x70bd26, 0x25dfdbf9, {0x15}, [@nested={0x8, 0x131, 0x0, 0x1, [@typed={0x4, 0x12b, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x24008002)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0)
write$sequencer(r6, &(0x7f0000000040), 0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.409419488s ago: executing program 9 (id=2175):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r1 = syz_io_uring_setup(0x890, &(0x7f0000000380)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0)

5.292087652s ago: executing program 5 (id=2176):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x2040400)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x118a, &(0x7f00000000c0)={0x0, 0x5d97, 0x80, 0x0, 0xee, 0x0, r3}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000200))
epoll_create1(0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_open_dev$video(0x0, 0x7fffffff, 0x8280)
io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0)

5.110824945s ago: executing program 3 (id=2177):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28)

4.567758364s ago: executing program 3 (id=2178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@xino_auto, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2400c100}, 0xc048)
sendmsg$NFT_BATCH(r4, 0x0, 0x40)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28)
close(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000004c0)=@multiplanar_fd={0x2842b1e6, 0x2, 0x4, 0x100, 0x5, {}, {0x3, 0x0, 0x7, 0x0, 0x0, 0x1, "e8151a3a"}, 0x7fffffff, 0x4, {&(0x7f0000000440)=[{0x2, 0x2cfc, {}, 0x4}, {0xfffffff8, 0x2, {}, 0x300}]}, 0xa})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20008844)

4.521191801s ago: executing program 9 (id=2179):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2c0000, 0x0)
fallocate(r0, 0x11, 0x4, 0x7)

3.068950036s ago: executing program 3 (id=2180):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f00000004c0)=""/215, 0xd7}], 0x2)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")

2.842026544s ago: executing program 9 (id=2181):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b0009008000", 0x2c}], 0x1)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c)

2.094298666s ago: executing program 9 (id=2182):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

1.058595357s ago: executing program 4 (id=2183):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2)

1.045922156s ago: executing program 9 (id=2184):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x1, 0x0, 0x25a}, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r3, 0x0, &(0x7f0000002280))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$revoke(0x3, r4)
keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x3})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x50)
unshare(0x62040200)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x17, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106d042bc50000000000010902240001000040000904004081030000000921f9000001220500090581034000000076840000000000008de64bf7b7799e12bb5985c692d4493112a970e53fb5319c4f4712ada82f3d1fbc579781dcb50037157fa7d7e56b15605a5f830210da62018cdfd5111a7cd0ae4c5ae52879bb"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
r7 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r9, 0x100000000000f7)
read$watch_queue(r8, &(0x7f00000000c0)=""/16, 0x10)

0s ago: executing program 6 (id=2185):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x40010002, 0x0, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1)

kernel console output (not intermixed with test programs):

lan: entered promiscuous mode
[ 1075.701741][T12420] veth1_vlan: entered promiscuous mode
[ 1075.876502][T12420] veth0_macvtap: entered promiscuous mode
[ 1075.893651][T12420] veth1_macvtap: entered promiscuous mode
[ 1075.991565][ T5781] usb 4-1: USB disconnect, device number 35
[ 1076.077244][T12420] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1076.162842][T12420] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1076.213613][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1076.213935][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1076.214178][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1076.214220][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1076.257244][T12709] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1076.703524][ T5884] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1076.790391][T12721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1281'.
[ 1076.853496][ T5884] usb 4-1: Using ep0 maxpacket: 8
[ 1076.857856][ T5884] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1076.857892][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1076.857925][ T5884] usb 4-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[ 1076.857948][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.870048][ T5884] usb 4-1: config 0 descriptor??
[ 1076.886521][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1076.886543][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1077.286906][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1077.286931][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1078.727244][T12749] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1079.231240][T12757] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1291'.
[ 1082.039936][ T5884] usbhid 4-1:0.0: can't add hid device: -32
[ 1082.040058][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[ 1082.174078][ T5781] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1082.280451][T10888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1082.286321][T10888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1082.291884][T10888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1082.322272][T10888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1082.323175][T10888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1082.363514][ T5781] usb 1-1: Using ep0 maxpacket: 16
[ 1082.368510][ T5781] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1082.368539][ T5781] usb 1-1: config 1 has no interface number 1
[ 1082.368677][ T5781] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1082.368697][ T5781] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1082.368740][ T5781] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1082.385853][ T5781] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1082.385883][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.385901][ T5781] usb 1-1: Product: syz
[ 1082.385914][ T5781] usb 1-1: Manufacturer: syz
[ 1082.385926][ T5781] usb 1-1: SerialNumber: syz
[ 1082.752419][ T5884] usb 4-1: USB disconnect, device number 36
[ 1082.967087][T12784] wlan1 speed is unknown, defaulting to 1000
[ 1083.093593][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 1083.093904][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 1083.094146][ T5781] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[ 1083.096932][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 1083.113893][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 1083.118266][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 1083.118755][ T5781] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82
[ 1083.119079][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 1083.644483][T12796] overlayfs: failed lookup in lower (newroot/4, name='file0', err=-40): overlapping layers
[ 1084.060841][T12801] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1084.166030][ T5781] usb 1-1: USB disconnect, device number 13
[ 1084.309356][T10888] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1
[ 1084.318324][T10888] Bluetooth: hci3: unexpected event for opcode 0x2039
[ 1084.376321][T12196] udevd[12196]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1084.423599][T11965] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1084.493554][T10888] Bluetooth: hci1: command tx timeout
[ 1084.604346][T11965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1084.604402][T11965] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1084.604427][T11965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.958862][T11965] usb 4-1: config 0 descriptor??
[ 1085.324115][T11965] usbhid 4-1:0.0: can't add hid device: -71
[ 1085.324245][T11965] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1085.528077][T11965] usb 4-1: USB disconnect, device number 37
[ 1087.398702][T10888] Bluetooth: hci1: command tx timeout
[ 1087.718873][T12784] chnl_net:caif_netlink_parms(): no params data found
[ 1088.436822][ T5803] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1088.460576][ T5803] Bluetooth: hci3: Injecting HCI hardware error event
[ 1088.484703][T10888] Bluetooth: hci3: hardware error 0x00
[ 1088.874932][T12851] fuse: Bad value for 'fd'
[ 1089.233543][  T917] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1089.236124][T12784] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1089.236361][T12784] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1089.236594][T12784] bridge_slave_0: entered allmulticast mode
[ 1089.283580][T12784] bridge_slave_0: entered promiscuous mode
[ 1089.287525][T12784] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1089.287725][T12784] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.287949][T12784] bridge_slave_1: entered allmulticast mode
[ 1089.332401][T12784] bridge_slave_1: entered promiscuous mode
[ 1089.412660][T12784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1089.423435][  T917] usb 2-1: Using ep0 maxpacket: 16
[ 1089.425282][  T917] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1089.425299][  T917] usb 2-1: config 1 has no interface number 1
[ 1089.425325][  T917] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1089.425338][  T917] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1089.425362][  T917] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1089.427614][  T917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1089.427639][  T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.427657][  T917] usb 2-1: Product: syz
[ 1089.427670][  T917] usb 2-1: Manufacturer: syz
[ 1089.427684][  T917] usb 2-1: SerialNumber: syz
[ 1089.461526][ T5803] Bluetooth: hci1: command tx timeout
[ 1089.486086][T12784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1089.751617][T12784] team0: Port device team_slave_0 added
[ 1089.767970][T12784] team0: Port device team_slave_1 added
[ 1090.003418][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1090.025954][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1090.056912][  T917] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[ 1090.060937][  T917] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82
[ 1090.205945][  T917] usb 2-1: USB disconnect, device number 2
[ 1090.296702][T12784] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1090.296723][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1090.296752][T12784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1090.313732][T12784] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1090.313752][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1090.313777][T12784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1090.567664][T12182] udevd[12182]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1090.663113][T10888] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1090.727095][T12784] hsr_slave_0: entered promiscuous mode
[ 1090.728869][T12784] hsr_slave_1: entered promiscuous mode
[ 1090.730091][T12784] debugfs: 'hsr0' already exists in 'hsr'
[ 1090.730119][T12784] Cannot create hsr debugfs directory
[ 1091.489165][T12784] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.533810][T10888] Bluetooth: hci1: command tx timeout
[ 1092.114195][  T917] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[ 1092.935777][  T917] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 1092.935818][  T917] usb 5-1: config 0 has no interface number 0
[ 1092.935865][  T917] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1092.935888][  T917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1092.935914][  T917] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1092.935940][  T917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1092.935965][  T917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1092.935991][  T917] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1092.936036][  T917] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1092.936060][  T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.077842][  T917] usb 5-1: config 0 descriptor??
[ 1093.079377][T12902] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1093.079577][T12902] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1093.092903][T12784] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1093.118929][  T917] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1093.292328][T12902] ldusb 5-1:0.55: Write buffer overflow, 162 bytes dropped
[ 1093.386033][T12639] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1093.468433][T12923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1093.493896][T12923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1093.563576][T12639] usb 4-1: Using ep0 maxpacket: 32
[ 1093.572121][T12639] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1093.572162][T12639] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1093.572175][T12639] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1093.572303][T12639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1093.572317][T12639] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1093.572331][T12639] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1093.572357][T12639] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1093.572495][T12639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.617641][T12639] usb 4-1: config 0 descriptor??
[ 1093.951498][T12639] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1093.985375][T12639] usb 4-1: USB disconnect, device number 39
[ 1094.042202][T12925] netlink: 'syz.1.1327': attribute type 21 has an invalid length.
[ 1094.087143][T12639] usblp1: removed
[ 1094.485026][T12639] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1094.665695][T12639] usb 4-1: Using ep0 maxpacket: 32
[ 1094.682808][T12639] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1094.682829][T12639] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1094.682841][T12639] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1094.683049][T12639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1094.683064][T12639] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1094.683078][T12639] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1094.683104][T12639] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1094.683213][T12639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.748659][T12639] usb 4-1: config 0 descriptor??
[ 1095.048838][T12639] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1095.161795][  T917] usb 5-1: USB disconnect, device number 2
[ 1095.214046][  T917] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[ 1095.232308][T12639] usb 4-1: USB disconnect, device number 40
[ 1095.273593][T12639] usblp1: removed
[ 1095.490886][T10888] Bluetooth: hci5: unexpected cc 0x2039 length: 9 > 1
[ 1095.491979][T10888] Bluetooth: hci5: unexpected event for opcode 0x2039
[ 1096.713494][T11965] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1096.872253][T11965] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1096.872275][T11965] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1096.872286][T11965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1096.872316][T11965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1096.872332][T11965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1096.886793][T11965] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1096.886825][T11965] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1096.886843][T11965] usb 5-1: Product: syz
[ 1096.886856][T11965] usb 5-1: Manufacturer: syz
[ 1096.898772][T11965] cdc_wdm 5-1:1.0: skipping garbage
[ 1096.898793][T11965] cdc_wdm 5-1:1.0: skipping garbage
[ 1096.909232][T11965] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1096.909253][T11965] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1098.565668][ T5781] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1098.723431][ T5781] usb 4-1: Using ep0 maxpacket: 32
[ 1098.728483][ T5781] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 1098.728515][ T5781] usb 4-1: config 0 has no interface number 0
[ 1098.728560][ T5781] usb 4-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1098.734436][ T5781] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1098.734468][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.734489][ T5781] usb 4-1: Product: syz
[ 1098.734504][ T5781] usb 4-1: Manufacturer: syz
[ 1098.734519][ T5781] usb 4-1: SerialNumber: syz
[ 1098.841379][ T5781] usb 4-1: config 0 descriptor??
[ 1099.541679][T10888] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1099.544273][T10888] Bluetooth: hci5: Injecting HCI hardware error event
[ 1099.548285][ T5803] Bluetooth: hci5: hardware error 0x00
[ 1100.010300][ T5781] usb 5-1: USB disconnect, device number 3
[ 1101.342183][  T917] usb 4-1: USB disconnect, device number 41
[ 1101.613630][ T5803] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1101.873724][  T917] usb 4-1: new low-speed USB device number 42 using dummy_hcd
[ 1102.051660][  T917] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[ 1102.051692][  T917] usb 4-1: config 0 has no interface number 0
[ 1102.051732][  T917] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1102.051747][  T917] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1102.051773][  T917] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1102.051870][  T917] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1102.051893][  T917] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1102.051908][  T917] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1102.051934][  T917] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1102.051947][  T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.157116][  T917] usb 4-1: config 0 descriptor??
[ 1102.158839][T12962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1102.158953][T12962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1102.192997][  T917] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1102.378471][T12962] ldusb 4-1:0.55: Write buffer overflow, 162 bytes dropped
[ 1102.898676][T12970] fuse: Unknown parameter '0x0000000000000003'
[ 1105.637827][  T917] usb 4-1: USB disconnect, device number 42
[ 1105.656876][  T917] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[ 1106.043500][T11965] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1106.203979][T11965] usb 5-1: Using ep0 maxpacket: 32
[ 1106.455814][T11965] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 1106.456034][T11965] usb 5-1: config 0 has no interface number 0
[ 1106.457089][T11965] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1106.781504][T11965] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1106.781538][T11965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.781559][T11965] usb 5-1: Product: syz
[ 1106.781574][T11965] usb 5-1: Manufacturer: syz
[ 1106.781588][T11965] usb 5-1: SerialNumber: syz
[ 1106.832904][T11965] usb 5-1: config 0 descriptor??
[ 1107.260318][T10888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1107.272524][T10888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1107.276490][T10888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1107.277932][T10888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1107.282359][T10888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1107.620689][T12998] Device name not specified.
[ 1107.620689][T12998] 
[ 1108.664773][T13002] fuse: Unknown parameter '0x0000000000000003'
[ 1108.824885][ T6707] usb 5-1: USB disconnect, device number 4
[ 1109.373663][ T5803] Bluetooth: hci0: command tx timeout
[ 1110.261650][ T6707] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1110.403390][ T6707] usb 4-1: Using ep0 maxpacket: 8
[ 1110.405845][ T6707] usb 4-1: config 0 has no interfaces?
[ 1110.408570][T10888] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1110.408882][ T6707] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1110.408909][ T6707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.408928][ T6707] usb 4-1: Product: syz
[ 1110.408941][ T6707] usb 4-1: Manufacturer: syz
[ 1110.408954][ T6707] usb 4-1: SerialNumber: syz
[ 1110.469461][ T6707] usb 4-1: config 0 descriptor??
[ 1110.515703][T10888] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1110.535370][T10888] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1110.592588][T10888] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1110.603602][T10888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1110.685307][ T6707] usb 4-1: USB disconnect, device number 43
[ 1111.761524][T10888] Bluetooth: hci0: command tx timeout
[ 1113.018784][T10888] Bluetooth: hci6: command tx timeout
[ 1113.516907][ T5781] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1113.670374][ T5781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1113.670411][ T5781] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1113.670425][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.675897][ T5781] usb 4-1: config 0 descriptor??
[ 1113.773475][ T5803] Bluetooth: hci0: command tx timeout
[ 1113.918709][ T5781] usbhid 4-1:0.0: can't add hid device: -71
[ 1113.918848][ T5781] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1113.931397][ T5781] usb 4-1: USB disconnect, device number 44
[ 1114.363602][   T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1115.054157][   T31] usb 4-1: Using ep0 maxpacket: 32
[ 1115.054387][ T5803] Bluetooth: hci6: command tx timeout
[ 1115.057728][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1115.057782][   T31] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[ 1115.057806][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1115.112383][   T31] usb 4-1: config 0 descriptor??
[ 1115.151152][   T31] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1115.166760][   T31] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1115.864151][ T5803] Bluetooth: hci0: command tx timeout
[ 1116.748710][ T5781] usb 4-1: USB disconnect, device number 45
[ 1116.761018][ T5781] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[ 1117.260384][ T5803] Bluetooth: hci6: command tx timeout
[ 1119.294247][ T5803] Bluetooth: hci6: command tx timeout
[ 1120.883473][T12639] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1121.581355][   T31] IPVS: starting estimator thread 0...
[ 1121.729217][T12639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1121.729274][T12639] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1121.729299][T12639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.775293][T12639] usb 4-1: config 0 descriptor??
[ 1121.833694][T13082] IPVS: using max 6 ests per chain, 14400 per kthread
[ 1121.996787][T12639] usbhid 4-1:0.0: can't add hid device: -71
[ 1121.996935][T12639] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1122.035270][T12639] usb 4-1: USB disconnect, device number 46
[ 1122.064769][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1122.064996][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1122.583696][T12639] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1122.743641][T12639] usb 4-1: Using ep0 maxpacket: 32
[ 1122.752853][T12639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1122.752895][T12639] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[ 1122.752909][T12639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.795800][T12639] usb 4-1: config 0 descriptor??
[ 1122.851214][T12639] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1122.866282][T12639] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1123.454913][ T6707] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1123.617210][ T6707] usb 5-1: config 0 has no interfaces?
[ 1123.620695][ T6707] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1123.620728][ T6707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1123.620750][ T6707] usb 5-1: Product: syz
[ 1123.620777][ T6707] usb 5-1: Manufacturer: syz
[ 1123.620791][ T6707] usb 5-1: SerialNumber: syz
[ 1123.665823][ T6707] usb 5-1: config 0 descriptor??
[ 1123.907896][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1381'.
[ 1123.907926][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1381'.
[ 1124.384886][ T6706] usb 4-1: USB disconnect, device number 47
[ 1124.389944][ T6706] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[ 1128.210914][T12927] batadv0: entered promiscuous mode
[ 1128.211313][T12927] vlan2: entered promiscuous mode
[ 1128.430897][T13088] team0: entered promiscuous mode
[ 1128.430915][T13088] team_slave_0: entered promiscuous mode
[ 1128.431063][T13088] team_slave_1: entered promiscuous mode
[ 1128.432830][T13088] bond0: entered promiscuous mode
[ 1128.432844][T13088] bond_slave_0: entered promiscuous mode
[ 1128.432980][T13088] bond_slave_1: entered promiscuous mode
[ 1128.449436][T13088] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1128.524566][ T6767] usb 5-1: USB disconnect, device number 5
[ 1128.778071][T12784] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1130.532810][T12784] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1131.122205][ T5959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1131.255014][T13014] wlan1 speed is unknown, defaulting to 1000
[ 1131.297767][T12994] wlan1 speed is unknown, defaulting to 1000
[ 1131.733496][ T6706] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1131.837862][ T5959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1131.883397][ T6706] usb 5-1: Using ep0 maxpacket: 32
[ 1131.886353][ T6706] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1131.886383][ T6706] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1131.886405][ T6706] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1131.886477][ T6706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1131.886499][ T6706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1131.886524][ T6706] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1131.886569][ T6706] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1131.886592][ T6706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1131.976374][ T6706] usb 5-1: config 0 descriptor??
[ 1132.305948][ T6706] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1132.355474][ T6706] usb 5-1: USB disconnect, device number 6
[ 1132.383681][ T6706] usblp0: removed
[ 1132.507297][ T5959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.775821][ T6706] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1132.967293][ T6706] usb 5-1: Using ep0 maxpacket: 32
[ 1133.656974][ T6706] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1133.657005][ T6706] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1133.657026][ T6706] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1133.657082][ T6706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1133.657105][ T6706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1133.657130][ T6706] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1133.657177][ T6706] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1133.657201][ T6706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.756613][ T6706] usb 5-1: config 0 descriptor??
[ 1133.930175][ T5959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1133.994992][ T6706] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1134.085277][T12784] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1134.163084][T12784] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1134.227356][ T6767] usb 5-1: USB disconnect, device number 7
[ 1134.249741][ T6767] usblp0: removed
[ 1134.277313][T12784] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1134.326748][T12784] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1134.674957][T13014] chnl_net:caif_netlink_parms(): no params data found
[ 1134.712169][T12994] chnl_net:caif_netlink_parms(): no params data found
[ 1134.805990][ T5959] bridge_slave_1: left allmulticast mode
[ 1134.806021][ T5959] bridge_slave_1: left promiscuous mode
[ 1134.806295][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1134.890128][ T5959] bridge_slave_0: left allmulticast mode
[ 1134.890159][ T5959] bridge_slave_0: left promiscuous mode
[ 1134.890435][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.411015][ T5781] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1135.599449][ T5781] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1135.599472][ T5781] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1135.599497][ T5781] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1135.599530][ T5781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1135.599545][ T5781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1135.605242][ T5781] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1135.605264][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1135.605276][ T5781] usb 5-1: Product: syz
[ 1135.605284][ T5781] usb 5-1: Manufacturer: syz
[ 1135.650652][ T5781] cdc_wdm 5-1:1.0: skipping garbage
[ 1135.650668][ T5781] cdc_wdm 5-1:1.0: skipping garbage
[ 1135.657866][ T5781] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1135.657881][ T5781] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1137.111841][ T5959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1137.165660][ T5959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1137.195655][ T5959] bond0 (unregistering): Released all slaves
[ 1138.571061][ T6706] usb 5-1: USB disconnect, device number 8
[ 1138.894316][T13014] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1138.895387][T13014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1138.895675][T13014] bridge_slave_0: entered allmulticast mode
[ 1138.899035][T13014] bridge_slave_0: entered promiscuous mode
[ 1138.937617][T12994] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1138.937778][T12994] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1138.938058][T12994] bridge_slave_0: entered allmulticast mode
[ 1138.941301][T12994] bridge_slave_0: entered promiscuous mode
[ 1139.229264][T13014] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1139.229432][T13014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.229799][T13014] bridge_slave_1: entered allmulticast mode
[ 1139.233254][T13014] bridge_slave_1: entered promiscuous mode
[ 1139.237191][T12994] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1139.237338][T12994] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.237658][T12994] bridge_slave_1: entered allmulticast mode
[ 1139.240565][T12994] bridge_slave_1: entered promiscuous mode
[ 1140.250271][T13014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1140.293113][T12994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1140.309604][T13014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1140.464099][T12994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1140.633666][ T5959] hsr_slave_0: left promiscuous mode
[ 1140.693511][ T5959] hsr_slave_1: left promiscuous mode
[ 1140.696235][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1140.696265][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1140.775788][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1140.775819][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1140.942711][ T5959] veth1_macvtap: left promiscuous mode
[ 1140.942783][ T5959] veth0_macvtap: left promiscuous mode
[ 1140.942936][ T5959] veth1_vlan: left promiscuous mode
[ 1140.943040][ T5959] veth0_vlan: left promiscuous mode
[ 1141.422080][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805deec800: rx timeout, send abort
[ 1141.425488][    C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805deec800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1141.964095][ T6706] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1142.152430][ T6706] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1142.152463][ T6706] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1142.152481][ T6706] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1142.152513][ T6706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1142.152529][ T6706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1142.157346][ T6706] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1142.157371][ T6706] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1142.157383][ T6706] usb 5-1: Product: syz
[ 1142.157391][ T6706] usb 5-1: Manufacturer: syz
[ 1142.285552][ T6706] cdc_wdm 5-1:1.0: skipping garbage
[ 1142.285569][ T6706] cdc_wdm 5-1:1.0: skipping garbage
[ 1142.338875][ T6706] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1142.338901][ T6706] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1142.599750][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1142.632296][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1142.642960][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1142.656455][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1142.657776][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1144.823533][ T5803] Bluetooth: hci3: command tx timeout
[ 1146.898270][ T5803] Bluetooth: hci3: command tx timeout
[ 1148.973825][ T5803] Bluetooth: hci3: command tx timeout
[ 1149.115970][ T6706] usb 5-1: USB disconnect, device number 9
[ 1151.044280][T13261] overlayfs: unescaped trailing colons in lowerdir mount option.
[ 1151.058838][ T5803] Bluetooth: hci3: command tx timeout
[ 1152.954319][ T5959] team0 (unregistering): Port device team_slave_1 removed
[ 1154.033407][ T6706] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1154.534711][ T5959] team0 (unregistering): Port device team_slave_0 removed
[ 1154.660440][ T6706] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1154.660473][ T6706] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1154.660493][ T6706] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1154.660547][ T6706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1154.660576][ T6706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1154.818672][ T6706] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1154.818704][ T6706] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1154.818722][ T6706] usb 5-1: Product: syz
[ 1154.818736][ T6706] usb 5-1: Manufacturer: syz
[ 1154.845890][ T6706] cdc_wdm 5-1:1.0: skipping garbage
[ 1154.845911][ T6706] cdc_wdm 5-1:1.0: skipping garbage
[ 1154.848932][ T6706] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1154.848949][ T6706] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1159.157184][   T31] usb 5-1: USB disconnect, device number 10
[ 1163.916917][T13014] team0: Port device team_slave_0 added
[ 1163.925562][T12994] team0: Port device team_slave_0 added
[ 1163.957080][T13014] team0: Port device team_slave_1 added
[ 1163.960009][T12994] team0: Port device team_slave_1 added
[ 1164.359306][T13014] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1164.359324][T13014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1164.359360][T13014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1164.362099][T12994] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1164.362118][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1164.362147][T12994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1164.499418][T12994] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1164.499438][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1164.499467][T12994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1164.501040][T13014] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1164.501054][T13014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1164.501082][T13014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1164.616013][T13218] wlan1 speed is unknown, defaulting to 1000
[ 1166.013450][   T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1166.060417][T13014] hsr_slave_0: entered promiscuous mode
[ 1166.061386][T13014] hsr_slave_1: entered promiscuous mode
[ 1166.073145][T13014] debugfs: 'hsr0' already exists in 'hsr'
[ 1166.073173][T13014] Cannot create hsr debugfs directory
[ 1166.163704][   T31] usb 5-1: Using ep0 maxpacket: 32
[ 1166.171775][   T31] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 1166.171806][   T31] usb 5-1: config 0 has no interface number 0
[ 1166.171855][   T31] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1166.172223][T12994] hsr_slave_0: entered promiscuous mode
[ 1166.211459][T12994] hsr_slave_1: entered promiscuous mode
[ 1166.219301][T12994] debugfs: 'hsr0' already exists in 'hsr'
[ 1166.219335][T12994] Cannot create hsr debugfs directory
[ 1166.237605][   T31] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1166.237653][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.237674][   T31] usb 5-1: Product: syz
[ 1166.237691][   T31] usb 5-1: Manufacturer: syz
[ 1166.237705][   T31] usb 5-1: SerialNumber: syz
[ 1166.309670][ T5959] IPVS: stop unused estimator thread 0...
[ 1166.345972][   T31] usb 5-1: config 0 descriptor??
[ 1166.358553][   T31] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1166.358590][   T31] em28xx 5-1:0.132: Video interface 132 found:
[ 1166.815021][   T31] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[ 1167.232074][   T31] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[ 1167.232102][   T31] em28xx 5-1:0.132: board has no eeprom
[ 1167.418153][   T31] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1167.418185][   T31] em28xx 5-1:0.132: analog set to bulk mode.
[ 1167.420620][ T6707] em28xx 5-1:0.132: Registering V4L2 extension
[ 1167.431824][   T31] usb 5-1: USB disconnect, device number 11
[ 1167.464654][   T31] em28xx 5-1:0.132: Disconnecting em28xx
[ 1168.792633][ T6707] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[ 1168.792652][ T6707] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[ 1168.792661][ T6707] em28xx 5-1:0.132: No AC97 audio processor
[ 1168.836499][ T6707] usb 5-1: Decoder not found
[ 1168.836523][ T6707] em28xx 5-1:0.132: failed to create media graph
[ 1168.836590][ T6707] em28xx 5-1:0.132: V4L2 device video103 deregistered
[ 1168.895800][T10888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1168.900422][T10888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1168.906699][T10888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1168.919411][T10888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1168.933592][T10888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1168.940008][ T6707] em28xx 5-1:0.132: Remote control support is not available for this card.
[ 1168.940800][   T31] em28xx 5-1:0.132: Closing input extension
[ 1169.481602][   T31] em28xx 5-1:0.132: Freeing device
[ 1171.007744][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1171.024022][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1171.061810][ T5803] Bluetooth: hci1: command tx timeout
[ 1171.062220][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1171.117174][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1171.118482][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1172.888137][T13359] wlan1 speed is unknown, defaulting to 1000
[ 1173.133975][ T5803] Bluetooth: hci1: command tx timeout
[ 1173.687880][T13390] loop5: detected capacity change from 0 to 7
[ 1173.737323][T13306] Dev loop5: unable to read RDB block 7
[ 1173.737374][T13306]  loop5: unable to read partition table
[ 1173.737681][T13306] loop5: partition table beyond EOD, truncated
[ 1173.808164][T13390] Dev loop5: unable to read RDB block 7
[ 1173.808199][T13390]  loop5: unable to read partition table
[ 1173.811481][T13390] loop5: partition table beyond EOD, truncated
[ 1173.811515][T13390] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1174.190463][ T5803] Bluetooth: hci0: command tx timeout
[ 1175.224044][ T5803] Bluetooth: hci1: command tx timeout
[ 1175.333650][T13377] wlan1 speed is unknown, defaulting to 1000
[ 1175.780173][T13218] chnl_net:caif_netlink_parms(): no params data found
[ 1176.253874][ T5803] Bluetooth: hci0: command tx timeout
[ 1177.015848][T13218] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.015995][T13218] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.016278][T13218] bridge_slave_0: entered allmulticast mode
[ 1177.021140][T13218] bridge_slave_0: entered promiscuous mode
[ 1177.079833][T13218] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1177.080000][T13218] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1177.080484][T13218] bridge_slave_1: entered allmulticast mode
[ 1177.091892][T13218] bridge_slave_1: entered promiscuous mode
[ 1177.165949][T13424] loop5: detected capacity change from 0 to 7
[ 1177.194172][T13306] Dev loop5: unable to read RDB block 7
[ 1177.194220][T13306]  loop5: unable to read partition table
[ 1177.194516][T13306] loop5: partition table beyond EOD, truncated
[ 1177.233862][T13424] Dev loop5: unable to read RDB block 7
[ 1177.233908][T13424]  loop5: unable to read partition table
[ 1177.234144][T13424] loop5: partition table beyond EOD, truncated
[ 1177.234176][T13424] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1178.179894][ T5803] Bluetooth: hci1: command tx timeout
[ 1178.333997][ T5803] Bluetooth: hci0: command tx timeout
[ 1179.488114][   T37] kauditd_printk_skb: 1 callbacks suppressed
[ 1179.488135][   T37] audit: type=1326 audit(1771376415.681:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13436 comm="syz.3.1479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0d6b4c629 code=0x0
[ 1179.528991][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1179.707103][T13218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1179.776918][T13218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1180.168357][T13442] binder: 13441:13442 ioctl c0306201 0 returned -14
[ 1180.405288][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1180.423742][ T5803] Bluetooth: hci0: command tx timeout
[ 1180.817230][T13218] team0: Port device team_slave_0 added
[ 1181.089246][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1181.233770][T13359] chnl_net:caif_netlink_parms(): no params data found
[ 1181.269479][T13218] team0: Port device team_slave_1 added
[ 1182.648950][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1182.665042][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.665121][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.860323][T13218] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1182.860352][T13218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1182.860380][T13218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1182.882943][T13377] chnl_net:caif_netlink_parms(): no params data found
[ 1182.919931][T13218] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1182.919951][T13218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1182.919980][T13218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1183.293703][T13359] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.293851][T13359] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1183.294135][T13359] bridge_slave_0: entered allmulticast mode
[ 1183.297302][T13359] bridge_slave_0: entered promiscuous mode
[ 1183.512979][T13359] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.513118][T13359] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1183.513603][T13359] bridge_slave_1: entered allmulticast mode
[ 1183.516533][T13359] bridge_slave_1: entered promiscuous mode
[ 1183.626848][T13218] hsr_slave_0: entered promiscuous mode
[ 1183.627758][T13218] hsr_slave_1: entered promiscuous mode
[ 1183.628400][T13218] debugfs: 'hsr0' already exists in 'hsr'
[ 1183.628416][T13218] Cannot create hsr debugfs directory
[ 1184.046376][T13359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1184.289348][   T37] audit: type=1326 audit(1771376420.481:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13471 comm="syz.4.1489" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c5199c629 code=0x0
[ 1184.494291][T13377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1184.494439][T13377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1184.495091][T13377] bridge_slave_0: entered allmulticast mode
[ 1184.498257][T13377] bridge_slave_0: entered promiscuous mode
[ 1184.529375][T13359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1184.571190][T13377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.571337][T13377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1184.571595][T13377] bridge_slave_1: entered allmulticast mode
[ 1184.600411][T13377] bridge_slave_1: entered promiscuous mode
[ 1184.821433][T13359] team0: Port device team_slave_0 added
[ 1184.841836][   T13] bridge_slave_1: left allmulticast mode
[ 1184.841869][   T13] bridge_slave_1: left promiscuous mode
[ 1184.842122][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1184.924606][   T13] bridge_slave_0: left allmulticast mode
[ 1184.924736][   T13] bridge_slave_0: left promiscuous mode
[ 1184.924930][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1185.018255][   T13] bridge_slave_1: left allmulticast mode
[ 1185.018282][   T13] bridge_slave_1: left promiscuous mode
[ 1185.018445][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1185.084669][   T13] bridge_slave_0: left allmulticast mode
[ 1185.084695][   T13] bridge_slave_0: left promiscuous mode
[ 1185.084878][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1186.294173][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1186.374267][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1186.435733][   T13] bond0 (unregistering): Released all slaves
[ 1188.086390][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1188.164452][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1188.207375][   T13] bond0 (unregistering): Released all slaves
[ 1188.268745][T13377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1188.280005][T13359] team0: Port device team_slave_1 added
[ 1188.497240][T13377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1188.954560][T13359] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1188.954579][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1188.954608][T13359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1189.292591][   T37] audit: type=1326 audit(1771376425.481:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13504 comm="syz.4.1501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c5199c629 code=0x0
[ 1189.528146][T13377] team0: Port device team_slave_0 added
[ 1189.529908][T13359] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1189.529925][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1189.529951][T13359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1189.647872][T13377] team0: Port device team_slave_1 added
[ 1190.236028][T13377] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1190.236048][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1190.236077][T13377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1190.461739][T13377] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1190.461759][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1190.461782][T13377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1190.629169][T13359] hsr_slave_0: entered promiscuous mode
[ 1190.630171][T13359] hsr_slave_1: entered promiscuous mode
[ 1190.630833][T13359] debugfs: 'hsr0' already exists in 'hsr'
[ 1190.630860][T13359] Cannot create hsr debugfs directory
[ 1192.203541][   T13] hsr_slave_0: left promiscuous mode
[ 1192.253625][   T13] hsr_slave_1: left promiscuous mode
[ 1192.254811][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1192.294694][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1192.523605][   T13] hsr_slave_0: left promiscuous mode
[ 1192.585117][   T13] hsr_slave_1: left promiscuous mode
[ 1192.608035][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1192.608064][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1192.654708][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1192.654737][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1192.793207][T12264] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[ 1192.907423][T12264] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1192.936383][   T13] veth1_macvtap: left promiscuous mode
[ 1192.936497][   T13] veth0_macvtap: left promiscuous mode
[ 1192.936795][   T13] veth1_vlan: left promiscuous mode
[ 1192.936998][   T13] veth0_vlan: left promiscuous mode
[ 1193.063607][ T6767] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1193.161438][   T37] audit: type=1326 audit(1771376429.351:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13531 comm="syz.4.1510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c5199c629 code=0x0
[ 1194.054206][T13535] ieee802154 phy0 wpan0: encryption failed: -22
[ 1194.494877][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1195.489062][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1197.018119][   T37] audit: type=1326 audit(1771376433.211:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13553 comm="syz.3.1518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0d6b4c629 code=0x0
[ 1198.213692][  T806] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[ 1198.241217][  T806] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1198.440498][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'.
[ 1198.462626][  T806] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1201.135250][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1201.427334][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1202.821644][T10888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1202.857982][T10888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1202.859606][T10888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1202.861186][T10888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1202.862019][T10888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1202.998230][   T37] audit: type=1326 audit(1771376439.191:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13586 comm="syz.3.1529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0d6b4c629 code=0x0
[ 1205.002332][ T5803] Bluetooth: hci4: command tx timeout
[ 1205.363479][ T6707] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1205.513465][ T6707] usb 4-1: Using ep0 maxpacket: 32
[ 1205.515762][ T6707] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[ 1205.515798][ T6707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1205.518474][ T6707] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1205.518499][ T6707] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1205.518512][ T6707] usb 4-1: Product: syz
[ 1205.518520][ T6707] usb 4-1: Manufacturer: syz
[ 1205.518528][ T6707] usb 4-1: SerialNumber: syz
[ 1205.522692][ T6707] usb 4-1: config 0 descriptor??
[ 1205.630199][ T6707] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1205.741912][ T5980] usb 4-1: Failed to submit usb control message: -71
[ 1205.741940][ T5980] usb 4-1: unable to send the bmi data to the device: -71
[ 1205.741951][ T5980] usb 4-1: unable to get target info from device
[ 1205.741960][ T5980] usb 4-1: could not get target info (-71)
[ 1205.742276][ T5980] usb 4-1: could not probe fw (-71)
[ 1205.742657][ T6707] usb 4-1: USB disconnect, device number 50
[ 1206.138148][T13377] hsr_slave_0: entered promiscuous mode
[ 1206.139784][T13377] hsr_slave_1: entered promiscuous mode
[ 1206.141089][T13377] debugfs: 'hsr0' already exists in 'hsr'
[ 1206.141116][T13377] Cannot create hsr debugfs directory
[ 1206.622515][   T37] audit: type=1326 audit(1771376442.811:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13611 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d6b4c629 code=0x7ffc0000
[ 1206.622576][   T37] audit: type=1326 audit(1771376442.811:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13611 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0d6b4c629 code=0x7ffc0000
[ 1206.622623][   T37] audit: type=1326 audit(1771376442.811:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13611 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d6b4c629 code=0x7ffc0000
[ 1206.622670][   T37] audit: type=1326 audit(1771376442.811:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13611 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd0d6b4c629 code=0x7ffc0000
[ 1206.622715][   T37] audit: type=1326 audit(1771376442.811:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13611 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d6b4c629 code=0x7ffc0000
[ 1206.622761][   T37] audit: type=1326 audit(1771376442.811:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13611 comm="syz.3.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd0d6b4c629 code=0x7ffc0000
[ 1206.622807][   T37] audit: type=1326 audit(1771376442.811:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13611 comm="syz.3.1537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0d6b4c629 code=0x0
[ 1206.800383][T13612] kvm: user requested TSC rate below hardware speed
[ 1207.059680][ T5803] Bluetooth: hci4: command tx timeout
[ 1207.121616][T13580] wlan1 speed is unknown, defaulting to 1000
[ 1207.183634][ T6767] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1207.373534][ T6767] usb 5-1: Using ep0 maxpacket: 8
[ 1207.390673][ T6767] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1207.390707][ T6767] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1207.390733][ T6767] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1207.390757][ T6767] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1207.390802][ T6767] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1207.390826][ T6767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.719939][ T6767] usb 5-1: GET_CAPABILITIES returned 0
[ 1207.719997][ T6767] usbtmc 5-1:16.0: can't read capabilities
[ 1208.656936][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.753709][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1209.138917][ T5803] Bluetooth: hci4: command tx timeout
[ 1209.633552][T13622] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1209.633703][T13622] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1209.732198][T13622] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1209.908669][T13622] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1209.908822][T13622] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1210.008609][T13622] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1210.087799][T13622] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1210.087886][T13622] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1210.126165][   T31] usb 5-1: USB disconnect, device number 12
[ 1210.186525][T13622] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1210.318787][T13622] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1210.318886][T13622] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1210.417806][T13622] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1210.770677][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1541'.
[ 1210.890187][T13629] overlayfs: missing 'lowerdir'
[ 1212.146906][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1212.147175][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1212.296339][T13627] syz_tun: entered promiscuous mode
[ 1212.324552][T13627] syz_tun: left promiscuous mode
[ 1212.333453][T10888] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1213.653113][T13646] fuse: Bad value for 'fd'
[ 1214.183486][T10888] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1214.244296][T13643] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1214.244571][T13643] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1214.244765][T13643] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1214.587837][T13580] chnl_net:caif_netlink_parms(): no params data found
[ 1214.643634][T13655] overlayfs: missing 'lowerdir'
[ 1215.893104][T10888] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1216.092429][   T13] bridge_slave_1: left allmulticast mode
[ 1216.092463][   T13] bridge_slave_1: left promiscuous mode
[ 1216.092729][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1216.155187][   T13] bridge_slave_0: left allmulticast mode
[ 1216.155221][   T13] bridge_slave_0: left promiscuous mode
[ 1216.155522][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1216.238636][   T13] bridge_slave_1: left allmulticast mode
[ 1216.238669][   T13] bridge_slave_1: left promiscuous mode
[ 1216.238923][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1216.523954][T10888] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1216.523971][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1216.575394][   T13] bridge_slave_0: left allmulticast mode
[ 1216.575436][   T13] bridge_slave_0: left promiscuous mode
[ 1216.575757][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1216.785653][   T13] bridge_slave_1: left allmulticast mode
[ 1216.785690][   T13] bridge_slave_1: left promiscuous mode
[ 1216.785988][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1216.870628][   T13] bridge_slave_0: left allmulticast mode
[ 1216.870662][   T13] bridge_slave_0: left promiscuous mode
[ 1216.870946][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1217.382666][T13671] trusted_key: encrypted_key: key user:syz not found
[ 1218.261392][T10888] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1218.567923][T13676] fuse: Bad value for 'fd'
[ 1218.573872][T10888] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1218.585248][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1218.674501][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1218.739191][   T13] bond0 (unregistering): Released all slaves
[ 1219.004129][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1219.087136][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1219.148430][   T13] bond0 (unregistering): Released all slaves
[ 1219.444258][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1219.544579][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1219.625877][   T13] bond0 (unregistering): Released all slaves
[ 1219.758308][T13673] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1219.761499][T13673] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1219.762203][T13673] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1220.867296][T13580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1220.867523][T13580] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1220.867818][T13580] bridge_slave_0: entered allmulticast mode
[ 1220.892778][T13580] bridge_slave_0: entered promiscuous mode
[ 1220.907471][T13580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1220.911339][T13580] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1220.911594][T13580] bridge_slave_1: entered allmulticast mode
[ 1220.916400][T13580] bridge_slave_1: entered promiscuous mode
[ 1221.033472][   T13] hsr_slave_0: left promiscuous mode
[ 1221.073483][   T13] hsr_slave_1: left promiscuous mode
[ 1221.074583][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1221.127913][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1221.202362][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88803c914000: rx timeout, send abort
[ 1221.202545][    C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88803c914000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1221.208008][   T13] hsr_slave_0: left promiscuous mode
[ 1221.263840][   T13] hsr_slave_1: left promiscuous mode
[ 1221.264932][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1221.315281][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1221.976825][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1221.979363][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1221.981857][T10888] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1222.272784][   T13] hsr_slave_0: left promiscuous mode
[ 1222.594670][   T13] hsr_slave_1: left promiscuous mode
[ 1222.595810][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1222.668008][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1223.561325][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1223.994112][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1225.124136][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1225.254401][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1226.225683][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1226.344431][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1227.000746][T13580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1227.017336][T13580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1227.120847][T13580] team0: Port device team_slave_0 added
[ 1227.134813][T13710] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1227.135049][T13710] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1227.135345][T13710] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1227.135681][T13580] team0: Port device team_slave_1 added
[ 1227.328515][T13580] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1227.328534][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1227.328563][T13580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1227.373711][T13580] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1227.373730][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1227.373757][T13580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1227.404944][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1570'.
[ 1227.898582][T13580] hsr_slave_0: entered promiscuous mode
[ 1227.902654][T13580] hsr_slave_1: entered promiscuous mode
[ 1227.917590][T13580] debugfs: 'hsr0' already exists in 'hsr'
[ 1227.917635][T13580] Cannot create hsr debugfs directory
[ 1228.085384][T13379] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1228.103497][T13379] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1228.105398][T13379] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1228.106628][T13379] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1228.107445][T13379] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1229.213358][T10888] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1229.223773][T10888] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1229.758096][T13722] wlan1 speed is unknown, defaulting to 1000
[ 1230.042887][T13377] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1230.152327][T13377] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1230.249823][T13377] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1230.253520][T10888] Bluetooth: hci3: command tx timeout
[ 1230.384459][T13377] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1231.413699][T13580] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1231.511915][T13580] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1231.572634][T13580] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1231.703514][T13580] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1231.746187][T13379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1231.770578][T13379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1231.772132][T13379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1231.775393][T13379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1231.776293][T13379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1232.333553][T10888] Bluetooth: hci3: command tx timeout
[ 1232.546032][T13722] chnl_net:caif_netlink_parms(): no params data found
[ 1232.570579][T13758] wlan1 speed is unknown, defaulting to 1000
[ 1233.041027][T13784] netlink: 'syz.4.1578': attribute type 33 has an invalid length.
[ 1233.041055][T13784] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1578'.
[ 1233.095838][T13770] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1233.096136][T13770] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1233.096629][T13770] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1233.224299][T13770] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1233.316785][T13770] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1233.316908][T13770] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1233.433838][T13770] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1233.466625][T13722] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1233.466823][T13722] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1233.467038][T13722] bridge_slave_0: entered allmulticast mode
[ 1233.470793][T13722] bridge_slave_0: entered promiscuous mode
[ 1233.487855][T13722] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1233.488043][T13722] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1233.488251][T13722] bridge_slave_1: entered allmulticast mode
[ 1233.494568][T13722] bridge_slave_1: entered promiscuous mode
[ 1233.979342][T13722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1234.048061][T13722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1234.155807][T13722] team0: Port device team_slave_0 added
[ 1234.186977][T13722] team0: Port device team_slave_1 added
[ 1234.734932][T13722] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1234.734946][T13722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1234.734962][T13722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1234.753384][T10888] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1234.786241][T13722] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1234.786261][T13722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1234.786291][T13722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1235.134507][T13379] Bluetooth: hci3: command 0x0419 tx timeout
[ 1235.386976][T13379] Bluetooth: hci1: command 0x041b tx timeout
[ 1235.390982][T13758] chnl_net:caif_netlink_parms(): no params data found
[ 1235.464388][T13722] hsr_slave_0: entered promiscuous mode
[ 1235.465291][T13722] hsr_slave_1: entered promiscuous mode
[ 1235.465878][T13722] debugfs: 'hsr0' already exists in 'hsr'
[ 1235.465894][T13722] Cannot create hsr debugfs directory
[ 1235.571113][   T13] bridge_slave_1: left allmulticast mode
[ 1235.571146][   T13] bridge_slave_1: left promiscuous mode
[ 1235.571402][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1235.665580][   T13] bridge_slave_0: left allmulticast mode
[ 1235.665612][   T13] bridge_slave_0: left promiscuous mode
[ 1235.665913][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1236.575055][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1236.694359][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1236.780043][   T13] bond0 (unregistering): Released all slaves
[ 1237.169033][T13580] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1237.214154][T13379] Bluetooth: hci3: command 0x0419 tx timeout
[ 1237.453500][T13379] Bluetooth: hci1: command 0x041b tx timeout
[ 1237.815672][   T13] hsr_slave_0: left promiscuous mode
[ 1237.865157][   T13] hsr_slave_1: left promiscuous mode
[ 1237.866252][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1237.903443][T13858] IPVS: persistence engine module ip_vs_pe_ not found
[ 1237.922454][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1238.804142][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1238.975843][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1239.293753][T13379] Bluetooth: hci3: command 0x0419 tx timeout
[ 1239.543517][T13379] Bluetooth: hci1: command 0x041b tx timeout
[ 1240.076541][T13863] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1240.076869][T13863] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1240.077178][T13863] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1240.111915][T13758] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1240.112067][T13758] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1240.112283][T13758] bridge_slave_0: entered allmulticast mode
[ 1240.137939][T13758] bridge_slave_0: entered promiscuous mode
[ 1240.210822][T13758] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1240.210969][T13758] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1240.211233][T13758] bridge_slave_1: entered allmulticast mode
[ 1240.236186][T13758] bridge_slave_1: entered promiscuous mode
[ 1240.348252][T13580] 8021q: adding VLAN 0 to HW filter on device team0
[ 1240.525416][T13758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1240.617004][T13758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1240.767157][T13593] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1240.767312][T13593] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1241.076736][T13758] team0: Port device team_slave_0 added
[ 1241.131244][T13593] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1241.131478][T13593] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1241.354291][T13758] team0: Port device team_slave_1 added
[ 1241.996900][T13910] IPVS: persistence engine module ip_vs_pe_ not found
[ 1242.107912][T10888] Bluetooth: hci3: command 0x0419 tx timeout
[ 1242.107948][T10888] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1242.107987][T13379] Bluetooth: hci1: command 0x041b tx timeout
[ 1242.413165][T13758] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1242.413183][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1242.413213][T13758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1242.617255][T13758] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1242.617275][T13758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1242.617304][T13758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1243.218962][T13930] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[ 1243.792782][T13758] hsr_slave_0: entered promiscuous mode
[ 1243.798924][T13758] hsr_slave_1: entered promiscuous mode
[ 1243.802945][T13758] debugfs: 'hsr0' already exists in 'hsr'
[ 1243.802974][T13758] Cannot create hsr debugfs directory
[ 1244.104243][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.104324][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.173506][T13379] Bluetooth: hci1: command 0x041b tx timeout
[ 1244.682686][T13940] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1244.767393][T13940] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1244.769503][T13940] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1246.573970][T13379] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1246.704532][T13968] IPVS: persistence engine module ip_vs_pe_ not found
[ 1246.983618][T13379] Bluetooth: hci3: command 0x0419 tx timeout
[ 1246.983666][T13379] Bluetooth: hci1: command 0x041b tx timeout
[ 1247.707054][T13722] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1247.778399][T13722] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1247.935181][T13722] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1248.170146][T13722] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1248.230073][   T13] bridge_slave_1: left allmulticast mode
[ 1248.230096][   T13] bridge_slave_1: left promiscuous mode
[ 1248.230275][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1248.380300][   T13] bridge_slave_0: left allmulticast mode
[ 1248.380333][   T13] bridge_slave_0: left promiscuous mode
[ 1248.380656][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1248.574003][T12264] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1248.738956][T12264] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[ 1248.738988][T12264] usb 5-1: config 0 has no interface number 0
[ 1248.742386][T12264] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 1248.742420][T12264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1248.742455][T12264] usb 5-1: Product: syz
[ 1248.742469][T12264] usb 5-1: Manufacturer: syz
[ 1248.742483][T12264] usb 5-1: SerialNumber: syz
[ 1248.803543][T12264] usb 5-1: config 0 descriptor??
[ 1249.074830][T12264] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823)
[ 1249.074867][T12264] uvcvideo 5-1:0.64: No valid video chain found.
[ 1249.097374][T12264] usb 5-1: USB disconnect, device number 13
[ 1249.714033][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1249.822623][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1249.897850][   T13] bond0 (unregistering): Released all slaves
[ 1249.964136][T13580] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1251.044092][   T13] hsr_slave_0: left promiscuous mode
[ 1251.200906][   T13] hsr_slave_1: left promiscuous mode
[ 1251.202085][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1251.264610][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1252.966332][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1253.144803][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1255.546231][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'.
[ 1257.261153][T13580] veth0_vlan: entered promiscuous mode
[ 1257.326683][T13580] veth1_vlan: entered promiscuous mode
[ 1257.617223][T13580] veth0_macvtap: entered promiscuous mode
[ 1257.675071][T13722] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1257.704309][T13580] veth1_macvtap: entered promiscuous mode
[ 1257.816633][T13722] 8021q: adding VLAN 0 to HW filter on device team0
[ 1257.845926][T13580] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1257.867336][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1257.867494][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1257.907447][T13580] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1257.937827][ T1299] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1257.937984][ T1299] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1257.992412][T11578] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.008498][T11578] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.010595][T11578] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.014247][T11578] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1259.823561][T14118] netlink: 'syz.4.1626': attribute type 61 has an invalid length.
[ 1259.823589][T14118] netlink: 'syz.4.1626': attribute type 64 has an invalid length.
[ 1260.042269][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1260.042294][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1261.265056][T13758] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1261.395191][ T4968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1261.395208][ T4968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1261.397234][T13758] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1261.474584][T13758] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1261.586292][T13758] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1263.433000][T13722] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1264.610333][T13758] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1264.730964][T13758] 8021q: adding VLAN 0 to HW filter on device team0
[ 1264.785796][T13593] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1264.786007][T13593] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1264.848845][T13593] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1264.849044][T13593] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1265.834705][T13722] veth0_vlan: entered promiscuous mode
[ 1266.014991][T13722] veth1_vlan: entered promiscuous mode
[ 1268.293975][T13722] veth0_macvtap: entered promiscuous mode
[ 1268.324907][ T6767] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1268.453522][ T6767] usb 4-1: device descriptor read/64, error -71
[ 1268.462586][T13722] veth1_macvtap: entered promiscuous mode
[ 1270.283392][ T6767] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1270.473477][ T6767] usb 4-1: device descriptor read/64, error -71
[ 1270.492631][T13722] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1270.542640][T13722] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1270.580176][ T1299] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1270.584285][ T6767] usb usb4-port1: attempt power cycle
[ 1270.596764][ T1299] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1270.600430][T13758] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1270.601240][ T1299] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1270.601511][ T1299] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1270.974739][ T6767] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1271.167153][ T6767] usb 4-1: device descriptor read/8, error -71
[ 1271.702458][ T1355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1271.702492][ T1355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1271.875527][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1271.875552][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1272.837600][T13758] veth0_vlan: entered promiscuous mode
[ 1272.938380][T13758] veth1_vlan: entered promiscuous mode
[ 1273.245081][T13758] veth0_macvtap: entered promiscuous mode
[ 1273.309270][T13758] veth1_macvtap: entered promiscuous mode
[ 1273.499053][T13758] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1273.548919][T13758] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1273.611400][ T1299] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1273.651331][ T1299] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1273.651683][ T1299] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1273.653991][ T1299] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1275.498893][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1275.498918][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1275.913067][T14283] loop5: detected capacity change from 0 to 7
[ 1275.916824][T14209] Dev loop5: unable to read RDB block 7
[ 1275.916868][T14209]  loop5: unable to read partition table
[ 1275.917106][T14209] loop5: partition table beyond EOD, truncated
[ 1275.943600][T14283] Dev loop5: unable to read RDB block 7
[ 1275.943649][T14283]  loop5: unable to read partition table
[ 1275.943896][T14283] loop5: partition table beyond EOD, truncated
[ 1275.943916][T14283] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1275.962519][ T4968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1275.962538][ T4968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1276.993390][  T917] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1277.143530][  T917] usb 4-1: Using ep0 maxpacket: 8
[ 1277.146355][  T917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1277.149374][  T917] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1277.149403][  T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.149423][  T917] usb 4-1: Product: syz
[ 1277.149438][  T917] usb 4-1: Manufacturer: syz
[ 1277.149461][  T917] usb 4-1: SerialNumber: syz
[ 1277.181951][  T917] usb 4-1: config 0 descriptor??
[ 1277.436823][  T917] usb 4-1: USB disconnect, device number 55
[ 1277.497263][T14320] input: syz0 as /devices/virtual/input/input10
[ 1277.591578][T14324] netlink: 'syz.5.1667': attribute type 6 has an invalid length.
[ 1277.825856][T14331] loop5: detected capacity change from 0 to 7
[ 1277.842870][T14331] Dev loop5: unable to read RDB block 7
[ 1277.842904][T14331]  loop5: unable to read partition table
[ 1277.843047][T14331] loop5: partition table beyond EOD, truncated
[ 1277.843077][T14331] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1278.443478][ T6706] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1278.613401][ T6706] usb 4-1: Using ep0 maxpacket: 32
[ 1278.629966][ T6706] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1278.629997][ T6706] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1278.630018][ T6706] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1278.630091][ T6706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1278.630114][ T6706] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1278.630139][ T6706] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1278.630192][ T6706] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1278.630215][ T6706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.738245][ T6706] usb 4-1: config 0 descriptor??
[ 1278.975283][ T6706] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1279.011059][ T6706] usb 4-1: USB disconnect, device number 56
[ 1279.065959][ T6706] usblp0: removed
[ 1279.388678][   T31] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[ 1279.416140][   T31] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1279.555204][ T6706] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1279.724377][ T6706] usb 4-1: Using ep0 maxpacket: 32
[ 1279.726736][ T6706] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1279.726757][ T6706] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1279.726769][ T6706] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1279.726825][ T6706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1279.726849][ T6706] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1279.726872][ T6706] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1279.726913][ T6706] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1279.726927][ T6706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.823133][ T6706] usb 4-1: config 0 descriptor??
[ 1280.267970][ T6706] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1280.303977][ T6706] usb 4-1: USB disconnect, device number 57
[ 1280.326537][ T6706] usblp0: removed
[ 1281.198146][T14381] input: syz0 as /devices/virtual/input/input11
[ 1282.163608][ T6767] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1282.323446][ T6767] usb 5-1: Using ep0 maxpacket: 32
[ 1282.325986][ T6767] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1282.326015][ T6767] usb 5-1: config 0 has no interfaces?
[ 1282.329271][ T6767] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1282.329302][ T6767] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1282.329324][ T6767] usb 5-1: Product: syz
[ 1282.329337][ T6767] usb 5-1: Manufacturer: syz
[ 1282.329350][ T6767] usb 5-1: SerialNumber: syz
[ 1282.471170][ T6767] usb 5-1: config 0 descriptor??
[ 1282.687297][T12264] usb 5-1: USB disconnect, device number 14
[ 1282.874438][T14419] input: syz0 as /devices/virtual/input/input12
[ 1282.939837][T14424] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1284.698108][T14455] kvm: user requested TSC rate below hardware speed
[ 1285.509219][T14464] input: syz0 as /devices/virtual/input/input13
[ 1286.051786][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1702'.
[ 1286.431424][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1705'.
[ 1286.883390][T12639] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1287.043405][T12639] usb 4-1: Using ep0 maxpacket: 32
[ 1287.045772][T12639] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1287.045801][T12639] usb 4-1: config 0 has no interfaces?
[ 1287.048577][T12639] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1287.048598][T12639] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1287.048609][T12639] usb 4-1: Product: syz
[ 1287.048617][T12639] usb 4-1: Manufacturer: syz
[ 1287.048626][T12639] usb 4-1: SerialNumber: syz
[ 1287.099767][T12639] usb 4-1: config 0 descriptor??
[ 1287.335443][T12639] usb 4-1: USB disconnect, device number 58
[ 1290.232936][T14509] input: syz0 as /devices/virtual/input/input14
[ 1291.641731][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1718'.
[ 1296.470333][T14558] input: syz0 as /devices/virtual/input/input15
[ 1296.694195][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1726'.
[ 1297.813866][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1731'.
[ 1299.471837][   T31] IPVS: starting estimator thread 0...
[ 1299.704649][T14588] IPVS: using max 6 ests per chain, 14400 per kthread
[ 1300.841529][T14611] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[ 1300.851665][T14614] input: syz0 as /devices/virtual/input/input16
[ 1303.063348][ T6767] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1303.255443][ T6767] usb 5-1: Using ep0 maxpacket: 32
[ 1303.650741][ T6767] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1303.669488][ T6767] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1303.669520][ T6767] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1303.669542][ T6767] usb 5-1: Product: syz
[ 1303.669556][ T6767] usb 5-1: Manufacturer: syz
[ 1303.669571][ T6767] usb 5-1: SerialNumber: syz
[ 1303.735537][ T6767] usb 5-1: config 0 descriptor??
[ 1305.169772][ T6767] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1305.204997][ T6767] usb 5-1: USB disconnect, device number 15
[ 1305.260254][  T811] usb 5-1: Failed to submit usb control message: -71
[ 1305.260295][  T811] usb 5-1: unable to send the bmi data to the device: -71
[ 1305.260314][  T811] usb 5-1: unable to get target info from device
[ 1305.260330][  T811] usb 5-1: could not get target info (-71)
[ 1305.260349][  T811] usb 5-1: could not probe fw (-71)
[ 1305.542849][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.542940][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1306.273349][ T6767] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[ 1306.431911][ T6767] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1306.431943][ T6767] usb 6-1: config 0 has no interface number 0
[ 1306.431991][ T6767] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1306.432015][ T6767] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1306.432043][ T6767] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1306.432068][ T6767] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1306.432095][ T6767] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1306.432121][ T6767] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1306.432175][ T6767] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1306.432199][ T6767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1306.556723][ T6767] usb 6-1: config 0 descriptor??
[ 1306.575995][T14667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1306.576126][T14667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1306.699460][ T6767] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1306.788356][ T6767] usb 6-1: USB disconnect, device number 2
[ 1306.824436][ T6767] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1308.114653][ T6706] IPVS: starting estimator thread 0...
[ 1308.203434][T14693] IPVS: using max 9 ests per chain, 21600 per kthread
[ 1309.773695][T14713] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[ 1309.983398][ T6767] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1310.133388][ T6767] usb 6-1: Using ep0 maxpacket: 32
[ 1310.135938][ T6767] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1310.140305][ T6767] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1310.140337][ T6767] usb 6-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1310.140359][ T6767] usb 6-1: Product: syz
[ 1310.140374][ T6767] usb 6-1: Manufacturer: syz
[ 1310.140397][ T6767] usb 6-1: SerialNumber: syz
[ 1310.226181][ T6767] usb 6-1: config 0 descriptor??
[ 1310.293583][ T6767] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1310.555140][T11578] usb 6-1: Failed to submit usb control message: -71
[ 1310.555180][T11578] usb 6-1: unable to send the bmi data to the device: -71
[ 1310.555198][T11578] usb 6-1: unable to get target info from device
[ 1310.555214][T11578] usb 6-1: could not get target info (-71)
[ 1310.555232][T11578] usb 6-1: could not probe fw (-71)
[ 1310.557147][T10841] usb 6-1: USB disconnect, device number 3
[ 1311.924954][T14742] netlink: 'syz.3.1771': attribute type 61 has an invalid length.
[ 1311.924982][T14742] netlink: 'syz.3.1771': attribute type 3 has an invalid length.
[ 1313.414730][ T6767] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1313.696285][ T6767] usb 6-1: Using ep0 maxpacket: 16
[ 1313.819421][ T6767] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1313.819504][ T6767] usb 6-1: config 1 has no interface number 1
[ 1313.819822][ T6767] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1313.819871][ T6767] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1313.820059][ T6767] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1314.040415][ T6767] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1314.040450][ T6767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.040470][ T6767] usb 6-1: Product: syz
[ 1314.040485][ T6767] usb 6-1: Manufacturer: syz
[ 1314.040499][ T6767] usb 6-1: SerialNumber: syz
[ 1314.541771][ T6767] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[ 1314.793159][  T806] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1314.969720][  T806] usb 5-1: config 0 has no interfaces?
[ 1314.971408][  T806] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1314.971448][  T806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1314.971473][  T806] usb 5-1: SerialNumber: syz
[ 1314.996483][  T806] usb 5-1: config 0 descriptor??
[ 1315.305582][  T806] usb 5-1: USB disconnect, device number 16
[ 1318.624481][ T6767] usb 6-1: failed to enable PITCH for EP 0x82
[ 1321.097667][ T6767] usb 6-1: USB disconnect, device number 4
[ 1321.773676][ T5916] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1321.896730][T14207] udevd[14207]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1321.957736][ T5916] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[ 1321.957776][ T5916] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1321.957797][ T5916] usb 5-1: config 0 has no interface number 0
[ 1321.968381][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 1321.968411][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.968430][ T5916] usb 5-1: Product: syz
[ 1321.968443][ T5916] usb 5-1: Manufacturer: syz
[ 1321.968456][ T5916] usb 5-1: SerialNumber: syz
[ 1322.022077][ T5916] usb 5-1: config 0 descriptor??
[ 1322.085550][ T6767] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1322.283389][ T6767] usb 6-1: Using ep0 maxpacket: 8
[ 1322.287823][ T6767] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1322.287863][ T6767] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1322.287899][ T6767] usb 6-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[ 1322.287924][ T6767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1322.386699][ T6767] usb 6-1: config 0 descriptor??
[ 1323.119165][ T5916] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823)
[ 1323.119204][ T5916] uvcvideo 5-1:0.64: No valid video chain found.
[ 1323.129721][ T5916] usb 5-1: USB disconnect, device number 17
[ 1323.336155][T14209] udevd[14209]: setting owner of /dev/bus/usb/005/017 to uid=0, gid=0 failed: No such file or directory
[ 1323.519666][ T6767] usbhid 6-1:0.0: can't add hid device: -71
[ 1323.519824][ T6767] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1323.603681][ T6767] usb 6-1: USB disconnect, device number 5
[ 1323.993081][T14856] netlink: 'syz.4.1798': attribute type 61 has an invalid length.
[ 1323.993100][T14856] netlink: 'syz.4.1798': attribute type 3 has an invalid length.
[ 1326.000351][   T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1326.699359][T14892] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1328.070911][T13379] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1328.093625][T13379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1328.104253][T13379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1328.119996][T13379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1328.127025][T13379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1328.187811][   T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1328.520175][T14892] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size.
[ 1329.351432][   T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1329.781106][T14900] wlan1 speed is unknown, defaulting to 1000
[ 1330.174700][T13379] Bluetooth: hci0: command tx timeout
[ 1330.938756][   T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1332.253779][T13379] Bluetooth: hci0: command tx timeout
[ 1332.848553][   T57] bridge_slave_1: left allmulticast mode
[ 1332.848587][   T57] bridge_slave_1: left promiscuous mode
[ 1332.851327][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1332.994395][   T57] bridge_slave_0: left allmulticast mode
[ 1332.994430][   T57] bridge_slave_0: left promiscuous mode
[ 1332.999836][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1334.334377][T13379] Bluetooth: hci0: command tx timeout
[ 1334.866713][T14995] fuse: Unknown parameter '0x0000000000000007'
[ 1335.581325][T15003] kvm: user requested TSC rate below hardware speed
[ 1336.413883][T13379] Bluetooth: hci0: command tx timeout
[ 1336.583384][  T806] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1336.743289][  T806] usb 4-1: Using ep0 maxpacket: 8
[ 1336.967199][  T806] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1336.967233][  T806] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1336.967259][  T806] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1336.967283][  T806] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1336.967330][  T806] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1336.967354][  T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1337.335642][T15003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1337.338560][T15003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1339.148427][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1339.225568][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1339.283324][   T57] bond0 (unregistering): Released all slaves
[ 1339.379512][T15009] syzkaller1: entered promiscuous mode
[ 1339.379541][T15009] syzkaller1: entered allmulticast mode
[ 1339.796971][T14900] chnl_net:caif_netlink_parms(): no params data found
[ 1340.233933][T15047] netlink: 'syz.4.1842': attribute type 61 has an invalid length.
[ 1340.233960][T15047] netlink: 'syz.4.1842': attribute type 3 has an invalid length.
[ 1340.303821][  T806] usb 4-1: usb_control_msg returned -71
[ 1340.303886][  T806] usbtmc 4-1:16.0: can't read capabilities
[ 1340.397200][  T806] usb 4-1: USB disconnect, device number 59
[ 1341.993986][ T6767] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1342.123382][ T6767] usb 4-1: device descriptor read/64, error -71
[ 1342.393331][ T6767] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1342.415336][T14900] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1342.415476][T14900] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.415735][T14900] bridge_slave_0: entered allmulticast mode
[ 1342.418944][T14900] bridge_slave_0: entered promiscuous mode
[ 1342.533375][ T6767] usb 4-1: device descriptor read/64, error -71
[ 1342.596865][   T57] hsr_slave_0: left promiscuous mode
[ 1342.643591][   T57] hsr_slave_1: left promiscuous mode
[ 1342.644701][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1342.644730][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.654984][ T6767] usb usb4-port1: attempt power cycle
[ 1342.687208][T15076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1342.757754][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1342.757784][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1342.890950][   T57] veth1_macvtap: left promiscuous mode
[ 1342.891073][   T57] veth0_macvtap: left promiscuous mode
[ 1342.891362][   T57] veth1_vlan: left promiscuous mode
[ 1342.891546][   T57] veth0_vlan: left promiscuous mode
[ 1343.007517][ T6767] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1343.027552][ T6767] usb 4-1: device descriptor read/8, error -71
[ 1343.263405][ T6767] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1343.285396][ T6767] usb 4-1: device descriptor read/8, error -71
[ 1343.393828][ T6767] usb usb4-port1: unable to enumerate USB device
[ 1343.655757][T15096] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[ 1348.104278][   T57] team0 (unregistering): Port device team_slave_1 removed
[ 1348.335464][   T57] team0 (unregistering): Port device team_slave_0 removed
[ 1350.604882][T14900] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.605037][T14900] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1350.605300][T14900] bridge_slave_1: entered allmulticast mode
[ 1350.608446][T14900] bridge_slave_1: entered promiscuous mode
[ 1350.733985][T15104] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1857'.
[ 1350.739117][T15104] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1857'.
[ 1351.072326][T14900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1351.147947][T14900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1351.375806][T14900] team0: Port device team_slave_0 added
[ 1351.609971][T14900] team0: Port device team_slave_1 added
[ 1352.364783][T14900] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1352.364798][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1352.364814][T14900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1352.459813][T14900] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1352.459827][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1352.459842][T14900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1352.571350][T14900] hsr_slave_0: entered promiscuous mode
[ 1352.572155][T14900] hsr_slave_1: entered promiscuous mode
[ 1352.572707][T14900] debugfs: 'hsr0' already exists in 'hsr'
[ 1352.572724][T14900] Cannot create hsr debugfs directory
[ 1355.386360][T15204] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1879'.
[ 1355.387482][T15204] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1879'.
[ 1356.894739][T14900] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1357.073455][T14900] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1357.259237][T14900] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1357.355864][T14900] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1358.236655][T14900] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1358.252926][T14900] 8021q: adding VLAN 0 to HW filter on device team0
[ 1358.261965][T11578] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1358.262057][T11578] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1358.339815][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1358.339912][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1358.491226][T14900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1358.491245][T14900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1359.173798][  T806] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[ 1359.395611][  T806] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1359.395646][  T806] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1359.395675][  T806] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1359.395688][  T806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1359.643819][  T806] usb 10-1: usb_control_msg returned -32
[ 1359.653082][  T806] usbtmc 10-1:16.0: can't read capabilities
[ 1360.196994][T14900] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1360.346094][T11965] usb 10-1: USB disconnect, device number 2
[ 1362.209063][T14900] veth0_vlan: entered promiscuous mode
[ 1362.414102][T14900] veth1_vlan: entered promiscuous mode
[ 1362.827075][T14900] veth0_macvtap: entered promiscuous mode
[ 1362.933441][T14900] veth1_macvtap: entered promiscuous mode
[ 1363.305181][T14900] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1363.348702][T14900] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1363.382617][   T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.392594][   T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.421176][   T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.443734][   T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1364.331600][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1364.331631][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1364.867011][T11578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1364.867035][T11578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1365.269103][T15302] process 'syz.5.1800' launched '/dev/fd/9' with NULL argv: empty string added
[ 1367.114218][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1367.114300][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1367.550866][T15324] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1910'.
[ 1367.552278][T15324] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1910'.
[ 1370.545273][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1370.550217][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1370.591247][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1370.595162][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1370.595928][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1370.887781][T15352] wlan1 speed is unknown, defaulting to 1000
[ 1372.733523][T13379] Bluetooth: hci1: command tx timeout
[ 1374.177241][T15352] chnl_net:caif_netlink_parms(): no params data found
[ 1374.293476][T15383] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 1374.821322][T13379] Bluetooth: hci1: command tx timeout
[ 1375.828253][T15352] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1375.828659][T15352] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1375.828888][T15352] bridge_slave_0: entered allmulticast mode
[ 1375.831950][T15352] bridge_slave_0: entered promiscuous mode
[ 1375.836275][T15352] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1375.836474][T15352] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1375.836674][T15352] bridge_slave_1: entered allmulticast mode
[ 1375.840301][T15352] bridge_slave_1: entered promiscuous mode
[ 1375.980255][T15352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1376.056448][T15352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1376.364779][T15352] team0: Port device team_slave_0 added
[ 1376.424940][T15352] team0: Port device team_slave_1 added
[ 1376.893681][T13379] Bluetooth: hci1: command tx timeout
[ 1377.416523][T15352] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1377.416552][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1377.416581][T15352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1377.435320][T15352] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1377.435336][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1377.435361][T15352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1377.956978][T15352] hsr_slave_0: entered promiscuous mode
[ 1377.958561][T15352] hsr_slave_1: entered promiscuous mode
[ 1377.975438][T15352] debugfs: 'hsr0' already exists in 'hsr'
[ 1377.975469][T15352] Cannot create hsr debugfs directory
[ 1378.973549][T13379] Bluetooth: hci1: command tx timeout
[ 1379.217965][T11965] IPVS: starting estimator thread 0...
[ 1379.313399][T15425] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1380.854813][T15439] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[ 1381.012520][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1937'.
[ 1382.005753][T15352] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1384.378071][T15471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1936'.
[ 1386.000127][T15352] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1386.097147][T15468] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[ 1387.615821][T15352] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1387.839626][T15505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1955'.
[ 1387.941742][T15507] fuse: Bad value for 'fd'
[ 1388.297100][T15352] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1389.759417][T15535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1967'.
[ 1389.901482][T15541] fuse: Bad value for 'fd'
[ 1390.593358][ T5882] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1390.905856][ T5882] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1390.905895][ T5882] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1390.905936][ T5882] usb 10-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[ 1390.905960][ T5882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.916182][ T5882] usb 10-1: config 0 descriptor??
[ 1391.358302][ T5882] usbhid 10-1:0.0: can't add hid device: -71
[ 1391.358457][ T5882] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1391.383480][ T5882] usb 10-1: USB disconnect, device number 3
[ 1391.701437][T15352] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1391.772068][T15352] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1391.889181][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1979'.
[ 1392.034209][T15352] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1392.199287][T15352] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1392.220904][T15576] fuse: Bad value for 'fd'
[ 1393.190927][T15352] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1393.330362][T15352] 8021q: adding VLAN 0 to HW filter on device team0
[ 1393.424210][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1393.424295][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1393.470024][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1393.470169][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1395.052173][T15352] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1395.446802][T15352] veth0_vlan: entered promiscuous mode
[ 1395.562771][T15352] veth1_vlan: entered promiscuous mode
[ 1396.014182][T15352] veth0_macvtap: entered promiscuous mode
[ 1397.057324][T15352] veth1_macvtap: entered promiscuous mode
[ 1397.197968][T15352] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1397.337627][T15352] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1397.405036][T11578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1397.414745][   T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1397.416223][   T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1397.416276][   T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1398.170448][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1398.170471][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1399.231871][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1399.231895][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1406.110828][T15763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1409.658712][T15819] fuse: Bad value for 'fd'
[ 1411.262647][T15848] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2056'.
[ 1411.285108][T15849] fuse: Bad value for 'fd'
[ 1411.285399][T15848] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2056'.
[ 1411.633873][T15857] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[ 1413.041203][T15875] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0
[ 1415.398526][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2071'.
[ 1415.791853][T15926] fuse: Bad value for 'fd'
[ 1416.565355][T15928] ip6gre1: entered promiscuous mode
[ 1416.753377][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2079'.
[ 1416.776210][T15931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1417.993412][ T5916] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1418.163279][ T5916] usb 10-1: Using ep0 maxpacket: 8
[ 1418.165460][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1418.168270][ T5916] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1418.168294][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1418.168306][ T5916] usb 10-1: Product: syz
[ 1418.168314][ T5916] usb 10-1: Manufacturer: syz
[ 1418.168323][ T5916] usb 10-1: SerialNumber: syz
[ 1418.202338][ T5916] usb 10-1: config 0 descriptor??
[ 1418.463416][ T5884] usb 10-1: USB disconnect, device number 4
[ 1419.268565][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2085'.
[ 1421.097579][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2099'.
[ 1425.843460][ T5781] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1426.030817][ T5781] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1426.030853][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1426.030874][ T5781] usb 4-1: Product: syz
[ 1426.030891][ T5781] usb 4-1: Manufacturer: syz
[ 1426.030906][ T5781] usb 4-1: SerialNumber: syz
[ 1426.397520][ T5781] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1426.397587][ T5781] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[ 1426.397610][ T5781] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1426.470134][ T5781] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[ 1427.645474][T16104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1428.310387][T16112] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[ 1429.255097][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1429.255183][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1429.282019][ T5884] usb 4-1: USB disconnect, device number 64
[ 1430.434031][T16140] sg_write: process 769 (syz.4.2132) changed security contexts after opening file descriptor, this is not allowed.
[ 1431.353349][ T5884] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1431.561277][ T5884] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1431.561312][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1431.561331][ T5884] usb 5-1: Product: syz
[ 1431.561347][ T5884] usb 5-1: Manufacturer: syz
[ 1431.561362][ T5884] usb 5-1: SerialNumber: syz
[ 1431.835122][ T5884] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1431.835191][ T5884] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[ 1431.835213][ T5884] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1431.914065][ T5884] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32
[ 1434.155575][ T6707] usb 5-1: USB disconnect, device number 18
[ 1435.203346][T16228] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2155'.
[ 1436.128540][T16240] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1437.334495][T16269] wlan1 speed is unknown, defaulting to 1000
[ 1437.461837][T16270] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2162'.
[ 1438.143317][ T5884] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1438.299311][ T5884] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1438.299333][ T5884] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1438.299346][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1438.299376][ T5884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1438.299392][ T5884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1438.300833][ T5884] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1438.300851][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1438.300863][ T5884] usb 5-1: Product: syz
[ 1438.300871][ T5884] usb 5-1: Manufacturer: syz
[ 1438.469668][ T5884] cdc_wdm 5-1:1.0: skipping garbage
[ 1438.469684][ T5884] cdc_wdm 5-1:1.0: skipping garbage
[ 1438.469764][ T5884] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1439.272275][T16272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1440.854088][  T806] usb 5-1: USB disconnect, device number 19
[ 1443.082930][T16332] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[ 1444.743694][T10841] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1445.155073][T10841] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1445.155107][T10841] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1445.155127][T10841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1445.155181][T10841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1445.155209][T10841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1445.162209][T10841] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1445.162241][T10841] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1445.162263][T10841] usb 4-1: Product: syz
[ 1445.162277][T10841] usb 4-1: Manufacturer: syz
[ 1445.360406][T10841] cdc_wdm 4-1:1.0: skipping garbage
[ 1445.360428][T10841] cdc_wdm 4-1:1.0: skipping garbage
[ 1445.360563][T10841] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1446.840184][T16357] wlan1 speed is unknown, defaulting to 1000
[ 1447.443307][ T5781] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1447.563059][T12639]  1024-page vmalloc region starting at 0xffffc9001500a000 allocated at kcov_ioctl+0x58/0x640
[ 1447.563110][T12639] list_del corruption. next->prev should be ffffc90019c0b000, but was ffffffff88ddbfaf. (next=ffffc9001500a000)
[ 1447.570494][T12639] ------------[ cut here ]------------
[ 1447.570509][T12639] kernel BUG at lib/list_debug.c:67!
[ 1447.570534][T12639] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 1447.570561][T12639] CPU: 1 UID: 0 PID: 12639 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1447.570599][T12639] Tainted: [L]=SOFTLOCKUP
[ 1447.570608][T12639] Hardware [ 1447.570608][T12639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1447.570629][T12639] Workqueue: usb_hub_wq hub_event
[ 1447.570772][T12639] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190
[ 1447.570867][T12639] Code: 2c d2 68 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d 9b 89 fd 49 8b 56 08 48 c7 c7 c0 1a 86 8b 48 89 de 4c 89 f1 e8 97 c8 88 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1447.570885][T12639] RSP: 0018:ffffc90003f777b8 EFLAGS: 00010246
[ 1447.570904][T12639] RAX: 000000000000006d RBX: ffffc90019c0b000 RCX: 8e3e81e24aee8000
[ 1447.570919][T12639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1447.570933][T12639] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000
[ 1447.570946][T12639] R10: dffffc0000000000 R11: fffff520007eeea9 R12: 1ffff92002a01401
[ 1447.570961][T12639] R13: dffffc0000000000 R14: ffffc9001500a000 R15: ffffc9001500a008
[ 1447.570978][T12639] FS:  0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000
[ 1447.570996][T12639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1447.571011][T12639] CR2: 000020000003e030 CR3: 00000000374cc000 CR4: 00000000003526f0
[ 1447.571032][T12639] Call Trace:
[ 1447.571040][T12639]  <TASK>
[ 1447.571049][T12639]  kcov_remote_start+0x2af/0x710
[ 1447.571081][T12639]  hub_event+0x150/0x4f60
[ 1447.571108][T12639]  ? __lock_acquire+0x6b5/0x2cf0
[ 1447.571148][T12639]  ? __lock_acquire+0x6b5/0x2cf0
[ 1447.571174][T12639]  ? __lock_acquire+0x6b5/0x2cf0
[ 1447.571197][T12639]  ? look_up_lock_class+0x57/0x110
[ 1447.571294][T12639]  ? __lock_acquire+0x6b5/0x2cf0
[ 1447.571323][T12639]  ? finish_task_switch+0x161/0x920
[ 1447.571356][T12639]  ? lock_acquire+0x106/0x330
[ 1447.571382][T12639]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1447.571406][T12639]  ? __pfx_hub_event+0x10/0x10
[ 1447.571432][T12639]  ? process_scheduled_works+0xa0f/0x17a0
[ 1447.571458][T12639]  ? process_scheduled_works+0xa0f/0x17a0
[ 1447.571480][T12639]  ? process_scheduled_works+0xa0f/0x17a0
[ 1447.571503][T12639]  process_scheduled_works+0xaec/0x17a0
[ 1447.571537][T12639]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1447.571563][T12639]  ? assign_work+0x3d5/0x5e0
[ 1447.571587][T12639]  worker_thread+0xa50/0xfc0
[ 1447.571631][T12639]  kthread+0x388/0x470
[ 1447.571659][T12639]  ? __pfx_worker_thread+0x10/0x10
[ 1447.571681][T12639]  ? __pfx_kthread+0x10/0x10
[ 1447.571710][T12639]  ret_from_fork+0x51e/0xb90
[ 1447.571748][T12639]  ? __pfx_ret_from_fork+0x10/0x10
[ 1447.571771][T12639]  ? __switch_to+0xc7d/0x1400
[ 1447.571820][T12639]  ? __pfx_kthread+0x10/0x10
[ 1447.571845][T12639]  ret_from_fork_asm+0x1a/0x30
[ 1447.571892][T12639]  </TASK>
[ 1447.571900][T12639] Modules linked in:
[ 1447.571931][T12639] ---[ end trace 0000000000000000 ]---
[ 1447.626328][T12639] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190
[ 1447.626355][T12639] Code: 2c d2 68 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d 9b 89 fd 49 8b 56 08 48 c7 c7 c0 1a 86 8b 48 89 de 4c 89 f1 e8 97 c8 88 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1447.626367][T12639] RSP: 0018:ffffc90003f777b8 EFLAGS: 00010246
[ 1447.626380][T12639] RAX: 000000000000006d RBX: ffffc90019c0b000 RCX: 8e3e81e24aee8000
[ 1447.626389][T12639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1447.626396][T12639] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000
[ 1447.626404][T12639] R10: dffffc0000000000 R11: fffff520007eeea9 R12: 1ffff92002a01401
[ 1447.626413][T12639] R13: dffffc0000000000 R14: ffffc9001500a000 R15: ffffc9001500a008
[ 1447.626422][T12639] FS:  0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000
[ 1447.626432][T12639] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1447.626441][T12639] CR2: 000020000003e030 CR3: 000000003e40c000 CR4: 00000000003526f0
[ 1447.626455][T12639] Kernel panic - not syncing: Fatal exception
[ 1447.626626][T12639] Kernel Offset: disabled