last executing test programs:

16m23.29386664s ago: executing program 3 (id=140):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x9, 0x1, 0x5, 0x32, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43101})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x502, 0x58)
r0 = getpgrp(0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)

16m17.558621117s ago: executing program 3 (id=145):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
bind$802154_dgram(r0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000896000/0x1000)=nil)
shmctl$SHM_STAT(r4, 0xd, &(0x7f00000004c0)=""/246)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000240)=0x101, 0x6, 0x1)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})

16m12.745199316s ago: executing program 3 (id=151):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0xfffffd64}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

16m12.487876125s ago: executing program 3 (id=152):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
io_setup(0x2, &(0x7f0000001700)=<r3=>0x0)
eventfd2(0x0, 0x0)
io_submit(r3, 0x0, &(0x7f00000028c0))

16m10.4784992s ago: executing program 3 (id=155):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x9, 0x1, 0x5, 0x32, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43101})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x502, 0x58)
r0 = getpgrp(0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_open_dev$usbfs(0x0, 0x204, 0x82)

16m2.051057959s ago: executing program 3 (id=172):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c09718a12b3749b1ada6f05a20427070b6a34416197391b1c63ecfc50266aaaa5559a1cd81c5a756e163e583636246381c41110b9b298f0306ed2de54e1a89a79a8ae068f4eb6e55dd6a71ea7b468f6a62c25a02d7952b930f65b9327db37108a9fda"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

15m47.738503199s ago: executing program 1 (id=192):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')

15m46.560839812s ago: executing program 32 (id=172):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c09718a12b3749b1ada6f05a20427070b6a34416197391b1c63ecfc50266aaaa5559a1cd81c5a756e163e583636246381c41110b9b298f0306ed2de54e1a89a79a8ae068f4eb6e55dd6a71ea7b468f6a62c25a02d7952b930f65b9327db37108a9fda"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

15m45.04063625s ago: executing program 1 (id=195):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x2c, 0x0, 0x8, 0xfffffffa}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x10, 0x10, 0x8, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x4f, 0x5f, 0x61, 0x0, 0x0]}}, 0x0, 0x30}, 0x28)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000000c0))
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_4={0x10, 0x4, {0x10000, 0x1, 0x3ff, 0x4}}, 0x80)
r1 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setsig(0x4203, r1, 0x7, &(0x7f0000000300)={0xa, 0xdffffff9, 0x9d0})
ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0xfff, 0x2002)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000200)={@phonet={0x23, 0x8, 0xf0, 0x4}, {0x0}, 0x0, 0x8}, 0xa0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/247, 0xf7}], 0x1}, 0x10000)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r7, 0x0, 0x20000023896)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0)
read$eventfd(r7, &(0x7f0000000080), 0x8)

15m38.438387371s ago: executing program 1 (id=204):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10)
listen(r0, 0x2005)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000540)="6dd5a5adf9b147c7b948e27138dd56263157a9868349731c4a36e444ce4def2eebf33e", 0x23}], 0x1}}], 0x1, 0x48045)
close_range(r0, 0xffffffffffffffff, 0x0)

15m37.973611587s ago: executing program 1 (id=206):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp\x00')

15m36.462832444s ago: executing program 1 (id=208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
listen(0xffffffffffffffff, 0x0)
listen(r1, 0x101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getdents64(0xffffffffffffffff, 0x0, 0x0)

15m34.657680979s ago: executing program 1 (id=211):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

15m19.530807783s ago: executing program 33 (id=211):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316ae4b9c97f78b0e244d6b63591fccb765a9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

15m4.056630347s ago: executing program 4 (id=254):
prlimit64(0x0, 0xe, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)

15m3.786357803s ago: executing program 4 (id=255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)

15m1.474936151s ago: executing program 4 (id=258):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00', @ANYBLOB="0100000000000000000039000000080003"], 0x40}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

15m0.64085846s ago: executing program 4 (id=261):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
lseek(0xffffffffffffffff, 0x8, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000003c0)={'xfrm0\x00', &(0x7f0000000400)=@ethtool_gstrings={0x1b, 0x8, 0x5, "aa6acaa2a5"}})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

14m59.018836202s ago: executing program 4 (id=262):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
bind$802154_dgram(r0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000896000/0x1000)=nil)
shmctl$SHM_STAT(r3, 0xd, &(0x7f00000004c0)=""/246)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42241, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})

14m54.170861986s ago: executing program 4 (id=267):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316ae4b9c97f78b0e244d6b63591fccb765a9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

14m38.852435623s ago: executing program 34 (id=267):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

10m0.106407843s ago: executing program 5 (id=914):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x4000890)

9m59.901349801s ago: executing program 5 (id=916):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10)
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r4=>r0})
ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000400)={r1, 0x0, 0x500, &(0x7f00000002c0)={@_ha_fsid={[0x8001, 0x22]}, {0x2, 0x3ff, 0x5, 0x9}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, 0x0})
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
getgid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0)

9m53.054799892s ago: executing program 5 (id=920):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000600)={0x40, 0x16, 0x3, "348403"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x83, 0x2, "b697"}, 0x0, &(0x7f0000000900)={0x20, 0x85, 0x3, "ae4bcd"}})
syz_usb_control_io$uac3(r0, 0x0, 0x0)

9m48.205470909s ago: executing program 5 (id=934):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, 0x0, 0x0, 0x366)
lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x92ed, 0x3}, {0xffff, 0x2}]}, 0x14, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="baa10000", @ANYRES16, @ANYBLOB="170900000000010000000100000005000700000000000800090000000000060002000100000008000a0002000000080018006401010214001f00fe8000000000000000000000000000bb"], 0x50}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd6c00ffdbdf250500000005002e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x48004)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001180)=ANY=[], 0x0)

9m45.84024073s ago: executing program 2 (id=940):
r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$smackfs_netlabel(r0, &(0x7f0000000040)=@l2={{0x7, 0x2e, 0x6, 0x2e, 0xffff, 0x2e, 0x3}, 0x2f, 0xff, 0x20, 'g):\b,'}, 0x70)
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
close_range(r1, r1, 0x2)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020)

9m45.761388926s ago: executing program 2 (id=941):
r0 = socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xff)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r0, 0x0, 0x0, 0x80800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

9m42.767641479s ago: executing program 2 (id=943):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m42.717146508s ago: executing program 5 (id=945):
r0 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001", @ANYBLOB, @ANYRES32=0x0], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xc16, r4}, 0x38)

9m39.594171164s ago: executing program 5 (id=946):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

9m37.125335378s ago: executing program 2 (id=951):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x8, 0x1, 0xd790})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x5, 0x80001f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

9m36.780056272s ago: executing program 2 (id=953):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_pidfd_open(0x0, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0xffffffffffffffff, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)

9m34.756194861s ago: executing program 2 (id=954):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

9m24.266217676s ago: executing program 35 (id=946):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

9m19.070186509s ago: executing program 36 (id=954):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

9.743806031s ago: executing program 7 (id=2203):
syz_open_dev$video(0x0, 0x7, 0x20000)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_io_uring_setup(0x5e81, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4)
readv(r2, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x208180, 0x0)

6.668716233s ago: executing program 9 (id=2209):
r0 = socket(0x200000000000011, 0x2, 0xd)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00'})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x23)

6.524199346s ago: executing program 6 (id=2210):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

6.386352434s ago: executing program 7 (id=2211):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

6.145291893s ago: executing program 9 (id=2212):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
read(r1, &(0x7f0000000100)=""/217, 0xd9)

5.82413384s ago: executing program 6 (id=2213):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
r2 = socket(0x5, 0x5, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'sit0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x8001, 0x5f02, {{0x38, 0x4, 0x3, 0x2e, 0xe0, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0xce, [@broadcast, @multicast1, @local, @empty, @loopback, @rand_addr=0x64010101]}, @generic={0x82, 0xd, "4ff37f8141ce12bbc1f975"}, @cipso={0x86, 0x48, 0x2, [{0x2, 0xa, "4cacf105b21f0cb1"}, {0x0, 0xa, "523cd0db62dd5a8d"}, {0x7, 0xd, "8552cefe4df0af8efa7cee"}, {0x0, 0x11, "c512c4cfb00b7ea99a9354ebe0aa9a"}, {0x1, 0x10, "0da9c808a57fd565ffd7dea67421"}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x0, [{@local, 0x9}, {@empty, 0x400}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}]}, @timestamp={0x44, 0x8, 0xb0, 0x0, 0x6, [0x4]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xf2, 0x3, 0x2, [{@empty, 0x8}, {@rand_addr=0x64010102, 0x3}, {@private=0xa010101, 0x5}, {@local, 0x5}, {@local, 0x7f}]}]}}}}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x424, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0xfffffffc, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x105, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x31, 0x0, 0x0, 0xfffd, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x25c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x25c}, 0x1, 0x0, 0x0, 0x15}, 0x24000804)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@ssrr={0x89, 0x3, 0xd1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="000001000401"], 0x20)
sendto$inet6(r7, &(0x7f0000000240)='\x00', 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x68}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r1}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'})

5.082010595s ago: executing program 7 (id=2214):
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xcb800, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)=0x18)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0)

5.017592099s ago: executing program 8 (id=2215):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
write$vga_arbiter(r2, &(0x7f0000001580)=ANY=[@ANYBLOB='target', @ANYRES8=r2], 0x13)

4.867524761s ago: executing program 9 (id=2216):
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
unshare(0x2040400)
inotify_init()
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb2}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

4.308509464s ago: executing program 7 (id=2217):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000002c0)={@llc={0x1a, 0x20, 0x1, 0x8, 0x3, 0xb, @broadcast}, {0x0}, 0x0, 0x4}, 0xa0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.146152032s ago: executing program 8 (id=2218):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4196a}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x9}, @IFLA_VF_PORTS={0x4}]}, 0x40}}, 0x20084084)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000300)=0x8)
socket$xdp(0x2c, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r4, 0x9}, &(0x7f0000000140)=0x8)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x7, 0x1, 0x800, 0x1, 'syz0\x00'}, 0x1, [0x1000, 0x101, 0x7, 0x1ff, 0x3, 0x5, 0x7fffffffffffffff, 0x1373, 0x5, 0x5, 0x1, 0x5, 0xb2bc, 0x6, 0x1, 0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x5, 0x1, 0x4, 0x9, 0xffffffffffffffff, 0x2, 0x377e, 0x1, 0x5, 0x47, 0x7, 0x94, 0xfffffffffffffffc, 0x100, 0x8000000000000001, 0xc, 0xf, 0x100000000000, 0x1, 0x5, 0xf447, 0x9, 0x6, 0x8, 0x2, 0x8, 0x100000000, 0x0, 0x3, 0xd, 0x6, 0x7, 0x1, 0x9, 0xa, 0x0, 0xd, 0x2, 0x8, 0x1, 0xb, 0x2, 0x5, 0x8000000000000000, 0x4, 0x9, 0x1, 0x6, 0x0, 0x4, 0xcc36, 0x7, 0x4, 0x55, 0xff, 0x7, 0xc, 0x3, 0x4, 0x178b, 0x7fffffff, 0x7, 0x4d800, 0x2, 0x1, 0x2, 0x6, 0x58c, 0x7, 0xed, 0x3, 0x5, 0x55, 0x6, 0xf3, 0x6, 0x1200000000, 0x499b, 0x2, 0x6, 0x3, 0x7, 0xea, 0x7, 0x86, 0x100000000, 0x6, 0x2, 0x3ff, 0x400, 0x7, 0x7fffffffffffffff, 0x4, 0xbf, 0x9, 0x10000000, 0x7, 0xfffffffffffffffb, 0x3, 0x8, 0xff0, 0x1, 0xfff, 0x0, 0x7, 0xf, 0x8, 0xb001, 0x4]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.714475918s ago: executing program 9 (id=2219):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{}, 0x0, 0x1, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})

3.641325552s ago: executing program 7 (id=2220):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bf"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local})
syz_usb_connect$uac2(0x4, 0xd7, &(0x7f00000006c0)=ANY=[@ANYBLOB="12015002000000001e040030400001e1a890d502c5000301088006080b020201ff2008090400000001012000092401ffff032700011024020503040131070000000000040507240cfe0e060507240c0709050109040100000102200009040101010102200009240201b9040609020b24020101040b092c42d4090501090004fa0f0108250100330101000904020000010220000904020101010220000a24020209000600038a102402010403800356c56546a4b6aa1510240101c4030110000009030000"], &(0x7f00000007c0)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x1, 0x10, 0x0, 0x20, 0x46}, 0x127, &(0x7f0000000800)=ANY=[@ANYBLOB]})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
close_range(r1, 0xffffffffffffffff, 0x0)

3.587524611s ago: executing program 8 (id=2221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x54, r1, 0x917, 0x70bd29, 0xfffffffc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810)

3.407404318s ago: executing program 9 (id=2222):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000040)=""/97, 0x61}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/188, 0xbc}, {&(0x7f0000000300)=""/99, 0x63}], 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/249, 0xf9}], 0x2}, 0x10}], 0x3, 0x400120cb, 0x0)

3.197895833s ago: executing program 8 (id=2223):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0})
r3 = dup3(r1, 0xffffffffffffffff, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
setsockopt$packet_int(r3, 0x107, 0x11, 0xfffffffffffffffd, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, 0xfffffffffffffffe)
r6 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)

3.132333608s ago: executing program 9 (id=2225):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x87)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907dd7a634bad063ee26d7a3487ca0", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5defb", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000140)={'geneve0\x00'})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1)
lseek(0xffffffffffffffff, 0x4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r8], 0x20}}, 0x4000)

3.081531843s ago: executing program 6 (id=2226):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x2001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
read(r1, &(0x7f0000000100)=""/217, 0xd9)

2.759947062s ago: executing program 0 (id=2227):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = syz_open_dev$video4linux(0x0, 0x7, 0x8000)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000003f40)={0x9e0000, 0x400, 0xb, 0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x9909df, 0x5, '\x00', @p_u32=0x0}})

2.456779589s ago: executing program 0 (id=2228):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
write$vga_arbiter(r2, &(0x7f0000001580)=ANY=[@ANYBLOB='target PC', @ANYRES8=r2], 0x13)

2.038676356s ago: executing program 8 (id=2229):
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
unshare(0x2040400)
inotify_init()
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb2}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

1.670723952s ago: executing program 6 (id=2230):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014"], 0x74}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.461396944s ago: executing program 0 (id=2231):
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000005c0)={{}, 0x0, 0x1e, @inherit={0x0, 0x0}, @name="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"})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x8000)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='\'\x00', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.292435828s ago: executing program 6 (id=2232):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES8=r0], 0x66)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.000491199s ago: executing program 8 (id=2233):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c554f1919d845e30000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000841)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25170000005400068014000300322d73355fd5955d482ee5364c4323843c00040067636d2861657329000000000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x82341)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
r6 = syz_open_procfs(0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r7=>0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r7, 0x0, 0x0)
ioctl$VIDIOC_G_PRIORITY(r8, 0x80045643, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
capset(&(0x7f0000a31000)={0x20080522}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x6, 0x8, 0xfd5, 0x7fffffffffffffff, 0x4, 0x7ff})
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14b00007000701081b3100000000000003000007"], 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x24004004)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000fbb9b634b8f978cf17e03dfde3633e4d6a9fef22d8eb1a066ae9b288c6c5c1f98ab386be60f601032dcde8d553261f300a234858a5aeebfd8101978fa50b2cba1eabbf24bd51495ca29fddd91087044d62876f4db69309c1657726a1c3858f4a2596c4cce448775fead14a067e2af05eea4afb49d84eb8531cb4", @ANYRES16=r9, @ANYRES64=r8], 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x4052)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000005c0)={0x70, 0x101, 0x0, 0x595f314c, 0x19, "00e47903e5951edc064af900"})

878.749837ms ago: executing program 6 (id=2234):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x87)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907dd7a634bad063ee26d7a3487ca0", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5defb", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
lseek(0xffffffffffffffff, 0x6, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000140)={'geneve0\x00'})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1)
lseek(0xffffffffffffffff, 0x4, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'rose0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r9], 0x20}}, 0x4000)

779.355228ms ago: executing program 0 (id=2235):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x54, r1, 0x917, 0x70bd29, 0xfffffffc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810)

454.255989ms ago: executing program 0 (id=2236):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000040)=""/97, 0x61}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/188, 0xbc}, {&(0x7f0000000300)=""/99, 0x63}], 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000004c0)=""/249, 0xf9}], 0x2}, 0x10}], 0x3, 0x400120cb, 0x0)

120.160034ms ago: executing program 0 (id=2237):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

0s ago: executing program 7 (id=2238):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x1000000, 0x3)

kernel console output (not intermixed with test programs):

dge_slave_1: left promiscuous mode
[  753.746211][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.505225][ T5867] bridge_slave_0: left allmulticast mode
[  755.505259][ T5867] bridge_slave_0: left promiscuous mode
[  755.505502][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.554444][T10893] binder: 10891:10893 ioctl c0306201 200000000480 returned -14
[  756.944634][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  757.026601][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  757.088720][ T5867] bond0 (unregistering): Released all slaves
[  757.426162][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  757.545276][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  759.819454][ T5867] bond0 (unregistering): Released all slaves
[  759.999171][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22
[  760.683987][ T5697] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  760.868583][ T5697] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  760.868614][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.868634][ T5697] usb 1-1: Product: syz
[  760.868649][ T5697] usb 1-1: Manufacturer: syz
[  760.868663][ T5697] usb 1-1: SerialNumber: syz
[  760.912386][ T5697] usb 1-1: config 0 descriptor??
[  760.985979][ T5867] hsr_slave_0: left promiscuous mode
[  761.023823][ T5867] hsr_slave_1: left promiscuous mode
[  761.025033][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.103937][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.290017][ T5697] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  761.464951][ T5867] hsr_slave_0: left promiscuous mode
[  761.504295][ T5867] hsr_slave_1: left promiscuous mode
[  761.506199][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.559124][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  762.158086][T10944] binder: 10942:10944 ioctl c0306201 200000000480 returned -14
[  762.225298][ T5867] team0 (unregistering): Port device team_slave_1 removed
[  762.285933][ T5867] team0 (unregistering): Port device team_slave_0 removed
[  762.969622][ T5867] team0 (unregistering): Port device team_slave_1 removed
[  763.026279][ T5867] team0 (unregistering): Port device team_slave_0 removed
[  763.130304][ T5697] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  763.158860][ T5697] usb 1-1: USB disconnect, device number 40
[  767.083735][   T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  767.233729][   T10] usb 1-1: Using ep0 maxpacket: 8
[  767.239396][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  767.239429][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.239449][   T10] usb 1-1: Product: syz
[  767.239464][   T10] usb 1-1: Manufacturer: syz
[  767.239479][   T10] usb 1-1: SerialNumber: syz
[  767.355974][   T10] usb 1-1: config 0 descriptor??
[  767.403905][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  767.816231][T10960] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  767.896788][   T10] gspca_sonixj: reg_r err -32
[  767.896898][   T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -32
[  768.001152][T10960] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  768.001184][T10960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.001204][T10960] usb 7-1: Product: syz
[  768.001219][T10960] usb 7-1: Manufacturer: syz
[  768.001234][T10960] usb 7-1: SerialNumber: syz
[  768.188873][T10960] usb 7-1: config 0 descriptor??
[  768.409056][T10960] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  770.272813][T10960] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  770.297591][T10960] usb 7-1: USB disconnect, device number 17
[  770.961596][  T835] usb 1-1: USB disconnect, device number 41
[  772.266471][T10552] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  772.439266][T10552] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  772.607387][T10552] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  773.627014][T10552] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  773.681853][T10552] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  774.848254][T10552] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  774.848722][T11082] tipc: Started in network mode
[  774.848741][T11082] tipc: Node identity 84e, cluster identity 4711
[  774.848755][T11082] tipc: Node number set to 2126
[  775.601358][T10552] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  776.284745][T10552] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  777.452828][T10596] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  778.091185][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  778.698046][T10596] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  778.738722][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  779.548614][T10596] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  779.598056][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  779.613224][T10596] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  779.819664][T10596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  780.646794][T10596] 8021q: adding VLAN 0 to HW filter on device bond0
[  780.672532][T10596] 8021q: adding VLAN 0 to HW filter on device team0
[  780.722928][T10596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  780.722953][T10596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  780.876568][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.878378][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  780.911607][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  780.911767][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  781.331154][T10552] 8021q: adding VLAN 0 to HW filter on device bond0
[  781.405371][T10552] 8021q: adding VLAN 0 to HW filter on device team0
[  781.514577][  T184] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.514802][  T184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  784.636926][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.588832][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  793.946672][T10596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  795.112112][T11163] syz.6.1337 uses obsolete (PF_INET,SOCK_PACKET)
[  795.210004][ T9208] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  795.234044][ T9208] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  795.271630][ T9208] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  795.285383][ T9208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  795.290797][ T9208] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  797.004885][ T9208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  797.089354][ T9208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  797.139712][ T9208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  797.143394][ T9208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  797.164921][ T9208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  797.483749][ T9208] Bluetooth: hci5: command tx timeout
[  799.492583][ T9208] Bluetooth: hci2: command tx timeout
[  799.758740][ T9208] Bluetooth: hci5: command tx timeout
[  801.600344][ T9208] Bluetooth: hci2: command tx timeout
[  801.622889][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1353'.
[  802.143677][ T9208] Bluetooth: hci5: command tx timeout
[  802.521624][T11243] binder: 11240:11243 ioctl 4018620d 0 returned -22
[  804.136116][ T9208] Bluetooth: hci2: command tx timeout
[  804.163710][ T9208] Bluetooth: hci5: command tx timeout
[  806.179065][ T9208] Bluetooth: hci2: command tx timeout
[  806.407810][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1364'.
[  808.853621][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1373'.
[  808.894577][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  808.894652][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  814.727108][T11155] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.727241][T11155] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.727836][T11155] bridge_slave_0: entered allmulticast mode
[  814.768447][T11155] bridge_slave_0: entered promiscuous mode
[  814.892525][T11155] bridge0: port 2(bridge_slave_1) entered blocking state
[  814.892665][T11155] bridge0: port 2(bridge_slave_1) entered disabled state
[  814.893219][T11155] bridge_slave_1: entered allmulticast mode
[  814.912974][T11155] bridge_slave_1: entered promiscuous mode
[  815.170930][T11182] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.171028][T11182] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.171197][T11182] bridge_slave_0: entered allmulticast mode
[  815.202249][T11182] bridge_slave_0: entered promiscuous mode
[  815.327214][ T5852] bridge_slave_1: left allmulticast mode
[  815.327249][ T5852] bridge_slave_1: left promiscuous mode
[  815.327485][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.383357][ T5852] bridge_slave_0: left allmulticast mode
[  816.383386][ T5852] bridge_slave_0: left promiscuous mode
[  816.383681][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.996694][T11348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  818.104553][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  818.485590][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  820.607925][ T5852] bond0 (unregistering): Released all slaves
[  821.164906][T11182] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.165034][T11182] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.165248][T11182] bridge_slave_1: entered allmulticast mode
[  821.168215][T11182] bridge_slave_1: entered promiscuous mode
[  821.412313][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.711218][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.755437][T11370] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  821.879679][T11182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  823.286646][ T5852] hsr_slave_0: left promiscuous mode
[  823.376999][ T5852] hsr_slave_1: left promiscuous mode
[  823.378191][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  823.430914][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  827.948904][ T5852] team0 (unregistering): Port device team_slave_1 removed
[  828.187964][ T5852] team0 (unregistering): Port device team_slave_0 removed
[  828.806263][T11182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  828.895078][T11155] team0: Port device team_slave_0 added
[  829.009140][T11155] team0: Port device team_slave_1 added
[  829.021427][T11182] team0: Port device team_slave_0 added
[  829.054596][T11182] team0: Port device team_slave_1 added
[  829.157948][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  829.157967][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  829.157997][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  829.215300][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  829.215318][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  829.215350][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  829.439563][T11182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  829.439581][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  829.439612][T11182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  829.533360][T11182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  829.533377][T11182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  829.533416][T11182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  829.921979][T11155] hsr_slave_0: entered promiscuous mode
[  829.923438][T11155] hsr_slave_1: entered promiscuous mode
[  830.319251][T11182] hsr_slave_0: entered promiscuous mode
[  830.323362][T11182] hsr_slave_1: entered promiscuous mode
[  830.378404][T11182] debugfs: 'hsr0' already exists in 'hsr'
[  830.378503][T11182] Cannot create hsr debugfs directory
[  831.410718][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21
[  834.939214][T11473] fuse: Unknown parameter 'grou00000000000000000000'
[  838.014214][ T5725] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  838.422544][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  838.422571][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  838.422601][ T5725] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  838.422618][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.495043][ T5725] usb 7-1: config 0 descriptor??
[  838.979567][ T5725] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[  838.979618][ T5725] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[  838.979642][ T5725] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[  838.979662][ T5725] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[  838.979685][ T5725] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[  838.979708][ T5725] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[  838.979733][ T5725] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[  839.147400][ T5725] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0
[  839.167815][ T5725] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device
[  839.167863][ T5725] arvo 0003:1E7D:30D4.0004: couldn't install keyboard
[  840.736816][ T5725] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -5
[  840.810143][ T5725] usb 7-1: USB disconnect, device number 18
[  841.395734][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22
[  841.452693][T11522] fuse: Unknown parameter 'grou00000000000000000000'
[  848.177619][ T5852] bridge_slave_1: left allmulticast mode
[  848.177658][ T5852] bridge_slave_1: left promiscuous mode
[  848.177930][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.258525][ T5852] bridge_slave_0: left allmulticast mode
[  848.258562][ T5852] bridge_slave_0: left promiscuous mode
[  848.258851][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.435061][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  850.499402][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  850.517148][ T5852] bond0 (unregistering): Released all slaves
[  851.330320][ T5852] hsr_slave_0: left promiscuous mode
[  851.335167][ T6860] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  851.352547][ T5852] hsr_slave_1: left promiscuous mode
[  851.354064][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  851.395905][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  851.486920][ T6860] usb 1-1: Using ep0 maxpacket: 8
[  851.489377][ T6860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  851.489396][ T6860] usb 1-1: config 0 has no interfaces?
[  851.491954][ T6860] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  851.491976][ T6860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.491991][ T6860] usb 1-1: Product: syz
[  851.492002][ T6860] usb 1-1: Manufacturer: syz
[  851.492012][ T6860] usb 1-1: SerialNumber: syz
[  853.046837][ T6860] usb 1-1: config 0 descriptor??
[  853.780275][ T9163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  853.809614][ T9163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  853.822062][ T9163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  853.830731][ T9163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  853.836811][ T9163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  854.364897][T10960] usb 1-1: USB disconnect, device number 42
[  855.649422][ T5852] team0 (unregistering): Port device team_slave_1 removed
[  855.749690][ T5852] team0 (unregistering): Port device team_slave_0 removed
[  855.923717][ T9208] Bluetooth: hci1: command tx timeout
[  856.720816][ T9163] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  856.749057][ T9163] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  856.784990][ T9163] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  856.798455][ T9163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  856.820849][ T9163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  858.030476][T11661] Bluetooth: hci1: command tx timeout
[  859.391209][T11661] Bluetooth: hci6: command tx timeout
[  860.615498][T11661] Bluetooth: hci1: command tx timeout
[  862.085392][T11661] Bluetooth: hci6: command tx timeout
[  862.643685][T11661] Bluetooth: hci1: command tx timeout
[  863.634955][    T9] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  863.799757][    T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  863.799782][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.799796][    T9] usb 7-1: Product: syz
[  863.799807][    T9] usb 7-1: Manufacturer: syz
[  863.799817][    T9] usb 7-1: SerialNumber: syz
[  863.841748][    T9] usb 7-1: config 0 descriptor??
[  864.176630][T11661] Bluetooth: hci6: command tx timeout
[  864.195286][    T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  864.799881][    T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  866.255823][T11661] Bluetooth: hci6: command tx timeout
[  866.733463][    T9] usb 7-1: USB disconnect, device number 19
[  868.726343][ T5842] bridge_slave_1: left allmulticast mode
[  868.726384][ T5842] bridge_slave_1: left promiscuous mode
[  868.726660][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.791172][ T5842] bridge_slave_0: left allmulticast mode
[  868.791211][ T5842] bridge_slave_0: left promiscuous mode
[  868.791497][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.225543][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  869.354552][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  869.427511][ T5842] bond0 (unregistering): Released all slaves
[  870.327504][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  870.327582][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  871.421701][ T5842] hsr_slave_0: left promiscuous mode
[  871.458717][ T5842] hsr_slave_1: left promiscuous mode
[  871.459626][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  871.507870][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  872.835603][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  872.967468][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  873.474778][ T5712] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  873.644367][ T5712] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  873.644403][ T5712] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  873.644443][ T5712] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  873.644467][ T5712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.740285][ T5712] usb 7-1: config 0 descriptor??
[  874.209019][ T5712] usbhid 7-1:0.0: can't add hid device: -71
[  874.209150][ T5712] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  874.289710][ T5712] usb 7-1: USB disconnect, device number 20
[  876.687678][T11813] cgroup: subsys name conflicts with all
[  878.394240][T11814] syzkaller0: entered promiscuous mode
[  878.648710][T11616] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.648866][T11616] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.649043][T11616] bridge_slave_0: entered allmulticast mode
[  878.657719][T11616] bridge_slave_0: entered promiscuous mode
[  878.913349][T11616] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.913452][T11616] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.913906][T11616] bridge_slave_1: entered allmulticast mode
[  878.927289][T11616] bridge_slave_1: entered promiscuous mode
[  879.102659][T11655] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.102822][T11655] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.103004][T11655] bridge_slave_0: entered allmulticast mode
[  879.125452][T11655] bridge_slave_0: entered promiscuous mode
[  879.214343][T11655] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.214605][T11655] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.214766][T11655] bridge_slave_1: entered allmulticast mode
[  879.247847][T11655] bridge_slave_1: entered promiscuous mode
[  879.318763][T11616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  879.372283][T11616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  879.393835][T10960] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  879.547454][T10960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.547480][T10960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  879.547553][T10960] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  879.547571][T10960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.598360][T10960] usb 1-1: config 0 descriptor??
[  879.623242][T11655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  879.835738][T11655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.057545][T10960] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  880.057583][T10960] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  880.057611][T10960] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  880.057637][T10960] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  880.057663][T10960] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  880.057689][T10960] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  880.057714][T10960] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  880.069005][T10960] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[  880.699238][T10960] usb 1-1: USB disconnect, device number 43
[  880.756700][T11616] team0: Port device team_slave_0 added
[  880.874353][    T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  881.010547][T11616] team0: Port device team_slave_1 added
[  881.043742][    T9] usb 7-1: Using ep0 maxpacket: 32
[  881.052937][    T9] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  881.052971][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.052991][    T9] usb 7-1: Product: syz
[  881.053006][    T9] usb 7-1: Manufacturer: syz
[  881.053027][    T9] usb 7-1: SerialNumber: syz
[  881.121542][    T9] usb 7-1: config 0 descriptor??
[  881.147509][    T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  881.415762][T11655] team0: Port device team_slave_0 added
[  881.580080][T11655] team0: Port device team_slave_1 added
[  881.867944][T11616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  881.867963][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  881.867988][T11616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  882.475611][T11616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  882.475644][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.476439][T11616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  882.578300][    T9] gspca_ov534_9: reg_r err -32
[  882.945274][T11655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  882.945289][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.945310][T11655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  883.023642][    T9] gspca_ov534_9: Unknown sensor 0000
[  883.023748][    T9] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22
[  883.263793][T11655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  883.263807][T11655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  883.263828][T11655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  884.019126][T11616] hsr_slave_0: entered promiscuous mode
[  884.029432][T11616] hsr_slave_1: entered promiscuous mode
[  884.060664][T10960] usb 7-1: USB disconnect, device number 21
[  884.091716][T11616] debugfs: 'hsr0' already exists in 'hsr'
[  884.091750][T11616] Cannot create hsr debugfs directory
[  884.550834][T11655] hsr_slave_0: entered promiscuous mode
[  884.563935][T11655] hsr_slave_1: entered promiscuous mode
[  884.572423][T11655] debugfs: 'hsr0' already exists in 'hsr'
[  884.572452][T11655] Cannot create hsr debugfs directory
[  887.488553][ T5842] bridge_slave_1: left allmulticast mode
[  887.488593][ T5842] bridge_slave_1: left promiscuous mode
[  887.488879][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.564603][ T5842] bridge_slave_0: left allmulticast mode
[  887.564641][ T5842] bridge_slave_0: left promiscuous mode
[  887.564922][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  888.248514][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  888.387858][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  888.473930][ T5842] bond0 (unregistering): Released all slaves
[  900.036744][ T5842] hsr_slave_0: left promiscuous mode
[  900.111251][T11907] cgroup: subsys name conflicts with all
[  900.351207][ T5842] hsr_slave_1: left promiscuous mode
[  900.352284][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  901.068930][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  901.405196][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  901.475351][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  903.611652][T11952] cgroup: subsys name conflicts with all
[  905.379912][T11964] cgroup: subsys name conflicts with all
[  909.215944][T11616] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  909.761522][T11616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  909.763085][T11616] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  909.961642][T11616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  909.989929][T11616] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  910.224853][T11616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  910.227337][T11616] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  910.260776][T11616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  912.880261][T12014] binder: 12010:12014 ioctl c0306201 200000000480 returned -14
[  913.010377][T11655] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  913.056421][T11655] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  913.071396][T11655] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  913.123811][T11655] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  913.126851][T11655] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  913.215775][T11655] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  913.232890][T11655] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  913.282768][T11655] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  913.615952][T11655] 8021q: adding VLAN 0 to HW filter on device bond0
[  913.697713][T11655] 8021q: adding VLAN 0 to HW filter on device team0
[  913.729598][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.731358][ T5865] bridge0: port 1(bridge_slave_0) entered forwarding state
[  913.803869][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.805551][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  914.044262][ T9208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  914.093204][ T9208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  914.100164][ T9208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  914.127646][ T9208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  914.131419][ T9208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  916.323700][T11661] Bluetooth: hci2: command tx timeout
[  917.578735][T11661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  917.606837][T11661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  917.612259][T11661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  917.623257][T11661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  917.631582][T11661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  918.236473][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1528'.
[  918.407381][ T9208] Bluetooth: hci2: command tx timeout
[  919.703841][   T10] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  919.738623][T12082] binder: BINDER_SET_CONTEXT_MGR already set
[  919.738639][T12082] binder: 12078:12082 ioctl 4018620d 200000004a80 returned -16
[  919.763736][ T9208] Bluetooth: hci1: command tx timeout
[  919.866130][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  919.866163][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.866184][   T10] usb 1-1: Product: syz
[  919.866198][   T10] usb 1-1: Manufacturer: syz
[  919.866212][   T10] usb 1-1: SerialNumber: syz
[  919.917640][   T10] usb 1-1: config 0 descriptor??
[  920.130318][   T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  921.920863][ T9208] Bluetooth: hci2: command tx timeout
[  921.920900][ T9208] Bluetooth: hci1: command tx timeout
[  921.935302][   T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  923.012548][T12097] cgroup: subsys name conflicts with all
[  923.291664][T10960] usb 1-1: USB disconnect, device number 44
[  924.033149][T11661] Bluetooth: hci1: command tx timeout
[  924.033186][T11661] Bluetooth: hci2: command tx timeout
[  926.649046][ T9208] Bluetooth: hci1: command tx timeout
[  928.538258][T12135] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1547'.
[  928.873676][  T835] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  928.939344][T12142] binder: 12141:12142 ioctl c0306201 0 returned -14
[  929.035560][  T835] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  929.035801][  T835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.035824][  T835] usb 1-1: Product: syz
[  929.035839][  T835] usb 1-1: Manufacturer: syz
[  929.035855][  T835] usb 1-1: SerialNumber: syz
[  929.078178][  T835] usb 1-1: config 0 descriptor??
[  929.306391][  T835] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  930.489704][  T835] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  931.113786][ T5842] bridge_slave_1: left allmulticast mode
[  931.113833][ T5842] bridge_slave_1: left promiscuous mode
[  931.114110][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.200207][ T5842] bridge_slave_0: left allmulticast mode
[  931.200244][ T5842] bridge_slave_0: left promiscuous mode
[  931.200520][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.405953][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  933.406026][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  933.482076][  T835] usb 1-1: USB disconnect, device number 45
[  934.149033][T12169] process 'syz.0.1555' launched './file1' with NULL argv: empty string added
[  934.422331][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  935.333859][   T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  935.447521][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  935.483775][   T10] usb 1-1: Using ep0 maxpacket: 8
[  935.492378][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  935.492410][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.492431][   T10] usb 1-1: Product: syz
[  935.492446][   T10] usb 1-1: Manufacturer: syz
[  935.492460][   T10] usb 1-1: SerialNumber: syz
[  935.549708][   T10] usb 1-1: config 0 descriptor??
[  935.574950][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  936.365183][   T10] gspca_sonixj: reg_r err -110
[  936.365288][   T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  936.683374][ T5842] bond0 (unregistering): Released all slaves
[  937.985222][ T5842] hsr_slave_0: left promiscuous mode
[  938.024111][ T5842] hsr_slave_1: left promiscuous mode
[  938.025170][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  938.081441][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  938.154656][    T9] usb 1-1: USB disconnect, device number 46
[  940.984082][T12225] binder: 12223:12225 ioctl c0306201 0 returned -14
[  941.525573][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  941.597829][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  943.015662][T12027] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.015862][T12027] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.017665][T12027] bridge_slave_0: entered allmulticast mode
[  943.052494][T12027] bridge_slave_0: entered promiscuous mode
[  943.133024][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21
[  943.176204][T12027] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.176355][T12027] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.176566][T12027] bridge_slave_1: entered allmulticast mode
[  943.439622][T12027] bridge_slave_1: entered promiscuous mode
[  948.488158][T12027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  948.515253][T12027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  948.632045][T12027] team0: Port device team_slave_0 added
[  948.637976][T12027] team0: Port device team_slave_1 added
[  948.689036][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  948.689055][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.689085][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  948.692102][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  948.692117][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.692149][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  948.898077][T12027] hsr_slave_0: entered promiscuous mode
[  948.900754][T12027] hsr_slave_1: entered promiscuous mode
[  949.252131][T12045] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.252370][T12045] bridge0: port 1(bridge_slave_0) entered disabled state
[  949.252995][T12045] bridge_slave_0: entered allmulticast mode
[  949.348949][T12045] bridge_slave_0: entered promiscuous mode
[  949.397472][T12045] bridge0: port 2(bridge_slave_1) entered blocking state
[  949.397596][T12045] bridge0: port 2(bridge_slave_1) entered disabled state
[  949.397799][T12045] bridge_slave_1: entered allmulticast mode
[  949.401046][T12045] bridge_slave_1: entered promiscuous mode
[  949.635767][T12282] overlayfs: failed to resolve './file0/file0': -2
[  950.700127][T12045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  950.893764][T10960] usb 7-1: new low-speed USB device number 22 using dummy_hcd
[  951.128318][T10960] usb 7-1: device descriptor read/64, error -71
[  952.103962][T10960] usb 7-1: new low-speed USB device number 23 using dummy_hcd
[  953.961654][T10960] usb 7-1: device descriptor read/64, error -71
[  954.064059][T10960] usb usb7-port1: attempt power cycle
[  954.619255][T12045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  954.686917][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22
[  954.823653][T10960] usb 7-1: new low-speed USB device number 24 using dummy_hcd
[  955.033684][T10960] usb 7-1: device not accepting address 24, error -71
[  955.180637][T12045] team0: Port device team_slave_0 added
[  956.739471][T12045] team0: Port device team_slave_1 added
[  958.252971][T12338] cgroup: subsys name conflicts with all
[  959.594011][T10960] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  959.763783][T10960] usb 7-1: Using ep0 maxpacket: 16
[  959.766361][T10960] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  959.766388][T10960] usb 7-1: config 0 has no interface number 0
[  959.766436][T10960] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  959.766463][T10960] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  959.766503][T10960] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  959.766526][T10960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.836220][T10960] usb 7-1: config 0 descriptor??
[  959.842125][T12045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  959.842143][T12045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  959.842172][T12045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  960.142980][T12045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  960.142994][T12045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  960.143016][T12045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  960.260554][T10960] usbhid 7-1:0.1: can't add hid device: -71
[  960.260670][T10960] usbhid 7-1:0.1: probe with driver usbhid failed with error -71
[  960.290937][T10960] usb 7-1: USB disconnect, device number 26
[  960.380092][T12349] overlayfs: failed to resolve './file0/file0': -2
[  970.314435][T12045] hsr_slave_0: entered promiscuous mode
[  970.322438][T12045] hsr_slave_1: entered promiscuous mode
[  970.344653][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.344695][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.344719][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.344741][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.344763][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.344786][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.344808][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.344830][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.344853][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.344876][   T10] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0
[  970.352236][T12045] debugfs: 'hsr0' already exists in 'hsr'
[  970.352262][T12045] Cannot create hsr debugfs directory
[  970.802495][   T10] hid-generic 00A0:0006:0003.0006: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz0
[  973.842022][T12412] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1611'.
[  973.842065][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1611'.
[  975.852018][T11661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  975.920579][T11661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  975.922652][T11661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  975.957282][T11661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  975.962506][T11661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  978.169891][ T9208] Bluetooth: hci5: command tx timeout
[  979.958792][T11661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  979.962905][T11661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  979.976440][T11661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  979.978143][T11661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  979.982559][T11661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  980.243653][ T9208] Bluetooth: hci5: command tx timeout
[  980.476757][ T5842] bridge_slave_1: left allmulticast mode
[  980.476795][ T5842] bridge_slave_1: left promiscuous mode
[  980.477077][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  980.576686][ T5842] bridge_slave_0: left allmulticast mode
[  980.576713][ T5842] bridge_slave_0: left promiscuous mode
[  980.583337][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.500878][ T9208] Bluetooth: hci2: command tx timeout
[  982.501151][ T9208] Bluetooth: hci5: command tx timeout
[  982.505160][ T5725] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  982.663722][ T5725] usb 7-1: Using ep0 maxpacket: 32
[  982.666151][ T5725] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  982.666178][ T5725] usb 7-1: config 0 has no interface number 0
[  982.666226][ T5725] usb 7-1: config 0 interface 12 has no altsetting 0
[  982.670966][ T5725] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  982.670996][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.671033][ T5725] usb 7-1: Product: syz
[  982.671049][ T5725] usb 7-1: Manufacturer: syz
[  982.671065][ T5725] usb 7-1: SerialNumber: syz
[  982.753428][ T5725] usb 7-1: config 0 descriptor??
[  984.600705][T11661] Bluetooth: hci5: command tx timeout
[  984.600720][ T9208] Bluetooth: hci2: command tx timeout
[  984.805993][ T5725] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: 30 failed: -71
[  984.806053][ T5725] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  984.806072][ T5725] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  984.806152][ T5725] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  984.870284][ T5725] usb 7-1: USB disconnect, device number 27
[  984.896936][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  984.985946][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  985.049535][ T5842] bond0 (unregistering): Released all slaves
[  986.644489][ T9208] Bluetooth: hci2: command tx timeout
[  986.847198][ T5842] hsr_slave_0: left promiscuous mode
[  986.889904][ T5842] hsr_slave_1: left promiscuous mode
[  986.890975][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  986.936167][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  988.743768][ T9208] Bluetooth: hci2: command tx timeout
[  989.396465][T12532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  989.396485][T12532] IPv6: NLM_F_CREATE should be set when creating new route
[  989.428196][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1629'.
[  990.411098][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  990.484483][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  990.643306][T12536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1631'.
[  990.643442][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'.
[  991.925719][T12558] netlink: 'syz.0.1634': attribute type 13 has an invalid length.
[  991.925746][T12558] netlink: 'syz.0.1634': attribute type 17 has an invalid length.
[  993.544940][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  993.545104][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  994.946727][   T37] audit: type=1326 audit(2000000679.470:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  994.946785][   T37] audit: type=1326 audit(2000000679.480:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  994.946828][   T37] audit: type=1326 audit(2000000679.480:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  994.946870][   T37] audit: type=1326 audit(2000000679.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  994.946912][   T37] audit: type=1326 audit(2000000679.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  994.946954][   T37] audit: type=1326 audit(2000000679.480:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  994.946994][   T37] audit: type=1326 audit(2000000679.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  994.947035][   T37] audit: type=1326 audit(2000000679.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  994.947076][   T37] audit: type=1326 audit(2000000679.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  994.947116][   T37] audit: type=1326 audit(2000000679.660:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12585 comm="syz.0.1640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb3cdd9 code=0x7ffc0000
[  996.897139][T12426] bridge0: port 1(bridge_slave_0) entered blocking state
[  996.897364][T12426] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.897613][T12426] bridge_slave_0: entered allmulticast mode
[  996.930692][T12426] bridge_slave_0: entered promiscuous mode
[  996.975757][T12426] bridge0: port 2(bridge_slave_1) entered blocking state
[  996.975907][T12426] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.976139][T12426] bridge_slave_1: entered allmulticast mode
[  996.978535][T12426] bridge_slave_1: entered promiscuous mode
[  997.192211][T12615] cgroup: subsys name conflicts with all
[  998.856654][T12622] netlink: 'syz.7.1646': attribute type 13 has an invalid length.
[  998.856679][T12622] netlink: 'syz.7.1646': attribute type 17 has an invalid length.
[  999.118192][T12426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  999.761346][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'.
[  999.761572][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'.
[ 1004.025123][T12657] cgroup: subsys name conflicts with all
[ 1005.630390][T12426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1005.705912][T12666] cgroup: subsys name conflicts with all
[ 1007.259867][T12674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1660'.
[ 1007.769204][T12679] cgroup: subsys name conflicts with all
[ 1009.074067][T12426] team0: Port device team_slave_0 added
[ 1009.082415][T12426] team0: Port device team_slave_1 added
[ 1009.193973][T12426] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1009.193992][T12426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1009.194024][T12426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1009.198413][T12426] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1009.198430][T12426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1009.198462][T12426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1009.619053][T12690] netlink: 'syz.0.1664': attribute type 13 has an invalid length.
[ 1009.619079][T12690] netlink: 'syz.0.1664': attribute type 17 has an invalid length.
[ 1010.480215][T12426] hsr_slave_0: entered promiscuous mode
[ 1010.481699][T12426] hsr_slave_1: entered promiscuous mode
[ 1010.482689][T12426] debugfs: 'hsr0' already exists in 'hsr'
[ 1010.482741][T12426] Cannot create hsr debugfs directory
[ 1010.705700][T10960] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[ 1010.972949][T12468] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.973093][T12468] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.973296][T12468] bridge_slave_0: entered allmulticast mode
[ 1010.976652][T12468] bridge_slave_0: entered promiscuous mode
[ 1010.992302][T12468] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1010.993286][T12468] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.993572][T12468] bridge_slave_1: entered allmulticast mode
[ 1010.996532][T12468] bridge_slave_1: entered promiscuous mode
[ 1011.051232][T10960] usb 7-1: device descriptor read/64, error -71
[ 1011.177507][T12468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1011.225036][T12468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1011.335321][T12468] team0: Port device team_slave_0 added
[ 1011.348853][T12468] team0: Port device team_slave_1 added
[ 1011.697080][T12708] input: syz0 as /devices/virtual/input/input22
[ 1011.723722][T10960] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[ 1011.813685][T12468] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1011.813703][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1011.813734][T12468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1011.853713][T10960] usb 7-1: device descriptor read/64, error -71
[ 1011.966744][T10960] usb usb7-port1: attempt power cycle
[ 1012.269457][T12468] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1012.269476][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.269507][T12468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1012.308795][T10960] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[ 1012.334353][T10960] usb 7-1: device descriptor read/8, error -71
[ 1012.576464][T10960] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[ 1012.594504][T10960] usb 7-1: device descriptor read/8, error -71
[ 1012.704050][T10960] usb usb7-port1: unable to enumerate USB device
[ 1012.708465][T12468] hsr_slave_0: entered promiscuous mode
[ 1012.711502][T12468] hsr_slave_1: entered promiscuous mode
[ 1012.712377][T12468] debugfs: 'hsr0' already exists in 'hsr'
[ 1012.712403][T12468] Cannot create hsr debugfs directory
[ 1013.098393][T12740] tipc: Started in network mode
[ 1013.098426][T12740] tipc: Node identity 36e82f466f6e, cluster identity 4711
[ 1013.098944][T12740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1013.100452][T12740] syzkaller0: entered promiscuous mode
[ 1013.100473][T12740] syzkaller0: entered allmulticast mode
[ 1013.344533][T12746] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1679'.
[ 1013.396538][T12747] tipc: Resetting bearer <eth:syzkaller0>
[ 1013.528470][T12739] tipc: Resetting bearer <eth:syzkaller0>
[ 1013.687159][T12739] tipc: Disabling bearer <eth:syzkaller0>
[ 1013.976533][T12754] gre1: entered promiscuous mode
[ 1014.224357][ T5842] bridge_slave_1: left allmulticast mode
[ 1014.224397][ T5842] bridge_slave_1: left promiscuous mode
[ 1014.224683][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.305385][ T5842] bridge_slave_0: left allmulticast mode
[ 1014.305425][ T5842] bridge_slave_0: left promiscuous mode
[ 1014.305654][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1014.675128][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1014.777724][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1014.836095][ T5842] bond0 (unregistering): Released all slaves
[ 1015.717590][T12776] input: syz0 as /devices/virtual/input/input24
[ 1016.244493][T12776] netlink: 'syz.0.1688': attribute type 4 has an invalid length.
[ 1016.323940][T12781] netlink: 'syz.0.1688': attribute type 4 has an invalid length.
[ 1016.605995][ T5842] hsr_slave_0: left promiscuous mode
[ 1016.656384][ T5842] hsr_slave_1: left promiscuous mode
[ 1016.657262][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1016.777462][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1018.085868][ T5842] team0 (unregistering): Port device team_slave_1 removed
[ 1018.202737][ T5842] team0 (unregistering): Port device team_slave_0 removed
[ 1018.866185][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21
[ 1021.665200][ T5842] bridge_slave_1: left allmulticast mode
[ 1021.665237][ T5842] bridge_slave_1: left promiscuous mode
[ 1021.665523][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1021.762780][ T5842] bridge_slave_0: left allmulticast mode
[ 1021.762825][ T5842] bridge_slave_0: left promiscuous mode
[ 1021.763126][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1022.315578][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1022.434348][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1022.500075][ T5842] bond0 (unregistering): Released all slaves
[ 1022.960475][T12883] netlink: 'syz.6.1716': attribute type 12 has an invalid length.
[ 1022.960492][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1716'.
[ 1022.960531][T12883] bond0: option primary_reselect: invalid value (53)
[ 1023.384343][ T5842] hsr_slave_0: left promiscuous mode
[ 1023.441138][ T5842] hsr_slave_1: left promiscuous mode
[ 1023.442181][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1023.484777][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1024.778750][ T5842] team0 (unregistering): Port device team_slave_1 removed
[ 1024.903158][ T5842] team0 (unregistering): Port device team_slave_0 removed
[ 1026.906049][T12942] warning: `syz.0.1719' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1027.584118][T12468] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1027.919887][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1028.048502][T12468] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1028.277732][T12955] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1724'.
[ 1028.312938][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1028.387930][T12468] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1028.510834][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1028.846380][    T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1029.016560][    T9] usb 7-1: Using ep0 maxpacket: 8
[ 1029.019905][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1029.019944][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1029.019963][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1029.123090][    T9] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1029.123114][    T9] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[ 1029.123129][    T9] usb 7-1: Product: syz
[ 1029.123140][    T9] usb 7-1: Manufacturer: syz
[ 1029.123150][    T9] usb 7-1: SerialNumber: syz
[ 1029.184280][    T9] usb 7-1: config 0 descriptor??
[ 1029.319616][T12468] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1029.343734][    T9] rc_core: IR keymap rc-imon-rsc not found
[ 1029.343757][    T9] Registered IR keymap rc-empty
[ 1029.378903][    T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1029.407922][    T9] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input25
[ 1029.453439][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1029.591302][    T9] usb 7-1: USB disconnect, device number 32
[ 1030.440958][T12426] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1030.526454][T12426] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1030.546877][T12426] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1030.627219][T12426] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1030.657767][T12426] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1030.734994][T12426] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1030.743127][T12426] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1030.801827][T12426] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1031.398406][T12468] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1031.777002][T12468] 8021q: adding VLAN 0 to HW filter on device team0
[ 1031.853041][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.853225][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1031.911402][T12426] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1031.979194][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.979336][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1032.170186][T12983] [U] 
[ 1032.232645][T12426] 8021q: adding VLAN 0 to HW filter on device team0
[ 1032.247974][T12989] netdevsim netdevsim6: Direct firmware load for .
[ 1032.247974][T12989]  failed with error -2
[ 1032.248007][T12989] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[ 1032.248007][T12989] 
[ 1032.359847][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1032.361011][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1032.474855][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.475010][ T5867] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1032.885464][T13010] input: syz0 as /devices/virtual/input/input26
[ 1032.999024][T13016] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1743'.
[ 1035.471376][T11661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1035.510123][T11661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1035.525839][T11661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1035.530187][T11661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1035.590582][T11661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1037.763796][ T9208] Bluetooth: hci1: command tx timeout
[ 1039.456277][T11661] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1039.472780][T11661] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1039.490633][T11661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1039.532034][T11661] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1039.532748][T11661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1039.843788][ T9208] Bluetooth: hci1: command tx timeout
[ 1041.419598][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'.
[ 1041.693644][ T9208] Bluetooth: hci6: command tx timeout
[ 1041.923593][ T9208] Bluetooth: hci1: command tx timeout
[ 1041.988889][T13048] netlink: 'syz.7.1747': attribute type 13 has an invalid length.
[ 1042.291664][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1749'.
[ 1043.297259][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1750'.
[ 1043.348019][T13065] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1750'.
[ 1043.359614][T13069] input: syz0 as /devices/virtual/input/input27
[ 1043.460691][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1750'.
[ 1043.776168][ T9208] Bluetooth: hci6: command tx timeout
[ 1043.939085][T13070] bridge1: port 1(veth0_to_bond) entered blocking state
[ 1043.939843][T13070] bridge1: port 1(veth0_to_bond) entered disabled state
[ 1043.940002][T13070] veth0_to_bond: entered allmulticast mode
[ 1043.965473][T13070] veth0_to_bond: entered promiscuous mode
[ 1044.004215][ T9208] Bluetooth: hci1: command tx timeout
[ 1045.120810][T13107] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 1045.120810][T13107] The task syz.6.1765 (13107) triggered the difference, watch for misbehavior.
[ 1045.542846][T13118] netlink: 'syz.7.1769': attribute type 33 has an invalid length.
[ 1045.542871][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1769'.
[ 1045.659423][T13115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1045.659771][T13116] syzkaller0: entered promiscuous mode
[ 1045.659795][T13116] syzkaller0: entered allmulticast mode
[ 1045.783868][T13118] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[ 1045.791323][T13113] tipc: Resetting bearer <eth:syzkaller0>
[ 1045.845239][ T9208] Bluetooth: hci6: command tx timeout
[ 1045.913848][T13112] tipc: Resetting bearer <eth:syzkaller0>
[ 1046.114453][T13112] tipc: Disabling bearer <eth:syzkaller0>
[ 1046.943652][  T835] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1047.093696][  T835] usb 1-1: Using ep0 maxpacket: 32
[ 1047.095862][  T835] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1047.095894][  T835] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1047.095927][  T835] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1047.095950][  T835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.113740][  T835] usb 1-1: config 0 descriptor??
[ 1047.852401][T13159] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1047.924545][ T9208] Bluetooth: hci6: command tx timeout
[ 1049.214795][T13035] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1049.215078][T13035] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.215408][T13035] bridge_slave_0: entered allmulticast mode
[ 1049.218260][T13035] bridge_slave_0: entered promiscuous mode
[ 1049.243939][T10960] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1049.328866][T13035] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1049.329824][T13035] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.351924][T13035] bridge_slave_1: entered allmulticast mode
[ 1049.364910][T13035] bridge_slave_1: entered promiscuous mode
[ 1049.445053][T10960] usb 7-1: Using ep0 maxpacket: 32
[ 1049.467248][T10960] usb 7-1: config 0 has an invalid interface number: 119 but max is 0
[ 1049.467270][T10960] usb 7-1: config 0 has no interface number 0
[ 1049.467302][T10960] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1049.467318][T10960] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1049.467337][T10960] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[ 1049.467395][T10960] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1049.470391][T10960] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1049.470421][T10960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.470508][T10960] usb 7-1: Product: syz
[ 1049.470521][T10960] usb 7-1: Manufacturer: syz
[ 1049.470532][T10960] usb 7-1: SerialNumber: syz
[ 1049.604649][T10080] bridge_slave_1: left allmulticast mode
[ 1049.604687][T10080] bridge_slave_1: left promiscuous mode
[ 1049.604959][T10080] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.619054][T10960] usb 7-1: config 0 descriptor??
[ 1049.658397][T13170] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1049.731136][T10080] bridge_slave_0: left allmulticast mode
[ 1049.731175][T10080] bridge_slave_0: left promiscuous mode
[ 1049.731482][T10080] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.823020][T10960] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input28
[ 1049.847345][  T835] usbhid 1-1:0.0: can't add hid device: -71
[ 1049.847486][  T835] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1049.849098][ T4948] usb 7-1: BOGUS urb xfer, pipe 1 != type 3
[ 1050.016557][  T835] usb 1-1: USB disconnect, device number 47
[ 1050.159936][    C1] bcm5974 7-1:0.119: trackpad urb failed: -1
[ 1050.773680][  T835] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1050.943769][  T835] usb 1-1: Using ep0 maxpacket: 16
[ 1050.948132][  T835] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1050.948312][  T835] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[ 1050.948342][  T835] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1050.948378][  T835] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[ 1050.948524][  T835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.061421][  T835] usb 1-1: config 0 descriptor??
[ 1051.092772][  T835] usbhid 1-1:0.0: can't add hid device: -22
[ 1051.103135][  T835] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[ 1052.145798][   T10] usb 1-1: USB disconnect, device number 48
[ 1052.464150][T13202] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1052.466104][T10080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1052.614890][T10080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1052.662926][T10080] bond0 (unregistering): Released all slaves
[ 1052.941200][T13027] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1052.941307][T13027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1052.941523][T13027] bridge_slave_0: entered allmulticast mode
[ 1052.970353][T13027] bridge_slave_0: entered promiscuous mode
[ 1053.075550][T13035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1053.077648][T13027] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.077776][T13027] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.078004][T13027] bridge_slave_1: entered allmulticast mode
[ 1053.081213][T13027] bridge_slave_1: entered promiscuous mode
[ 1053.157429][T13035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1053.463027][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1053.855703][T10080] hsr_slave_0: left promiscuous mode
[ 1053.896017][T10080] hsr_slave_1: left promiscuous mode
[ 1053.960315][T10080] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1053.976347][ T6860] usb 7-1: USB disconnect, device number 33
[ 1054.040572][T10080] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1054.382079][T13229] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1054.650656][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.666064][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.722265][T13232] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1054.736466][T13232] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1054.736644][T13232] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1054.736696][T13232] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[ 1054.737045][T13232] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1054.739200][T13232] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[ 1054.739484][T13232] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[ 1054.739645][T13232] kvm: requested 100571 ns i8254 timer period limited to 200000 ns
[ 1054.740782][T13232] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1055.133649][    T9] usb 7-1: new low-speed USB device number 34 using dummy_hcd
[ 1055.155270][T10080] team0 (unregistering): Port device team_slave_1 removed
[ 1055.205159][T10080] team0 (unregistering): Port device team_slave_0 removed
[ 1055.296871][    T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 1055.296902][    T9] usb 7-1: config 0 has no interface number 0
[ 1055.296949][    T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1055.296974][    T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1055.297002][    T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1055.297028][    T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1055.297070][    T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1055.297098][    T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1055.297144][    T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1055.297168][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.421657][    T9] usb 7-1: config 0 descriptor??
[ 1055.429949][T13240] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1055.430231][T13240] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1055.534330][    T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1055.676401][    T9] usb 7-1: USB disconnect, device number 34
[ 1055.676530][    C0] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[ 1055.708976][T13035] team0: Port device team_slave_0 added
[ 1055.721532][    T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 1055.732540][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1056.002160][T13035] team0: Port device team_slave_1 added
[ 1056.043704][    T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1056.204796][T13027] team0: Port device team_slave_0 added
[ 1056.206840][T13035] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1056.206858][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1056.206887][T13035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1056.223578][    T9] usb 7-1: Using ep0 maxpacket: 32
[ 1056.224626][    T9] usb 7-1: too many configurations: 34, using maximum allowed: 8
[ 1056.226111][    T9] usb 7-1: config index 0 descriptor too short (expected 72, got 43)
[ 1056.226145][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.226167][    T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1056.228832][T13027] team0: Port device team_slave_1 added
[ 1056.229949][    T9] usb 7-1: config index 1 descriptor too short (expected 72, got 43)
[ 1056.229974][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.229995][    T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1056.273192][T13035] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1056.273237][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1056.273319][T13035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1056.274759][    T9] usb 7-1: config index 2 descriptor too short (expected 72, got 43)
[ 1056.274786][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.274806][    T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1056.286148][    T9] usb 7-1: config index 3 descriptor too short (expected 72, got 43)
[ 1056.286176][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.286195][    T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1056.323598][    T9] usb 7-1: config index 4 descriptor too short (expected 72, got 43)
[ 1056.323627][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.323647][    T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1056.328194][    T9] usb 7-1: config index 5 descriptor too short (expected 72, got 43)
[ 1056.328221][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.328241][    T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1056.336920][    T9] usb 7-1: config index 6 descriptor too short (expected 72, got 43)
[ 1056.336952][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.336972][    T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1056.445352][    T9] usb 7-1: config index 7 descriptor too short (expected 72, got 43)
[ 1056.445382][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.445403][    T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1056.488907][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1056.488940][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1056.488960][    T9] usb 7-1: SerialNumber: syz
[ 1056.881637][ T5712] usb 7-1: USB disconnect, device number 35
[ 1056.917937][T13254] ldusb: No device or device unplugged -19
[ 1056.918567][T13254] ldusb: No device or device unplugged -19
[ 1056.918609][T13254] ldusb: No device or device unplugged -19
[ 1056.918627][T13254] ldusb: No device or device unplugged -19
[ 1057.113141][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1057.113161][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1057.113192][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1057.213206][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1057.213225][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1057.213257][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1057.694255][T13035] hsr_slave_0: entered promiscuous mode
[ 1057.698085][T13035] hsr_slave_1: entered promiscuous mode
[ 1057.776968][ T5712] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[ 1057.878245][T13027] hsr_slave_0: entered promiscuous mode
[ 1057.880471][T13027] hsr_slave_1: entered promiscuous mode
[ 1057.881450][T13027] debugfs: 'hsr0' already exists in 'hsr'
[ 1057.881477][T13027] Cannot create hsr debugfs directory
[ 1057.992140][ T5712] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1057.992173][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.992193][ T5712] usb 1-1: Product: syz
[ 1057.992208][ T5712] usb 1-1: Manufacturer: syz
[ 1057.992224][ T5712] usb 1-1: SerialNumber: syz
[ 1058.548902][ T5712] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1059.211190][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21
[ 1060.490545][ T5725] usb 1-1: USB disconnect, device number 49
[ 1060.598045][ T5725] usblp0: removed
[ 1061.338132][T13315] [U] 
[ 1061.622391][   T37] kauditd_printk_skb: 7 callbacks suppressed
[ 1061.622411][   T37] audit: type=1326 audit(2000000746.310:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13320 comm="syz.0.1825" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09eeb3cdd9 code=0x0
[ 1063.889347][   T37] audit: type=1326 audit(2000000748.630:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.0.1838" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09eeb3cdd9 code=0x0
[ 1063.956487][   T37] audit: type=1326 audit(2000000748.700:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13363 comm="syz.6.1837" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1063.962072][   T37] audit: type=1326 audit(2000000748.700:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13363 comm="syz.6.1837" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1063.962132][   T37] audit: type=1326 audit(2000000748.700:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13363 comm="syz.6.1837" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1063.962176][   T37] audit: type=1326 audit(2000000748.700:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13363 comm="syz.6.1837" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1063.962209][   T37] audit: type=1326 audit(2000000748.700:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13363 comm="syz.6.1837" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1063.962243][   T37] audit: type=1326 audit(2000000748.700:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13363 comm="syz.6.1837" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1063.962276][   T37] audit: type=1326 audit(2000000748.700:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13363 comm="syz.6.1837" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1063.962308][   T37] audit: type=1326 audit(2000000748.700:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13363 comm="syz.6.1837" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1065.822030][T10080] bridge_slave_1: left allmulticast mode
[ 1065.822068][T10080] bridge_slave_1: left promiscuous mode
[ 1065.822321][T10080] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1065.926558][T10080] bridge_slave_0: left allmulticast mode
[ 1065.926585][T10080] bridge_slave_0: left promiscuous mode
[ 1065.928529][T10080] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.627984][   T37] kauditd_printk_skb: 48 callbacks suppressed
[ 1066.628004][   T37] audit: type=1326 audit(2000000751.370:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1066.628335][   T37] audit: type=1326 audit(2000000751.370:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1066.632515][   T37] audit: type=1326 audit(2000000751.370:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1066.632949][   T37] audit: type=1326 audit(2000000751.370:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1066.643402][   T37] audit: type=1326 audit(2000000751.370:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1066.832029][   T37] audit: type=1326 audit(2000000751.390:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1066.832185][   T37] audit: type=1326 audit(2000000751.570:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1066.832318][   T37] audit: type=1326 audit(2000000751.570:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1066.832437][   T37] audit: type=1326 audit(2000000751.570:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1066.832565][   T37] audit: type=1326 audit(2000000751.570:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13396 comm="syz.6.1847" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cb2acdd9 code=0x7ffc0000
[ 1067.548614][T13408] input: syz0 as /devices/virtual/input/input29
[ 1068.095711][T10080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1068.200977][T10080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1068.279523][T10080] bond0 (unregistering): Released all slaves
[ 1069.379573][T10080] hsr_slave_0: left promiscuous mode
[ 1069.427197][T10080] hsr_slave_1: left promiscuous mode
[ 1069.428263][T10080] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1069.476136][T10080] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1070.878356][T10080] team0 (unregistering): Port device team_slave_1 removed
[ 1070.967910][T10080] team0 (unregistering): Port device team_slave_0 removed
[ 1071.498231][T13489] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1071.543216][T13492] pim6reg: entered allmulticast mode
[ 1071.551007][T13501] syz_tun: entered allmulticast mode
[ 1071.685544][    T9] usb 7-1: new full-speed USB device number 36 using dummy_hcd
[ 1071.869883][    T9] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1071.869907][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.869922][    T9] usb 7-1: Product: syz
[ 1071.869933][    T9] usb 7-1: Manufacturer: syz
[ 1071.869943][    T9] usb 7-1: SerialNumber: syz
[ 1072.479549][    T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1074.563084][ T5712] usb 7-1: USB disconnect, device number 36
[ 1074.581992][ T5712] usblp0: removed
[ 1075.419095][   T37] kauditd_printk_skb: 20 callbacks suppressed
[ 1075.419114][   T37] audit: type=1326 audit(2000000760.160:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13544 comm="syz.0.1889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb3cdd9 code=0x0
[ 1075.964948][T13555] tipc: Started in network mode
[ 1075.964980][T13555] tipc: Node identity 723aadaf993e, cluster identity 4711
[ 1075.965206][T13555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1075.966084][T13558] syzkaller0: entered promiscuous mode
[ 1075.966109][T13558] syzkaller0: entered allmulticast mode
[ 1076.014166][T13551] tipc: Resetting bearer <eth:syzkaller0>
[ 1076.093967][T13550] tipc: Resetting bearer <eth:syzkaller0>
[ 1076.284752][T13550] tipc: Disabling bearer <eth:syzkaller0>
[ 1076.293988][ T5712] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[ 1076.510157][ T5712] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1076.510190][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.510212][ T5712] usb 7-1: Product: syz
[ 1076.510226][ T5712] usb 7-1: Manufacturer: syz
[ 1076.510239][ T5712] usb 7-1: SerialNumber: syz
[ 1077.498905][ T5712] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1077.527973][T13035] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1077.616656][T13035] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1077.618996][T13035] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1077.701832][T13035] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1077.732812][T13582] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1897'.
[ 1077.755104][T13035] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1077.825857][T13035] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1077.828833][T13035] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1077.864719][T13035] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1078.453800][T13035] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1078.545264][T13035] 8021q: adding VLAN 0 to HW filter on device team0
[ 1078.563013][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1078.563120][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1078.621913][T13027] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1078.673204][T13027] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1078.740066][T13027] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1078.777998][T13027] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1078.781036][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1078.781253][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1078.782228][T13027] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1078.827066][T13027] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1078.832184][T13027] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1078.855143][T13027] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1078.976170][    T9] usb 7-1: USB disconnect, device number 37
[ 1078.997063][    T9] usblp0: removed
[ 1079.360947][T13027] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1079.486869][T13027] 8021q: adding VLAN 0 to HW filter on device team0
[ 1079.527072][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.527312][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1079.579765][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1079.579935][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1079.846172][T13627] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1907'.
[ 1080.833585][  T822] usb 7-1: new full-speed USB device number 38 using dummy_hcd
[ 1081.027872][T13035] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1081.031390][  T822] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1081.031423][  T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.031445][  T822] usb 7-1: Product: syz
[ 1081.031460][  T822] usb 7-1: Manufacturer: syz
[ 1081.031475][  T822] usb 7-1: SerialNumber: syz
[ 1081.515876][  T822] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1082.062748][T13027] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1082.146886][T13035] veth0_vlan: entered promiscuous mode
[ 1082.267638][T13035] veth1_vlan: entered promiscuous mode
[ 1082.509551][T13035] veth0_macvtap: entered promiscuous mode
[ 1082.549244][T13035] veth1_macvtap: entered promiscuous mode
[ 1082.622243][T13035] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1082.730002][T13035] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1082.754865][ T5852] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.756424][ T5852] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.756475][ T5852] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.756512][ T5852] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.774565][  T822] usb 7-1: USB disconnect, device number 38
[ 1083.810807][  T822] usblp0: removed
[ 1083.980467][ T5852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1083.980484][ T5852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1084.298350][T13027] veth0_vlan: entered promiscuous mode
[ 1084.411402][ T5842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1084.411424][ T5842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1084.440940][T13027] veth1_vlan: entered promiscuous mode
[ 1084.908072][T13027] veth0_macvtap: entered promiscuous mode
[ 1084.961561][T13027] veth1_macvtap: entered promiscuous mode
[ 1085.009989][T13027] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1085.082015][T13027] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1085.116989][ T5852] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1085.117398][ T5852] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1085.121161][ T5852] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1085.122011][ T5852] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.314827][ T5852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.314852][ T5852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.399039][T13719] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1928'.
[ 1089.047387][ T5867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.047412][ T5867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1090.761487][T11661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1090.817170][T11661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1090.830225][T11661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1090.852081][T11661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1090.891152][T11661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1091.523624][  T835] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1091.703680][  T835] usb 9-1: Using ep0 maxpacket: 16
[ 1091.765411][  T835] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1091.765438][  T835] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[ 1091.765459][  T835] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1091.765485][  T835] usb 9-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[ 1091.765501][  T835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.769696][  T835] usb 9-1: config 0 descriptor??
[ 1091.775591][  T835] usbhid 9-1:0.0: can't add hid device: -22
[ 1091.775717][  T835] usbhid 9-1:0.0: probe with driver usbhid failed with error -22
[ 1092.148986][  T835] usb 9-1: USB disconnect, device number 2
[ 1092.320744][T13777] input: syz0 as /devices/virtual/input/input30
[ 1092.367623][T13777] input: syz0 as /devices/virtual/input/input31
[ 1093.051990][ T9208] Bluetooth: hci2: command tx timeout
[ 1093.562624][   T37] audit: type=1326 audit(2000000778.300:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1093.562795][   T37] audit: type=1326 audit(2000000778.300:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1093.563157][   T37] audit: type=1326 audit(2000000778.300:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1093.638711][   T37] audit: type=1326 audit(2000000778.300:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1093.638772][   T37] audit: type=1326 audit(2000000778.300:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1093.639517][   T37] audit: type=1326 audit(2000000778.380:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1093.639694][   T37] audit: type=1326 audit(2000000778.380:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1093.639949][   T37] audit: type=1326 audit(2000000778.380:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1093.640125][   T37] audit: type=1326 audit(2000000778.380:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1093.643194][   T37] audit: type=1326 audit(2000000778.380:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13791 comm="syz.9.1956" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1095.113765][T13645] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1095.130128][ T9208] Bluetooth: hci2: command tx timeout
[ 1095.263775][T13645] usb 10-1: Using ep0 maxpacket: 16
[ 1095.266398][T13645] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1095.266436][T13645] usb 10-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[ 1095.266471][T13645] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1095.266498][T13645] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[ 1095.266515][T13645] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1095.270900][T13645] usb 10-1: config 0 descriptor??
[ 1095.300100][T13645] usbhid 10-1:0.0: can't add hid device: -22
[ 1095.300355][T13645] usbhid 10-1:0.0: probe with driver usbhid failed with error -22
[ 1095.637292][ T6860] usb 10-1: USB disconnect, device number 2
[ 1097.207830][ T9208] Bluetooth: hci2: command tx timeout
[ 1099.283820][ T9208] Bluetooth: hci2: command tx timeout
[ 1100.227301][   T37] kauditd_printk_skb: 32 callbacks suppressed
[ 1100.227321][   T37] audit: type=1326 audit(2000000784.960:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.227850][   T37] audit: type=1326 audit(2000000784.970:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.227990][   T37] audit: type=1326 audit(2000000784.970:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.228174][   T37] audit: type=1326 audit(2000000784.970:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.228370][   T37] audit: type=1326 audit(2000000784.970:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.228753][   T37] audit: type=1326 audit(2000000784.970:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.229174][   T37] audit: type=1326 audit(2000000784.970:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.229349][   T37] audit: type=1326 audit(2000000784.970:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.230146][   T37] audit: type=1326 audit(2000000784.970:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.230200][   T37] audit: type=1326 audit(2000000784.970:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13821 comm="syz.9.1966" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b24cbcdd9 code=0x7ffc0000
[ 1100.820269][T11246] syz_tun (unregistering): left allmulticast mode
[ 1100.928533][T13832] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1969'.
[ 1101.552549][T13848] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1974'.
[ 1102.042178][   T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1102.042221][   T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.257218][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1980'.
[ 1103.265788][   T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1103.265826][   T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.484927][T13893] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1991'.
[ 1103.579335][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1992'.
[ 1103.645361][T13894] tipc: Started in network mode
[ 1103.645401][T13894] tipc: Node identity c6a36dd761e1, cluster identity 4711
[ 1103.645553][T13894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1103.649250][T13890] syzkaller0: entered promiscuous mode
[ 1103.649277][T13890] syzkaller0: entered allmulticast mode
[ 1103.739492][T13890] tipc: Resetting bearer <eth:syzkaller0>
[ 1103.843543][T13889] tipc: Resetting bearer <eth:syzkaller0>
[ 1104.016458][T13889] tipc: Disabling bearer <eth:syzkaller0>
[ 1104.607750][T13903] mmap: syz.6.1995 (13903) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1104.787581][   T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1104.787615][   T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1105.123847][   T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1105.273689][   T10] usb 7-1: Using ep0 maxpacket: 16
[ 1105.312253][   T10] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[ 1105.312276][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1105.312292][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1105.349475][   T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89
[ 1105.349505][   T10] usb 7-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3
[ 1105.349524][   T10] usb 7-1: Manufacturer: syz
[ 1105.349549][   T10] usb 7-1: SerialNumber: syz
[ 1105.419675][   T10] usb 7-1: config 0 descriptor??
[ 1105.474394][   T10] usb 7-1: 0:2 : does not exist
[ 1106.057946][   T43] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[ 1106.117324][   T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1106.117364][   T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.382804][   T10] usb 7-1: USB disconnect, device number 39
[ 1107.416484][T13937] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2005'.
[ 1108.469593][T13750] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1108.469747][T13750] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1108.469939][T13750] bridge_slave_0: entered allmulticast mode
[ 1108.485170][T13750] bridge_slave_0: entered promiscuous mode
[ 1108.506419][T13750] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.506528][T13750] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.506719][T13750] bridge_slave_1: entered allmulticast mode
[ 1108.521072][T13750] bridge_slave_1: entered promiscuous mode
[ 1109.323269][T13750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1109.387838][T13750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1109.561571][T13750] team0: Port device team_slave_0 added
[ 1110.021272][T13750] team0: Port device team_slave_1 added
[ 1110.503617][T13750] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1110.503637][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1110.503667][T13750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1110.505764][T13750] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1110.505784][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1110.505805][T13750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1111.124829][   T43] bridge_slave_1: left allmulticast mode
[ 1111.124865][   T43] bridge_slave_1: left promiscuous mode
[ 1111.125125][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1111.230068][   T43] bridge_slave_0: left allmulticast mode
[ 1111.230108][   T43] bridge_slave_0: left promiscuous mode
[ 1111.230401][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1112.462900][T13985] netlink: 'syz.7.2021': attribute type 9 has an invalid length.
[ 1112.462919][T13985] netlink: 'syz.7.2021': attribute type 7 has an invalid length.
[ 1112.462929][T13985] netlink: 'syz.7.2021': attribute type 8 has an invalid length.
[ 1114.544519][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1114.628494][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1114.682875][   T43] bond0 (unregistering): Released all slaves
[ 1114.860251][  T822] usb 7-1: new low-speed USB device number 40 using dummy_hcd
[ 1114.993648][  T822] usb 7-1: device descriptor read/64, error -71
[ 1115.052562][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21
[ 1115.131310][T13750] hsr_slave_0: entered promiscuous mode
[ 1115.140503][T13750] hsr_slave_1: entered promiscuous mode
[ 1115.141589][T13750] debugfs: 'hsr0' already exists in 'hsr'
[ 1115.141615][T13750] Cannot create hsr debugfs directory
[ 1115.216974][   T43] tipc: Left network mode
[ 1115.263601][  T822] usb 7-1: new low-speed USB device number 41 using dummy_hcd
[ 1115.363713][ T5725] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1115.464745][  T822] usb 7-1: device descriptor read/64, error -71
[ 1115.543856][ T5725] usb 10-1: Using ep0 maxpacket: 16
[ 1115.548879][ T5725] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1115.548905][ T5725] usb 10-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[ 1115.548925][ T5725] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1115.548950][ T5725] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[ 1115.548968][ T5725] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1115.573904][  T822] usb usb7-port1: attempt power cycle
[ 1115.775368][ T5725] usb 10-1: config 0 descriptor??
[ 1115.797474][ T5725] usbhid 10-1:0.0: can't add hid device: -22
[ 1115.797594][ T5725] usbhid 10-1:0.0: probe with driver usbhid failed with error -22
[ 1115.943624][  T822] usb 7-1: new low-speed USB device number 42 using dummy_hcd
[ 1115.989412][  T822] usb 7-1: device descriptor read/8, error -71
[ 1116.092219][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.092293][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.150784][ T5725] usb 10-1: USB disconnect, device number 3
[ 1116.273870][  T822] usb 7-1: new low-speed USB device number 43 using dummy_hcd
[ 1116.300498][  T822] usb 7-1: device descriptor read/8, error -71
[ 1116.404025][  T822] usb usb7-port1: unable to enumerate USB device
[ 1118.167381][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22
[ 1118.831369][T14056] input: syz0 as /devices/virtual/input/input32
[ 1119.490661][   T43] hsr_slave_0: left promiscuous mode
[ 1119.547847][   T43] hsr_slave_1: left promiscuous mode
[ 1119.548990][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1119.549018][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1119.596666][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1119.596697][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1119.924940][   T43] veth1_macvtap: left promiscuous mode
[ 1119.925052][   T43] veth0_macvtap: left promiscuous mode
[ 1119.925316][   T43] veth1_vlan: left promiscuous mode
[ 1119.925374][   T43] veth0_vlan: left promiscuous mode
[ 1120.016222][   T10] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1120.177922][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1120.177986][   T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1120.178011][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.229489][   T10] usb 7-1: config 0 descriptor??
[ 1120.322755][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[ 1121.809371][   T43] pim6reg (unregistering): left allmulticast mode
[ 1124.097845][   T10] pwc: recv_control_msg error -71 req 02 val 2b00
[ 1124.098759][   T10] pwc: recv_control_msg error -71 req 02 val 2700
[ 1124.099143][   T10] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1124.099573][   T10] pwc: recv_control_msg error -71 req 04 val 1000
[ 1124.100031][   T10] pwc: recv_control_msg error -71 req 04 val 1300
[ 1124.100617][   T10] pwc: recv_control_msg error -71 req 04 val 1400
[ 1124.101116][   T10] pwc: recv_control_msg error -71 req 02 val 2000
[ 1124.101747][   T10] pwc: recv_control_msg error -71 req 02 val 2100
[ 1124.102147][   T10] pwc: recv_control_msg error -71 req 04 val 1500
[ 1124.102530][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[ 1124.102899][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[ 1124.103287][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[ 1124.128732][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[ 1124.134202][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[ 1124.140113][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[ 1124.154100][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[ 1124.705349][   T10] pwc: Registered as video103.
[ 1124.893683][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input33
[ 1124.941452][T14118] input: syz0 as /devices/virtual/input/input34
[ 1125.526834][   T10] usb 7-1: USB disconnect, device number 44
[ 1125.712139][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2066'.
[ 1126.947026][T14143] netlink: 'syz.8.2069': attribute type 13 has an invalid length.
[ 1126.978953][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1127.076082][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1127.152913][T14146] capability: warning: `syz.7.2071' uses 32-bit capabilities (legacy support in use)
[ 1128.271751][   T37] kauditd_printk_skb: 128 callbacks suppressed
[ 1128.271774][   T37] audit: type=1326 audit(2000000813.010:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14165 comm="syz.7.2074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e175acdd9 code=0x0
[ 1130.220181][T14204] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2084'.
[ 1131.044048][   T37] audit: type=1326 audit(2000000815.770:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14214 comm="syz.8.2089" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff955e1cdd9 code=0x0
[ 1132.383535][ T6103] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1132.543565][ T6103] usb 9-1: Using ep0 maxpacket: 32
[ 1132.547073][ T6103] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1132.547111][ T6103] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1132.547147][ T6103] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1132.547171][ T6103] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.617853][ T6103] usb 9-1: config 0 descriptor??
[ 1135.223767][ T6103] usbhid 9-1:0.0: can't add hid device: -71
[ 1135.223906][ T6103] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1135.232254][ T6103] usb 9-1: USB disconnect, device number 3
[ 1136.243848][ T5712] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[ 1136.552177][ T5712] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1136.552211][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.552233][ T5712] usb 7-1: Product: syz
[ 1136.552248][ T5712] usb 7-1: Manufacturer: syz
[ 1136.552262][ T5712] usb 7-1: SerialNumber: syz
[ 1137.933665][  T835] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1138.330990][T13750] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1138.393665][  T835] usb 9-1: Using ep0 maxpacket: 32
[ 1138.427325][  T835] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1138.427422][  T835] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1138.427469][  T835] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1138.427493][  T835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.508965][  T835] usb 9-1: config 0 descriptor??
[ 1138.769278][T13750] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1138.818395][T13750] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1139.035612][T13750] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1139.038620][T13750] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1139.248755][T13750] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1139.547220][T13750] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1139.609758][ T5712] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1139.640104][ T5712] usb 7-1: USB disconnect, device number 45
[ 1139.659440][T13750] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1139.749097][ T5712] usblp0: removed
[ 1140.720288][  T835] usbhid 9-1:0.0: can't add hid device: -71
[ 1140.720403][  T835] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1140.789982][T14348] input: syz0 as /devices/virtual/input/input35
[ 1140.831878][  T835] usb 9-1: USB disconnect, device number 4
[ 1141.066048][T13750] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1141.202233][T13750] 8021q: adding VLAN 0 to HW filter on device team0
[ 1141.249148][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1141.249392][ T5865] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1141.303174][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1141.303339][ T5865] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1144.710408][T13750] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1144.863227][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2140'.
[ 1144.875622][T14424] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1145.034219][T13750] veth0_vlan: entered promiscuous mode
[ 1145.110951][T13750] veth1_vlan: entered promiscuous mode
[ 1145.292270][T13750] veth0_macvtap: entered promiscuous mode
[ 1145.333830][T13750] veth1_macvtap: entered promiscuous mode
[ 1145.455380][T14430] blktrace: Concurrent blktraces are not allowed on loop4
[ 1145.469854][T13750] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1145.616921][T13750] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1145.670980][  T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.672112][  T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.672160][  T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.672200][  T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.305808][T10080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1147.305831][T10080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1147.646771][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2150'.
[ 1147.831173][T14448] netlink: 'syz.6.2147': attribute type 13 has an invalid length.
[ 1147.831199][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2147'.
[ 1148.046760][T14451] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1148.224946][ T5849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1148.224969][ T5849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1148.717838][T14462] blktrace: Concurrent blktraces are not allowed on loop4
[ 1148.803873][ T5725] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1148.953877][ T5725] usb 9-1: device descriptor read/64, error -71
[ 1149.203800][ T5725] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 1149.243777][  T822] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1149.353783][ T5725] usb 9-1: device descriptor read/64, error -71
[ 1149.415556][  T822] usb 1-1: Using ep0 maxpacket: 32
[ 1149.422856][  T822] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[ 1149.422892][  T822] usb 1-1: config 0 has no interface number 0
[ 1149.422924][  T822] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1149.422941][  T822] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1149.422959][  T822] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[ 1149.422977][  T822] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1149.505850][  T822] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1149.505885][  T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1149.505908][  T822] usb 1-1: Product: syz
[ 1149.505923][  T822] usb 1-1: Manufacturer: syz
[ 1149.505939][  T822] usb 1-1: SerialNumber: syz
[ 1149.509734][ T5725] usb usb9-port1: attempt power cycle
[ 1149.560724][  T822] usb 1-1: config 0 descriptor??
[ 1149.570897][T14469] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1149.636966][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2156'.
[ 1149.637005][T14471] netlink: 'syz.7.2156': attribute type 5 has an invalid length.
[ 1149.637020][T14471] netlink: 'syz.7.2156': attribute type 8 has an invalid length.
[ 1149.637033][T14471] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2156'.
[ 1149.779302][  T822] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input36
[ 1149.938398][    C0] bcm5974 1-1:0.119: trackpad urb failed: -1
[ 1150.019001][ T5725] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 1150.040332][ T5725] usb 9-1: device descriptor read/8, error -71
[ 1150.345595][ T5725] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 1150.362693][T14471] geneve2: entered promiscuous mode
[ 1150.362719][T14471] geneve2: entered allmulticast mode
[ 1150.374457][ T5725] usb 9-1: device descriptor read/8, error -71
[ 1150.418786][ T1380] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 1150.519457][ T5725] usb usb9-port1: unable to enumerate USB device
[ 1150.533281][ T5849] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 1150.546898][ T5849] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 1150.547197][ T5849] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 1150.786296][  T822] usb 1-1: USB disconnect, device number 50
[ 1153.744206][ T5712] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1153.904682][ T5712] usb 10-1: Using ep0 maxpacket: 32
[ 1153.917392][ T5712] usb 10-1: config 0 has an invalid interface number: 119 but max is 0
[ 1153.917415][ T5712] usb 10-1: config 0 has no interface number 0
[ 1153.917446][ T5712] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1153.917468][ T5712] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1153.917493][ T5712] usb 10-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[ 1153.917512][ T5712] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1153.992383][ T5712] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1153.992408][ T5712] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.992423][ T5712] usb 10-1: Product: syz
[ 1153.992434][ T5712] usb 10-1: Manufacturer: syz
[ 1153.992444][ T5712] usb 10-1: SerialNumber: syz
[ 1154.052238][ T5712] usb 10-1: config 0 descriptor??
[ 1154.056496][T14513] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1154.113750][ T5712] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.119/input/input37
[ 1155.698589][    C0] bcm5974 10-1:0.119: trackpad urb failed: -1
[ 1156.851328][  T822] usb 10-1: USB disconnect, device number 4
[ 1156.851425][    C0] bcm5974 10-1:0.119: trackpad urb failed: -19
[ 1157.224008][T14535] netlink: 'syz.6.2176': attribute type 13 has an invalid length.
[ 1157.224042][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2176'.
[ 1158.197778][T14547] blktrace: Concurrent blktraces are not allowed on loop4
[ 1158.214013][ T5712] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[ 1158.450201][ T5712] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1158.450237][ T5712] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1158.450259][ T5712] usb 10-1: Product: syz
[ 1158.450274][ T5712] usb 10-1: Manufacturer: syz
[ 1158.450289][ T5712] usb 10-1: SerialNumber: syz
[ 1159.123896][T11661] Bluetooth: hci1: command 0x0406 tx timeout
[ 1159.178506][ T5712] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1160.964262][ T5725] usb 10-1: USB disconnect, device number 5
[ 1161.010501][T14578] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2190'.
[ 1161.173326][ T5725] usblp0: removed
[ 1161.756821][T14593] input: syz0 as /devices/virtual/input/input38
[ 1162.733594][ T6860] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1162.760981][T14602] netlink: 'syz.8.2200': attribute type 13 has an invalid length.
[ 1162.761728][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2200'.
[ 1162.883673][ T6860] usb 10-1: Using ep0 maxpacket: 32
[ 1162.926658][ T6860] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1162.926694][ T6860] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1162.926731][ T6860] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1162.926757][ T6860] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.012084][ T6860] usb 10-1: config 0 descriptor??
[ 1164.258601][ T9208] Bluetooth: hci6: command 0x0406 tx timeout
[ 1165.592696][ T6860] usbhid 10-1:0.0: can't add hid device: -71
[ 1165.592841][ T6860] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1165.648958][ T6860] usb 10-1: USB disconnect, device number 6
[ 1166.378099][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2211'.
[ 1166.420195][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2211'.
[ 1168.398760][T14662] team0: entered promiscuous mode
[ 1168.398780][T14662] team_slave_0: entered promiscuous mode
[ 1168.398973][T14662] team_slave_1: entered promiscuous mode
[ 1168.484803][T14662] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1169.302146][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'.
[ 1169.341731][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'.
[ 1169.905708][T14682] netlink: 'syz.9.2225': attribute type 13 has an invalid length.
[ 1169.905735][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2225'.
[ 1172.327471][T14702] ==================================================================
[ 1172.327492][T14702] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60
[ 1172.327614][T14702] Read of size 1 at addr ffff88803545b418 by task syz.8.2233/14702
[ 1172.327633][T14702] 
[ 1172.327662][T14702] CPU: 0 UID: 0 PID: 14702 Comm: syz.8.2233 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1172.327691][T14702] Tainted: [L]=SOFTLOCKUP
[ 1172.327699][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1172.327721][T14702] Call Trace:
[ 1172.327733][T14702]  <TASK>
[ 1172.327743][T14702]  dump_stack_lvl+0xe8/0x150
[ 1172.327769][T14702]  print_address_description+0x55/0x1e0
[ 1172.327796][T14702]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1172.327822][T14702]  print_report+0x58/0x70
[ 1172.327844][T14702]  kasan_report+0x117/0x150
[ 1172.327870][T14702]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1172.327901][T14702]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 1172.327921][T14702]  __kasan_check_byte+0x2a/0x40
[ 1172.327944][T14702]  lock_acquire+0x84/0x350
[ 1172.327974][T14702]  ? preempt_schedule_thunk+0x16/0x30
[ 1172.328007][T14702]  ? rcu_is_watching+0x15/0xb0
[ 1172.328040][T14702]  _raw_spin_lock_irqsave+0x40/0x60
[ 1172.328064][T14702]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 1172.328084][T14702]  rt_mutex_slowunlock+0xbf/0x8b0
[ 1172.328103][T14702]  ? reacquire_held_locks+0x104/0x190
[ 1172.328134][T14702]  ? rt_spin_lock+0x1e0/0x400
[ 1172.328157][T14702]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1172.328180][T14702]  ? rt_spin_unlock+0x14f/0x200
[ 1172.328203][T14702]  ? rt_spin_unlock+0x160/0x200
[ 1172.328224][T14702]  kbd_event+0x2f91/0x42f0
[ 1172.328256][T14702]  ? __pfx_kbd_event+0x10/0x10
[ 1172.328283][T14702]  ? try_to_take_rt_mutex+0x840/0xb00
[ 1172.328319][T14702]  ? rtlock_slowlock_locked+0xfb/0x3c80
[ 1172.328346][T14702]  ? __lock_acquire+0x6b5/0x2cf0
[ 1172.328380][T14702]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1172.328407][T14702]  ? input_pass_values+0x8d/0x890
[ 1172.328450][T14702]  input_handle_events_default+0xd4/0x1a0
[ 1172.328489][T14702]  ? input_pass_values+0x8d/0x890
[ 1172.328518][T14702]  input_pass_values+0x288/0x890
[ 1172.328553][T14702]  ? input_handle_event+0x70c/0xf30
[ 1172.328579][T14702]  input_event_dispose+0x330/0x6b0
[ 1172.328607][T14702]  input_inject_event+0x1d7/0x320
[ 1172.328633][T14702]  ? input_inject_event+0xb0/0x320
[ 1172.328660][T14702]  evdev_write+0x328/0x4c0
[ 1172.328691][T14702]  ? __lock_acquire+0x6b5/0x2cf0
[ 1172.328721][T14702]  ? __pfx_evdev_write+0x10/0x10
[ 1172.328756][T14702]  ? rw_verify_area+0x25b/0x4e0
[ 1172.328778][T14702]  ? __pfx_evdev_write+0x10/0x10
[ 1172.328809][T14702]  vfs_write+0x2a3/0xba0
[ 1172.328839][T14702]  ? __pfx_vfs_write+0x10/0x10
[ 1172.328864][T14702]  ? __fget_files+0x2a/0x420
[ 1172.328886][T14702]  ? __fget_files+0x2a/0x420
[ 1172.328903][T14702]  ? __fget_files+0x3a6/0x420
[ 1172.328921][T14702]  ? __fget_files+0x2a/0x420
[ 1172.328945][T14702]  ksys_write+0x156/0x270
[ 1172.328970][T14702]  ? __pfx_ksys_write+0x10/0x10
[ 1172.328999][T14702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.329025][T14702]  do_syscall_64+0x15f/0xf80
[ 1172.329113][T14702]  ? trace_irq_disable+0x3b/0x140
[ 1172.329141][T14702]  ? clear_bhb_loop+0x40/0x90
[ 1172.329166][T14702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.329195][T14702] RIP: 0033:0x7ff955e1cdd9
[ 1172.329221][T14702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1172.329246][T14702] RSP: 002b:00007ff95406e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1172.329279][T14702] RAX: ffffffffffffffda RBX: 00007ff956095fa0 RCX: 00007ff955e1cdd9
[ 1172.329296][T14702] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000007
[ 1172.329319][T14702] RBP: 00007ff955eb2d69 R08: 0000000000000000 R09: 0000000000000000
[ 1172.329334][T14702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1172.329348][T14702] R13: 00007ff956096038 R14: 00007ff956095fa0 R15: 00007ffe8d0c9eb8
[ 1172.329376][T14702]  </TASK>
[ 1172.329384][T14702] 
[ 1172.329394][T14702] Allocated by task 14702:
[ 1172.329405][T14702]  kasan_save_track+0x3e/0x80
[ 1172.329426][T14702]  __kasan_kmalloc+0x93/0xb0
[ 1172.329446][T14702]  __kmalloc_cache_noprof+0x3a6/0x690
[ 1172.329468][T14702]  alloc_tty_struct+0xa6/0x7b0
[ 1172.329489][T14702]  tty_init_dev+0x59/0x4d0
[ 1172.329509][T14702]  tty_open+0x86e/0xd80
[ 1172.329535][T14702]  chrdev_open+0x4d0/0x5f0
[ 1172.329558][T14702]  do_dentry_open+0x83d/0x13e0
[ 1172.329586][T14702]  vfs_open+0x3b/0x350
[ 1172.329611][T14702]  path_openat+0x2e43/0x38a0
[ 1172.329631][T14702]  do_file_open+0x23e/0x4a0
[ 1172.329650][T14702]  do_sys_openat2+0x113/0x200
[ 1172.329678][T14702]  __x64_sys_openat+0x138/0x170
[ 1172.329706][T14702]  do_syscall_64+0x15f/0xf80
[ 1172.329730][T14702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.329749][T14702] 
[ 1172.329753][T14702] Freed by task 6860:
[ 1172.329763][T14702]  kasan_save_track+0x3e/0x80
[ 1172.329781][T14702]  kasan_save_free_info+0x46/0x50
[ 1172.329808][T14702]  __kasan_slab_free+0x5c/0x80
[ 1172.329828][T14702]  kfree+0x1c5/0x6c0
[ 1172.329844][T14702]  process_scheduled_works+0xb5d/0x1860
[ 1172.329878][T14702]  worker_thread+0xa53/0xfc0
[ 1172.329899][T14702]  kthread+0x388/0x470
[ 1172.329926][T14702]  ret_from_fork+0x514/0xb70
[ 1172.329948][T14702]  ret_from_fork_asm+0x1a/0x30
[ 1172.329973][T14702] 
[ 1172.329979][T14702] Last potentially related work creation:
[ 1172.329987][T14702]  kasan_save_stack+0x3e/0x60
[ 1172.330006][T14702]  kasan_record_aux_stack+0xbd/0xd0
[ 1172.330034][T14702]  insert_work+0x3d/0x330
[ 1172.330052][T14702]  __queue_work+0xcfd/0x1010
[ 1172.330074][T14702]  queue_work_on+0x106/0x1d0
[ 1172.330096][T14702]  tty_release_struct+0xb8/0xd0
[ 1172.330118][T14702]  tty_release+0xcb6/0x1710
[ 1172.330139][T14702]  __fput+0x461/0xa70
[ 1172.330176][T14702]  task_work_run+0x1d9/0x270
[ 1172.330205][T14702]  exit_to_user_mode_loop+0xf3/0x4d0
[ 1172.330231][T14702]  do_syscall_64+0x33e/0xf80
[ 1172.330255][T14702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.330276][T14702] 
[ 1172.330282][T14702] The buggy address belongs to the object at ffff88803545b000
[ 1172.330282][T14702]  which belongs to the cache kmalloc-cg-2k of size 2048
[ 1172.330301][T14702] The buggy address is located 1048 bytes inside of
[ 1172.330301][T14702]  freed 2048-byte region [ffff88803545b000, ffff88803545b800)
[ 1172.330333][T14702] 
[ 1172.330339][T14702] The buggy address belongs to the physical page:
[ 1172.330363][T14702] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803545a000 pfn:0x35458
[ 1172.330387][T14702] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1172.330405][T14702] memcg:ffff888026211381
[ 1172.330415][T14702] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 1172.330438][T14702] page_type: f5(slab)
[ 1172.330460][T14702] raw: 0080000000000240 ffff88801a0293c0 ffffea0000ef2410 ffffea0000b48e10
[ 1172.330480][T14702] raw: ffff88803545a000 0000000800080006 00000000f5000000 ffff888026211381
[ 1172.330500][T14702] head: 0080000000000240 ffff88801a0293c0 ffffea0000ef2410 ffffea0000b48e10
[ 1172.330519][T14702] head: ffff88803545a000 0000000800080006 00000000f5000000 ffff888026211381
[ 1172.330538][T14702] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1172.330557][T14702] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 1172.330569][T14702] page dumped because: kasan: bad access detected
[ 1172.330586][T14702] page_owner tracks the page as allocated
[ 1172.330594][T14702] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5601, tgid 5601 (syz-executor), ts 103409528215, free_ts 80326636097
[ 1172.330633][T14702]  post_alloc_hook+0x231/0x280
[ 1172.330656][T14702]  get_page_from_freelist+0x27c8/0x2840
[ 1172.330685][T14702]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1172.330715][T14702]  allocate_slab+0x77/0x660
[ 1172.330739][T14702]  refill_objects+0x33c/0x3d0
[ 1172.330774][T14702]  __pcs_replace_empty_main+0x373/0x720
[ 1172.330800][T14702]  __kmalloc_node_track_caller_noprof+0x60b/0x7e0
[ 1172.330820][T14702]  kmemdup_noprof+0x2b/0x70
[ 1172.330846][T14702]  __devinet_sysctl_register+0xb1/0x490
[ 1172.330865][T14702]  devinet_sysctl_register+0x187/0x200
[ 1172.330882][T14702]  inetdev_init+0x2a4/0x4e0
[ 1172.330898][T14702]  inetdev_event+0x30d/0x1610
[ 1172.330916][T14702]  notifier_call_chain+0x1ad/0x3d0
[ 1172.330938][T14702]  register_netdevice+0x18d5/0x1ed0
[ 1172.330961][T14702]  virt_wifi_newlink+0x3e8/0x820
[ 1172.330978][T14702]  rtnl_newlink_create+0x329/0xb70
[ 1172.330998][T14702] page last free pid 5257 tgid 5257 stack trace:
[ 1172.331008][T14702]  __free_frozen_pages+0xfa6/0x10f0
[ 1172.331026][T14702]  __slab_free+0x252/0x2a0
[ 1172.331043][T14702]  qlist_free_all+0x99/0x100
[ 1172.331057][T14702]  kasan_quarantine_reduce+0x148/0x160
[ 1172.331072][T14702]  __kasan_slab_alloc+0x22/0x80
[ 1172.331095][T14702]  __kmalloc_node_track_caller_noprof+0x323/0x7e0
[ 1172.331115][T14702]  __alloc_skb+0x2c1/0x7d0
[ 1172.331133][T14702]  alloc_skb_with_frags+0xc8/0x760
[ 1172.331152][T14702]  sock_alloc_send_pskb+0x884/0x9a0
[ 1172.331177][T14702]  unix_dgram_sendmsg+0x460/0x18d0
[ 1172.331198][T14702]  sock_write_iter+0x4a1/0x4f0
[ 1172.331222][T14702]  vfs_write+0x629/0xba0
[ 1172.331240][T14702]  ksys_write+0x156/0x270
[ 1172.331258][T14702]  do_syscall_64+0x15f/0xf80
[ 1172.331278][T14702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.331295][T14702] 
[ 1172.331299][T14702] Memory state around the buggy address:
[ 1172.331309][T14702]  ffff88803545b300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1172.331333][T14702]  ffff88803545b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1172.331345][T14702] >ffff88803545b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1172.331355][T14702]                             ^
[ 1172.331364][T14702]  ffff88803545b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1172.331376][T14702]  ffff88803545b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1172.331385][T14702] ==================================================================
[ 1172.331402][T14702] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1172.331420][T14702] CPU: 0 UID: 0 PID: 14702 Comm: syz.8.2233 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1172.331446][T14702] Tainted: [L]=SOFTLOCKUP
[ 1172.331453][T14702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1172.331464][T14702] Call Trace:
[ 1172.331472][T14702]  <TASK>
[ 1172.331480][T14702]  vpanic+0x56c/0xa60
[ 1172.331512][T14702]  ? __pfx_vpanic+0x10/0x10
[ 1172.331540][T14702]  panic+0xc5/0xd0
[ 1172.331561][T14702]  ? __pfx_panic+0x10/0x10
[ 1172.331585][T14702]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1172.331607][T14702]  ? rcu_is_watching+0x15/0xb0
[ 1172.331639][T14702]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1172.331664][T14702]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1172.331685][T14702]  check_panic_on_warn+0x89/0xb0
[ 1172.331826][T14702]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1172.331851][T14702]  end_report+0x73/0x170
[ 1172.331873][T14702]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1172.331894][T14702]  kasan_report+0x128/0x150
[ 1172.331916][T14702]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1172.331941][T14702]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 1172.331958][T14702]  __kasan_check_byte+0x2a/0x40
[ 1172.331978][T14702]  lock_acquire+0x84/0x350
[ 1172.332004][T14702]  ? preempt_schedule_thunk+0x16/0x30
[ 1172.332033][T14702]  ? rcu_is_watching+0x15/0xb0
[ 1172.332063][T14702]  _raw_spin_lock_irqsave+0x40/0x60
[ 1172.332085][T14702]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 1172.332105][T14702]  rt_mutex_slowunlock+0xbf/0x8b0
[ 1172.332125][T14702]  ? reacquire_held_locks+0x104/0x190
[ 1172.332156][T14702]  ? rt_spin_lock+0x1e0/0x400
[ 1172.332174][T14702]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1172.332193][T14702]  ? rt_spin_unlock+0x14f/0x200
[ 1172.332213][T14702]  ? rt_spin_unlock+0x160/0x200
[ 1172.332272][T14702]  kbd_event+0x2f91/0x42f0
[ 1172.332301][T14702]  ? __pfx_kbd_event+0x10/0x10
[ 1172.332327][T14702]  ? try_to_take_rt_mutex+0x840/0xb00
[ 1172.332352][T14702]  ? rtlock_slowlock_locked+0xfb/0x3c80
[ 1172.332376][T14702]  ? __lock_acquire+0x6b5/0x2cf0
[ 1172.332414][T14702]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1172.332437][T14702]  ? input_pass_values+0x8d/0x890
[ 1172.332469][T14702]  input_handle_events_default+0xd4/0x1a0
[ 1172.332505][T14702]  ? input_pass_values+0x8d/0x890
[ 1172.332529][T14702]  input_pass_values+0x288/0x890
[ 1172.332559][T14702]  ? input_handle_event+0x70c/0xf30
[ 1172.332588][T14702]  input_event_dispose+0x330/0x6b0
[ 1172.332612][T14702]  input_inject_event+0x1d7/0x320
[ 1172.332633][T14702]  ? input_inject_event+0xb0/0x320
[ 1172.332657][T14702]  evdev_write+0x328/0x4c0
[ 1172.332685][T14702]  ? __lock_acquire+0x6b5/0x2cf0
[ 1172.332711][T14702]  ? __pfx_evdev_write+0x10/0x10
[ 1172.332742][T14702]  ? rw_verify_area+0x25b/0x4e0
[ 1172.332761][T14702]  ? __pfx_evdev_write+0x10/0x10
[ 1172.332791][T14702]  vfs_write+0x2a3/0xba0
[ 1172.332815][T14702]  ? __pfx_vfs_write+0x10/0x10
[ 1172.332835][T14702]  ? __fget_files+0x2a/0x420
[ 1172.332853][T14702]  ? __fget_files+0x2a/0x420
[ 1172.332868][T14702]  ? __fget_files+0x3a6/0x420
[ 1172.332884][T14702]  ? __fget_files+0x2a/0x420
[ 1172.332903][T14702]  ksys_write+0x156/0x270
[ 1172.332924][T14702]  ? __pfx_ksys_write+0x10/0x10
[ 1172.332948][T14702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.332967][T14702]  do_syscall_64+0x15f/0xf80
[ 1172.332993][T14702]  ? trace_irq_disable+0x3b/0x140
[ 1172.333016][T14702]  ? clear_bhb_loop+0x40/0x90
[ 1172.333037][T14702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.333057][T14702] RIP: 0033:0x7ff955e1cdd9
[ 1172.333076][T14702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1172.333093][T14702] RSP: 002b:00007ff95406e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1172.333126][T14702] RAX: ffffffffffffffda RBX: 00007ff956095fa0 RCX: 00007ff955e1cdd9
[ 1172.333140][T14702] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000007
[ 1172.333153][T14702] RBP: 00007ff955eb2d69 R08: 0000000000000000 R09: 0000000000000000
[ 1172.333165][T14702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1172.333176][T14702] R13: 00007ff956096038 R14: 00007ff956095fa0 R15: 00007ffe8d0c9eb8
[ 1172.333198][T14702]  </TASK>
[ 1172.334120][T14702] Kernel Offset: disabled