last executing test programs:

1m16.951823208s ago: executing program 3 (id=2887):
ftruncate(0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x19, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x125d, &(0x7f0000001080))

1m16.316056402s ago: executing program 3 (id=2889):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x2, 0x6)
socket(0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r2 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000001440))
r3 = io_uring_setup(0x705b, &(0x7f0000000040))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x18, 0x20000000, r4)

1m14.809816775s ago: executing program 3 (id=2894):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x1ff)
write$binfmt_elf64(r3, 0x0, 0x78)
close(0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x80000)
r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x1, 0x1800, &(0x7f00000007c0)='b'})
write$sndseq(r1, &(0x7f0000000080)=[{0x26, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c)
add_key(0x0, 0x0, &(0x7f00000001c0)="f4807c8dd029ff9d4387d3882e09202200c53262d6", 0x15, 0xffffffffffffffff)

1m11.703479907s ago: executing program 3 (id=2900):
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
pipe(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa256ac9e09b06b584ba6ff"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2)

1m9.622565562s ago: executing program 3 (id=2905):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f996ff109a04000000008000"})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

1m8.505220281s ago: executing program 3 (id=2908):
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x7, 0x8000, 0x1, 0x2000}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB, @ANYRES16=r2, @ANYRES16=<r4=>r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r2, @ANYRESDEC=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x804, &(0x7f0000000080)={0xa, 0x4621, 0x7, @local}, 0x1c)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004)
socket$rds(0x15, 0x5, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000100)={0x1, "249e0b45c0d8e7063f9839f36aeef67e326a9cc65e4079ff17065af8b09d78dc"})

1m6.77625123s ago: executing program 2 (id=2914):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000015640)=""/102400, 0x19000)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00')
open(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040103000000000000000000000027"], 0x1c}}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
readv(r2, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000700)=""/176, 0xb0}], 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="8b414c385a4fde27fe", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c000180060001000a000000"], 0x20}}, 0x0)

1m2.798806636s ago: executing program 2 (id=2922):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x8, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x43, 0xa0, 0x360, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x458)

1m0.912996984s ago: executing program 2 (id=2927):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000280)="bb911d67ebe019d98c03e45058081e0888e3d0de77ec208e44dcda", 0x1b}], 0x1, 0xe) (async)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) (async)
setsockopt(r3, 0x84, 0xd, &(0x7f0000000000)="03020000008002ff", 0x8) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) (async)
r6 = openat2$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x140041}, 0x18)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000006740)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @b}) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040eeeff1a04"], 0x7)
fcntl$getownex(r7, 0x10, &(0x7f0000000080)={0x0, <r8=>0x0}) (async)
ioperm(0x0, 0x9, 0x2) (async)
r9 = memfd_secret(0x0)
ftruncate(r9, 0x0) (async)
ptrace$getenv(0x4201, r8, 0x6, &(0x7f00000000c0)) (async)
setsockopt$inet_buf(r7, 0x0, 0x27, &(0x7f0000000580)="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", 0x70)
r10 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$key(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0212000002925e150000000000000000"], 0x10}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

59.692139464s ago: executing program 2 (id=2928):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
iopl(0x3)
fspick(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, &(0x7f0000000880)="8c27bdaccd2a9fc0a8cdbe36ec2f039b66c56a85f34acf57f3b4cf501c09661a269b9646606a3cbdc825d186c03fbc82daa460d54f7dce88d7c181131d0664f2eb83015219885ae12a89cb89bb614c42df35f518d7eb5ad1916eeec3f1011ec565c04636b92a3b12b1f2e84f3e92acf6308d5d17159d57fe6a67997423310d6a108489383c8ee36dcb8c26a5cb4f1648a02d1220cceed0e891b7952b8e9fb0979d0afae4ed3cc00fc691a4765189d97e18e3ab3854c16264e9a6b72fa8132fc5781831090912d2bf184832892462b0d9b874dee5d35a746e430a0bafb5b531dbbf704edb57df3b01c378", 0x0, 0x2, 0x0, 0x8000}, 0x50)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
syz_emit_ethernet(0x173, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x1, 0x3, 0x165, 0x0, 0x0, 0x6, 0x6, 0x0, @multicast2, @private=0xa010101, {[@lsrr={0x83, 0x1b, 0x0, [@multicast1, @broadcast, @local, @local, @dev, @empty]}]}}, {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0xc2, 0x45, 0x0, 0x0, {[@sack={0x5, 0x6, [0x9cc]}, @sack={0x5, 0x6, [0x9]}, @mss={0x2, 0x4, 0x7}, @window={0x3, 0x3, 0xcf}, @sack={0x5, 0xe, [0xff, 0xfffffff3, 0x1]}, @nop, @mss={0x2, 0x4, 0x8}, @sack_perm={0x4, 0x2}]}}, {"24914260e2b24b2466693493229d23ca723f4158568701a4024901812d90371284b64088a899f56cfd7bead1ba1cd8a9e9145c13f9d3853b9b302d1fa68de099d4151adb2b13d4f203180d272c668ec00f160ccd990672674af8450700afb7fb568d0f6901aa8eae789bb6dd8aee3cb07977afc2f2e65e7e7e3191080fa01a37fd169f437a4b4795e43be62efefb357aaf85ff7f8129359695b4c6f3feab3e4b51b261e9253eaa6c70285714d48f79211be0ac10377dd6b9ed1a53e65ed6f80049b16d15e53c87fbdb978a82c5540f1286ff4812ef04b69553973c702d3d4fec49d9ad975fc48a7bf3863243ca5b6972949f4b1ba8e2b25efa"}}}}}}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @loopback}}}], 0x20}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa00bbbbbbbbbbbb886400000800450000300000000000119078ac1e0001ac1414aa030090714973f7163c780000000045"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="1400"], 0x68}}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

53.959583074s ago: executing program 2 (id=2933):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
iopl(0x3)
fspick(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, &(0x7f0000000880)="8c27bdaccd2a9fc0a8cdbe36ec2f039b66c56a85f34acf57f3b4cf501c09661a269b9646606a3cbdc825d186c03fbc82daa460d54f7dce88d7c181131d0664f2eb83015219885ae12a89cb89bb614c42df35f518d7eb5ad1916eeec3f1011ec565c04636b92a3b12b1f2e84f3e92acf6308d5d17159d57fe6a67997423310d6a108489383c8ee36dcb8c26a5cb4f1648a02d1220cceed0e891b7952b8e9fb0979d0afae4ed3cc00fc691a4765189d97e18e3ab3854c16264e9a6b72fa8132fc5781831090912d2bf184832892462b0d9b874dee5d35a746e430a0bafb5b531dbbf704edb57df3b01c378", 0x0, 0x2, 0x0, 0x8000}, 0x50)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
syz_emit_ethernet(0x173, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x1, 0x3, 0x165, 0x0, 0x0, 0x6, 0x6, 0x0, @multicast2, @private=0xa010101, {[@lsrr={0x83, 0x1b, 0x0, [@multicast1, @broadcast, @local, @local, @dev, @empty]}]}}, {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0xc2, 0x45, 0x0, 0x0, {[@sack={0x5, 0x6, [0x9cc]}, @sack={0x5, 0x6, [0x9]}, @mss={0x2, 0x4, 0x7}, @window={0x3, 0x3, 0xcf}, @sack={0x5, 0xe, [0xff, 0xfffffff3, 0x1]}, @nop, @mss={0x2, 0x4, 0x8}, @sack_perm={0x4, 0x2}]}}, {"24914260e2b24b2466693493229d23ca723f4158568701a4024901812d90371284b64088a899f56cfd7bead1ba1cd8a9e9145c13f9d3853b9b302d1fa68de099d4151adb2b13d4f203180d272c668ec00f160ccd990672674af8450700afb7fb568d0f6901aa8eae789bb6dd8aee3cb07977afc2f2e65e7e7e3191080fa01a37fd169f437a4b4795e43be62efefb357aaf85ff7f8129359695b4c6f3feab3e4b51b261e9253eaa6c70285714d48f79211be0ac10377dd6b9ed1a53e65ed6f80049b16d15e53c87fbdb978a82c5540f1286ff4812ef04b69553973c702d3d4fec49d9ad975fc48a7bf3863243ca5b6972949f4b1ba8e2b25efa"}}}}}}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
connect$l2tp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @loopback}}}], 0x20}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa00bbbbbbbbbbbb886400000800450000300000000000119078ac1e0001ac1414aa030090714973f7163c780000000045"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="1400"], 0x68}}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

52.75239287s ago: executing program 2 (id=2937):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000015640)=""/102400, 0x19000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00')
open(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040103000000000000000000000027"], 0x1c}}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
readv(r1, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000700)=""/176, 0xb0}], 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="8b414c385a4fde27fe", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000180060001000a000000"], 0x20}}, 0x0)

13.975988025s ago: executing program 0 (id=2979):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
pread64(r1, 0x0, 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev, @broadcast}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xc8)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r5 = socket$kcm(0x29, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r6, r4})
write(r5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0)

12.707080975s ago: executing program 1 (id=2980):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18)
r4 = dup(r2)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r5, 0x0, {}, 0x2}, 0x18)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000160000000000000008000f0001000000", 0x24)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg(r7, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000280)=""/2, 0x2}], 0x1}}], 0x1, 0x7fb10727dc89, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r9 = inotify_init1(0x0)
fcntl$getownex(r9, 0x10, &(0x7f0000000140)={0x0, <r10=>0x0})
r11 = syz_open_procfs(r10, &(0x7f0000000600)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r11, 0x40305839, &(0x7f0000000240)=0x28084)

12.288315794s ago: executing program 4 (id=2981):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x43, 0xa0, 0x360, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv4=@multicast1, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x458)

11.944142448s ago: executing program 1 (id=2982):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007566cb20f80600b0c8cb0102030109021b0001000000000904000001ffb9ab0009050a", @ANYRESDEC], 0x0)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0x3})
recvmmsg(r0, &(0x7f00000013c0)=[{{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/132, 0x84}, {&(0x7f0000000700)=""/231, 0xe7}], 0x5, &(0x7f0000000800)=""/22, 0x16}, 0x7}, {{&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/62, 0x3e}, {&(0x7f0000000a40)=""/199, 0xc7}, {&(0x7f0000000b40)=""/148, 0x94}], 0x4, &(0x7f0000000c00)=""/206, 0xce}}, {{&(0x7f0000000d00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000980)=""/20, 0x14}, {&(0x7f0000000d80)=""/64, 0x40}, {&(0x7f0000000dc0)=""/205, 0xcd}, {0x0}, {&(0x7f0000000f80)=""/164, 0xa4}], 0x5, &(0x7f00000010c0)=""/39, 0x27}, 0x2400000}, {{&(0x7f0000001100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001180)=""/33, 0x21}, {&(0x7f00000011c0)=""/155, 0x9b}, {&(0x7f0000001280)=""/239, 0xef}], 0x3}, 0x8}], 0x4, 0x10022, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020)
open(0x0, 0x8060, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2e, 0x4, 0x2}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000100)}, 0x20)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="380000002000010000000000000000000200000000000000"], 0x38}}, 0x0)

10.302179745s ago: executing program 4 (id=2983):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0)
syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040))
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf800)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r6, 0x0, 0x0)
bind$netlink(r5, &(0x7f0000000080), 0xc)
r7 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xfd, 0x7}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x21, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
dup(0xffffffffffffffff)

8.91274007s ago: executing program 4 (id=2984):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x6, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x3, 0x4, {0x3, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @win={{0x0, 0x0, 0x1, 0xffff}, 0x2, 0x8, &(0x7f0000000380)={{0x4, 0x2, 0x44}, &(0x7f0000000100)={{0x1, 0x8, 0xffffffff, 0x283}}}, 0x80, &(0x7f0000000400)="4c3425e5d22b04b4dff741b1155196d48274b6ec3603eed4c7795069fd80b977d26fe4ce89b50f7f7f35238f72d27d54d59741f0c45e54d78ae6557844e1e3abae44d2c14895a376d0", 0xff}})
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040efc07140c"], 0xff)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0xfffffffe, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r5=>0x0], &(0x7f0000000180)=[<r6=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2, 0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, r6})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1})
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
preadv(r8, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r9 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r9)

8.867664792s ago: executing program 0 (id=2985):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000000c0), 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
read$FUSE(r5, &(0x7f0000002640)={0x2020}, 0x2020)

8.675816452s ago: executing program 1 (id=2986):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x1ff)
write$binfmt_elf64(r3, 0x0, 0x78)
close(0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x80000)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x1, 0x1800, &(0x7f00000007c0)='b'})
write$sndseq(r1, &(0x7f0000000080)=[{0x26, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c)
add_key(0x0, 0x0, &(0x7f00000001c0)="f4807c8dd029ff9d4387d3882e09202200c53262d6", 0x15, 0xffffffffffffffff)

7.698005324s ago: executing program 0 (id=2987):
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080080000000000106907800000000e00000010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b000000090780000040200fe09f9898a66eb76db0007ec5adf5b021e440009c99defa242eb97b9109b643c099cffe5acf82f8ddf78a70dea12af07"], 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

7.208869631s ago: executing program 0 (id=2988):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)}], 0x1)

7.067540131s ago: executing program 4 (id=2989):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000180)='fd/4\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305829, &(0x7f0000000240))

5.70416797s ago: executing program 0 (id=2990):
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x8c200, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
gettid()
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
futex_waitv(&(0x7f0000000ac0)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
read$FUSE(r0, 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
syz_emit_ethernet(0xfdef, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
sendfile(r5, r4, 0x0, 0xfff)

3.009281089s ago: executing program 1 (id=2991):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa)
r1 = dup(0xffffffffffffffff)
mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x20)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000000c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x1f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x40000000})
syz_open_dev$evdev(&(0x7f0000000180), 0x700000000000, 0x20041)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
writev(r1, &(0x7f0000001400)=[{&(0x7f0000000200)="ffa221726d58f7b558ea8abdf9a03f6f9352386bfe3cf8b96bb12f64aca974a0c0e6a350123bc12d27b341add003f558729e592f103f22a74b1902bec87684bd3fe1028f1bc322a2a640524c7cff06b214488e1f5782be9749cf3b6b6a68fd1102bc31aede9c8aaf4f3f2f2cce260daa5e424cf41195be940326ee0f36ae7dbeb5e730ac58a1bd28c2ff594246c34b11b5a472ea28aad4f5b660cafef4d6edf1457c994ff143", 0xa6}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="34625a40e0", 0x5}, {&(0x7f0000001300)="374ffdb33549c5b2819abd67c2f5b28c58299301228e46ccf6c8fdea0a9731f32ceca549f706b2b46c0193e40f38e36e020b6644d0655dfa2aca301b098cbc0a313256e17e3fe6ffbbf5e15d421c2bad14e6a642546ac5a03dfbb4914cc119cfc890ee8873ceceb145ef70f3e0e6bedfeda2a77c7f780dc0bef321bbb2606c6e2246a6a455bd6d7115f955adc4217adc", 0x90}, {&(0x7f00000013c0)="c0e1a7486465353eaebbdfb14c7c6e8bab", 0x11}], 0x5)
getresuid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500))
write$cgroup_int(r2, &(0x7f0000001540)=0x226, 0x12)
openat$capi20(0xffffffffffffff9c, &(0x7f0000001580), 0x20000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(r3, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
read$FUSE(r1, &(0x7f0000003600)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
lstat(&(0x7f0000005640)='./file0\x00', &(0x7f0000005680)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getgid()
setgroups(0x8, &(0x7f0000005700)=[0xee01, r4, r5, 0xee01, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7])
socket(0x8, 0x6, 0x3)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000005900)=ANY=[@ANYBLOB="12010003000000082505a8a440000102030109021b000101038020097905040000000000000000000000000000dde5051fbc1f5f9eb031c35473880e640169c836b3b6c72cb35096b4432522f684888a26758fb2f94f9bb907a912178baa111392839e2eb4b2683be88b3c4833708357f96cded938ef4bdaefaec80c2e83b57fa7099aa7531440c736d9b697073346c2f7f3f6c1f59aab33167895d5d0c3625ea7228c2a"], &(0x7f00000064c0)={0xa, &(0x7f0000006400)={0xa, 0x6, 0x110, 0x3, 0x0, 0x3, 0x40, 0x4}, 0x24, &(0x7f0000006440)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "edd9bacd626570e8503deaf27e72c085"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x3f, 0x7, 0x2, 0xc0}]}, 0x1, [{0x4, &(0x7f0000006480)=@lang_id={0x4, 0x3, 0x2409}}]})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006640)={0x18, 0x1, &(0x7f0000006540)=@raw=[@jmp={0x5, 0x0, 0xd, 0x6, 0x6, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f0000006580)='GPL\x00', 0xc2d, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000065c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)=[r3, r1], 0x0, 0x10, 0x5}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006700)={&(0x7f0000006500)='rpcgss_createauth\x00', r8}, 0x10)
getresgid(&(0x7f0000006740), &(0x7f0000006780), &(0x7f0000005740)=<r9=>0x0)
getgroups(0x9, &(0x7f0000006800)=[r6, r4, r9, r6, r6, r5, r5, r7, r4])
read$FUSE(r1, &(0x7f0000006840)={0x2020}, 0x2020)
gettid()
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000058c0)={{&(0x7f0000005780)=""/207, 0xcf}, &(0x7f0000005880), 0x54}, 0x20)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000008880), &(0x7f00000088c0)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)

2.456572315s ago: executing program 4 (id=2992):
r0 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,', <r2=>0x0}, 0x30)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x58)
mount$tmpfs(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00@\t\x00\x00\x00'])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
sched_setaffinity(r3, 0x5, &(0x7f0000000040)=0x1)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX=r2, @ANYRES16=r1], 0x15)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x0, 0x0)
r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r8 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7], 0x0, 0x26, 0xfffffffffffffea9}, 0x20)
r9 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0})
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15)
bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10)
ioctl$TCFLSH(r9, 0x5450, 0x20000000)

1.65247101s ago: executing program 0 (id=2993):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
pread64(r1, 0x0, 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev, @broadcast}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xc8)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r5 = socket$kcm(0x29, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="cd07e85142f8ead499f3ef72f2227c53dd9255de4766b5f33ef218a7c39a97bbd4f8385f1852a08a0e900c7f9183f6c74e7e3407bac0d64f2fe763278fbc7ea1e7111be746ae2748fc96288a8b288a6d1baf35514905bee7b70175dd6a5b1b43735e06d236ee53c79aa6f817e833618ba7321afdf30656589fb5d92a67f70e2cb1dd98e48ff65bb2569a258f78bca3682750e0584ea00629c67c6411cd532d62be01f143fe9ce39012147357e8abe37baa6cfad28b949c343c17567015b2811ea8dfd577749855bcc1cbdae064318ac83c505129a407543c355a4e902e6d43e92cf7d4a538400b7741304b9179bc8357b82081d7141a388f8659108dbd3142dca4483efd112eae795c780aa14fde5d3ad8a29f57cbbe4929ced3ec0c45c4964e627d283b4c8302ab1eac4796a40ff79106ab2b28a1a72028a56a6b4e7e44f9578970f37fc3edfdf4b51bece98270e1b3b8da8f4bad2d38d0d04220f53e70f88f9431cd8184995253d38f27fbece66f45558a0941277de0308ed8a3bd8cbaa2f12406458086f37d447d9cb471c3b075bef79673e3b27d707f1483be8949600e9259a4edb962ff5e2a47a369468814971d2a81bbdf6222dfd7334912d33b51080cecb1eb5ca9ee573abc277b75e15b8fe9b242abd74ea74a4f83bd96e3b1ae924d927bb45a7b4b879f6a689f4977d0dbd4eaa0cfe64dacb82cf3784e21cd4e136ee610c2672eaedf35918d3c82eec28ea5753ea137f8a5d2f2f8a7aceffa1d71ac75bef177945d757ddc904c46a8a69336861cf08a5c51996807008e58ebf23a7e597bb07cce48e40b8a172144c4e649090fba0ec62152f85c3c4b843bde0f6eafbaa12bd1449801d2c4bfb51317bbc4d521ea1015e73a8c9146eb37eb9583a2443d8eea2293c808efc19a5735408281f16f590e00415c43ac2ce1c3432d41525dd0137eb991d9c56c163c0d4ab2d4ce2a418ff537bf20e6152bbd81d4a2a3570a7c3053f2ceb5e9797d2c60fb069cdcb03e06aedf63ff47f7ef9551e26cf08740c74b273bcda959a1e9a84c0fa05416b99d73d402fb81754e1ccf796d9da53399d6dce3ce83303ccb4166cf36ccb0c9bddbe0e34dfbcae31b4ce8fe513570e036844ab516cf4d6293bdd388112084e6aefcc6e7967fe99aabd72a207bb4ec8fc02d5bc229ca68c9db99529208146f49f29fda53c49707d76a649aa5df7607c3ee514eb820f4d0cc55d547ecd3193c4946525af9f68f8ec2d0a6b0ccfbd8ae0a265249255c98e9e6ab3d8d82dbfb8c15a8ef69b78cc9b4f0ad5a2ce9d6793ada0b6163d9d1ed3e50f9c819ca46b40ff40b375f5e2ce6caa996af36324cbbaa63635b0e107ad01174baa553b86dba12e8ad9586727a70aee6785121e9edb5a98e01b7848734d3e044c494a4061493e1ae7fd73a2ed9b83d286e24a732966faee7705d8a2d360159acbdf18616028134c25d1a92bb45f06207701454390b87d5bcb66ec73d8c3c53049f42c85de0acc45a9379302203be199ce55154b739bfb3d27929b12163e2078905137774974b90c07960fd410fd58394bc53e7745f5627de2f0361418173763c69f8a11d93a104ad382cf385b0c6c7c3c5fc8236e6f18ae9be0543d28d54050b9e60f2f774a16be4904243d482ad3252edaccce56dcd350b6e249fe686d5adc07bc57c71aebdc243eac56f29fa24e69b8d444c54a95522beafac6230a3c4e89c6d55654a4a077f7f854d6b24f8b45da2baa5dc3e4df15c56263c7fa80642789ea712a9562a70379afe5ac584c891178d71a558e73456e53e7f9256f4c0b27daa3eab32f1e56b3dd9280053c1ec57e86fd87a725ab9a5d93e3f8e6e848afbdadb859c744f40a86486fbbd1da6a18c834bf43594aac9d0340521dea06befad18bb868e9e63578ed66c70ecfeb31ce55755a5d48de4113c7e29975643cbc53f114ed522231e410f1fe4b910e6af3d4b56918952f7f25204813b3283e20a54fd285a80988494576bd738e685edda5177eeb0e2c9816dac60302b12ec046c9feb770dec403fd4fadd1628aa4978647e8dac1825166a5be8b580b195387d901ecbf03b70d4301f6de69f691009a659c03186b8431e226022f811a6d2ce73c8bce19b09e04728b739da06054690f30c71bb3326f8d4fc80cf654a42fc6134967206e110558a6f9e9c434bf175def183da8a5c135975dd7eac8fcea1343710cd92fdcba2152b32e014cb8e87d3c500e8f439e1522da6866105e937663d8044527982d147df983ca83eaa7fb4dd5c0c79232dd687e02dc135d3067547cafb1934b5769114472beb906646ffdc44291289bc27478262295c2fa517ccd553804e73eb9150f5d451afd79f175e14b563a5e6c86e9a0eacd450be530a3e506297a751bc5800f3c45a3e18b93c21aa8c0f2d144122803361d4b59e2a21bb462c0b8bf9d8f4c91610c633fefced62b8de88bd2e56e58eb538f30b1710f8cf5e6e54db33adc53d2519351696028edda2e915a3f575ee3488b6ac2d96856fe5742ae57679e11e7baeeb7446aa3d92a834086b8b2eba58a16e54a2df19f4be02fb9ed80f9547c327ca69bfc027852c0f54eea05b0982f0a08548f16a80d17121b5c3536d072b6dd78965d7fcb1d13d8435c003050de3900f43ec378070ff24e9fe463451cd2ca1d81532121fa6a010df9e471dbd068c9de5698eb986a43640843e6ab2ae9c849603cc1ed6799cd80a9dc8937127ef006edd442b68fc79a7d31d80f255ce9593e12a219d4a38a84c2a77ae3c604ac33614aea6c8523e4f553866b801cfdbf3545370555685f2f6ae4a05745713bac8452e86536807b986037d28953cc093122c7e400f4ebd876282e831b5e45c2e2dab9c7620ef9aa3c3f733baef8eee8242e0edfc20c9f58127739c978fbda24af4068e36a0c556cf2e60be433e6c86fcaafaab94124385c14dff932713044432cfc6ce7c6ae88c1fe32097d2e223616818eb1df981cd70a9a35ad7776745b660dec25e93cf5d6157cc161b808097f49a7713c5a164cd5cd61cb44b155edd38b72c5788b5328a1090cc366fb114d658eb4f045740fa95c19a9b6fc4c758036b9ba3d566e93073a5387f850f70db48d7c4a071d2b6bcdc67113b242688fbddffcff2c369680a4f5e7f0bafc27241a95695ff39c828f5d2b4e2a5955414aae21358971a9bd5d27fb3b4980d7a2058f5a686a65a95245aa418df589d6191ddf8e2a75b80c78dece49e7cdb6dc038944c8badeb86ab903a7a2db35cff18dd46ffbc02c36461205df47e93ab492ee2c49b489c22e9d0a44766f855cc1bc37622c72ab452908860cc054e9cd245cef29667e078e09403f395a0ff222272fd39bcf8c657de071fa6b02efb062e133f4ca14dbc3041fc3d0d7f44a30c955fbe5088ec222355d0b533f506ac75cadbb646b437eccdffef7f521ff14b3716f945c3a0b532616e3fa4dd88ecff416b0c91798aac7072c610adef4e076f5609bc0a4431de4de4a7318115a3f45dd7105f0d25cf2f2eccfb949b7e9b1c6f051f1c8f61b95f665c219d1f32b7af585818e51a937f5d90b0dd2d1e68f4a9f94f8da2ab42b3c91c95871537d94fc2a191862cbbe28433c7773a3dabe82a371c47c905e46f74f4964fe4ff3551588cb97d089465d1df16daaf5617d5b677e2e77541f64ea33ad75611e1516f230d4f207f58494458b3e25a3ce1d1d098ae8a8db11fbb7783d6f3960e237c0a24e33043c21a552cedc8aa7a0838cb034070a5af237acaaacf0a4398b036cf32ddd2d614d26c53a3fdbd0fe8cd1e0064c8777ac8f9755e02ca4bf869bc94cd6bea3bab112f57aecc27e6011d4b4c8c3926abf995a39b4384f9bf410c4e3525a47d4db05f3c6c253c8adb2678c5f86dd2e5e3ffca798b5b756c0207e65a248449cd09abad3b3b8fcda337124bb66079dd1ac77949f3c8ddac7396eaf8348544164edb99e178d59c13878b8b8dbd0759cbf4b6b6d3dcb5adb4b6bf8402b93aa4a6b53789b627f68b772618cb8a9689ad282a230d6e5e125da910b4f26f72caf1eca8362b977f83bc16a798e05dfc6c7675cac8262e781db9db2250958ab6bda85ebd7c4d06681ee0f30bd062a08294ce0d459e10e3a0c2323373ec84ac3e6d99ec6134ee395b6ca8ad6e6a53dfba9a07747944cb2be0ed2fcac5c4e7c43a5da76031cec5169b3f445099322b704a5198c1018a3bce33a155e7881fac59fc526c32e954a700c4b6db8f25467b714d4b723224c1f1bcf59b2b75c577fe4acd95aea1c8ec9075945442a129a3efd5e64aa3d668be55e3c43580526e596a74baf605576606c7bab5005957371f075dbe44333465564af0eb35dfe14465d87035ee896e6fe8138ee43bc2d383e6ee51fe4ed62341d2a68ed64385ec31867f28ab33a8e0e0da7c6587432df0286d44a24ca0e85ae151307a24222fffc971b476e412a450c58d69b7b4a5d89c5f55170dc5f3689089f49894cf6d034f680067b28582ca2066d2578dec3528041289c7340355425064441b647a51bb4be746c165c10c0a2a82c8644a832a32877ea81e24a50c2e3f0fbc5b763656b6c7278cc83a94c65bbca431cefde888cd42b03299b591c756aca38f03ca7a8f61aa9a69de2ca81d7e5005fbd6c328493e2833d45fcb68cdfa761842b48aebf3570cec220dab6ab3b58e1214cf843b7201a8387077b5c1462f2b025f9c6a56f8", 0xd0b}], 0x5}}], 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r6, r4})
write(r5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.268764521s ago: executing program 4 (id=2994):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000001000001e0000000c0001", @ANYRES32=r4], 0x20}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000180), 0xfea7)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = open(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003c)
fcntl$setsig(r10, 0xa, 0x0)
sendfile(r9, r8, 0x0, 0x100000002)
syz_io_uring_submit(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x10)
r11 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000000766c616e30000000000000010001000000000068307b746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba31300000000000000000008000000000001010000000000010c00636f6e6e6c6162656c0000000000000000000000000000000000000020000000080000000000000000000000000000004e46515445554500000000000000000000000000000000000000000000000000080000000000000000000000000000040000000000000000000000004b5d0000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000004000000000000000000000000000000000000000000000000000001000000feffffff010000000b000000000000000000626f6e643000000000000000000000007465616d300000000000000000000000626f6e64300000000000006c73c387735cc18268315f746f5f62726964676500aaaaaaaaaabb000000000000ffffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d41524b0000000000827900000000000000000000000000000800"/560]}, 0x2a8)

1.202090714s ago: executing program 1 (id=2995):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02)
syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x2c02)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040))
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf800)
syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r6, 0x0, 0x0)
bind$netlink(r5, &(0x7f0000000080), 0xc)
r7 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xfd, 0x7}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x21, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
dup(0xffffffffffffffff)

0s ago: executing program 1 (id=2996):
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080080000000000106907800000000e00000010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b000000090780000040200fe09f9898a66eb76db0007ec5adf5b021e440009c99defa242eb97b9109b643c099cffe5acf82f8ddf78a70dea12af07"], 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

kernel console output (not intermixed with test programs):

e_0 removed
[ 1315.859276][T16459] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1315.919058][T16459] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1315.935065][T16459] bridge_slave_1: entered allmulticast mode
[ 1315.957502][T16459] bridge_slave_1: entered promiscuous mode
[ 1316.161877][ T5100] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1316.174903][ T5100] Bluetooth: hci3: Injecting HCI hardware error event
[ 1316.190629][ T5100] Bluetooth: hci3: hardware error 0x00
[ 1316.365289][T16459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1316.444566][T16459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1316.752564][T16459] team0: Port device team_slave_0 added
[ 1316.811578][T16459] team0: Port device team_slave_1 added
[ 1317.100513][T16459] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1317.136443][T16459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1317.181875][T16459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1317.250991][T16459] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1317.279533][T16459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1317.375115][T16459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1317.633683][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2431'.
[ 1317.824182][T16459] hsr_slave_0: entered promiscuous mode
[ 1317.850838][T16459] hsr_slave_1: entered promiscuous mode
[ 1317.896475][T16459] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1317.936059][T16459] Cannot create hsr debugfs directory
[ 1318.226427][ T5100] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1318.249714][T16643] syz.0.2431 (16643): drop_caches: 1
[ 1318.577454][T16676] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[ 1319.808226][T16687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2439'.
[ 1320.710916][   T29] audit: type=1326 audit(1720300197.296:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.0.2441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea07775bd9 code=0x0
[ 1322.984007][T16459] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1323.129946][T16459] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1323.203806][T16459] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1323.297722][   T29] audit: type=1326 audit(1720300199.886:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16703 comm="syz.1.2443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x0
[ 1323.335404][T16459] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1323.734119][T16716] ALSA: seq fatal error: cannot create timer (-22)
[ 1324.106913][T16459] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1324.248718][T16459] 8021q: adding VLAN 0 to HW filter on device team0
[ 1324.368188][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1324.375529][ T5089] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1324.544842][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1324.552132][ T5089] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1325.174886][T16459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1325.302381][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'.
[ 1326.044512][T16731] syz.0.2447 (16731): drop_caches: 1
[ 1327.451589][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'.
[ 1327.485173][T16752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2453'.
[ 1327.607412][T16459] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1328.241246][T16752] 9pnet: Could not find request transport: tcp�/XV�00 0000000000000
[ 1329.666874][T16459] veth0_vlan: entered promiscuous mode
[ 1329.724158][T16459] veth1_vlan: entered promiscuous mode
[ 1329.779759][T16766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2455'.
[ 1329.985120][T16459] veth0_macvtap: entered promiscuous mode
[ 1330.018884][T16459] veth1_macvtap: entered promiscuous mode
[ 1330.050031][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1330.061867][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.072921][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1330.089512][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.100468][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1330.132141][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.173132][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1330.219643][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.247640][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1330.302181][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.372115][T16459] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1330.487425][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1330.541099][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.582083][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1330.618543][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.659948][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1330.690760][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.724126][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1330.760758][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.787857][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1330.811440][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1330.868127][T16459] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1330.961775][T16459] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.983842][T16459] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1331.079651][T16459] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1331.118063][T16459] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1331.245443][   T29] audit: type=1326 audit(1720300207.816:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.0.2459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea07775bd9 code=0x0
[ 1332.407168][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1332.454856][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1332.674518][ T6868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1332.729611][ T6868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1333.553241][T16806] ALSA: seq fatal error: cannot create timer (-22)
[ 1334.736140][T16812] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[ 1334.742845][T16812] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1334.863384][T16812] vhci_hcd vhci_hcd.0: Device attached
[ 1335.241696][ T8554] usb 14-1: SetAddress Request (22) to port 0
[ 1335.306524][ T8554] usb 14-1: new SuperSpeed USB device number 22 using vhci_hcd
[ 1335.336673][T16826] ALSA: seq fatal error: cannot create timer (-22)
[ 1335.556354][T16814] vhci_hcd: connection reset by peer
[ 1335.594869][ T2439] vhci_hcd: stop threads
[ 1335.650512][ T2439] vhci_hcd: release socket
[ 1335.675374][ T2439] vhci_hcd: disconnect device
[ 1336.673919][    T9] IPVS: starting estimator thread 0...
[ 1336.796201][T16838] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1338.178372][ T5141] usb 2-1: new low-speed USB device number 25 using dummy_hcd
[ 1338.213129][T16860] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[ 1338.252853][T16861] binder: 16854:16861 ioctl 4018620d 0 returned -22
[ 1338.491537][ T5141] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[ 1338.555435][ T5141] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1338.617098][ T5141] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1338.713511][ T5141] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[ 1338.766866][ T5141] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1338.817281][ T5141] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1338.902005][ T5141] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[ 1338.992050][ T5141] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1339.083574][ T5141] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1339.213879][ T5141] usb 2-1: string descriptor 0 read error: -22
[ 1339.243335][ T5141] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1339.266025][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.345829][ T5141] adutux 2-1:168.0: interrupt endpoints not found
[ 1339.506462][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1339.690164][   T45] usb 2-1: USB disconnect, device number 25
[ 1339.766188][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1339.774428][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1339.810556][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1339.886318][    T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1339.935595][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.957811][    T9] usb 4-1: Product: syz
[ 1339.963206][    T9] usb 4-1: Manufacturer: syz
[ 1339.974653][    T9] usb 4-1: SerialNumber: syz
[ 1340.024266][    T9] usb 4-1: config 0 descriptor??
[ 1340.468634][ T8554] usb 14-1: device descriptor read/8, error -110
[ 1340.649157][T16872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2479'.
[ 1341.305804][ T8554] usb usb14-port1: attempt power cycle
[ 1342.154458][ T8554] usb usb14-port1: unable to enumerate USB device
[ 1344.133912][ T8554] usb 4-1: USB disconnect, device number 26
[ 1344.427479][T16871] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 1344.979102][T16884] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[ 1344.985682][T16884] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1345.164411][T16895] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2482'.
[ 1345.645354][T16884] vhci_hcd vhci_hcd.0: Device attached
[ 1345.661954][T16898] ALSA: seq fatal error: cannot create timer (-22)
[ 1346.015064][T16897] ALSA: seq fatal error: cannot create timer (-22)
[ 1346.096351][ T5137] usb 18-1: SetAddress Request (26) to port 0
[ 1346.106556][ T5137] usb 18-1: new SuperSpeed USB device number 26 using vhci_hcd
[ 1346.239405][T16888] vhci_hcd: connection reset by peer
[ 1346.378321][ T1041] vhci_hcd: stop threads
[ 1346.398438][ T1041] vhci_hcd: release socket
[ 1346.429843][ T1041] vhci_hcd: disconnect device
[ 1346.915692][T16907] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[ 1349.679055][T16924] binder: 16920:16924 ioctl 4018620d 0 returned -22
[ 1350.296247][    T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[ 1350.597518][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[ 1350.760640][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1350.857741][   T29] audit: type=1326 audit(1720300227.446:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.2.2492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7398975bd9 code=0x0
[ 1350.880700][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1350.889183][    T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1350.924504][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2494'.
[ 1350.978942][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1350.999362][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1351.101985][    T9] usb 4-1: Product: syz
[ 1351.214805][ T5137] usb 18-1: device descriptor read/8, error -110
[ 1351.221239][    T9] usb 4-1: Manufacturer: syz
[ 1351.225844][    T9] usb 4-1: SerialNumber: syz
[ 1351.272201][ T5100] Bluetooth: hci4: link tx timeout
[ 1351.279858][ T5100] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.321622][T10165] Bluetooth: hci4: link tx timeout
[ 1351.326997][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.370198][T10165] Bluetooth: hci4: link tx timeout
[ 1351.375476][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.408546][T10165] Bluetooth: hci4: link tx timeout
[ 1351.413827][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.421907][T10165] Bluetooth: hci4: link tx timeout
[ 1351.427637][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.435574][T10165] Bluetooth: hci4: link tx timeout
[ 1351.440764][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.456353][T10165] Bluetooth: hci4: link tx timeout
[ 1351.461639][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.470487][T10165] Bluetooth: hci4: link tx timeout
[ 1351.475694][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.484113][T10165] Bluetooth: hci4: link tx timeout
[ 1351.489439][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.557673][T10165] Bluetooth: hci4: link tx timeout
[ 1351.562956][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.572588][T10165] Bluetooth: hci4: link tx timeout
[ 1351.578263][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.612486][T10165] Bluetooth: hci4: link tx timeout
[ 1351.617798][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.627144][T10165] Bluetooth: hci4: link tx timeout
[ 1351.632289][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.641825][T10165] Bluetooth: hci4: link tx timeout
[ 1351.647307][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.687950][T10165] Bluetooth: hci4: link tx timeout
[ 1351.693169][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.728822][T10165] Bluetooth: hci4: link tx timeout
[ 1351.734090][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.764388][    T9] usb 4-1: USB disconnect, device number 27
[ 1351.777426][T10165] Bluetooth: hci4: link tx timeout
[ 1351.782665][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.792692][T10165] Bluetooth: hci4: link tx timeout
[ 1351.797986][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.834626][T10165] Bluetooth: hci4: link tx timeout
[ 1351.839993][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.849644][T10165] Bluetooth: hci4: link tx timeout
[ 1351.854903][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.864677][ T5137] usb usb18-port1: attempt power cycle
[ 1351.893135][T10165] Bluetooth: hci4: link tx timeout
[ 1351.898442][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.910910][T10165] Bluetooth: hci4: link tx timeout
[ 1351.920015][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.928621][T10165] Bluetooth: hci4: link tx timeout
[ 1351.933787][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.944080][T10165] Bluetooth: hci4: link tx timeout
[ 1351.949551][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.961902][T10165] Bluetooth: hci4: link tx timeout
[ 1351.967363][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1351.999175][T10165] Bluetooth: hci4: link tx timeout
[ 1352.004370][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.014404][T10165] Bluetooth: hci4: link tx timeout
[ 1352.022903][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.052724][T10165] Bluetooth: hci4: link tx timeout
[ 1352.058200][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.098501][T10165] Bluetooth: hci4: link tx timeout
[ 1352.103785][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.141877][T10165] Bluetooth: hci4: link tx timeout
[ 1352.147674][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.157313][T10165] Bluetooth: hci4: link tx timeout
[ 1352.162554][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.209738][T10165] Bluetooth: hci4: link tx timeout
[ 1352.214990][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.297605][T10165] Bluetooth: hci4: link tx timeout
[ 1352.303025][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.332774][T10165] Bluetooth: hci4: link tx timeout
[ 1352.338271][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.375814][T10165] Bluetooth: hci4: link tx timeout
[ 1352.381227][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.400748][T10165] Bluetooth: hci4: link tx timeout
[ 1352.406023][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.415415][T10165] Bluetooth: hci4: link tx timeout
[ 1352.420846][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.436441][T10165] Bluetooth: hci4: link tx timeout
[ 1352.441587][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.449730][T10165] Bluetooth: hci4: link tx timeout
[ 1352.454897][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.483024][T10165] Bluetooth: hci4: link tx timeout
[ 1352.488461][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.551387][T10165] Bluetooth: hci4: link tx timeout
[ 1352.556868][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.564810][T10165] Bluetooth: hci4: link tx timeout
[ 1352.570462][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.583019][T10165] Bluetooth: hci4: link tx timeout
[ 1352.588467][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.593765][T16957] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[ 1352.602651][T16957] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1352.612071][T10165] Bluetooth: hci4: link tx timeout
[ 1352.618522][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.636277][T10165] Bluetooth: hci4: link tx timeout
[ 1352.641422][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.672000][T10165] Bluetooth: hci4: link tx timeout
[ 1352.677284][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.689648][T10165] Bluetooth: hci4: link tx timeout
[ 1352.694891][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.741053][T10165] Bluetooth: hci4: link tx timeout
[ 1352.746252][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.755038][T10165] Bluetooth: hci4: link tx timeout
[ 1352.760275][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.770372][T10165] Bluetooth: hci4: link tx timeout
[ 1352.775612][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.792478][T10165] Bluetooth: hci4: link tx timeout
[ 1352.800521][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.808429][T10165] Bluetooth: hci4: link tx timeout
[ 1352.813777][T10165] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1352.827046][ T5137] usb usb18-port1: unable to enumerate USB device
[ 1352.858074][T16957] vhci_hcd vhci_hcd.0: Device attached
[ 1353.094313][T16961] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[ 1353.306603][ T5137] usb 12-1: SetAddress Request (42) to port 0
[ 1353.331267][ T5137] usb 12-1: new SuperSpeed USB device number 42 using vhci_hcd
[ 1353.351975][T10165] Bluetooth: hci4: command 0x0406 tx timeout
[ 1353.402317][T16959] vhci_hcd: connection reset by peer
[ 1353.437744][T15839] vhci_hcd: stop threads
[ 1353.487988][T15839] vhci_hcd: release socket
[ 1353.502179][T15839] vhci_hcd: disconnect device
[ 1355.880664][   T29] audit: type=1326 audit(1720300232.466:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.0.2503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea07775bd9 code=0x0
[ 1356.209306][T16986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2504'.
[ 1356.946333][T16996] binder: 16990:16996 ioctl 4018620d 0 returned -22
[ 1357.210993][T17000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2509'.
[ 1357.776123][ T5166] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[ 1358.066712][ T5166] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[ 1358.084328][ T5166] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1358.146425][ T5166] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1358.202982][ T5166] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[ 1358.252546][ T5166] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1358.356685][ T5166] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1358.451329][ T5166] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[ 1358.466236][ T5137] usb 12-1: device descriptor read/8, error -110
[ 1358.516450][ T5166] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1358.586495][ T5166] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1358.849372][ T5166] usb 1-1: string descriptor 0 read error: -22
[ 1358.859898][ T5166] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1358.872331][ T5166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1358.930494][ T5166] adutux 1-1:168.0: interrupt endpoints not found
[ 1359.158108][ T5137] usb usb12-port1: attempt power cycle
[ 1359.227128][ T5166] usb 1-1: USB disconnect, device number 28
[ 1359.329099][T10165] Bluetooth: hci4: unexpected event for opcode 0x0c14
[ 1359.488961][T17023] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[ 1359.495543][T17023] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1359.527534][T17023] vhci_hcd vhci_hcd.0: Device attached
[ 1359.868023][ T5137] usb usb12-port1: unable to enumerate USB device
[ 1359.916266][ T5166] usb 18-1: SetAddress Request (30) to port 0
[ 1359.929352][ T5166] usb 18-1: new SuperSpeed USB device number 30 using vhci_hcd
[ 1360.432401][T17025] vhci_hcd: connection reset by peer
[ 1360.456634][T15839] vhci_hcd: stop threads
[ 1360.473021][T15839] vhci_hcd: release socket
[ 1360.492046][T15839] vhci_hcd: disconnect device
[ 1363.596437][T17054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2521'.
[ 1364.360442][T17069] binder: 17060:17069 ioctl 4018620d 0 returned -22
[ 1364.451375][T17069] binder: 17060:17069 ioctl c0306201 0 returned -14
[ 1365.200466][ T5166] usb 18-1: device descriptor read/8, error -110
[ 1366.378509][ T5166] usb usb18-port1: attempt power cycle
[ 1366.765338][T17093] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[ 1366.772019][T17093] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1366.790439][T17093] vhci_hcd vhci_hcd.0: Device attached
[ 1367.084800][ T5166] usb usb18-port1: unable to enumerate USB device
[ 1367.136440][ T8554] usb 10-1: SetAddress Request (23) to port 0
[ 1367.184394][ T8554] usb 10-1: new SuperSpeed USB device number 23 using vhci_hcd
[ 1367.372775][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[ 1367.396010][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[ 1367.517089][T17094] vhci_hcd: connection reset by peer
[ 1367.596198][ T1041] vhci_hcd: stop threads
[ 1367.635975][ T1041] vhci_hcd: release socket
[ 1367.666400][ T1041] vhci_hcd: disconnect device
[ 1369.830369][T17109] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1372.323348][ T8554] usb 10-1: device descriptor read/8, error -110
[ 1372.326903][T17146] binder: 17140:17146 ioctl c0306201 0 returned -14
[ 1372.816707][ T8554] usb usb10-port1: attempt power cycle
[ 1373.566478][ T8554] usb usb10-port1: unable to enumerate USB device
[ 1373.946249][ T8554] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1374.186299][ T8554] usb 1-1: Using ep0 maxpacket: 32
[ 1374.229522][ T8554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1374.272255][ T8554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1374.319580][ T8554] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1374.354002][ T8554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1374.403180][ T8554] usb 1-1: Product: syz
[ 1374.423457][ T8554] usb 1-1: Manufacturer: syz
[ 1374.434024][ T8554] usb 1-1: SerialNumber: syz
[ 1374.469262][ T8554] usb 1-1: config 0 descriptor??
[ 1375.941490][T17179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2544'.
[ 1379.568947][ T5137] usb 1-1: USB disconnect, device number 29
[ 1379.673179][T17181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2549'.
[ 1384.361771][T17220] binder: 17214:17220 ioctl 4018620d 0 returned -22
[ 1385.665538][T17218] binder: 17214:17218 ioctl c0306201 0 returned -14
[ 1385.726632][T17232] overlayfs: missing 'lowerdir'
[ 1387.189676][T17244] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1387.212899][T17246] overlayfs: failed to resolve './bus': -2
[ 1388.515964][T17253] overlayfs: failed to resolve './bus': -2
[ 1389.582355][T10165] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1389.721823][T17274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2568'.
[ 1390.220341][T17276] binder: 17267:17276 ioctl 4018620d 0 returned -22
[ 1392.619288][T17295] overlayfs: missing 'lowerdir'
[ 1395.718536][T17307] overlayfs: failed to resolve './bus': -2
[ 1397.755211][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2583'.
[ 1400.044993][T17355] overlayfs: missing 'lowerdir'
[ 1405.006068][T17389] 9pnet: Could not find request transport: tcp�/XV�00 0000000000000
[ 1408.198233][    T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1408.408339][    T9] usb 4-1: descriptor type invalid, skip
[ 1408.438336][    T9] usb 4-1: config 7 has an invalid interface number: 243 but max is 3
[ 1408.456490][    T9] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1408.490528][    T9] usb 4-1: config 7 has an invalid descriptor of length 214, skipping remainder of the config
[ 1408.556054][    T9] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1408.567662][T17419] overlayfs: failed to resolve './bus': -2
[ 1408.597192][    T9] usb 4-1: config 7 has no interface number 0
[ 1408.603423][    T9] usb 4-1: config 7 interface 243 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1408.626711][T17418] overlayfs: missing 'lowerdir'
[ 1408.666142][    T9] usb 4-1: config 7 interface 243 has no altsetting 0
[ 1408.714108][    T9] usb 4-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1408.741376][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1408.789220][    T9] usb 4-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1408.833612][    T9] usb 4-1: Manufacturer: ᰉ
[ 1408.867144][    T9] usb 4-1: SerialNumber:  
[ 1408.963429][T17427] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2602'.
[ 1409.105359][T17409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1409.138396][T17409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1409.218540][    T9] hub 4-1:7.243: bad descriptor, ignoring hub
[ 1409.553871][    T9] hub 4-1:7.243: probe with driver hub failed with error -5
[ 1409.642136][    T9] option 4-1:7.243: GSM modem (1-port) converter detected
[ 1409.737498][    T9] usb 4-1: USB disconnect, device number 28
[ 1409.784715][    T9] option 4-1:7.243: device disconnected
[ 1411.324209][T17447] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[ 1411.330802][T17447] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1411.364971][T17447] vhci_hcd vhci_hcd.0: Device attached
[ 1411.686664][ T8554] usb 12-1: SetAddress Request (46) to port 0
[ 1411.696363][ T8554] usb 12-1: new SuperSpeed USB device number 46 using vhci_hcd
[ 1412.176113][T17448] vhci_hcd: connection reset by peer
[ 1412.214380][ T7979] vhci_hcd: stop threads
[ 1412.219785][ T7979] vhci_hcd: release socket
[ 1412.245054][ T7979] vhci_hcd: disconnect device
[ 1414.083351][T17471] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1414.313422][ T5099] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[ 1415.590904][ T5099] usb 1-1: not running at top speed; connect to a high speed hub
[ 1415.635800][ T5099] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1415.684775][ T5099] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1415.723317][ T5099] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1415.809222][ T5099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1415.836515][ T5099] usb 1-1: Product: syz
[ 1415.843672][ T5099] usb 1-1: Manufacturer: syz
[ 1415.856654][ T5099] usb 1-1: SerialNumber: syz
[ 1416.163771][ T5099] usb 1-1: USB disconnect, device number 30
[ 1416.786595][ T8554] usb 12-1: device descriptor read/8, error -110
[ 1417.260385][ T8554] usb usb12-port1: attempt power cycle
[ 1418.639356][ T8554] usb usb12-port1: unable to enumerate USB device
[ 1418.966562][T17512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[ 1418.973165][T17512] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1418.990826][T17512] vhci_hcd vhci_hcd.0: Device attached
[ 1419.170016][T17524] ALSA: seq fatal error: cannot create timer (-22)
[ 1419.306016][ T8554] usb 16-1: SetAddress Request (22) to port 0
[ 1419.316303][ T8554] usb 16-1: new SuperSpeed USB device number 22 using vhci_hcd
[ 1419.686466][T17516] vhci_hcd: connection reset by peer
[ 1419.706756][ T2439] vhci_hcd: stop threads
[ 1419.756051][ T2439] vhci_hcd: release socket
[ 1419.771102][ T2439] vhci_hcd: disconnect device
[ 1425.215620][ T8554] usb 16-1: device descriptor read/8, error -110
[ 1426.516201][ T8554] usb usb16-port1: attempt power cycle
[ 1427.217924][ T8554] usb usb16-port1: unable to enumerate USB device
[ 1427.508729][T17565] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1427.575544][   T29] audit: type=1326 audit(1720300304.136:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17558 comm="syz.1.2634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x0
[ 1428.896897][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.903287][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[ 1429.647317][T10165] Bluetooth: hci4: link tx timeout
[ 1429.653609][T10165] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1429.662428][ T5100] Bluetooth: hci4: link tx timeout
[ 1429.669251][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1429.677893][ T5100] Bluetooth: hci4: link tx timeout
[ 1429.686951][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1429.696408][ T5100] Bluetooth: hci4: link tx timeout
[ 1429.701616][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1429.844239][ T5100] Bluetooth: hci4: link tx timeout
[ 1429.853940][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1429.897419][ T5100] Bluetooth: hci4: link tx timeout
[ 1429.902584][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1429.974436][ T5100] Bluetooth: hci4: link tx timeout
[ 1429.979814][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1430.009983][ T5100] Bluetooth: hci4: link tx timeout
[ 1430.015162][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1430.024578][ T5100] Bluetooth: hci4: link tx timeout
[ 1430.030077][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1430.143889][ T5100] Bluetooth: hci4: link tx timeout
[ 1430.150989][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1430.164004][ T5100] Bluetooth: hci4: link tx timeout
[ 1430.169644][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1430.429370][ T5100] Bluetooth: hci4: link tx timeout
[ 1430.434566][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1430.469600][ T5100] Bluetooth: hci4: link tx timeout
[ 1430.474842][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1430.545670][T17601] qnx6: unable to read the first superblock
[ 1431.036162][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.041358][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.050032][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.055190][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.086092][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.091521][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.099714][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.105036][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.114098][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.120502][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.129656][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.136030][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.144136][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.150494][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.158326][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.163444][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.179829][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.185110][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.193138][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.198557][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.206354][ T5100] Bluetooth: hci4: link tx timeout
[ 1431.211584][ T5100] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1431.406195][T17599] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[ 1431.413039][T17599] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1431.530402][T17599] vhci_hcd vhci_hcd.0: Device attached
[ 1431.750835][ T5100] Bluetooth: hci4: command 0x0406 tx timeout
[ 1431.896035][ T5099] usb 16-1: SetAddress Request (26) to port 0
[ 1431.903504][ T5099] usb 16-1: new SuperSpeed USB device number 26 using vhci_hcd
[ 1432.025575][   T29] audit: type=1326 audit(1720300308.606:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17608 comm="syz.2.2643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7398975bd9 code=0x0
[ 1432.361450][T17603] vhci_hcd: connection reset by peer
[ 1432.373212][ T6868] vhci_hcd: stop threads
[ 1433.356431][ T6868] vhci_hcd: release socket
[ 1433.407784][ T6868] vhci_hcd: disconnect device
[ 1434.071769][   T29] audit: type=1326 audit(1720300310.586:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17627 comm="syz.0.2647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea07775bd9 code=0x0
[ 1437.079851][ T5099] usb 16-1: device descriptor read/8, error -110
[ 1438.319631][ T5099] usb usb16-port1: attempt power cycle
[ 1438.437072][T17654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2653'.
[ 1438.693351][T17659] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1439.076575][ T5099] usb usb16-port1: unable to enumerate USB device
[ 1439.496032][T17664] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1441.462845][T17689] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[ 1441.497938][T17690] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[ 1441.504542][T17690] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1441.539683][T10165] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1441.557966][T17690] vhci_hcd vhci_hcd.0: Device attached
[ 1442.186224][ T5099] usb 10-1: SetAddress Request (27) to port 0
[ 1442.194499][ T5099] usb 10-1: new SuperSpeed USB device number 27 using vhci_hcd
[ 1443.162169][T17710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2665'.
[ 1443.258631][   T29] audit: type=1326 audit(1720300319.846:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17696 comm="syz.4.2664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccd9d75bd9 code=0x0
[ 1443.319897][T17692] vhci_hcd: connection reset by peer
[ 1443.350909][   T29] audit: type=1326 audit(1720300319.936:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.1.2666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x0
[ 1443.376115][ T6868] vhci_hcd: stop threads
[ 1443.410283][ T6868] vhci_hcd: release socket
[ 1443.445423][ T6868] vhci_hcd: disconnect device
[ 1449.739350][ T5099] usb 10-1: device descriptor read/8, error -110
[ 1450.297985][ T5099] usb usb10-port1: attempt power cycle
[ 1450.672870][T17731] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1451.056741][ T5099] usb usb10-port1: unable to enumerate USB device
[ 1451.261715][T17735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2671'.
[ 1452.415288][   T29] audit: type=1400 audit(1720300328.986:703): avc:  denied  { shutdown } for  pid=17750 comm="syz.4.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1452.661486][   T29] audit: type=1400 audit(1720300328.996:704): avc:  denied  { read } for  pid=17750 comm="syz.4.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1455.263464][T17766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'.
[ 1456.506980][T17778] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[ 1457.245907][T17791] qnx6: unable to read the first superblock
[ 1458.070764][   T29] audit: type=1326 audit(1720300334.656:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.4.2682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccd9d75bd9 code=0x0
[ 1460.319810][T17806] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1463.659485][T17838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2694'.
[ 1465.156712][T17843] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1465.434592][T17837] overlayfs: failed to resolve './bus': -2
[ 1465.503924][T17860] syzkaller1: entered promiscuous mode
[ 1465.516214][T17860] syzkaller1: entered allmulticast mode
[ 1468.581677][T17891] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2709'.
[ 1468.595975][   T29] audit: type=1400 audit(1720300345.166:706): avc:  denied  { nlmsg_read } for  pid=17884 comm="syz.0.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1468.677901][T17891] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2709'.
[ 1468.985439][   T29] audit: type=1326 audit(1720300345.566:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17897 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x7ffc0000
[ 1469.008902][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1469.016291][ T5099] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1469.065076][   T29] audit: type=1326 audit(1720300345.566:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17897 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x7ffc0000
[ 1469.156047][   T29] audit: type=1326 audit(1720300345.566:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17897 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa00a974610 code=0x7ffc0000
[ 1469.179494][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1469.190963][   T29] audit: type=1326 audit(1720300345.566:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17897 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa00a977367 code=0x7ffc0000
[ 1469.214366][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1469.226273][   T29] audit: type=1326 audit(1720300345.566:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17897 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa00a975bd9 code=0x7ffc0000
[ 1469.260040][   T29] audit: type=1326 audit(1720300345.566:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17897 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa00a977367 code=0x7ffc0000
[ 1469.261483][ T5099] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1469.330928][   T29] audit: type=1326 audit(1720300345.566:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17897 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa00a97490a code=0x7ffc0000
[ 1469.375313][ T5099] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1469.388573][ T5099] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1469.405063][ T5099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1469.416040][ T5099] usb 5-1: SerialNumber: syz
[ 1469.422831][   T29] audit: type=1326 audit(1720300345.566:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17897 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x7ffc0000
[ 1469.453790][   T29] audit: type=1326 audit(1720300345.566:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17897 comm="syz.1.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa00a975bd9 code=0x7ffc0000
[ 1469.807385][ T5099] usb 5-1: 0:2 : does not exist
[ 1472.916093][ T5099] usb 5-1: USB disconnect, device number 27
[ 1473.946851][T17795] udevd[17795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1474.045557][   T29] kauditd_printk_skb: 2 callbacks suppressed
[ 1474.045586][   T29] audit: type=1400 audit(1720300350.626:718): avc:  denied  { bind } for  pid=17926 comm="syz.3.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1474.190060][T17928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.212207][T17931] ieee802154 phy0 wpan0: encryption failed: -22
[ 1474.249795][T17928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2720'.
[ 1474.426266][ T5134] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1474.440536][T17928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.604379][T17942] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1474.632204][ T5134] usb 5-1: Using ep0 maxpacket: 32
[ 1474.645599][ T5134] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1474.680160][ T5134] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1474.745934][ T5134] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1474.767122][ T5134] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1474.803704][ T5134] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1474.828123][ T5134] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1474.841735][ T5134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.856503][ T5134] usb 5-1: Product: syz
[ 1474.868484][ T5134] usb 5-1: Manufacturer: syz
[ 1474.883829][ T5134] usb 5-1: SerialNumber: syz
[ 1475.026275][   T29] audit: type=1400 audit(1720300351.606:719): avc:  denied  { getopt } for  pid=17950 comm="syz.1.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1475.144942][ T5134] cdc_ncm 5-1:1.0: bind() failure
[ 1475.179062][ T5134] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 1475.195096][ T5134] cdc_ncm 5-1:1.1: bind() failure
[ 1475.216851][ T5134] usb 5-1: USB disconnect, device number 28
[ 1477.476366][T17995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1477.556954][T17995] ieee802154 phy0 wpan0: encryption failed: -22
[ 1477.611822][T17995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2742'.
[ 1477.809305][T18007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2749'.
[ 1477.935407][T18008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1477.947846][T16875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1477.999372][T16875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1478.141477][T18013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2750'.
[ 1478.465986][ T5134] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1478.718588][ T5134] usb 4-1: descriptor type invalid, skip
[ 1478.733254][ T5134] usb 4-1: config 7 has an invalid interface number: 243 but max is 3
[ 1478.755969][ T5134] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1478.806123][ T5134] usb 4-1: config 7 has an invalid descriptor of length 214, skipping remainder of the config
[ 1478.860158][ T5134] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1478.914603][ T5134] usb 4-1: config 7 has no interface number 0
[ 1478.932189][ T5134] usb 4-1: config 7 interface 243 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1478.997947][ T5134] usb 4-1: config 7 interface 243 has no altsetting 0
[ 1479.017566][ T5134] usb 4-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1479.027484][ T5134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1479.035537][ T5134] usb 4-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1479.044930][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1479.063782][ T5134] usb 4-1: Manufacturer: ᰉ
[ 1479.071766][ T5134] usb 4-1: SerialNumber:  
[ 1479.770578][T18012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1479.794133][T18012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.582369][ T5134] hub 4-1:7.243: bad descriptor, ignoring hub
[ 1480.588589][ T5134] hub 4-1:7.243: probe with driver hub failed with error -5
[ 1480.598390][ T5134] option 4-1:7.243: GSM modem (1-port) converter detected
[ 1480.677481][ T5134] usb 4-1: USB disconnect, device number 29
[ 1480.706880][ T5134] option 4-1:7.243: device disconnected
[ 1480.948007][ T5099] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1480.957289][T18055] syz.3.2765 (18055): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1481.158732][ T5099] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[ 1481.193216][ T5099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.233427][ T5099] usb 2-1: config 0 descriptor??
[ 1481.264205][ T5099] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input55
[ 1481.425741][T18059] xt_connbytes: Forcing CT accounting to be enabled
[ 1481.446266][T18059] --map-set only usable from mangle table
[ 1481.531239][T18046] 9pnet_fd: Insufficient options for proto=fd
[ 1481.654605][ T5166] usb 2-1: USB disconnect, device number 26
[ 1482.973167][   T29] audit: type=1400 audit(1720300359.556:720): avc:  denied  { map } for  pid=18084 comm="syz.1.2776" path="socket:[63971]" dev="sockfs" ino=63971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[ 1482.996345][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1483.086308][ T5134] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1483.329983][ T5134] usb 4-1: descriptor type invalid, skip
[ 1483.352858][ T5134] usb 4-1: config 7 has an invalid interface number: 243 but max is 3
[ 1483.394817][ T5134] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1483.432798][ T5134] usb 4-1: config 7 has an invalid descriptor of length 214, skipping remainder of the config
[ 1483.443595][ T5089] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1483.502903][ T5134] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1483.538644][ T5134] usb 4-1: config 7 has no interface number 0
[ 1483.578136][ T5134] usb 4-1: config 7 interface 243 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1483.623546][ T5134] usb 4-1: config 7 interface 243 has no altsetting 0
[ 1483.662091][ T5134] usb 4-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1483.671256][ T5089] usb 2-1: Using ep0 maxpacket: 8
[ 1483.681171][ T5089] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1483.717625][ T5134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1483.726196][ T5089] usb 2-1: config 0 has no interface number 0
[ 1483.732434][ T5089] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1483.735879][ T5134] usb 4-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1484.033490][ T5089] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1484.042696][ T5089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.054820][ T5089] usb 2-1: config 0 descriptor??
[ 1484.060322][ T5134] usb 4-1: Manufacturer: ᰉ
[ 1484.369894][ T5089] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1484.909946][ T5134] usb 4-1: SerialNumber:  
[ 1484.919262][   T29] audit: type=1400 audit(1720300361.496:721): avc:  denied  { unmount } for  pid=16459 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1485.028034][T18095] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x33424752, 8, 0, 0, 0)
[ 1485.501879][T18081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1485.742974][T18081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1486.317603][ T5134] hub 4-1:7.243: bad descriptor, ignoring hub
[ 1486.323761][ T5134] hub 4-1:7.243: probe with driver hub failed with error -5
[ 1486.340682][ T5134] option 4-1:7.243: GSM modem (1-port) converter detected
[ 1486.409345][ T5134] usb 4-1: USB disconnect, device number 30
[ 1486.429506][ T5134] option 4-1:7.243: device disconnected
[ 1486.575228][ T5141] usb 2-1: USB disconnect, device number 27
[ 1486.583271][T10165] Bluetooth: hci4: unexpected event 0x08 length: 8 > 4
[ 1486.603001][ T5141] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected
[ 1486.752336][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'.
[ 1487.430528][T18118] xt_connbytes: Forcing CT accounting to be enabled
[ 1487.456239][T18118] Cannot find add_set index 0 as target
[ 1487.526257][ T5134] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1487.681548][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2788'.
[ 1487.805292][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1487.825523][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1487.865924][ T5134] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1487.886059][ T5134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.923199][ T5134] usb 4-1: config 0 descriptor??
[ 1488.366254][ T5134] hid (null): bogus close delimiter
[ 1488.436293][T18133] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[ 1488.863856][T18138] binder: 18134:18138 ioctl 4018620d 0 returned -22
[ 1489.142112][ T5134] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input56
[ 1489.297002][ T5134] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input57
[ 1489.370796][ T5134] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input58
[ 1489.470531][ T5134] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input59
[ 1489.545263][ T5134] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[ 1489.580433][ T5134] usb 4-1: USB disconnect, device number 31
[ 1490.867879][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[ 1490.998391][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[ 1494.608488][   T29] audit: type=1326 audit(1720300371.186:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18178 comm="syz.3.2799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a67575bd9 code=0x0
[ 1494.826261][ T5166] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1495.015949][ T5166] usb 3-1: Using ep0 maxpacket: 32
[ 1495.031742][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1495.079368][ T5166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1495.126863][ T5166] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1495.158714][ T5166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1495.185100][ T5166] usb 3-1: Product: syz
[ 1495.210986][ T5166] usb 3-1: Manufacturer: syz
[ 1495.228270][ T5166] usb 3-1: SerialNumber: syz
[ 1495.280392][ T5166] usb 3-1: config 0 descriptor??
[ 1499.208387][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2802'.
[ 1502.991913][ T5137] usb 3-1: USB disconnect, device number 26
[ 1505.970486][T18241] binder: 18234:18241 ioctl 4018620d 0 returned -22
[ 1507.195939][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1507.211017][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1507.238279][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1507.247849][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1507.266497][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1507.276828][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1507.708158][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1507.723186][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1507.733725][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1507.742832][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1507.751678][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1507.764005][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1508.432546][ T6791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.060035][ T6791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.352616][ T6791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.426355][T10165] Bluetooth: hci0: command tx timeout
[ 1509.723464][ T6791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.840105][T10165] Bluetooth: hci4: command tx timeout
[ 1509.998719][   T29] audit: type=1326 audit(1720300386.586:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18261 comm="syz.3.2820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a67575bd9 code=0x0
[ 1510.021656][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1511.106596][ T6791] bridge_slave_1: left allmulticast mode
[ 1511.112293][ T6791] bridge_slave_1: left promiscuous mode
[ 1511.145307][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1511.185726][ T6791] bridge_slave_0: left allmulticast mode
[ 1511.202002][ T6791] bridge_slave_0: left promiscuous mode
[ 1511.209805][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1511.506394][T10165] Bluetooth: hci0: command tx timeout
[ 1511.916201][T10165] Bluetooth: hci4: command tx timeout
[ 1512.221133][T18281] xt_connbytes: Forcing CT accounting to be enabled
[ 1512.270601][T18281] --map-set only usable from mangle table
[ 1513.150312][ T6791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1513.241133][ T6791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1513.295210][ T6791] bond0 (unregistering): Released all slaves
[ 1513.443254][T18247] chnl_net:caif_netlink_parms(): no params data found
[ 1513.596683][T10165] Bluetooth: hci0: command tx timeout
[ 1513.842481][   T29] audit: type=1326 audit(1720300390.426:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.0.2826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea07775bd9 code=0x0
[ 1513.996308][T10165] Bluetooth: hci4: command tx timeout
[ 1514.183266][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'.
[ 1514.670526][ T6791] hsr_slave_0: left promiscuous mode
[ 1514.680933][ T6791] hsr_slave_1: left promiscuous mode
[ 1514.696810][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1514.720243][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1514.742208][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1514.756218][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1514.820489][ T6791] veth1_macvtap: left promiscuous mode
[ 1514.829988][ T6791] veth0_macvtap: left promiscuous mode
[ 1514.844887][ T6791] veth1_vlan: left promiscuous mode
[ 1514.856314][ T6791] veth0_vlan: left promiscuous mode
[ 1515.666214][T10165] Bluetooth: hci0: command tx timeout
[ 1516.066237][T10165] Bluetooth: hci4: command tx timeout
[ 1516.210641][ T6791] team0 (unregistering): Port device team_slave_1 removed
[ 1516.353349][ T6791] team0 (unregistering): Port device team_slave_0 removed
[ 1516.752053][T18312] binder: 18308:18312 ioctl 4018620d 0 returned -22
[ 1516.914309][   T45] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1517.133511][   T45] usb 2-1: descriptor type invalid, skip
[ 1517.170393][   T45] usb 2-1: config 7 has an invalid interface number: 243 but max is 3
[ 1517.179247][   T45] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1517.192497][   T45] usb 2-1: config 7 has an invalid descriptor of length 214, skipping remainder of the config
[ 1517.220672][   T45] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1517.230339][   T45] usb 2-1: config 7 has no interface number 0
[ 1517.237304][   T45] usb 2-1: config 7 interface 243 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1517.251264][   T45] usb 2-1: config 7 interface 243 has no altsetting 0
[ 1517.266268][   T45] usb 2-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1517.281635][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.292503][   T45] usb 2-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1517.317527][   T45] usb 2-1: Manufacturer: ᰉ
[ 1517.322328][   T45] usb 2-1: SerialNumber:  
[ 1517.563772][T18311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1517.588136][T18311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1517.620597][   T45] hub 2-1:7.243: bad descriptor, ignoring hub
[ 1517.627460][   T45] hub 2-1:7.243: probe with driver hub failed with error -5
[ 1517.640344][   T45] option 2-1:7.243: GSM modem (1-port) converter detected
[ 1517.735734][   T45] usb 2-1: USB disconnect, device number 28
[ 1517.757872][   T45] option 2-1:7.243: device disconnected
[ 1518.032977][T18251] chnl_net:caif_netlink_parms(): no params data found
[ 1518.104396][T18247] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1518.114171][T18247] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1518.135388][T18247] bridge_slave_0: entered allmulticast mode
[ 1518.175350][T18247] bridge_slave_0: entered promiscuous mode
[ 1518.204414][T18247] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1518.222108][T18247] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1518.239940][T18247] bridge_slave_1: entered allmulticast mode
[ 1518.289874][T18247] bridge_slave_1: entered promiscuous mode
[ 1518.467998][T18319] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2830'.
[ 1518.496596][T18319] netlink: del zone limit has 8 unknown bytes
[ 1518.786754][T18247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1518.911693][   T29] audit: type=1326 audit(1720300395.476:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18316 comm="syz.1.2831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x0
[ 1518.939076][T18247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1519.519229][T18247] team0: Port device team_slave_0 added
[ 1519.561069][T18247] team0: Port device team_slave_1 added
[ 1520.091732][T18251] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1520.107874][T18251] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1520.129061][T18251] bridge_slave_0: entered allmulticast mode
[ 1520.179112][T18251] bridge_slave_0: entered promiscuous mode
[ 1520.271887][T18247] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1520.317177][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1520.370187][T18247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1520.433839][T18251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1520.476972][T18251] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1520.535751][T18251] bridge_slave_1: entered allmulticast mode
[ 1520.561635][T18251] bridge_slave_1: entered promiscuous mode
[ 1520.631385][T18247] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1520.924272][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1521.011422][T18247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1521.967459][T18251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1522.014281][T18251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1522.425417][T18251] team0: Port device team_slave_0 added
[ 1522.990027][ T6791] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1523.062829][ T6791] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1523.160131][T18251] team0: Port device team_slave_1 added
[ 1523.608989][ T6791] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1523.644916][ T6791] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1523.729699][T18247] hsr_slave_0: entered promiscuous mode
[ 1523.757419][T18247] hsr_slave_1: entered promiscuous mode
[ 1523.789662][T18247] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1523.976384][T18379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2836'.
[ 1524.447098][T18247] Cannot create hsr debugfs directory
[ 1524.907453][T18251] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1524.924922][T18251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1524.952277][T18251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1524.975493][   T29] audit: type=1400 audit(1720300401.556:726): avc:  denied  { create } for  pid=18384 comm="syz.1.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1524.989779][T18251] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1525.002653][   T29] audit: type=1400 audit(1720300401.556:727): avc:  denied  { ioctl } for  pid=18384 comm="syz.1.2840" path="socket:[65697]" dev="sockfs" ino=65697 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1525.076618][T18251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1525.103432][T18251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1525.116542][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2838'.
[ 1525.219561][ T6791] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1525.230374][ T6791] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1525.481193][ T6791] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1525.505641][ T6791] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1525.603444][T18393] binder: 18389:18393 ioctl 4018620d 0 returned -22
[ 1525.949312][T18251] hsr_slave_0: entered promiscuous mode
[ 1525.991236][T18251] hsr_slave_1: entered promiscuous mode
[ 1526.026709][T18251] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1526.050364][T18251] Cannot create hsr debugfs directory
[ 1528.608805][   T29] audit: type=1326 audit(1720300405.176:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18411 comm="syz.1.2844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x0
[ 1528.743882][ T6791] bridge_slave_1: left allmulticast mode
[ 1528.786709][ T6791] bridge_slave_1: left promiscuous mode
[ 1528.792780][ T6791] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1528.867565][ T6791] bridge_slave_0: left allmulticast mode
[ 1528.894787][ T6791] bridge_slave_0: left promiscuous mode
[ 1528.938307][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1531.400138][T18443] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[ 1531.406852][T18443] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1531.417029][T18443] vhci_hcd vhci_hcd.0: Device attached
[ 1531.726344][T14310] usb 10-1: SetAddress Request (31) to port 0
[ 1531.735326][T14310] usb 10-1: new SuperSpeed USB device number 31 using vhci_hcd
[ 1531.853895][ T6791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1531.881524][ T6791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1531.894711][ T6791] bond0 (unregistering): Released all slaves
[ 1532.117979][T18431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2846'.
[ 1532.285937][T18444] vhci_hcd: connection reset by peer
[ 1532.318699][ T2479] vhci_hcd: stop threads
[ 1532.323107][ T2479] vhci_hcd: release socket
[ 1532.356139][ T2479] vhci_hcd: disconnect device
[ 1532.692523][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'.
[ 1534.234826][T18471] overlayfs: missing 'lowerdir'
[ 1534.364055][ T6791] hsr_slave_0: left promiscuous mode
[ 1534.412940][ T6791] hsr_slave_1: left promiscuous mode
[ 1534.526652][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1534.570462][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1534.638944][ T6791] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1534.674759][ T6791] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1534.822132][ T6791] veth1_macvtap: left promiscuous mode
[ 1534.841032][ T6791] veth0_macvtap: left promiscuous mode
[ 1534.858873][ T6791] veth1_vlan: left promiscuous mode
[ 1534.895504][ T6791] veth0_vlan: left promiscuous mode
[ 1535.553580][   T29] audit: type=1326 audit(1720300412.136:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18481 comm="syz.0.2854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea07775bd9 code=0x0
[ 1537.416195][T14310] usb 10-1: device descriptor read/8, error -110
[ 1537.878390][T14310] usb usb10-port1: attempt power cycle
[ 1537.933548][   T29] audit: type=1326 audit(1720300414.516:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.3.2857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a67575bd9 code=0x0
[ 1538.961795][T14310] usb usb10-port1: unable to enumerate USB device
[ 1539.230168][T18507] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.2858'.
[ 1539.495704][ T6791] team0 (unregistering): Port device team_slave_1 removed
[ 1539.632511][ T6791] team0 (unregistering): Port device team_slave_0 removed
[ 1539.670197][T14310] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1539.907595][T14310] usb 2-1: descriptor type invalid, skip
[ 1539.933217][T14310] usb 2-1: config 7 has an invalid interface number: 243 but max is 3
[ 1539.942123][T14310] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1539.953943][T14310] usb 2-1: config 7 has an invalid descriptor of length 214, skipping remainder of the config
[ 1539.964889][T14310] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1539.974297][T14310] usb 2-1: config 7 has no interface number 0
[ 1539.982721][T14310] usb 2-1: config 7 interface 243 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1539.996504][T14310] usb 2-1: config 7 interface 243 has no altsetting 0
[ 1540.009102][T14310] usb 2-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1540.019025][T14310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1540.038970][T14310] usb 2-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1540.045191][T14310] usb 2-1: Manufacturer: ᰉ
[ 1540.050902][T14310] usb 2-1: SerialNumber:  
[ 1540.323443][T18512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1540.344735][T18512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1540.372506][T14310] hub 2-1:7.243: bad descriptor, ignoring hub
[ 1540.384809][T14310] hub 2-1:7.243: probe with driver hub failed with error -5
[ 1540.424385][T14310] option 2-1:7.243: GSM modem (1-port) converter detected
[ 1540.523245][T14310] usb 2-1: USB disconnect, device number 29
[ 1540.559861][T14310] option 2-1:7.243: device disconnected
[ 1540.996229][T18516] overlayfs: failed to resolve './bus': -2
[ 1541.833687][T18247] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1542.301709][T18247] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1542.586344][T18247] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1542.738523][T18247] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1543.405367][T18247] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1544.601506][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'.
[ 1544.785589][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[ 1544.792283][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[ 1544.799521][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[ 1544.806145][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[ 1544.812903][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[ 1544.819537][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.827823][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.835833][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.844029][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.852056][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.860208][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.868239][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.876403][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.884363][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.892601][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.900630][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.908841][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.916864][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.924978][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.933000][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.941190][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.949217][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.957368][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.965323][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.973515][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.981535][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1544.989705][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1544.997700][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1545.005901][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1545.013860][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1545.022057][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1545.030058][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1545.038269][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1545.046310][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1545.054447][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1545.062473][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1545.070634][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1545.078688][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1545.086870][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[ 1545.094830][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[ 1545.529175][T18247] 8021q: adding VLAN 0 to HW filter on device team0
[ 1545.590443][T18251] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1545.640637][T18251] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1545.746751][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1545.754101][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1545.801832][T18251] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1545.877277][T18251] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1545.971590][T18541] binder: 18536:18541 ioctl 4018620d 0 returned -22
[ 1546.027106][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1546.034398][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1546.893256][T18251] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1547.054466][T18251] 8021q: adding VLAN 0 to HW filter on device team0
[ 1547.139356][T18562] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[ 1547.202046][T14310] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1547.209466][T14310] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1547.405389][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1547.412703][ T8554] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1547.863634][T18247] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1548.351585][T18247] veth0_vlan: entered promiscuous mode
[ 1548.404141][T18247] veth1_vlan: entered promiscuous mode
[ 1548.542420][T18247] veth0_macvtap: entered promiscuous mode
[ 1548.609030][T18247] veth1_macvtap: entered promiscuous mode
[ 1548.839655][T18247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1548.902879][T18247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.931170][T18247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1548.963934][T18247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1548.989484][T18247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1549.032563][T18247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1549.065340][T18247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1549.097349][T18247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1549.172073][T18247] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1549.245281][T18247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1549.272683][T18247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1549.312823][T18247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1549.335219][T18247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1549.390868][T18247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1549.457990][T18247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1549.476075][T18247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1549.525966][T18247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1549.588647][T18247] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1549.707748][T18247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1549.778212][T18247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1549.828977][T18247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1549.865979][T18247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.264282][T18593] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2870'.
[ 1550.283925][T18251] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1550.334395][T18593] netlink: del zone limit has 8 unknown bytes
[ 1550.597755][ T2479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1550.634530][ T2479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1550.866089][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'.
[ 1550.882599][ T2479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1550.922923][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'.
[ 1550.947666][ T2479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1551.683652][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[ 1551.695942][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[ 1551.786312][T18606] 9pnet: Could not find request transport: tcp�/XV�00 0000000000000
[ 1552.242168][T18608] overlayfs: failed to resolve './bus': -2
[ 1552.424662][T18251] veth0_vlan: entered promiscuous mode
[ 1552.616853][T18251] veth1_vlan: entered promiscuous mode
[ 1552.969529][T18251] veth0_macvtap: entered promiscuous mode
[ 1553.067509][T18251] veth1_macvtap: entered promiscuous mode
[ 1553.304978][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1553.405861][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1553.470651][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1553.548414][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1553.595740][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1553.692828][T18630] overlayfs: failed to resolve './bus': -2
[ 1553.776160][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1553.795328][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1553.884144][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1553.901861][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1553.914958][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1553.932449][T18251] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1554.169293][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1554.272205][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1554.334248][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1554.389275][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1554.418544][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1554.456033][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1554.485887][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1554.526638][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1554.550334][T18251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1554.585883][T18251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1554.670696][T18251] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1554.756750][T18251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1554.786202][T18251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1554.815851][T18251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1554.863711][T18251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1555.609865][ T6868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1555.641857][ T6868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1555.722569][   T29] audit: type=1400 audit(1720300432.306:731): avc:  denied  { read } for  pid=18657 comm="syz.1.2875" name="rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1555.828690][ T2479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1555.860740][   T29] audit: type=1400 audit(1720300432.306:732): avc:  denied  { open } for  pid=18657 comm="syz.1.2875" path="/dev/rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1555.979969][ T2479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1556.190816][   T29] audit: type=1400 audit(1720300432.346:733): avc:  denied  { ioctl } for  pid=18657 comm="syz.1.2875" path="/dev/rtc0" dev="devtmpfs" ino=837 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1556.646065][ T5089] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1556.734489][T18671] binder: 18668:18671 ioctl 4018620d 0 returned -22
[ 1556.762100][T18682] Cannot find add_set index 0 as target
[ 1556.802794][T18681] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2879'.
[ 1556.836517][T18681] netlink: del zone limit has 8 unknown bytes
[ 1556.880614][ T5089] usb 3-1: descriptor type invalid, skip
[ 1556.915032][ T5089] usb 3-1: config 7 has an invalid interface number: 243 but max is 3
[ 1556.938234][ T5089] usb 3-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 1556.988451][ T5089] usb 3-1: config 7 has an invalid descriptor of length 214, skipping remainder of the config
[ 1557.040917][ T5089] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 4
[ 1557.084154][ T5089] usb 3-1: config 7 has no interface number 0
[ 1557.114567][ T5089] usb 3-1: config 7 interface 243 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1557.172593][ T5089] usb 3-1: config 7 interface 243 has no altsetting 0
[ 1557.212113][ T5089] usb 3-1: New USB device found, idVendor=19d2, idProduct=fff9, bcdDevice=21.6a
[ 1557.317770][ T5089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.345948][ T5089] usb 3-1: Product: ؏甑㱡蠥ꗈ蘵᩟
[ 1557.393303][ T5089] usb 3-1: Manufacturer: ᰉ
[ 1557.415497][ T5089] usb 3-1: SerialNumber:  
[ 1557.723507][T18669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1557.762651][T18669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1557.933815][ T5089] hub 3-1:7.243: bad descriptor, ignoring hub
[ 1557.974102][ T5089] hub 3-1:7.243: probe with driver hub failed with error -5
[ 1557.982365][T18688] binder: 18686:18688 ioctl c0306201 0 returned -14
[ 1558.026766][ T5089] option 3-1:7.243: GSM modem (1-port) converter detected
[ 1558.117323][ T5089] usb 3-1: USB disconnect, device number 27
[ 1558.147507][ T5089] option 3-1:7.243: device disconnected
[ 1558.385916][   T29] audit: type=1400 audit(1720300434.966:734): avc:  denied  { write } for  pid=18695 comm="syz.4.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1559.016419][    T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1559.252453][T18715] overlayfs: failed to resolve './bus': -2
[ 1559.299555][    T8] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1559.444424][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1559.566485][    T8] usb 5-1: config 0 descriptor??
[ 1559.706252][T18724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2884'.
[ 1560.219257][    T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1560.296062][    T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1560.372826][    T8] [drm:udl_init] *ERROR* Selecting channel failed
[ 1560.643321][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'.
[ 1560.916545][    T8] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[ 1560.951474][   T29] audit: type=1400 audit(1720300437.506:735): avc:  denied  { read } for  pid=18734 comm="syz.3.2887" name="file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1560.951968][    T8] [drm] Initialized udl on minor 2
[ 1561.042573][   T29] audit: type=1400 audit(1720300437.506:736): avc:  denied  { open } for  pid=18734 comm="syz.3.2887" path="/95/file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1561.150663][   T29] audit: type=1400 audit(1720300437.536:737): avc:  denied  { ioctl } for  pid=18734 comm="syz.3.2887" path="/95/file0" dev="tmpfs" ino=521 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1561.183358][    T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1561.286902][    T8] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1561.355148][ T5137] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1561.416491][    T8] usb 5-1: USB disconnect, device number 29
[ 1561.459072][ T5137] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1561.570126][T18749] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2890'.
[ 1561.624453][T18749] netlink: del zone limit has 8 unknown bytes
[ 1561.896771][T18758] xt_connbytes: Forcing CT accounting to be enabled
[ 1561.953113][T18758] Cannot find add_set index 0 as target
[ 1562.172841][   T29] audit: type=1400 audit(1720300438.756:738): avc:  denied  { load_policy } for  pid=18759 comm="syz.0.2893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1562.177938][T18760] SELinux:  policydb magic number 0x3 does not match expected magic number 0xf97cff8c
[ 1562.271066][T18760] SELinux: failed to load policy
[ 1562.423382][   T29] audit: type=1400 audit(1720300439.006:739): avc:  denied  { create } for  pid=18759 comm="syz.0.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[ 1563.113185][T18767] binder: 18764:18767 ioctl 4018620d 0 returned -22
[ 1563.822065][T18779] binder: 18775:18779 ioctl c0306201 0 returned -14
[ 1564.040977][   T29] audit: type=1326 audit(1720300440.626:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18776 comm="syz.1.2898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x0
[ 1564.169613][T18774] overlayfs: failed to resolve './bus': -2
[ 1567.247549][T18806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2902'.
[ 1567.614317][T18815] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2903'.
[ 1567.652530][T18815] netlink: del zone limit has 8 unknown bytes
[ 1567.933517][T18823] overlayfs: missing 'lowerdir'
[ 1568.045651][    T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1568.227492][T18833] --map-set only usable from mangle table
[ 1568.354208][    T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1568.377558][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.439924][    T8] usb 3-1: config 0 descriptor??
[ 1569.146008][    T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1569.176474][    T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1569.236578][    T8] [drm:udl_init] *ERROR* Selecting channel failed
[ 1569.362694][    T8] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 1569.390485][    T8] [drm] Initialized udl on minor 2
[ 1569.409986][    T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1569.444330][    T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1569.457507][ T5137] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1569.508841][    T8] usb 3-1: USB disconnect, device number 28
[ 1569.517324][ T5137] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1569.549238][ T5137] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1569.559866][T18844] xt_connbytes: Forcing CT accounting to be enabled
[ 1569.586048][T18844] Cannot find add_set index 0 as target
[ 1569.837285][T18850] binder: 18840:18850 ioctl 4018620d 0 returned -22
[ 1570.096248][T18846] binder: 18843:18846 ioctl c0306201 0 returned -14
[ 1570.918192][T18859] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1571.295915][   T29] audit: type=1326 audit(1720300447.866:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18858 comm="syz.2.2914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5685975bd9 code=0x0
[ 1572.753190][T18867] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2916'.
[ 1572.808895][T18867] netlink: del zone limit has 8 unknown bytes
[ 1573.237007][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'.
[ 1573.463592][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1573.479902][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1573.494546][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1573.504585][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1573.523339][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1573.534538][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1573.856981][T18880] overlayfs: missing 'lowerdir'
[ 1574.286345][ T2479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1574.406817][T18885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2920'.
[ 1574.873781][ T2479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1574.953722][T18896] --map-set only usable from mangle table
[ 1575.066405][T18897] Cannot find add_set index 0 as target
[ 1575.129060][ T2479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1575.668065][ T5100] Bluetooth: hci2: command tx timeout
[ 1575.714044][   T29] audit: type=1326 audit(1720300452.296:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18898 comm="syz.4.2923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facbcb75bd9 code=0x0
[ 1575.749555][ T2479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1576.849095][T18872] chnl_net:caif_netlink_parms(): no params data found
[ 1576.895985][ T5137] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1576.921147][T18919] binder: 18912:18919 ioctl 4018620d 0 returned -22
[ 1577.068828][ T2479] bridge_slave_1: left allmulticast mode
[ 1577.086174][ T5137] usb 3-1: Using ep0 maxpacket: 32
[ 1577.103355][ T2479] bridge_slave_1: left promiscuous mode
[ 1577.119294][ T5137] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1577.141078][ T2479] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1577.156099][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1577.216356][ T2479] bridge_slave_0: left allmulticast mode
[ 1577.234579][ T5137] usb 3-1: config 0 descriptor??
[ 1577.240024][ T2479] bridge_slave_0: left promiscuous mode
[ 1577.257228][ T2479] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1577.270967][ T5137] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1577.649248][ T5137] gspca_nw80x: reg_w err -71
[ 1577.662932][ T5137] nw80x 3-1:0.0: probe with driver nw80x failed with error -71
[ 1577.734579][ T5137] usb 3-1: USB disconnect, device number 29
[ 1577.746096][ T5100] Bluetooth: hci2: command tx timeout
[ 1579.975403][ T5100] Bluetooth: hci2: command tx timeout
[ 1582.487911][ T5100] Bluetooth: hci2: command tx timeout
[ 1582.805556][   T29] audit: type=1400 audit(1720300459.356:743): avc:  denied  { read } for  pid=18928 comm="syz.4.2929" dev="sockfs" ino=68619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1582.996985][ T2479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1583.016363][ T2479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1583.071777][ T2479] bond0 (unregistering): Released all slaves
[ 1583.269341][T18926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2928'.
[ 1583.289738][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2929'.
[ 1584.128323][    C0] vxcan0 (unregistered): j1939_tp_rxtimer: 0xffff88802ca6d000: rx timeout, send abort
[ 1584.234669][T18948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2933'.
[ 1584.248511][T18872] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1584.276211][T18872] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1584.315719][T18960] --map-set only usable from mangle table
[ 1584.327857][T18872] bridge_slave_0: entered allmulticast mode
[ 1584.387919][T18872] bridge_slave_0: entered promiscuous mode
[ 1584.460157][T18872] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1584.494502][T18872] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1584.507595][T18872] bridge_slave_1: entered allmulticast mode
[ 1584.526982][T18872] bridge_slave_1: entered promiscuous mode
[ 1584.544065][    T8] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[ 1584.640143][    C0] vxcan0 (unregistered): j1939_tp_rxtimer: 0xffff88802ca6d000: abort rx timeout. Force session deactivation
[ 1584.829447][    T8] usb 2-1: not running at top speed; connect to a high speed hub
[ 1584.846261][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1584.862251][    T8] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1584.911284][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1584.938853][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1584.958756][    T8] usb 2-1: Product: syz
[ 1584.971201][ T2479] hsr_slave_0: left promiscuous mode
[ 1584.985894][    T8] usb 2-1: Manufacturer: syz
[ 1585.024473][    T8] usb 2-1: SerialNumber: syz
[ 1585.056039][ T2479] hsr_slave_1: left promiscuous mode
[ 1585.119380][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1585.217966][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1585.257437][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1585.281535][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1585.298572][    T8] usb 2-1: USB disconnect, device number 30
[ 1585.457937][   T29] audit: type=1326 audit(1720300462.036:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18968 comm="syz.2.2937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5685975bd9 code=0x0
[ 1585.559604][ T2479] veth1_macvtap: left promiscuous mode
[ 1585.565263][ T2479] veth0_macvtap: left promiscuous mode
[ 1585.625207][ T2479] veth1_vlan: left promiscuous mode
[ 1585.641776][ T2479] veth0_vlan: left promiscuous mode
[ 1586.120834][T18995] binder: 18986:18995 ioctl 4018620d 0 returned -22
[ 1586.836439][ T5141] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1587.055956][ T5141] usb 2-1: Using ep0 maxpacket: 32
[ 1587.108092][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1587.174901][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1587.287810][ T5141] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1587.357881][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1587.437096][ T5141] usb 2-1: Product: syz
[ 1587.441463][ T5141] usb 2-1: Manufacturer: syz
[ 1587.480352][ T5141] usb 2-1: SerialNumber: syz
[ 1587.714440][ T5141] usb 2-1: config 0 descriptor??
[ 1592.016164][ T5099] usb 2-1: USB disconnect, device number 31
[ 1592.058895][ T2479] team0 (unregistering): Port device team_slave_1 removed
[ 1592.390904][ T2479] team0 (unregistering): Port device team_slave_0 removed
[ 1593.894405][T18872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1593.958950][T18872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1594.694065][T19003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2942'.
[ 1595.305937][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'.
[ 1595.496583][T18872] team0: Port device team_slave_0 added
[ 1595.585958][T18872] team0: Port device team_slave_1 added
[ 1595.684117][T19041] Cannot find add_set index 0 as target
[ 1595.694061][T19030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2948'.
[ 1596.214300][T10165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1596.275030][T10165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1596.302803][T10165] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1596.340732][T10165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1596.354664][T10165] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1596.362752][T10165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1596.487819][T18872] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1596.547027][T18872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1596.631510][T18872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1596.652678][T14310] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[ 1596.663288][T18872] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1596.675830][T18872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1596.729641][T18872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1596.881353][T14310] usb 5-1: not running at top speed; connect to a high speed hub
[ 1596.941777][T14310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1596.992051][T14310] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1597.002944][T19061] binder: 19052:19061 ioctl 4018620d 0 returned -22
[ 1597.047630][T14310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1597.086492][T14310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1597.095374][T14310] usb 5-1: Product: syz
[ 1597.156465][T14310] usb 5-1: Manufacturer: syz
[ 1597.185830][T14310] usb 5-1: SerialNumber: syz
[ 1597.244629][T18872] hsr_slave_0: entered promiscuous mode
[ 1597.280849][T18872] hsr_slave_1: entered promiscuous mode
[ 1597.291123][T18872] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1597.299343][T18872] Cannot create hsr debugfs directory
[ 1597.443301][T14310] usb 5-1: USB disconnect, device number 30
[ 1598.473763][ T6868] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1598.486149][T10165] Bluetooth: hci0: command tx timeout
[ 1598.934156][ T6868] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1599.274006][ T6868] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1599.599720][ T6868] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1600.555967][T10165] Bluetooth: hci0: command tx timeout
[ 1601.033060][   T29] audit: type=1326 audit(1720300477.596:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19092 comm="syz.1.2955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00a975bd9 code=0x0
[ 1601.197074][ T8554] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1601.381077][T19045] chnl_net:caif_netlink_parms(): no params data found
[ 1601.386234][ T8554] usb 5-1: Using ep0 maxpacket: 32
[ 1601.409946][ T8554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1601.477913][ T8554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1601.537893][ T8554] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1601.579796][ T8554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1601.601109][T19113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'.
[ 1601.613175][ T8554] usb 5-1: Product: syz
[ 1601.639297][ T8554] usb 5-1: Manufacturer: syz
[ 1601.661958][ T8554] usb 5-1: SerialNumber: syz
[ 1601.702653][ T8554] usb 5-1: config 0 descriptor??
[ 1601.879756][ T6868] bridge_slave_1: left allmulticast mode
[ 1601.887674][ T6868] bridge_slave_1: left promiscuous mode
[ 1601.906228][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1601.952485][ T6868] bridge_slave_0: left allmulticast mode
[ 1601.961018][ T6868] bridge_slave_0: left promiscuous mode
[ 1601.972827][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1602.700778][T10165] Bluetooth: hci0: command tx timeout
[ 1605.934213][ T5099] usb 5-1: USB disconnect, device number 31
[ 1605.955951][T10165] Bluetooth: hci0: command tx timeout
[ 1607.174665][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2961'.
[ 1607.987412][ T6868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1608.034151][ T6868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1608.059649][ T6868] bond0 (unregistering): Released all slaves
[ 1608.110085][T19121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2957'.
[ 1608.442223][ T5089] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[ 1608.671653][ T5089] usb 2-1: not running at top speed; connect to a high speed hub
[ 1608.698497][ T5089] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1608.726072][ T5089] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1608.761434][ T5089] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1608.786008][ T5089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1608.795020][ T5089] usb 2-1: Product: syz
[ 1608.821304][ T5089] usb 2-1: Manufacturer: syz
[ 1608.826690][ T5089] usb 2-1: SerialNumber: syz
[ 1608.893445][T19045] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1608.919833][T19045] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1608.952111][T19045] bridge_slave_0: entered allmulticast mode
[ 1609.065183][T19045] bridge_slave_0: entered promiscuous mode
[ 1609.093524][ T5089] usb 2-1: USB disconnect, device number 32
[ 1609.110703][T19045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1609.146744][T19045] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1609.166343][T19045] bridge_slave_1: entered allmulticast mode
[ 1609.183886][T19045] bridge_slave_1: entered promiscuous mode
[ 1609.449959][T19045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1609.674253][T19045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1609.828830][T18872] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1609.876048][T18872] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1610.311864][T19045] team0: Port device team_slave_0 added
[ 1610.391150][T18872] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1610.469023][T18872] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1610.769624][ T6868] hsr_slave_0: left promiscuous mode
[ 1610.789249][ T6868] hsr_slave_1: left promiscuous mode
[ 1610.854192][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1610.998228][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1611.044906][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1611.075071][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1611.330720][ T6868] veth1_macvtap: left promiscuous mode
[ 1611.356852][ T6868] veth0_macvtap: left promiscuous mode
[ 1611.374402][ T6868] veth1_vlan: left promiscuous mode
[ 1611.639066][ T6868] veth0_vlan: left promiscuous mode
[ 1613.120687][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[ 1613.127260][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[ 1614.773435][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1615.084627][    T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1615.094070][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1615.127438][    T9] usb 2-1: config 0 descriptor??
[ 1615.522658][    T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1615.576312][    T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1615.602410][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[ 1615.693545][    T9] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[ 1615.704398][    T9] [drm] Initialized udl on minor 2
[ 1615.731273][    T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1615.746438][   T45] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1615.754672][    T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1615.787179][ T5099] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1615.806979][    T9] usb 2-1: USB disconnect, device number 33
[ 1615.830159][ T5099] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1615.912823][ T6868] team0 (unregistering): Port device team_slave_1 removed
[ 1615.965069][   T45] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1615.995769][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1616.028887][   T45] usb 5-1: config 0 descriptor??
[ 1616.089239][ T6868] team0 (unregistering): Port device team_slave_0 removed
[ 1616.696319][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1616.887836][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1616.898145][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1616.923988][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1616.963031][    T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1616.988074][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1617.002034][    T9] usb 2-1: Product: syz
[ 1617.007447][    T9] usb 2-1: Manufacturer: syz
[ 1617.012230][    T9] usb 2-1: SerialNumber: syz
[ 1617.057686][    T9] usb 2-1: config 0 descriptor??
[ 1617.763231][T19045] team0: Port device team_slave_1 added
[ 1617.825325][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'.
[ 1617.836819][T19214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2971'.
[ 1617.969083][T19045] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1617.985003][   T45] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1618.007083][T19045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1618.042737][   T45] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1618.062660][   T45] [drm:udl_init] *ERROR* Selecting channel failed
[ 1618.099276][T19045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1618.172897][   T45] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[ 1618.180121][T19045] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1618.205666][T19045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1618.234078][   T45] [drm] Initialized udl on minor 2
[ 1618.241067][   T45] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1618.262434][T19218] ALSA: seq fatal error: cannot create timer (-22)
[ 1618.275032][   T45] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1618.283872][ T5089] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1618.305314][ T5089] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1618.324778][T19045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1618.339042][   T45] usb 5-1: USB disconnect, device number 32
[ 1618.348085][ T5089] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1618.835171][T19045] hsr_slave_0: entered promiscuous mode
[ 1618.930633][T19045] hsr_slave_1: entered promiscuous mode
[ 1618.954877][T19045] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1619.455987][T19045] Cannot create hsr debugfs directory
[ 1619.474455][ T8554] usb 2-1: USB disconnect, device number 34
[ 1619.475274][   T29] audit: type=1400 audit(1720300495.756:746): avc:  denied  { read } for  pid=19217 comm="syz.4.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1620.561444][T19225] binder: 19223:19225 ioctl 4018620d 0 returned -22
[ 1621.132605][T18872] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1621.526191][ T5100] Bluetooth: hci4: command tx timeout
[ 1622.332976][T18872] 8021q: adding VLAN 0 to HW filter on device team0
[ 1622.387418][   T29] audit: type=1400 audit(1720300498.966:747): avc:  denied  { mount } for  pid=19249 comm="syz.0.2977" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[ 1622.653908][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1622.661246][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1622.772013][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1622.779360][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1623.757607][T19045] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1624.702613][T19045] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1624.850421][T19045] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1625.032848][T19045] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1625.130937][T19276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2980'.
[ 1625.479348][T18872] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1625.506443][ T5141] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1625.602710][T19287] Cannot find add_set index 0 as target
[ 1625.793721][ T5141] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1625.825196][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1625.889063][ T5141] usb 1-1: config 0 descriptor??
[ 1625.965903][    T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1626.014393][T18872] veth0_vlan: entered promiscuous mode
[ 1626.206061][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1626.221292][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1626.243020][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1626.277718][T19045] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1626.294642][T18872] veth1_vlan: entered promiscuous mode
[ 1626.330976][    T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1626.354642][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.383716][    T9] usb 2-1: Product: syz
[ 1626.395858][    T9] usb 2-1: Manufacturer: syz
[ 1626.424720][    T9] usb 2-1: SerialNumber: syz
[ 1626.465110][T19045] 8021q: adding VLAN 0 to HW filter on device team0
[ 1626.473503][    T9] usb 2-1: config 0 descriptor??
[ 1626.508268][ T5141] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1626.578732][ T5141] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1626.595461][ T5141] [drm:udl_init] *ERROR* Selecting channel failed
[ 1626.701603][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1626.709054][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1626.773611][ T5141] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[ 1626.805835][T14310] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1626.813122][T14310] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1626.826134][ T5141] [drm] Initialized udl on minor 2
[ 1626.838904][ T5141] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1626.884687][ T5141] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1626.893491][ T5089] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1626.924509][T18872] veth0_macvtap: entered promiscuous mode
[ 1626.965989][ T5089] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1626.974178][ T5089] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[ 1626.981250][ T5141] usb 1-1: USB disconnect, device number 31
[ 1627.144580][T18872] veth1_macvtap: entered promiscuous mode
[ 1627.199759][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2982'.
[ 1627.604109][T18872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1628.494187][T18872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1628.530377][T18872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1628.563072][T18872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1628.625085][T18872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1628.684196][T18872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1628.709216][T18872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1628.714055][    T9] usb 2-1: USB disconnect, device number 35
[ 1629.695821][T18872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1629.749489][T18872] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1629.835680][T18872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1629.875302][T18872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1629.903893][T19322] loop0: detected capacity change from 0 to 7
[ 1629.940698][T18872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1629.956369][T19322] Dev loop0: unable to read RDB block 7
[ 1629.976112][T19322]  loop0: AHDI p1 p4
[ 1629.980074][T19322] loop0: partition table partially beyond EOD, truncated
[ 1630.046093][T18872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1630.088515][T18872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1630.117612][T19327] binder: 19319:19327 ioctl 4018620d 0 returned -22
[ 1630.153953][T18872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1630.208349][T18872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1630.259430][T18872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1630.326947][T18872] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1631.650047][T18872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.722749][T18872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.763019][T18872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.814833][T18872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1632.542722][T16875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1632.606484][T16875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1632.966948][T19045] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1633.368588][T19045] veth0_vlan: entered promiscuous mode
[ 1633.997223][T19045] veth1_vlan: entered promiscuous mode
[ 1634.230821][T19045] veth0_macvtap: entered promiscuous mode
[ 1634.319058][T19045] veth1_macvtap: entered promiscuous mode
[ 1634.553611][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1634.639472][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1634.694117][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1634.750233][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1634.785721][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1634.809570][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1634.842111][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1634.866551][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1634.885154][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1634.904152][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1634.926175][   T45] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[ 1634.988043][T19045] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1635.030450][T10165] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1635.049718][T10165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1635.054275][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1635.069881][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1635.083171][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1635.094135][T10165] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1635.102630][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1635.113868][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1635.127651][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1635.129466][T10165] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1635.151185][   T45] usb 2-1: not running at top speed; connect to a high speed hub
[ 1635.165090][   T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1635.179654][   T45] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1635.189748][T10165] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1635.198566][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1635.198640][T10165] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1635.223244][   T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1635.235415][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1635.243768][   T45] usb 2-1: Product: syz
[ 1635.248684][   T45] usb 2-1: Manufacturer: syz
[ 1635.253454][   T45] usb 2-1: SerialNumber: syz
[ 1635.348860][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1635.406018][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1635.484281][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1635.506374][   T29] audit: type=1400 audit(1720300512.086:748): avc:  denied  { mount } for  pid=19364 comm="syz.4.2992" name="/" dev="pstore" ino=3214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[ 1635.545295][T19045] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1635.561984][   T45] usb 2-1: USB disconnect, device number 36
[ 1635.873189][T19045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1635.891853][T19045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1635.901631][T19045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1635.912480][T19045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1636.115555][   T29] audit: type=1400 audit(1720300512.696:749): avc:  denied  { unmount } for  pid=18251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[ 1637.371703][ T5100] Bluetooth: hci6: command tx timeout
[ 1637.537788][ T6870] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1637.565344][T19372] ------------[ cut here ]------------
[ 1637.571828][T19372] WARNING: CPU: 1 PID: 19372 at net/kcm/kcmsock.c:630 kcm_write_msgs+0x83e/0x16f0
[ 1637.581234][T19372] Modules linked in:
[ 1637.585184][T19372] CPU: 1 PID: 19372 Comm: syz.0.2993 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1637.586189][T19388] loop0: detected capacity change from 0 to 7
[ 1637.595502][T19372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1637.613018][T19372] RIP: 0010:kcm_write_msgs+0x83e/0x16f0
[ 1637.619404][T19372] Code: 07 48 c1 ea 03 0f b6 04 02 38 c8 7f 08 84 c0 0f 85 47 0e 00 00 41 c6 46 34 01 4c 89 74 24 20 e9 c6 f9 ff ff e8 73 1c 81 f7 90 <0f> 0b 90 41 bd ea ff ff ff e8 64 1c 81 f7 e8 5f 1c 81 f7 48 8b 44
[ 1637.639109][T19372] RSP: 0018:ffffc9000349f900 EFLAGS: 00010246
[ 1637.645193][T19372] RAX: 0000000000040000 RBX: ffff88805eb10a40 RCX: ffffc9000de92000
[ 1637.653239][T19372] RDX: 0000000000040000 RSI: ffffffff8a0cc81d RDI: 0000000000000001
[ 1637.661287][T19372] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1637.669404][T19372] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 1637.677614][T19372] R13: 0000000000011000 R14: ffff88805c729000 R15: ffff88807d4202c0
[ 1637.685692][T19372] FS:  00007fea085db6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 1637.694785][T19372] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1637.701563][T19372] CR2: 00007f5c96d01c39 CR3: 000000005b574000 CR4: 00000000003506f0
[ 1637.709766][T19372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1637.721005][T19372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1637.729165][T19372] Call Trace:
[ 1637.732527][T19372]  <TASK>
[ 1637.735547][T19372]  ? show_regs+0x8c/0xa0
[ 1637.740061][T19372]  ? __warn+0xe5/0x3c0
[ 1637.744714][T19372]  ? kcm_write_msgs+0x83e/0x16f0
[ 1637.749902][T19372]  ? report_bug+0x3c0/0x580
[ 1637.754494][T19372]  ? handle_bug+0x3d/0x70
[ 1637.759066][T19372]  ? exc_invalid_op+0x17/0x50
[ 1637.763823][T19372]  ? asm_exc_invalid_op+0x1a/0x20
[ 1637.769141][T19372]  ? kcm_write_msgs+0x83d/0x16f0
[ 1637.774165][T19372]  ? kcm_write_msgs+0x83e/0x16f0
[ 1637.779284][T19372]  ? __pfx_kcm_write_msgs+0x10/0x10
[ 1637.784563][T19372]  ? mark_held_locks+0x9f/0xe0
[ 1637.789478][T19372]  ? kcm_sendmsg+0x1cd/0x2920
[ 1637.794248][T19372]  ? __local_bh_enable_ip+0xa4/0x120
[ 1637.799768][T19372]  kcm_sendmsg+0x22b9/0x2920
[ 1637.804455][T19372]  ? __pfx_sock_has_perm+0x10/0x10
[ 1637.809744][T19372]  ? futex_wait_queue+0x101/0x1f0
[ 1637.814866][T19372]  ? __pfx_kcm_sendmsg+0x10/0x10
[ 1637.823404][T19372]  ? inode_has_perm+0x16f/0x1d0
[ 1637.828456][T19372]  sock_write_iter+0x50a/0x5c0
[ 1637.833290][T19372]  ? __pfx_sock_write_iter+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[ 1637.838757][T19372]  ? security_file_permission+0x98/0xc0
[ 1637.844374][T19372]  vfs_write+0x6b6/0x1140
[ 1637.848836][T19372]  ? __pfx_sock_write_iter+0x10/0x10
[ 1637.854184][T19372]  ? __pfx_vfs_write+0x10/0x10
[ 1637.859224][T19372]  ? do_futex+0x123/0x350
[ 1637.863679][T19372]  ? __fget_files+0x256/0x400
[ 1637.868535][T19372]  ? __fget_light+0x173/0x210
[ 1637.873354][T19372]  ksys_write+0x1f8/0x260
[ 1637.877933][T19372]  ? __pfx_ksys_write+0x10/0x10
[ 1637.882927][T19372]  do_syscall_64+0xcd/0x250
[ 1637.887690][T19372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1637.893693][T19372] RIP: 0033:0x7fea07775bd9
[ 1637.898308][T19372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1637.919527][T19372] RSP: 002b:00007fea085db048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1637.929263][T19372] RAX: ffffffffffffffda RBX: 00007fea07904038 RCX: 00007fea07775bd9
[ 1637.937434][T19372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[ 1637.945554][T19372] RBP: 00007fea077e4aa1 R08: 0000000000000000 R09: 0000000000000000
[ 1637.953807][T19372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1637.961961][T19372] R13: 000000000000006e R14: 00007fea07904038 R15: 00007fff91c772a8
[ 1637.970253][T19372]  </TASK>
[ 1637.973485][T19372] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1637.980816][T19372] CPU: 1 PID: 19372 Comm: syz.0.2993 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1637.991037][T19372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1638.001145][T19372] Call Trace:
[ 1638.004475][T19372]  <TASK>
[ 1638.007452][T19372]  dump_stack_lvl+0x3d/0x1f0
[ 1638.012117][T19372]  panic+0x6f5/0x7a0
[ 1638.016090][T19372]  ? __pfx_panic+0x10/0x10
[ 1638.020579][T19372]  ? show_trace_log_lvl+0x363/0x500
[ 1638.025867][T19372]  ? kcm_write_msgs+0x83e/0x16f0
[ 1638.030887][T19372]  check_panic_on_warn+0xab/0xb0
[ 1638.035918][T19372]  __warn+0xf1/0x3c0
[ 1638.039906][T19372]  ? kcm_write_msgs+0x83e/0x16f0
[ 1638.044926][T19372]  report_bug+0x3c0/0x580
[ 1638.049319][T19372]  handle_bug+0x3d/0x70
[ 1638.053531][T19372]  exc_invalid_op+0x17/0x50
[ 1638.058084][T19372]  asm_exc_invalid_op+0x1a/0x20
[ 1638.062983][T19372] RIP: 0010:kcm_write_msgs+0x83e/0x16f0
[ 1638.068585][T19372] Code: 07 48 c1 ea 03 0f b6 04 02 38 c8 7f 08 84 c0 0f 85 47 0e 00 00 41 c6 46 34 01 4c 89 74 24 20 e9 c6 f9 ff ff e8 73 1c 81 f7 90 <0f> 0b 90 41 bd ea ff ff ff e8 64 1c 81 f7 e8 5f 1c 81 f7 48 8b 44
[ 1638.088239][T19372] RSP: 0018:ffffc9000349f900 EFLAGS: 00010246
[ 1638.094340][T19372] RAX: 0000000000040000 RBX: ffff88805eb10a40 RCX: ffffc9000de92000
[ 1638.102335][T19372] RDX: 0000000000040000 RSI: ffffffff8a0cc81d RDI: 0000000000000001
[ 1638.110342][T19372] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1638.118333][T19372] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[ 1638.126328][T19372] R13: 0000000000011000 R14: ffff88805c729000 R15: ffff88807d4202c0
[ 1638.134360][T19372]  ? kcm_write_msgs+0x83d/0x16f0
[ 1638.139357][T19372]  ? __pfx_kcm_write_msgs+0x10/0x10
[ 1638.144603][T19372]  ? mark_held_locks+0x9f/0xe0
[ 1638.149410][T19372]  ? kcm_sendmsg+0x1cd/0x2920
[ 1638.154131][T19372]  ? __local_bh_enable_ip+0xa4/0x120
[ 1638.159451][T19372]  kcm_sendmsg+0x22b9/0x2920
[ 1638.164083][T19372]  ? __pfx_sock_has_perm+0x10/0x10
[ 1638.169237][T19372]  ? futex_wait_queue+0x101/0x1f0
[ 1638.174307][T19372]  ? __pfx_kcm_sendmsg+0x10/0x10
[ 1638.179289][T19372]  ? inode_has_perm+0x16f/0x1d0
[ 1638.184191][T19372]  sock_write_iter+0x50a/0x5c0
[ 1638.188984][T19372]  ? __pfx_sock_write_iter+0x10/0x10
[ 1638.194301][T19372]  ? security_file_permission+0x98/0xc0
[ 1638.199888][T19372]  vfs_write+0x6b6/0x1140
[ 1638.204256][T19372]  ? __pfx_sock_write_iter+0x10/0x10
[ 1638.209584][T19372]  ? __pfx_vfs_write+0x10/0x10
[ 1638.214391][T19372]  ? do_futex+0x123/0x350
[ 1638.218759][T19372]  ? __fget_files+0x256/0x400
[ 1638.223467][T19372]  ? __fget_light+0x173/0x210
[ 1638.228181][T19372]  ksys_write+0x1f8/0x260
[ 1638.232550][T19372]  ? __pfx_ksys_write+0x10/0x10
[ 1638.237447][T19372]  do_syscall_64+0xcd/0x250
[ 1638.241990][T19372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1638.247948][T19372] RIP: 0033:0x7fea07775bd9
[ 1638.252384][T19372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1638.272017][T19372] RSP: 002b:00007fea085db048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1638.280480][T19372] RAX: ffffffffffffffda RBX: 00007fea07904038 RCX: 00007fea07775bd9
[ 1638.288477][T19372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[ 1638.296585][T19372] RBP: 00007fea077e4aa1 R08: 0000000000000000 R09: 0000000000000000
[ 1638.304617][T19372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1638.312621][T19372] R13: 000000000000006e R14: 00007fea07904038 R15: 00007fff91c772a8
[ 1638.320620][T19372]  </TASK>
[ 1638.323907][T19372] Kernel Offset: disabled
[ 1638.328391][T19372] Rebooting in 86400 seconds..