last executing test programs:

14.180141113s ago: executing program 4 (id=1467):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102373, 0x18fe5}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r3, @ANYBLOB="0a008a"], 0x30}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x2, 0x0, @loopback={0x5000000, 0xa8aaaafffeaaaa22}}, 0x1c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711041000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x9, 0x2, 0x3, 0x3}]})
r5 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x90)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e23, 0x51, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x28a}, 0x1c)
unshare(0x180)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023622})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000500)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20000000, 0x0, 0x6})

13.261208866s ago: executing program 4 (id=1469):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffffb, 0x0}, 0x800)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r2, r3, r4, 0x0, 0x9c0, 0xffffffff, 0x0, 0x0, 0x4})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0xa, 0x2400000001, 0x0)
r10 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000080)={{0x0, 0x3, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f00000021c0)})
setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
getsockopt$inet6_buf(r9, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x11, 0x8000, 0x80, 0x1ff, 0x6, 0x300000, 0x7, 0x2f3f, 0x80000000}}}}]}, 0x58}}, 0x20000040)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

11.760515837s ago: executing program 4 (id=1473):
syz_emit_vhci(0x0, 0x22)
openat$uinput(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000180)={'team0\x00', 0x0})
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="2d9d7ab861bd4d304d57ab9f4ed1108b1c6e2a9dc73e476201"], 0xe3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000d40)="9b3837ab", 0x33fe0}], 0x1}}], 0x1, 0x44040050)
socket$inet6(0xa, 0x6, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000602007000000", @ANYRES32=r9, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r7], 0x44}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740), 0x0, 0x1, 0x0, 0x0, r6})

11.280091118s ago: executing program 2 (id=1475):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x3f, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x13, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000340)='%+9llu \x00'}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x90)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c)
syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r7, 0x8008b705, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$AUDIT_SET(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x3e9, 0xa3adcebddebad371, 0x70bd28, 0x25dfdbff, {0x4, 0x0, 0x2, 0xffffffffffffffff, 0x7, 0x9, 0x10001, 0xffffffc0, 0x0, 0x20, 0x7}}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x2eac6170684abd51)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20)
sendmsg$netlink(r3, 0x0, 0x20000080)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r9, 0x8)
r10 = accept4(r9, 0x0, 0x0, 0x0)
sendmmsg$inet(r9, &(0x7f00000014c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="384ab3a14832bccfb5ffa20d3d09367a8ba2dc072fa7484fc5e4969e38ba090f8981987a88d999388203bf0481b7c2d3974a42d8a9e06fa0b8955b1f256829526ea2f4a4dca9939762c262adf4ff83fa4387e5a27f3a4d19917b365b7df56698b3f70822a358edf29fb77860b87397c150e0b01fb62320be4285805e7f2584896732de3ed85024986cb091ca7de1a153ee52f5514aa1", 0x96}, {&(0x7f0000000280)="074021036f01feb4ef38f941398ea6a671e7327410badb9ee9fd094caf9e1c6c7529dd4f174d6257d12b39bd0375adf6e3", 0x31}, {&(0x7f0000000b80)="e36c2d2d1db5c21efb991909654cac8e877f8cc2b7dd7e63029e8f3e2c1605058a35fe2742de93ed6088a79667b2a014d446be7831acf7c4b0d7831f92507c3ec90b422e418404582c0a456171bdb0142e8a27288a2f88edc6bb4d5f611316ea349f1f6c0790c0a869796a4b594cd58c3f9ea72fdd1e581b317b50f91c57ebf79b6579cb56e832ce78c125c2132583310eb16437f54092297f75a6c370864b4a1e4821dddca65599", 0xa8}, {&(0x7f0000000c40)="044b83a66203613f507fadf76d2569756719b7e68f5aaea24c17599fe3e290a956a9f24f6c4b2f06787fe653dbf9f84bb2d47bd8ad24674636d70aa68d0ad9ac9671558014a75f75b8c9bd2807b9cf4cc1795edf988dff6521c3f6bb160e9dbe6d577a1abf8132b7bb4f832b5c36564e4040c6af928fc1265a8dea2db438755b700f23bb069cfcff65971cf7e91666234baf3c118ff7b653a05cefe9c1654e00c789d98b896be5fa25e3f36d63774c229c397e91392e01b50168", 0xba}, {&(0x7f0000000d40)="6baa78af08e0139d8b1f3cf8ce8b542929a095df9d67dbb3e217cdd3ededeec6a71baed21c2d7e50d49cbd7bca544a02a6b5369e035e568fc50ccf291587d4320b95d8f58e0d244a7962d783063de984212053b2cd7071d9828b4fe60227348fa93d", 0x62}], 0x5, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000640)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000e40)="4a67d8332b270ab8e1e15e3af654f9eb4dbe1108021b53eb0f106bcc44241416fd2cfe56dcc226c6124e22812f0783c91d16de1a111ec222f294eeb79289ac639f301a55ca869fd70ecf654506bb8b9edeae2c9fe236cede7b9b3c22f8760d159b01b75bf6fc8a1e38867cd17d9b42faa8cba5b2bfe80f7f4e68d88ae40f868269f21631a8df0f9a257ef3254f84973a81d8b1086fb0498c07d67888ce5acaf3d1597eb438b9995604dc3425bfe489533f72729605eba53f7696afe2fefb62fb66ddaa76312cdecc36887d557460a51c53e8727e4b282396908f8a7e3b1fa1ac5f7b", 0xe2}, {&(0x7f0000001600)="19f3173b85ec8e3682d52cfdcea7843285dbf4f90fa1a1a393e43f3e7ab47304bac2440c1a4f203ae7d1c1be435f24e6ffa2e25d0648a570ce5ea0785798be9e7371d4ffb770e1850de13c1db6fb4b175521065f9f4e87a3f2fd3fdf2cb49c886898dde274c6a672e20dd8bfb58668950b4c4f6a9d918c9f94a5b95216238810f15989e418983c88909304ffb268daa7a5389bad2f3ccf72da8a2cbb0e1aa57948c19a09b94dd3b0c802f4e5e03f39cee15ea0d3547fa9", 0xb7}, {&(0x7f0000001000)="1e244226fa77c6844f61782edac29d3753798058b68e7f6e004085dd909eae4a26b76d2e01797af3aca643caaa3af63d2c8868fd9cc01004fc5e48c117b80fc211c6cb987a5f5ec5aeb5cc8859098f49cb4cf45b4db392cdd62f0858da7c24487c47aba0", 0x64}, {&(0x7f0000001080)="d5b090b68b6bf5ee968af47419b7d25a4a8751db4365a70f19dc569638ee320a4a1c4535894ee25a5280c0cb0a662e104cf35f4e9d7308b99d8a7a2c81677024bfd7f85ef6ca12434d9662a9d9c46d7d0967fdfc362e91dfc5573f97e9b190a0bb2d30c9d788e0987ff377641f25a463dc699a50e4dd619ca79031fd08459dce6c4aeacfb16cd7f6a3a7429a292bc43c6bb42ef870e05d5d2b8224ff350abf6db96c7039998664b35643cc51e2083046", 0xb0}, {&(0x7f0000001140)="9e9a2751cfb2d35531db4fb2199da686bc575a2ce1a9f3f15c1fedea88f941147fcdafbac178a61f9e9aa67ccfab2a7a526e109b504944e978d4082ba8ebcd842d5556b3d3821a25cba993064de9d1b2642d17bf057888efba42a6b057f04c464098896758eafd689feb4ae3b0268010cf31b7c54d2b6cc5c815831655a0daabd0b3c46e8306b1fb7018c17f222888784cddd4f5dee59a5922b0b4ec4c19b8e69a009a5df7828c10171ddd7f2fc215814c1d711563a0849a9fbccfb133831934796e47563f39f74a0f23be991537", 0xce}, {0x0}, {&(0x7f00000016c0)="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", 0x150}], 0x7, &(0x7f00000013c0)=ANY=[@ANYBLOB="14000000000000000000000001000000fbffffff0000000014000000000000ce897d2e21153bfad8832d405a000000000001000000ff010000000000008400000000000000000000000700000044186590000008000000000900000004ea000000000080014424bf1100000000000000000a01010000000005e000000200000000ac1414bb000000044420640000000004000000ba00000001000092c10000dc3c392076cf00000001831781000000007f00000164010102ac141432e000000100000000001100000000000000000000000100000007000000000000001400"/232], 0xe8}}], 0x2, 0x4040010)
sendto$inet(r10, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendmsg$key(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="020000008000"/16], 0x10}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x34}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)

8.513248244s ago: executing program 4 (id=1483):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000540), 0x4)
renameat2(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2)
fcntl$notify(r1, 0x402, 0x8000003d)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x304)
close(r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0)
rename(&(0x7f0000000300)='./control/file0\x00', &(0x7f0000000180)='./file1\x00')
recvmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/76, 0x4c}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000340)=""/247, 0xf7}], 0x3, &(0x7f0000000440)=""/233, 0xe9}, 0x1)

8.371329507s ago: executing program 2 (id=1486):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x42100, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
clock_gettime(0x0, 0x0)
r4 = fcntl$getown(r0, 0x9)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
capset(&(0x7f0000000080)={0x0, r4}, &(0x7f00000000c0)={0x8, 0x1, 0x8, 0x1, 0x3, 0x5})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19)

7.990431411s ago: executing program 4 (id=1488):
r0 = syz_io_uring_setup(0x57aa, 0x0, 0x0, &(0x7f0000000200))
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002640)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x17)
write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x573, 0x39e, {0xffffffffffffffff}, {<r2=>0x0}, 0x100000000078, 0x4})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=<r3=>0x0)
setreuid(r2, r3)
write$binfmt_aout(r1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000b00)=""/204, 0xcc}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000380)=""/128, 0x80}], 0x4}, 0x40000000)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001403)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000340)=0x4)
close(r5)
setitimer(0x2, 0x0, 0x0)

7.282060151s ago: executing program 2 (id=1493):
syz_usb_connect(0x0, 0x24, &(0x7f0000003380)={{0x12, 0x1, 0x0, 0xbd, 0x66, 0x2a, 0x10, 0xd49, 0x7010, 0xc90, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0x22, 0x88}}]}}]}}, 0x0)

6.484373764s ago: executing program 0 (id=1495):
syslog(0x3, &(0x7f0000000200), 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)={{0x12, 0x1, 0x0, 0x8e, 0x77, 0xe3, 0x40, 0x1b5c, 0x105, 0x1f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa4, 0xd3, 0x6f, 0x0, [], [{{0x9, 0x5, 0x4, 0x0, 0x400}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0)

5.494767012s ago: executing program 1 (id=1497):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x1, 0x8000000, 0x0, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

5.436255639s ago: executing program 2 (id=1498):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000040))
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x8, 0xe, 0x10, 0xc, "e38e4e4ecb53b6f161cdc39274a63d800b81f6672e357fbed50bf4947e4e466efa60087bc52047205b5df6824d9b0057d8d3d48d3cb9935736b3360b2ce464df", "916f5f1d44c7d657614bf1c485537d6cd44e3db777e8e35b1c60a1dc863b40ea", [0x1ff, 0x343e]})

5.06287343s ago: executing program 1 (id=1499):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1de)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xffffff7f}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000001c0)=0x2)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000009c0)={0x0, 0x9, 0x0, [0x5, 0x3, 0xc9d1, 0x350, 0x6], [0x4, 0x800, 0x4, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffd, 0x711, 0x3701, 0x2, 0x5, 0x8001, 0x973, 0x7, 0xd24, 0x0, 0x1, 0x18000000, 0x9, 0x3, 0x4, 0xbd6, 0x400, 0x2, 0xde, 0x6c0, 0x5, 0x0, 0x9, 0x2, 0x7, 0x1000, 0xfffffffffffffc1a, 0x10000000, 0x3, 0x9, 0x9, 0x2, 0x8, 0xa4, 0x9, 0x80000000, 0x0, 0x7, 0x1, 0x31f8, 0x1, 0x0, 0x10001, 0x7, 0x2, 0x5, 0x2, 0x3fd3, 0xffffffffffffffff, 0x37f8, 0x7fff, 0x1, 0x101, 0xf, 0x5, 0x6, 0x264, 0xffff, 0x7, 0x17, 0x5, 0x8, 0x9, 0xffffffffffffffc0, 0x61, 0x2, 0x3ff800, 0x8, 0x6b29, 0x3, 0x7, 0x6, 0x9, 0x400, 0x6, 0x7, 0xfffffffffffffff2, 0xffffffff, 0x7fffffff, 0x7fffffff, 0x3, 0x4, 0x2, 0x92, 0x7, 0x3, 0xffffffffffffffff, 0x6, 0x4, 0x10001, 0x5, 0x9, 0x5, 0x2, 0xac19, 0x8001, 0x4, 0xf0, 0xfffffffffffffffd, 0xff, 0x7aadfd8a, 0x6, 0xbd75, 0x4, 0x37, 0xeb, 0x5, 0xa, 0x9, 0x3, 0x4, 0x1, 0x7, 0x800, 0x6, 0x2]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/consoles\x00', 0x0, 0x0)
read$hiddev(r4, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/236, 0xec}], 0x1, 0x40000004, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x61)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x80000, 0x0)
io_submit(0x0, 0x0, 0x0)
unshare(0x6a040000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000650018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)

4.920358151s ago: executing program 0 (id=1500):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3)
write$binfmt_misc(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="4af190cd3a8e994aeb49549a67881dbc9904529968779df5092f4deba3d31bd110a0e5e62012e06046cbb2b024decf86021d0883ecc7f116606c01d34f7e27bde3503612c26399a96e71a9b253a2734f353cab5d990e9afebd9dbe3331"], 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4.39636502s ago: executing program 0 (id=1501):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x5800005, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100e9ffffffff06010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000f", @ANYRES32=r1, @ANYBLOB="0000000000000020b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90)

4.331203582s ago: executing program 0 (id=1502):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x400000f7f, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, 0x0, 0x1e)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000080), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000180)={0x6, 0x1, {0x3, 0x1, 0x9, 0x0, 0x5}, 0x7dd7})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7b2, &(0x7f0000000040)={{@my=0x1}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x541b, 0x0)

4.038313346s ago: executing program 0 (id=1503):
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0)
openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000002c0)={0x10000, 0x0, 0x4, r3, 0xb})
r4 = dup(r2)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000280)={@local})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r7, 0x5421, &(0x7f0000000240)=0x2)
connect$vsock_stream(r7, &(0x7f0000000000), 0x10)
listen(r7, 0x0)
syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0)

3.702394846s ago: executing program 2 (id=1505):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x0, 0xffffffff}, 0x1c)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000080)={0x1, 0x1, 0x8})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
dup(r2)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0xffff}]})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd27, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x4}}, 0x1c}}, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48c}]})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x13, r8, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r11 = accept$alg(r10, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000400)="410fc7e7b9ea4439a6d882a7dbefc6b11c924c45e5d01cab6e48c19039243e", 0x1f)
recvmmsg(r11, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}}], 0x1, 0x0, 0x0)
sendfile(r11, r9, 0x0, 0x1)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')

3.644013561s ago: executing program 1 (id=1506):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303", @ANYBLOB="acf2f78873af95a7040d98edc1351ce510d205ee41dc8ac2e8baf63617e2eb9b183d4e646ff2f16e6630ee250bb7e791194002564fd1e81d716e87db2cd9dff30cf17f2af7d619aac396e79dcffbea77cf3e090acdf792beb819f6e73546309cdffb5077dac09fe42e2a9db29260a07111fdbb0435abc40541713fb43bef0cb88392943a98552071f2570cab20aacab89baba839fc0ad13eed33b58aebf0850c05c10916ce0d65095aa1716b4bcd031ceefded855060102d559fce1fed0861ffb8b276693372bded60daa27843883aaacc", @ANYRES32=r0], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001000010000000000000000000000000a6fcc96daed51e228c69790644b820befae5005c1"], 0x28}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000940)={'#! ', '', [{0x20, '{\a+'}, {0x20, '\x00'}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}], 0xa, "2ca06d09642495da8e418502b0ffafe08b52efa153697df18621603742efead28e34ca906da516cf28ef19a6680fa237406f1a3b7d9afe71ed051df658ea21622aca0c387e922858904b1e03a59c567962f72debfc917e9cff3adcde499807aa967ff15596d7de2489a0c76d892363b3d145fad47f13d8c4f1dc2206aff13408ab60ba8f702b02e49705e1dbdab8636c642582e71dc3f50fb9ba21f3b49678b5f18d5abb8e55e02fee16a601bf6178d5dbed96cfdf406fd6e84c6cb2798995ed0471138d179dbfca295bb1f61cb937800018809abf747a7404ab5760d2dadc43d7c693918a2fe2e3e34b044790bd49c4d8131c387482303f298aefeb2902da2c6899c50b541e711bf949857edb6913d6b719036ebca736c7c276ee08dfa1ceede37790c7673114f58976c5e3d06ffb67a0110c8a14cfeace241f63272cfdc5f54806afe18d3f88f1591441dc76889cf650230ad71d9b848cbf92930ce74d09595c9e1e0b080b3bb6c3544386b26dec8dd362f423d476fdfb12b0112ff9838cd00bca50905087ec63566e79e6b6c9134f4e3564e603b492cb1da6000c632a37d525bbd7cc7b0fdeaf34e776643e907abcd661faf3ddc9eb8ee4b1fc105fab389d2f3e2d3590a49d3d50e17e4b9598c974fa61e25a4bb0a41a5f9b5256e8e70b1ee558c0382f91"}, 0x212)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0), 0x0, 0x8, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0cc}, 0x0)
ioctl$int_out(r4, 0x2, &(0x7f0000000380))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setns(0xffffffffffffffff, 0x68000080)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000180)=0x5, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000003c0)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3, 0x1, 0x0, 0x0, 0x800}, 0x20)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0)
syz_emit_ethernet(0x6f, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000011fe7e93f4dbdab2a7453b12feb9b1a8cc461b54b5dde6c60ad88b694726c9a005d4c75c3655a609ed40f8d200f264adf3ca0e558c235f33ef9be0130e56790649c75920a9692316b6ae2ce0479bde43aa75bc80d2dfd42efe578d159eb31899ea0b"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000004c0)=ANY=[])
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @private=0xa010102}, {0x6}, 0xa, {0x2, 0x4e21, @private=0xa010101}, 'batadv_slave_1\x00'})
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000300)={0x50, 0xffff, 0x0, {}, {}, @period={0x59, 0x80, 0x401, 0x5, 0x293, {0x100, 0x2, 0x9, 0x3}, 0x2, &(0x7f0000000340)=[0x7ff, 0x0]}})
close_range(r0, 0xffffffffffffffff, 0x0)

2.941877948s ago: executing program 3 (id=1507):
syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xa8, 0x63, 0x7a, 0x10, 0x8086, 0xb63, 0xa506, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xf9, 0x7, 0x1, 0x31, 0x73, 0xed, 0xff, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x9, 0xe6}}]}}]}}]}}, 0x0)

2.716122348s ago: executing program 4 (id=1508):
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0xd0009412, &(0x7f00000001c0)="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")
r0 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
syz_emit_ethernet(0xffffffffffffffaf, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000000000000000008004500003000000000002f907800000000ffffffff0000883e001c9e78020700"/62], 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000680)={@broadcast, @broadcast, @void, {@canfd={0xd, {{0x1, 0x0, 0x1, 0x1}, 0x1d, 0x2, 0x0, 0x0, "d5393e0b57124c5fa73534420e61187a6907a72d5780ebd1ce0f98166ac62baf74b1512d16f23cab2b3ca23303c2a11e6ae450336cbd045894445c5bd1186d2a"}}}}, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0xffff, 0x0)
write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/155, 0x9b}, {&(0x7f0000000540)=""/197, 0xc5}], 0x2)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40096101, &(0x7f0000001040))
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="400d5f0000005f046c9c39885802f2fb06be48b3a606a5829c6cea1941735d393c40c40581aa73f9f511aa9b3b5f6740f748ef4679990139ea7d0b017a75f73ec274fca8a48c12e917703ef1ab9bf016c861ec4d533816a7eda8e442ce318bd518328726fc643a92848afded283e753c3bd6f9d270efad3c4ce35e00eb0e44ec75c4ee6630d8"], &(0x7f0000000640)=ANY=[@ANYRES32=r7], &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x1}]}}, 0x0}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="002023000000ba4176948d54d6768be67fb6be3f96ff1252b427091a41ab9e1c1cb9d1d7e3b5f24541"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1d}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000340)=ANY=[@ANYBLOB="20018c0000001dc472a99557e6e8f800000000c2e63e89d17334002dc2216b31ae5196bf733c13d73d1c444c27d618270b5d906ec1a06ad81644ba9a8c68f69247d611cfd98bdaf3d23cf75f586b00993d67a6501d79488842e64d74df76f7dba7ae1a30807f8636a4751163f5923f0fc2859b51b615fc790902dae4b7a913bf3b12c00292e28c9b00"/146], &(0x7f0000000440)={0x20, 0x3, 0x1, 0xe5}})
syz_usb_control_io$hid(r3, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)

2.20024491s ago: executing program 3 (id=1509):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000037c0), 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) (async)
openat$vcs(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xe980, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xe980, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2a2081, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, 0x0)
syz_open_dev$video(&(0x7f0000000780), 0x8000, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x19)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000007c0)={0xa, @vbi})
r5 = syz_pidfd_open(0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040d62017cb00000000000109022400010000000009040000020300000009210000000122"], 0x0) (async)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040d62017cb00000000000109022400010000000009040000020300000009210000000122"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0) (async)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0xa, "86f70837"}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0xb, &(0x7f00000010c0)=ANY=[], 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async)
write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00')
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)

1.608107742s ago: executing program 3 (id=1510):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x42100, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
clock_gettime(0x0, 0x0)
r4 = fcntl$getown(r0, 0x9)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
capset(&(0x7f0000000080)={0x0, r4}, &(0x7f00000000c0)={0x8, 0x1, 0x8, 0x1, 0x3, 0x5})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19)

1.357792417s ago: executing program 1 (id=1511):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3)
write$binfmt_misc(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="4af190cd3a8e994aeb49549a67881dbc9904529968779df5092f4deba3d31bd110a0e5e62012e06046cbb2b024decf86021d0883ecc7f116606c01d34f7e27bde3503612c26399a96e71a9b253a2734f353cab5d990e9afebd9dbe3331"], 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000000000030000000000000000000000000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

1.071313703s ago: executing program 1 (id=1512):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x4, r2})

604.3553ms ago: executing program 0 (id=1513):
syz_usb_connect(0x5, 0x2d2, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYBLOB="d7cff95db63929cdbc57028db05a03fd2a05818b97817303bf07b55ae6ec21198b41c3aea1df6f1098b1333ac862c007ca554ae2778e883d5df710817778623822756483055caee2685dbc252b9e665a67a2ebf4450e6bc66f396ace2a1c25ee3f0e756ba33b15fdbce872d00bff114b7a70627722b7138f5145c683c6", @ANYRES8=0x0], 0x0)
syz_usb_connect$uac1(0x5, 0xd5, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0xd8, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xff}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x3, 0xe0, 0xff7f, 0x5, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x1, 0x1, 0x6, 0x0, 0xbb}, @mixer_unit={0x7, 0x24, 0x4, 0x2, 0x7, "069d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x6, 0x14, "", "11"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xa, 0x2}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x81, 0x6, "804fd4e416"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x99, 0x72, 0x80, {0x7, 0x25, 0x1, 0x2, 0x52, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xc0, 0x4, 0x4, 0x0, "2f82", "dcd028"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x7}, @as_header={0x7, 0x24, 0x1, 0x6d, 0x9, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xc5, 0x3, 0xff, 0xfc, "c92669", "ef94"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x47, 0x6, {0x7, 0x25, 0x1, 0x80, 0x5, 0x80c}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x4, 0x4, 0x8, 0x20, 0x1}, 0xcb, &(0x7f0000000140)={0x5, 0xf, 0xcb, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x0, 0x0, 0x5, [0xc000, 0xff00f0, 0xc000, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x160, 0x81, 0x2, 0xe, 0x9}, @ss_cap={0xfffffffffffffcc8, 0x10, 0x3, 0x0, 0x5, 0x8, 0x9}, @generic={0x88, 0x10, 0x2, "7d4b8734940d19895a7d9ffabcdeb834a3d128ab8baa900ded2cdcbd300109a9957611268ee7c08e21ede36dcffe8b8b9a7468af02c2060a79bde1d6d3f7899edce03c52bc877c124cbb2d1c29be1fb0a974fb06464e023843e7aa8d8cda086e1f100a761cb700f2316bd40d9b72790d9c7080bdde0df7954a6fe733edc6a31d09cc0b100c"}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x410}}, {0x6e, &(0x7f0000000280)=@string={0x6e, 0x3, "1d03d99a5ce7bd04fbf52c06100a61a75a5316bd1fbc6a6a7a65708695499b0cc3cf2dfafa00241e83fca546fb28243b6fa0db858fd832d2d2f43eb78a76ce0d3ca50a2666100e396685e908131878a5ed65b8a2a256b10b561e97a105cd1d825c4e486ef3adaa8aa1fbbe9f"}}, {0x72, &(0x7f00000004c0)=@string={0x72, 0x3, "09644e0ce6bc7414d3c27859348b2f1bf2a5f5b6dee3078923d91d6cebe37170cbb8b2bda8bf8f02c42799002ade8b3e3377c2a4f69aa1fa7d4fea49930c1b9496f4042d904ad595948082132c7e3b7b4b792ac2381d5c7fe6bcd6c6b9798bb22d89321da0de75c56c2f02dc9dd19588"}}, {0x8b, &(0x7f0000000540)=@string={0x8b, 0x3, "1ab6e77f7f0031a942167b3ef8c1ed09fd8e2f2ad31a583d022e05a4e63564e4d7a06c543a917ceae25b002d6b87d17f0d05af8cc540cdca4566188ed5a43f57be0971797729283042d881c52927e994b2ecdcd1c96fbacef1c235112502945ba4d6f3745396b978959941c441e06a78f4a4e82c74195efbfbcf7368c4f078c365b50db20e9adc9887"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x425}}, {0xea, &(0x7f0000000600)=@string={0xea, 0x3, "4804cea0a9c7e5466419529f37921f8adde972825a2406d1c50b5e29a28c07ca2d4c827bbb5142d3c803ff21d4b080389347ea2bf960d205126acc413c14450ff278f88a64ccaa2c0f3ab3f911a958134f75d155aac9c2afdf87444b929bfb79a39b8ffa5c4ab35db834c32a8d0a51839d310c853347a6ae78c4619a6c089a554e7d8cbd44b67f2a40bbc7f782ba6f06fecba3f61ae36a57616eb2763192cd887ef9b02c9356560774b98909c2f5b03d189f483bea55708eaa8ca432892add7e14e9a235ccb2583ea4361e7ede22d410be8f12d8d8becd461daa6c9409f617ef077d0fdf59b29c1a"}}, {0x5a, &(0x7f0000000700)=@string={0x5a, 0x3, "f09a15328523bfa355238a25e4ace32de01b7e38a4e477a54bf2d0e831934085c1c3137f442df3db1967c0ccf4f284720a875e41685f408f97c910f82b1b6c620811f1d24165fb21a8b6fa766959b12d2ace17d9991508ae"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x500a}}]})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc)

558.244662ms ago: executing program 3 (id=1514):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000bc0)=@newsa={0x184, 0x10, 0x0, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote}, @in6=@remote}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'vmac(tnepres-generic)\x00'}}}]}, 0x184}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x107440, 0x52)
openat(r2, &(0x7f0000000040)='./file0\x00', 0x80000, 0xa)

379.799012ms ago: executing program 1 (id=1515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x60bcc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x8c0}, 0x4001)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1b4, 0x0, 0x408, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9c13}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x228b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa0a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x880}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x103}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1b4}}, 0x4000000)
ioctl$CAPI_INSTALLED(r2, 0x80024322)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f00000004c0)={0x11f8, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}, @NL80211_ATTR_IE={0x102a, 0x2a, [@chsw_timing={0x68, 0x4, {0x9799, 0x2}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0xb2b, "5ddf6cb29333", @short="8a1927b8800ad2ec"}}, @measure_req={0x26, 0x1003, {0x9, 0x7, 0x2, "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"}}, @chsw_timing={0x68, 0x4, {0x8}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEYS={0xd8, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x14, 0x4, "bce6ec3ee22e2c33a22b27da7b98c040"}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "17f054d84e"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d38525a60e31c1b88693d2f88e"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xf, 0x4, "54c3b774a8a24961ab7785"}, @NL80211_KEY_TYPE={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x74, {0xd9, 0x1, "d1f446af3efb3d3327bf01f4985c1e9b", "1aa086e3932307f6b39d1885e1b389db733a20c00b7c2196fbfdb8d56892dc5b", "f4c829df81afc57760c74128c6dfccd91af4bff9ba6e850cb9c38e81ff34ff60", [{0x4, 0x20, "e51ba6e43fe6356a8b9c4118abee85e388b9ebb66871335715340f2209728992"}]}}, @dsss={0x3, 0x1, 0x84}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @erp={0x2a, 0x1, {0x1}}, @mic={0x8c, 0x18, {0x30, "d2b3e412f616", @long="85a1a8866642605422d706a993ad967e"}}, @cf={0x4, 0x6, {0x7, 0xad, 0x2}}, @dsss={0x3, 0x1, 0xb1}, @channel_switch={0x25, 0x3, {0x1, 0xab, 0x7f}}]}]}, 0x11f8}, 0x1, 0x0, 0x0, 0x20000}, 0x10)
recvmmsg(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001740)=""/202, 0xca}, {&(0x7f0000001840)=""/203, 0xcb}, {&(0x7f0000001940)=""/191, 0xbf}, {&(0x7f0000001a00)=""/176, 0xb0}, {&(0x7f0000001ac0)=""/92, 0x5c}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/203, 0xcb}], 0x7, &(0x7f0000002cc0)=""/4096, 0x1000}, 0x4}], 0x1, 0x40000000, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003d40), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x44, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x80}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2c}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10001}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24040000)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003e80), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000003ec0)={0x8})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004440)={r2, 0xe0, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000004180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000041c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0x47, &(0x7f0000004240)=[{}], 0x8, 0x10, &(0x7f0000004280), &(0x7f00000042c0), 0x8, 0x52, 0x8, 0x8, &(0x7f0000004300)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000004500)={0xc, 0x13, &(0x7f0000003f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000003fc0)='syzkaller\x00', 0xfffffff8, 0xff, &(0x7f0000004000)=""/255, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000004140)={0x5, 0x9, 0xf, 0x8d}, 0x10, r7, r2, 0x7, 0x0, &(0x7f0000004480)=[{0x3, 0x1, 0x5, 0x6}, {0x3, 0x4, 0x5, 0x2}, {0x2, 0x2, 0xf, 0x3}, {0x1, 0x1, 0xe, 0x1}, {0x2, 0x3, 0x3, 0xb}, {0x2, 0x4, 0x7, 0x1}, {0x1, 0x3, 0x2, 0x5}], 0x10, 0x7fffffff}, 0x90)
r8 = mq_open(&(0x7f00000045c0)='ib\x00', 0x803, 0x4, &(0x7f0000004600)={0x43, 0xffffffffffffffff, 0xfff, 0x8000000000000001})
clock_gettime(0x0, &(0x7f0000004700)={<r9=>0x0, <r10=>0x0})
mq_timedsend(r8, &(0x7f0000004640)="43af036e87dce527b2c4f7dc4fb64da4e62aa40c3aea1b778e3190f65eca8576e67d62369080aec958e23de10bc399ea6bc2a518ef3371680e5dcec97ac94cf980e1c372ded4924c56f8ccfc4a4ff076c535c2a781aabed0791a5a337bd63511d54a8b19a7947b388e425edddc6694cc58a6995714481052e6b304d956098d5d8b9edc830f9b0d26f077d9cea00567007e6873", 0x93, 0xf3e6, &(0x7f0000004740)={r9, r10+10000000})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000004780)={{0x0, 0x1}, {0x3, 0x7}, 0xffff, 0x1, 0x6})
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000004840), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000004900)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x2018000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004880)={0x1c, r11, 0x100, 0x6eb, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}}, 0x20000000)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004980), r2)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000004d00)={&(0x7f0000004940), 0xc, &(0x7f0000004cc0)={&(0x7f00000049c0)={0x2fc, r12, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb96}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2ffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "e220c001fe3835f461918f5ddd3a0f299ee60cc4790022be8b6199680ad6c493efef21f6aefc21db8c94118e77aeb2901725a22026d3b8f10e4bbfa3011b4b2b524df09e696f53feb0adeab23545f7cdf4d55ac9a79fb21550945654a9ec0c36a40502f1fc433bdac7932c6e606ddac78aa538171d1d5e8116fcf26316e2fcf5235b22229fb79ad984971b2645ecf6e538b3b96b047ff8eae8c1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa80f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9fb8dcbdcc50ea6496a08499f4d033d1aaa9fb0dab7ca94f60241bf322e91450d300112f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "f863d376bd38b6a54f8d6ed1785a08661688fd09dc9cdf2df4985779cf5cac44"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_ID={0x7f, 0x3, "b20184ec15674713ff8321f5bfe6b9be89133589d1aa15e1570b070d21ced54256fb9a550d5fc1ccdf2002d2161f64f029c012247c47361dbc6e12818e4fba7f31145df116c3be84282587b51ab956469a4c832896fc2d9594e601ce108cb2bb2b134fa12fbb94d2dbb402eeda6e8e0077807877f82d1825b78a01"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x290}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x48d0}, 0x4044800)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000004d40))
dup(r6)
unshare(0x40280)

180.39393ms ago: executing program 3 (id=1516):
r0 = socket$inet(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f00000014c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="384ab3a1", 0x4}], 0x1, 0x0, 0x0, 0x300}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="14000000000000000000000001000000fbffffff0000000014000000000000ce89"], 0xe8}}], 0x2, 0x4040010)

73.846607ms ago: executing program 2 (id=1517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x42100, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
clock_gettime(0x0, 0x0)
r4 = fcntl$getown(r0, 0x9)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
capset(&(0x7f0000000080)={0x0, r4}, &(0x7f00000000c0)={0x8, 0x1, 0x8, 0x1, 0x3, 0x5})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19)

0s ago: executing program 3 (id=1518):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x1000000)

kernel console output (not intermixed with test programs):

[  409.746826][T10908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.773073][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.781118][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.781129][ T5314] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  409.788307][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.824466][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.873167][ T5314] usb 2-1: device descriptor read/8, error -71
[  409.939697][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.946914][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.107584][T11105] netlink: 'syz.2.1130': attribute type 138 has an invalid length.
[  410.129613][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'.
[  410.144114][ T5314] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  410.207300][T10908] veth0_vlan: entered promiscuous mode
[  410.227100][ T5314] usb 2-1: device descriptor read/8, error -71
[  410.267577][T10908] veth1_vlan: entered promiscuous mode
[  410.356274][ T5314] usb usb2-port1: unable to enumerate USB device
[  410.381239][T10913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.492175][T10908] veth0_macvtap: entered promiscuous mode
[  410.568458][T10908] veth1_macvtap: entered promiscuous mode
[  410.697851][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.739066][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.771274][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.803988][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.813845][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.878979][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.919282][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  410.960053][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.001252][T10908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.052964][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.084119][  T940] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  411.116088][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.144000][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.164337][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.180543][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.224111][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.294137][  T940] usb 1-1: Using ep0 maxpacket: 8
[  411.301291][  T940] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  411.304080][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.311601][  T940] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  411.339992][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.371508][T10908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.399383][  T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.414926][  T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.457534][  T940] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  411.470697][T10908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.494159][T10908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.503003][  T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.538486][T10908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.550649][  T940] usb 1-1: config 0 descriptor??
[  411.555836][T10908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.632310][T10913] veth0_vlan: entered promiscuous mode
[  411.719061][T10913] veth1_vlan: entered promiscuous mode
[  411.987176][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.019884][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.037386][T10913] veth0_macvtap: entered promiscuous mode
[  412.056729][  T940] usbhid 1-1:0.0: can't add hid device: -71
[  412.062772][  T940] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  412.126931][T10913] veth1_macvtap: entered promiscuous mode
[  412.136874][  T940] usb 1-1: USB disconnect, device number 51
[  412.144529][ T5284] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  412.166394][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.205945][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.349704][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.350096][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.383772][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.394234][ T5284] usb 3-1: Using ep0 maxpacket: 32
[  412.394391][ T9125] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  412.426279][ T5284] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  412.445020][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.461348][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.467989][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.501706][ T5284] usb 3-1: Product: syz
[  412.511917][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.517387][ T5284] usb 3-1: Manufacturer: syz
[  412.538409][ T5284] usb 3-1: SerialNumber: syz
[  412.554176][ T9125] usb 2-1: device descriptor read/64, error -71
[  412.565300][ T5284] usb 3-1: config 0 descriptor??
[  412.568715][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.643943][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.693590][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.731563][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.773260][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.813994][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.834080][ T9125] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  412.856110][T10913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.936415][T11133] tipc: Enabling of bearer <udp:m0> rejected, failed to enable media
[  412.961466][T11148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.009016][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.034293][ T9125] usb 2-1: device descriptor read/64, error -71
[  413.093931][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.133780][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.180718][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.221491][ T9125] usb usb2-port1: attempt power cycle
[  413.247860][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.262317][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.273780][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.289573][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.303404][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.321777][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.350592][T11148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.368382][T10913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.436657][ T1849] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  413.440705][T10913] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.454288][ T5284] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[  413.470517][T10913] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.481161][ T5284] a0 85 c5 6a a7 b0 b2 6c 
[  413.481251][ T5284] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  413.495863][T10913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.495945][T10913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.665313][ T9125] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  413.746423][ T9125] usb 2-1: device descriptor read/8, error -71
[  413.779665][T11160] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1098'.
[  413.823192][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.882966][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.972491][  T940] usb 3-1: USB disconnect, device number 51
[  414.054115][ T9125] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  414.098531][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.142855][ T9125] usb 2-1: device descriptor read/8, error -71
[  414.180404][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.361398][ T9125] usb usb2-port1: unable to enumerate USB device
[  414.379478][ T1849] usb 4-1: unable to get BOS descriptor or descriptor too short
[  414.438995][ T1849] usb 4-1: unable to read config index 0 descriptor/start: -71
[  414.478421][ T1849] usb 4-1: can't read configurations, error -71
[  415.412156][T11190] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1139'.
[  415.647039][ T1849] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  415.809442][T11203] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1144'.
[  415.854067][ T1849] usb 4-1: Using ep0 maxpacket: 8
[  415.876230][ T1849] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  415.932553][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.956208][T11204] fuse: Unknown parameter '0x000000000000000d'
[  415.957684][ T1849] usb 4-1: config 0 descriptor??
[  416.190335][T11186] ebt_limit: overflow, try lower: 0/0
[  416.621264][T11221] netlink: 'syz.2.1147': attribute type 6 has an invalid length.
[  416.648697][T11221] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1147'.
[  417.152487][T11236] openvswitch: netlink: Port 402653184 exceeds max allowable 65535
[  417.180810][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  417.528421][T11240] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1153'.
[  417.965043][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.351525][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.512370][ T1849] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  418.532924][ T1849] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  418.604604][ T1849] asix 4-1:0.0: probe with driver asix failed with error -71
[  418.684477][ T1849] usb 4-1: USB disconnect, device number 33
[  418.771698][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.983193][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.281718][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  419.298992][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  419.317842][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  419.350708][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  419.359793][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  419.368198][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  419.587241][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'.
[  419.730229][ T1105] bridge_slave_1: left allmulticast mode
[  419.776648][ T1105] bridge_slave_1: left promiscuous mode
[  419.815443][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.854977][ T1105] bridge_slave_0: left allmulticast mode
[  419.860703][ T1105] bridge_slave_0: left promiscuous mode
[  419.875606][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.844055][  T940] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  420.994044][  T940] usb 5-1: device descriptor read/64, error -71
[  421.229634][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.280707][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.293676][ T1105] bond0 (unregistering): Released all slaves
[  421.304151][  T940] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  421.430458][ T5239] Bluetooth: hci1: command tx timeout
[  421.495090][  T940] usb 5-1: device descriptor read/64, error -71
[  421.654457][  T940] usb usb5-port1: attempt power cycle
[  422.104146][  T940] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  422.160653][  T940] usb 5-1: device descriptor read/8, error -71
[  422.167087][ T1105] hsr_slave_0: left promiscuous mode
[  422.219992][ T1105] hsr_slave_1: left promiscuous mode
[  422.312784][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.336856][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.360901][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.393969][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.444131][  T940] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  422.505177][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  422.548282][ T1105] veth1_macvtap: left promiscuous mode
[  422.556890][  T940] usb 5-1: device descriptor read/8, error -71
[  422.573086][ T1105] veth0_macvtap: left promiscuous mode
[  422.595694][ T1105] veth1_vlan: left promiscuous mode
[  422.612444][ T1105] veth0_vlan: left promiscuous mode
[  422.678617][  T940] usb usb5-port1: unable to enumerate USB device
[  422.913599][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  422.925451][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  422.940020][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  422.949558][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  422.964326][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  422.975148][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  423.504129][ T5239] Bluetooth: hci1: command tx timeout
[  424.900377][ T1105] team0 (unregistering): Port device team_slave_1 removed
[  425.028549][ T5239] Bluetooth: hci2: command tx timeout
[  425.038240][ T1105] team0 (unregistering): Port device team_slave_0 removed
[  425.583984][ T5239] Bluetooth: hci1: command tx timeout
[  427.114236][ T5239] Bluetooth: hci2: command tx timeout
[  427.195707][   T25] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  427.410025][T11280] chnl_net:caif_netlink_parms(): no params data found
[  427.417059][   T25] usb 5-1: Using ep0 maxpacket: 16
[  427.430476][   T25] usb 5-1: config index 0 descriptor too short (expected 45033, got 36)
[  427.445986][   T25] usb 5-1: config 42 has too many interfaces: 241, using maximum allowed: 32
[  427.471125][   T25] usb 5-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config
[  427.518040][   T25] usb 5-1: config 42 has 1 interface, different from the descriptor's value: 241
[  427.574986][   T25] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  427.588982][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.607074][   T25] usb 5-1: Product: syz
[  427.618233][   T25] usb 5-1: Manufacturer: syz
[  427.628538][   T25] usb 5-1: SerialNumber: syz
[  427.664032][ T5239] Bluetooth: hci1: command tx timeout
[  427.760931][   T25] peak_usb 5-1:42.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[  427.775050][   T25] peak_usb 5-1:42.0: unable to read PCAN-USB serial number (err -22)
[  427.855044][   T25] peak_usb 5-1:42.0: probe with driver peak_usb failed with error -22
[  428.075365][T11368] xt_CONNSECMARK: invalid mode: 0
[  428.197309][T11280] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.254164][T11280] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.284211][T11280] bridge_slave_0: entered allmulticast mode
[  428.301459][T11280] bridge_slave_0: entered promiscuous mode
[  428.329892][T11328] chnl_net:caif_netlink_parms(): no params data found
[  428.482225][T11280] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.514168][T11280] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.552358][T11280] bridge_slave_1: entered allmulticast mode
[  428.588377][T11280] bridge_slave_1: entered promiscuous mode
[  428.776429][    T8] usb 5-1: USB disconnect, device number 39
[  429.113571][T11280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.195059][ T5239] Bluetooth: hci2: command tx timeout
[  429.210594][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.239859][T11280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.298633][T11328] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.328724][T11328] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.351544][T11328] bridge_slave_0: entered allmulticast mode
[  429.381397][T11328] bridge_slave_0: entered promiscuous mode
[  429.509399][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.603026][T11409] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.1194'.
[  429.603496][T11328] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.652722][T11328] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.683425][T11328] bridge_slave_1: entered allmulticast mode
[  429.711891][T11328] bridge_slave_1: entered promiscuous mode
[  429.760562][T11280] team0: Port device team_slave_0 added
[  429.778870][T11280] team0: Port device team_slave_1 added
[  429.875878][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.990112][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  430.358615][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.458850][T11328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.673672][T11280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.701453][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.727397][    C1] vkms_vblank_simulate: vblank timer overrun
[  430.777204][T11280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.835412][T11328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.894011][    T8] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  430.942789][T11280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.959880][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.997912][T11280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.095676][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  431.106808][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  431.125478][    T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  431.135031][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  431.170123][    T8] usb 5-1: SerialNumber: syz
[  431.170283][T11328] team0: Port device team_slave_0 added
[  431.264764][ T5239] Bluetooth: hci2: command tx timeout
[  431.295194][T11328] team0: Port device team_slave_1 added
[  431.509703][T11441] xt_CONNSECMARK: invalid mode: 0
[  431.677932][    T8] usb 5-1: 0:2 : does not exist
[  431.691576][    T8] usb 5-1: unit 5 not found!
[  431.769201][    T8] usb 5-1: USB disconnect, device number 40
[  431.821955][ T6043] udevd[6043]: setting mode of /dev/bus/usb/005/040 to 020664 failed: No such file or directory
[  431.842990][T11328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.853283][ T6043] udevd[6043]: setting owner of /dev/bus/usb/005/040 to uid=0, gid=0 failed: No such file or directory
[  431.863940][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.878176][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  431.902467][T11328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.947734][T11280] hsr_slave_0: entered promiscuous mode
[  431.964058][T11280] hsr_slave_1: entered promiscuous mode
[  431.991082][T11280] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  432.003623][T11280] Cannot create hsr debugfs directory
[  432.028577][T11328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.046194][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.101749][T11328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.116106][ T1105] bridge_slave_1: left allmulticast mode
[  432.121795][ T1105] bridge_slave_1: left promiscuous mode
[  432.134325][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.144839][ T1105] bridge_slave_0: left allmulticast mode
[  432.150484][ T1105] bridge_slave_0: left promiscuous mode
[  432.162645][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.496094][T11451] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  433.358821][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.388825][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.401788][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  433.416151][ T1105] bond0 (unregistering): Released all slaves
[  433.686877][T11462] loop0: detected capacity change from 0 to 7
[  433.703174][T11462] Dev loop0: unable to read RDB block 7
[  433.714592][T11462]  loop0: unable to read partition table
[  433.720638][T11462] loop0: partition table beyond EOD, truncated
[  433.753158][T11462] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  433.753158][T11462] 
) failed (rc=-5)
[  433.863700][T11328] hsr_slave_0: entered promiscuous mode
[  433.879942][T11328] hsr_slave_1: entered promiscuous mode
[  433.902159][T11328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  433.935074][T11328] Cannot create hsr debugfs directory
[  434.370531][ T1105] hsr_slave_0: left promiscuous mode
[  434.419790][ T1105] hsr_slave_1: left promiscuous mode
[  434.444528][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  434.464892][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  434.502988][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.548471][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.625786][ T1105] veth1_macvtap: left promiscuous mode
[  434.645796][ T1105] veth0_macvtap: left promiscuous mode
[  434.663639][ T1105] veth1_vlan: left promiscuous mode
[  434.679577][ T1105] veth0_vlan: left promiscuous mode
[  434.836615][    T8] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  435.254601][T11487] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1212'.
[  435.582535][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  435.602328][    T8] usb 4-1: unable to read config index 0 descriptor/start: -71
[  435.614400][    T8] usb 4-1: can't read configurations, error -71
[  436.312750][ T1105] team0 (unregistering): Port device team_slave_1 removed
[  436.402639][ T1105] team0 (unregistering): Port device team_slave_0 removed
[  436.553993][    T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  436.738120][    T8] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  436.763287][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.832675][    T8] usb 4-1: Product: syz
[  436.839195][    T8] usb 4-1: Manufacturer: syz
[  436.847818][    T8] usb 4-1: SerialNumber: syz
[  436.866450][    T8] usb 4-1: config 0 descriptor??
[  437.087445][    T8] hso 4-1:0.0: Failed to find BULK IN ep
[  437.120397][    T8] usb-storage 4-1:0.0: USB Mass Storage device detected
[  437.210388][ T5234] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  437.302561][T11495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.333703][T11495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.398226][   T25] usb 4-1: USB disconnect, device number 35
[  437.451721][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 105, changing to 10
[  437.480647][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18425, setting to 1024
[  437.506515][ T5234] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  437.515956][ T5234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.535236][ T5234] usb 5-1: config 0 descriptor??
[  437.541286][T11497] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  437.783494][ T5234] usbhid 5-1:0.0: can't add hid device: -71
[  437.819226][ T5234] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  437.871534][ T5234] usb 5-1: USB disconnect, device number 41
[  438.094742][T11502] netlink: 'syz.3.1220': attribute type 2 has an invalid length.
[  438.456357][  T940] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  438.650635][T11517] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  438.674012][  T940] usb 4-1: Using ep0 maxpacket: 32
[  438.690507][  T940] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  438.713041][  T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.753480][  T940] usb 4-1: config 0 descriptor??
[  438.786504][  T940] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state
[  438.797191][  T940] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  438.803658][  T940] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  438.863748][T11517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1222'.
[  438.976047][   T25] usb 4-1: USB disconnect, device number 36
[  439.412566][T11280] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  439.547839][T11280] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  439.561009][T11529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1223'.
[  439.621098][T11280] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  439.661557][T11280] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  440.096183][T11541] loop0: detected capacity change from 0 to 7
[  440.149323][T11541] Dev loop0: unable to read RDB block 7
[  440.196203][T11541]  loop0: unable to read partition table
[  440.211512][T11541] loop0: partition table beyond EOD, truncated
[  440.236878][T11541] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  440.236878][T11541] 
) failed (rc=-5)
[  440.367425][T11328] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  440.402896][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  440.409617][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  440.455311][T11328] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  440.517678][T11328] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  440.590362][T11328] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  440.651626][T11280] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.759151][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  440.791008][T11280] 8021q: adding VLAN 0 to HW filter on device team0
[  440.868388][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.875614][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.997874][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.005064][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.300392][T11328] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.410378][T11280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.463085][T11328] 8021q: adding VLAN 0 to HW filter on device team0
[  441.510677][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.517895][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.610609][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.617829][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.880396][T11328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  441.948186][T11328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  442.081657][T11280] veth0_vlan: entered promiscuous mode
[  442.188915][T11280] veth1_vlan: entered promiscuous mode
[  442.332064][T11328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.431242][T11280] veth0_macvtap: entered promiscuous mode
[  442.476291][T11280] veth1_macvtap: entered promiscuous mode
[  442.834556][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  442.868935][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.889790][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  442.924393][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.970894][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.033314][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.054315][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.066227][T11583] loop0: detected capacity change from 0 to 7
[  443.091324][T11583] Dev loop0: unable to read RDB block 7
[  443.094035][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.100765][T11583]  loop0: unable to read partition table
[  443.125352][T11280] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.141911][T11583] loop0: partition table beyond EOD, truncated
[  443.188715][T11585] unknown channel width for channel at 909000KHz?
[  443.197241][T11328] veth0_vlan: entered promiscuous mode
[  443.209906][T11583] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  443.209906][T11583] 
) failed (rc=-5)
[  443.238627][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.289230][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.334064][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.353938][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.388695][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.442287][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.484980][T11280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.522381][T11280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.586620][T11280] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.638684][T11328] veth1_vlan: entered promiscuous mode
[  443.663480][T11280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.704250][T11280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.734429][T11280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.743212][T11280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.940196][T11328] veth0_macvtap: entered promiscuous mode
[  444.023238][T11328] veth1_macvtap: entered promiscuous mode
[  444.127654][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.149208][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.159360][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.170151][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.203150][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.226544][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.238940][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.251008][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.263523][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.295234][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.342388][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.364476][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.387263][T11328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.541567][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.552264][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.564510][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.589428][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.631260][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.640436][T11613] fuse: Bad value for 'fd'
[  444.686261][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.724035][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.764618][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.796076][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.824941][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.873950][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.904029][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.937114][T11328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.010424][T11328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.042926][T11328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.063663][T11328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.086092][T11328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.383844][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.393362][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.608742][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.630207][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.610570][    T8] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  446.774489][T11654] netlink: 'syz.1.1247': attribute type 2 has an invalid length.
[  446.843479][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'.
[  446.853497][    T8] usb 1-1: Using ep0 maxpacket: 8
[  446.878309][    T8] usb 1-1: config 1 interface 0 has no altsetting 0
[  446.901759][    T8] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0a, bcdDevice= 0.40
[  446.981752][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.012166][    T8] usb 1-1: Product: syz
[  447.038314][    T8] usb 1-1: Manufacturer: syz
[  447.073468][    T8] usb 1-1: SerialNumber: syz
[  447.174111][ T5284] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  447.344429][ T5285] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  447.404042][ T5284] usb 2-1: Using ep0 maxpacket: 8
[  447.438518][ T5284] usb 2-1: config 0 has an invalid interface number: 7 but max is 0
[  447.472729][ T5284] usb 2-1: config 0 has no interface number 0
[  447.499592][ T5284] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  447.540080][ T5284] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  447.582591][ T5284] usb 2-1: config 0 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  447.596103][ T5285] usb 3-1: too many configurations: 25, using maximum allowed: 8
[  447.653435][ T5285] usb 3-1: config 0 has no interfaces?
[  447.687875][ T5284] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=14.f8
[  447.718140][ T5285] usb 3-1: config 0 has no interfaces?
[  447.728376][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.752310][    T8] usbhid 1-1:1.0: can't add hid device: -71
[  447.761594][ T5285] usb 3-1: config 0 has no interfaces?
[  447.779317][ T5284] usb 2-1: Product: syz
[  447.784939][    T8] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  447.797859][ T5284] usb 2-1: Manufacturer: syz
[  447.802485][ T5284] usb 2-1: SerialNumber: syz
[  447.814242][ T5285] usb 3-1: config 0 has no interfaces?
[  447.824932][    T8] usb 1-1: USB disconnect, device number 52
[  447.847710][ T5284] usb 2-1: config 0 descriptor??
[  447.850490][ T5285] usb 3-1: config 0 has no interfaces?
[  447.899024][ T5284] usb 2-1: Error in usbnet_get_endpoints (-22)
[  447.907092][ T5285] usb 3-1: config 0 has no interfaces?
[  448.008808][ T5285] usb 3-1: config 0 has no interfaces?
[  448.029967][ T5285] usb 3-1: config 0 has no interfaces?
[  448.043977][ T5285] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  448.086104][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.087367][ T9125] usb 2-1: USB disconnect, device number 68
[  448.126903][ T5285] usb 3-1: config 0 descriptor??
[  448.194702][ T5280] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  448.380757][   T25] usb 3-1: USB disconnect, device number 52
[  448.416536][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  448.442847][T11651] program syz.2.1246 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  448.469917][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  448.496895][ T5280] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  448.525801][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  448.579695][ T5280] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  448.603262][T11689] loop8: detected capacity change from 0 to 7
[  448.614450][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.650700][ T5280] usb 4-1: Product: syz
[  448.659135][T11689] Dev loop8: unable to read RDB block 7
[  448.675041][ T5280] usb 4-1: Manufacturer: syz
[  448.687841][ T5280] usb 4-1: SerialNumber: syz
[  448.699970][T11689]  loop8: unable to read partition table
[  448.712470][T11689] loop8: partition table beyond EOD, truncated
[  448.721229][ T5280] usb 4-1: config 0 descriptor??
[  448.734808][T11689] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  448.734808][T11689] 
) failed (rc=-5)
[  448.751565][ T5280] redrat3 4-1:0.0: Couldn't find all endpoints
[  448.960232][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.988564][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.280921][T11678] netlink: 'syz.3.1250': attribute type 9 has an invalid length.
[  449.378627][ T9125] usb 4-1: USB disconnect, device number 37
[  449.538609][T11710] loop0: detected capacity change from 0 to 7
[  449.575821][T11710] Dev loop0: unable to read RDB block 7
[  449.603142][T11710]  loop0: unable to read partition table
[  449.625994][T11710] loop0: partition table beyond EOD, truncated
[  449.693034][T11710] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  449.693034][T11710] 
) failed (rc=-5)
[  449.924023][ T9125] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  450.037694][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  450.104002][ T9125] usb 4-1: device descriptor read/64, error -71
[  450.384803][ T9125] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  450.607089][ T9125] usb 4-1: device descriptor read/64, error -71
[  450.824401][ T9125] usb usb4-port1: attempt power cycle
[  450.882049][T11745] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1260'.
[  451.446250][T11755] netlink: 'syz.3.1261': attribute type 138 has an invalid length.
[  451.468071][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'.
[  452.050599][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  452.072464][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  452.084191][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  452.098601][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  452.106396][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  452.113721][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  452.449517][ T2977] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.917472][ T2977] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.258545][ T2977] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.328212][T11767] chnl_net:caif_netlink_parms(): no params data found
[  453.467620][ T2977] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.706088][T11767] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.714138][T11767] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.721425][T11767] bridge_slave_0: entered allmulticast mode
[  453.755383][T11767] bridge_slave_0: entered promiscuous mode
[  453.767256][T11767] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.804148][T11767] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.834604][T11767] bridge_slave_1: entered allmulticast mode
[  453.865170][T11767] bridge_slave_1: entered promiscuous mode
[  453.895582][T11792] loop8: detected capacity change from 0 to 7
[  453.951655][T11792] Dev loop8: unable to read RDB block 7
[  453.970495][T11792]  loop8: unable to read partition table
[  453.977330][T11792] loop8: partition table beyond EOD, truncated
[  453.983619][T11792] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  453.983619][T11792] 
) failed (rc=-5)
[  454.026238][T11767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.101475][T11767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.144894][ T5239] Bluetooth: hci4: command tx timeout
[  454.270598][T11767] team0: Port device team_slave_0 added
[  454.343682][T11767] team0: Port device team_slave_1 added
[  454.444758][T11767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.461928][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.487855][    C1] vkms_vblank_simulate: vblank timer overrun
[  454.568589][T11767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.601560][ T2977] bridge_slave_1: left allmulticast mode
[  454.612264][ T2977] bridge_slave_1: left promiscuous mode
[  454.639790][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.725884][ T2977] bridge_slave_0: left allmulticast mode
[  454.749953][ T2977] bridge_slave_0: left promiscuous mode
[  454.780713][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.113203][T11809] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.1274'.
[  455.898448][T11812] input: syz0 as /devices/virtual/input/input25
[  456.003588][T11816] process 'syz.2.1277' launched './file0' with NULL argv: empty string added
[  456.224176][ T5239] Bluetooth: hci4: command tx timeout
[  456.360370][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.464594][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.489550][ T2977] bond0 (unregistering): Released all slaves
[  456.616694][T11831] netlink: 'syz.3.1279': attribute type 32 has an invalid length.
[  456.881925][T11835] loop8: detected capacity change from 0 to 7
[  456.892911][T11835] Dev loop8: unable to read RDB block 7
[  456.901143][T11835]  loop8: unable to read partition table
[  456.912296][T11835] loop8: partition table beyond EOD, truncated
[  456.922619][T11835] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  456.922619][T11835] 
) failed (rc=-5)
[  456.988020][T11767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  457.009515][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  457.054386][T11767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  457.144076][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'.
[  457.607598][T11852] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1286'.
[  457.614113][T11767] hsr_slave_0: entered promiscuous mode
[  457.643319][T11767] hsr_slave_1: entered promiscuous mode
[  457.670338][ T5284] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  457.933106][T11860] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1285'.
[  457.987586][   T29] kauditd_printk_skb: 188 callbacks suppressed
[  457.987605][   T29] audit: type=1326 audit(1725127100.722:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  458.093961][   T29] audit: type=1326 audit(1725127100.722:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  458.221872][   T29] audit: type=1326 audit(1725127100.722:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  458.266588][ T2977] hsr_slave_0: left promiscuous mode
[  458.306485][ T5239] Bluetooth: hci4: command tx timeout
[  458.332297][ T2977] hsr_slave_1: left promiscuous mode
[  458.335930][   T29] audit: type=1326 audit(1725127100.722:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  458.359909][    C1] vkms_vblank_simulate: vblank timer overrun
[  458.366010][ T5284] usb 4-1: unable to get BOS descriptor or descriptor too short
[  458.380256][ T5284] usb 4-1: unable to read config index 0 descriptor/start: -71
[  458.392343][ T5284] usb 4-1: can't read configurations, error -71
[  458.405038][   T29] audit: type=1326 audit(1725127100.732:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  458.427939][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  458.441869][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0
[  458.459365][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  458.476422][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1
[  458.487283][   T29] audit: type=1326 audit(1725127100.732:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  458.522288][   T29] audit: type=1326 audit(1725127100.732:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  458.551150][   T29] audit: type=1326 audit(1725127100.732:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  458.589141][ T2977] veth1_macvtap: left promiscuous mode
[  458.597381][ T2977] veth0_macvtap: left promiscuous mode
[  458.603166][ T2977] veth1_vlan: left promiscuous mode
[  458.610898][ T2977] veth0_vlan: left promiscuous mode
[  458.620352][   T29] audit: type=1326 audit(1725127100.732:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  458.650992][   T29] audit: type=1326 audit(1725127100.732:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11858 comm="syz.0.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd1379eb9 code=0x7ffc0000
[  459.976392][ T2977] team0 (unregistering): Port device team_slave_1 removed
[  460.033932][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  460.149606][ T2977] team0 (unregistering): Port device team_slave_0 removed
[  460.394021][ T5239] Bluetooth: hci4: command tx timeout
[  461.764066][    T8] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  461.974727][    T8] usb 1-1: Using ep0 maxpacket: 32
[  461.992751][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.035332][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.064068][    T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  462.083445][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.165471][    T8] usb 1-1: config 0 descriptor??
[  462.637951][    T8] kone 0003:1E7D:2CED.000F: item fetching failed at offset 2/5
[  462.675100][    T8] kone 0003:1E7D:2CED.000F: parse failed
[  462.690112][    T8] kone 0003:1E7D:2CED.000F: probe with driver kone failed with error -22
[  462.722014][ T2977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.747392][ T5285] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  462.971626][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  462.986044][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  462.993230][ T5285] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  463.007079][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  463.016453][ T5285] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  463.019485][ T2977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.028596][ T5285] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  463.045577][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  463.052659][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.061128][ T5285] usb 4-1: Product: syz
[  463.065721][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  463.072886][ T5285] usb 4-1: Manufacturer: syz
[  463.079728][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  463.086941][ T5285] usb 4-1: SerialNumber: syz
[  463.235717][    T8] usb 1-1: USB disconnect, device number 53
[  463.269236][ T2977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.337688][T11914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.374908][T11914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.445531][ T5285] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  463.486212][ T2977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.503591][ T5285] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  463.552745][ T5285] usb 4-1: USB disconnect, device number 43
[  463.621522][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  463.702182][T11767] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  463.729443][T11767] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  463.945330][T11767] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  464.008018][T11767] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  464.396504][ T2977] bridge_slave_1: left allmulticast mode
[  464.402191][ T2977] bridge_slave_1: left promiscuous mode
[  464.444180][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.545936][ T2977] bridge_slave_0: left allmulticast mode
[  464.551622][ T2977] bridge_slave_0: left promiscuous mode
[  464.592964][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.194011][ T5239] Bluetooth: hci1: command tx timeout
[  466.294020][ T5284] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  466.494294][ T5284] usb 4-1: Using ep0 maxpacket: 16
[  466.524417][ T5284] usb 4-1: config 0 has no interfaces?
[  466.529950][ T5284] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6
[  466.591296][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.622400][ T5284] usb 4-1: config 0 descriptor??
[  466.655507][T12004] loop2: detected capacity change from 0 to 7
[  466.681910][T12004] Dev loop2: unable to read RDB block 7
[  466.732351][T12004]  loop2: unable to read partition table
[  466.748686][T12004] loop2: partition table beyond EOD, truncated
[  466.780762][T12004] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  466.924948][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  466.967457][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  467.021982][ T2977] bond0 (unregistering): Released all slaves
[  467.274310][ T5239] Bluetooth: hci1: command tx timeout
[  467.396311][T12002] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  467.743773][T11922] chnl_net:caif_netlink_parms(): no params data found
[  467.823165][ T5239] Bluetooth: hci5: unexpected event for opcode 0x2006
[  467.827088][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1313'.
[  468.491588][ T2977] hsr_slave_0: left promiscuous mode
[  468.519846][ T2977] hsr_slave_1: left promiscuous mode
[  468.547859][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  468.580406][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0
[  468.611007][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  468.627096][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1
[  468.660547][ T2977] veth1_macvtap: left promiscuous mode
[  468.666395][ T2977] veth0_macvtap: left promiscuous mode
[  468.672179][ T2977] veth1_vlan: left promiscuous mode
[  468.678747][ T2977] veth0_vlan: left promiscuous mode
[  468.981015][ T5284] usb 4-1: USB disconnect, device number 44
[  469.005110][T12038] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(36920152109259) <= P.seqno(0) <= S.SWH(36920152109333)) and (P.ackno exists or LAWL(275949787377202) <= P.ackno(275949787377203) <= S.AWH(275949787377203), sending SYNC...
[  469.344275][ T5239] Bluetooth: hci1: command tx timeout
[  470.049707][ T2977] team0 (unregistering): Port device team_slave_1 removed
[  470.221298][ T2977] team0 (unregistering): Port device team_slave_0 removed
[  471.172917][T11922] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.182966][T11922] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.218296][T11922] bridge_slave_0: entered allmulticast mode
[  471.255846][T11922] bridge_slave_0: entered promiscuous mode
[  471.425053][ T5239] Bluetooth: hci1: command tx timeout
[  471.431988][T11922] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.456888][T12051] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  471.484269][T11922] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.527351][T11922] bridge_slave_1: entered allmulticast mode
[  471.536877][T11922] bridge_slave_1: entered promiscuous mode
[  471.604428][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1321'.
[  471.667532][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.828510][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.834094][ T5239] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  471.846416][ T5239] Bluetooth: hci5: Injecting HCI hardware error event
[  471.855409][ T5239] Bluetooth: hci5: hardware error 0x00
[  471.872744][ T5234] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  472.114547][ T5234] usb 4-1: Using ep0 maxpacket: 32
[  472.133511][ T5234] usb 4-1: config 0 has no interfaces?
[  472.141051][T11922] team0: Port device team_slave_0 added
[  472.150086][ T5234] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  472.173178][T11922] team0: Port device team_slave_1 added
[  472.184788][ T5234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.220550][ T5234] usb 4-1: config 0 descriptor??
[  472.291520][T11767] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.364983][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.382229][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.534282][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.540995][T12067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.601006][T12067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.666563][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.667248][ T5234] usb 4-1: USB disconnect, device number 45
[  472.718229][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.770456][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.842835][T11767] 8021q: adding VLAN 0 to HW filter on device team0
[  472.951506][T11922] hsr_slave_0: entered promiscuous mode
[  473.018881][T11922] hsr_slave_1: entered promiscuous mode
[  473.050061][T11922] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  473.064657][T11922] Cannot create hsr debugfs directory
[  473.162728][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.169950][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state
[  473.300694][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.307823][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.874629][T12085] xt_CONNSECMARK: invalid mode: 0
[  473.904456][ T5239] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  474.433549][T12112] FAULT_INJECTION: forcing a failure.
[  474.433549][T12112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  474.463321][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.481344][T12112] CPU: 1 UID: 0 PID: 12112 Comm: syz.0.1329 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0
[  474.492170][T12112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  474.502246][T12112] Call Trace:
[  474.505547][T12112]  <TASK>
[  474.508496][T12112]  dump_stack_lvl+0x241/0x360
[  474.513198][T12112]  ? __pfx_dump_stack_lvl+0x10/0x10
[  474.518413][T12112]  ? __pfx__printk+0x10/0x10
[  474.523033][T12112]  ? vfs_write+0x7c4/0xc90
[  474.527498][T12112]  should_fail_ex+0x3b0/0x4e0
[  474.532196][T12112]  _copy_from_user+0x2f/0xe0
[  474.536785][T12112]  move_addr_to_kernel+0x82/0x150
[  474.541809][T12112]  __sys_bind+0x168/0x2f0
[  474.546133][T12112]  ? __pfx___sys_bind+0x10/0x10
[  474.551000][T12112]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  474.557344][T12112]  ? do_syscall_64+0x100/0x230
[  474.562190][T12112]  __x64_sys_bind+0x7a/0x90
[  474.566713][T12112]  do_syscall_64+0xf3/0x230
[  474.571211][T12112]  ? clear_bhb_loop+0x35/0x90
[  474.575977][T12112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.581871][T12112] RIP: 0033:0x7f7cd1379eb9
[  474.586279][T12112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  474.605879][T12112] RSP: 002b:00007f7cd0dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  474.614288][T12112] RAX: ffffffffffffffda RBX: 00007f7cd1515f80 RCX: 00007f7cd1379eb9
[  474.622458][T12112] RDX: 0000000000000024 RSI: 0000000020000640 RDI: 0000000000000003
[  474.630427][T12112] RBP: 00007f7cd0dff090 R08: 0000000000000000 R09: 0000000000000000
[  474.638388][T12112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.646439][T12112] R13: 0000000000000000 R14: 00007f7cd1515f80 R15: 00007f7cd163fa28
[  474.654588][T12112]  </TASK>
[  474.657741][    C1] vkms_vblank_simulate: vblank timer overrun
[  474.851053][T11767] veth0_vlan: entered promiscuous mode
[  474.929252][T11767] veth1_vlan: entered promiscuous mode
[  475.146843][T11767] veth0_macvtap: entered promiscuous mode
[  475.161834][T11767] veth1_macvtap: entered promiscuous mode
[  475.180429][ T5234] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  475.224341][ T9125] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  475.237828][T11922] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  475.256736][T11922] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  475.279697][T11922] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  475.333820][T11922] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  475.353668][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.373976][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.391053][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.404011][ T5234] usb 4-1: Using ep0 maxpacket: 16
[  475.406096][ T9125] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.411263][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.439023][ T5234] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  475.448284][ T5234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.456817][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.467649][ T5234] usb 4-1: Product: syz
[  475.473951][ T5234] usb 4-1: Manufacturer: syz
[  475.479098][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.489209][ T5234] usb 4-1: SerialNumber: syz
[  475.491444][ T9125] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  475.509783][ T5234] r8152-cfgselector 4-1: Unknown version 0x0000
[  475.524016][ T5234] r8152-cfgselector 4-1: config 0 descriptor??
[  475.530339][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.551299][ T9125] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  475.564053][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.568829][ T9125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.592398][ T9125] usb 1-1: Product: syz
[  475.602900][ T9125] usb 1-1: Manufacturer: syz
[  475.615114][ T9125] usb 1-1: SerialNumber: syz
[  475.623691][T11767] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.701843][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.716083][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.755289][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.775534][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.785987][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.797087][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.808883][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.823748][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.834580][T12122] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  475.856948][T11767] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.881451][T11767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.893083][T11767] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.907237][T11767] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.916794][T11767] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.968011][ T5280] r8152-cfgselector 4-1: USB disconnect, device number 46
[  476.217928][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.246805][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.265179][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.293624][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.305658][T11922] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.414999][T11922] 8021q: adding VLAN 0 to HW filter on device team0
[  476.461995][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.495767][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.503018][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.504947][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.597258][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.604503][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.748217][T12122] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  476.881722][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.997562][ T9125] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  477.011651][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1262'.
[  477.041270][ T9125] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  477.074441][ T9125] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  477.075616][T12148] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.157367][T12148] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.204031][  T940] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  477.212172][T12122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1332'.
[  477.308959][T12122] RE�6G: entered promiscuous mode
[  477.353656][T11922] veth0_vlan: entered promiscuous mode
[  477.413304][T11922] veth1_vlan: entered promiscuous mode
[  477.474305][  T940] usb 4-1: Using ep0 maxpacket: 8
[  477.509076][  T940] usb 4-1: config 7 has an invalid interface number: 122 but max is 1
[  477.564399][  T940] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  477.574683][ T9125] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  477.616194][  T940] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2
[  477.648046][ T9125] usb 1-1: USB disconnect, device number 54
[  477.659486][  T940] usb 4-1: config 7 has no interface number 0
[  477.683654][ T9125] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  477.693440][  T940] usb 4-1: config 7 interface 122 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  477.777862][  T940] usb 4-1: config 7 interface 122 has no altsetting 0
[  477.829531][  T940] usb 4-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=65.13
[  477.844430][T11922] veth0_macvtap: entered promiscuous mode
[  477.877414][  T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.938061][  T940] usb 4-1: Product: syz
[  477.942752][T11922] veth1_macvtap: entered promiscuous mode
[  477.957358][  T940] usb 4-1: Manufacturer: syz
[  477.976511][  T940] usb 4-1: SerialNumber: syz
[  478.097334][T12158] xt_CONNSECMARK: invalid mode: 0
[  478.417158][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.453358][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.525779][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.623026][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.688367][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.710308][T12177] loop0: detected capacity change from 0 to 7
[  478.731633][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.756465][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.788406][T12177] Dev loop0: unable to read RDB block 7
[  478.796507][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.820718][T12177]  loop0: unable to read partition table
[  478.846559][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  478.861265][T12177] loop0: partition table beyond EOD, truncated
[  478.896254][T12177] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  478.896254][T12177] 
) failed (rc=-5)
[  478.912508][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  478.937375][T11922] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.053179][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.079986][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.093489][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.111503][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.122033][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.147625][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.177959][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.228526][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.253640][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.287510][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.319660][T11922] batman_adv: batadv0: Interface activated: batadv_slave_1
[  479.496709][T11922] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.519227][T11922] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.539107][T11922] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.586796][T11922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.728443][  T940] xr_serial 4-1:7.122: skipping garbage
[  479.767807][T12147] delete_channel: no stack
[  479.785794][ T9125] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  479.798713][  T940] xr_serial 4-1:7.122: More than one union descriptor, skipping ...
[  479.840199][  T940] usb 4-1: USB disconnect, device number 47
[  480.018352][ T9125] usb 1-1: config 0 interface 0 has no altsetting 0
[  480.025189][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.079061][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.091569][ T9125] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92
[  480.123375][ T9125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.152627][ T9125] usb 1-1: Product: syz
[  480.172652][ T9125] usb 1-1: Manufacturer: syz
[  480.183712][ T9125] usb 1-1: SerialNumber: syz
[  480.210934][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.216133][ T9125] usb 1-1: config 0 descriptor??
[  480.246568][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.268550][ T9125] usbtest 1-1:0.0: couldn't get endpoints, -22
[  480.292979][ T9125] usbtest 1-1:0.0: probe with driver usbtest failed with error -22
[  480.353676][T12205] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.441262][T12205] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.448901][T12205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.504536][  T940] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  480.547617][T12205] team0: Port device bridge0 added
[  480.759481][T12205] bridge_slave_0: left allmulticast mode
[  480.762820][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  480.793776][  T940] usb 4-1: Using ep0 maxpacket: 16
[  480.804623][T12205] bridge_slave_0: left promiscuous mode
[  480.828075][  T940] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  480.839507][T12205] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.868781][  T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.889070][ T1849] usb 1-1: USB disconnect, device number 55
[  480.922572][  T940] usb 4-1: Product: syz
[  480.948736][  T940] usb 4-1: Manufacturer: syz
[  480.963708][  T940] usb 4-1: SerialNumber: syz
[  481.020255][  T940] r8152-cfgselector 4-1: Unknown version 0x0000
[  481.032973][T12205] team0: Port device bridge0 removed
[  481.048235][  T940] r8152-cfgselector 4-1: config 0 descriptor??
[  481.134005][ T5281] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  481.332136][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  481.354525][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9
[  481.394245][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024
[  481.414294][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  481.445387][ T5281] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  481.457572][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.470430][ T5281] usb 5-1: config 0 descriptor??
[  481.507675][T12197] binder: 12196:12197 ioctl c018620b 0 returned -14
[  481.536532][  T940] r8152-cfgselector 4-1: USB disconnect, device number 48
[  481.871576][T12229] fuse: Unknown parameter 'fl'
[  482.024199][   T25] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  482.245984][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.274326][ T5281] usbhid 5-1:0.0: can't add hid device: -71
[  482.295788][ T5281] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  482.308961][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  482.357178][   T25] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00
[  482.366908][ T5281] usb 5-1: USB disconnect, device number 42
[  482.391478][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.425131][   T25] usb 2-1: config 0 descriptor??
[  482.937042][   T25] wacom 0003:056A:030A.0010: hidraw0: USB HID v0.00 Device [HID 056a:030a] on usb-dummy_hcd.1-1/input0
[  483.231679][   T25] usb 2-1: USB disconnect, device number 69
[  483.260371][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  483.554078][ T5285] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  483.724044][ T5285] usb 1-1: device descriptor read/64, error -71
[  483.890791][T12249] mmap: syz.2.1357 (12249) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  483.955276][T12274] input: syz0 as /devices/virtual/input/input29
[  484.019454][ T5285] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  484.234319][ T5285] usb 1-1: device descriptor read/64, error -71
[  484.283240][T12282] netlink: 'syz.3.1366': attribute type 138 has an invalid length.
[  484.329047][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'.
[  484.382562][ T5285] usb usb1-port1: attempt power cycle
[  484.819255][ T5285] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  484.925865][ T5285] usb 1-1: device descriptor read/8, error -71
[  485.108098][T12299] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1371'.
[  485.224516][ T5285] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  485.265096][ T9125] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  485.273582][ T5285] usb 1-1: device descriptor read/8, error -71
[  485.442466][ T5285] usb usb1-port1: unable to enumerate USB device
[  485.499222][ T9125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.530650][ T9125] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  485.614333][ T9125] usb 4-1: New USB device found, idVendor=6a6d, idProduct=c532, bcdDevice= 0.00
[  485.663791][ T9125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.722652][ T9125] usb 4-1: config 0 descriptor??
[  485.747298][ T9125] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  485.816683][ T1311] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.877652][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'.
[  486.014217][  T940] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  486.023786][ T1311] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.163766][ T1311] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.264472][  T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.311361][ T1311] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.335058][  T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  486.390657][  T940] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  486.412803][  T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.437035][  T940] usb 2-1: config 0 descriptor??
[  486.543128][T12303] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  486.575090][T12303] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  486.975776][  T940] cougar 0003:060B:700A.0011: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.1-1/input0
[  487.212881][T12316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.299467][T12316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.139264][ T5285] usb 4-1: USB disconnect, device number 50
[  488.244841][ T1311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.302000][ T1311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.353421][ T1311] bond0 (unregistering): Released all slaves
[  488.615319][T12303] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  488.650853][T12303] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  489.036417][  T940] usb 2-1: USB disconnect, device number 70
[  489.094853][T12303] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  489.100791][T12303] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  489.420489][T12303] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  489.467479][T12303] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  489.613087][T12345] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  489.730750][T12347] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1383'.
[  489.827557][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'.
[  489.893671][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  489.904574][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  489.913597][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  489.922788][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  489.991532][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  490.017133][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  490.132562][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  490.149058][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  490.158833][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  490.173352][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  490.182808][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  490.192845][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  490.542431][ T1311] hsr_slave_0: left promiscuous mode
[  490.669269][ T1311] hsr_slave_1: left promiscuous mode
[  490.701055][ T1311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.741814][ T1311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.857499][ T1311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.890394][ T1311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.992315][ T1311] veth1_macvtap: left promiscuous mode
[  491.022869][ T1311] veth0_macvtap: left promiscuous mode
[  491.044369][ T1311] veth1_vlan: left promiscuous mode
[  491.061197][ T1311] veth0_vlan: left promiscuous mode
[  491.492059][T12385] netlink: 'syz.3.1393': attribute type 138 has an invalid length.
[  491.500233][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'.
[  491.710549][T12391] loop8: detected capacity change from 0 to 7
[  491.724846][T12391] Dev loop8: unable to read RDB block 7
[  491.747359][T12391]  loop8: unable to read partition table
[  491.793220][T12391] loop8: partition table beyond EOD, truncated
[  491.815236][T12391] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  491.815236][T12391] 
) failed (rc=-5)
[  492.304246][ T5239] Bluetooth: hci4: command tx timeout
[  492.350455][T12396] xt_CONNSECMARK: invalid mode: 0
[  493.000637][ T1311] team0 (unregistering): Port device team_slave_1 removed
[  493.088487][ T1311] team0 (unregistering): Port device team_slave_0 removed
[  494.177172][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'.
[  494.384513][ T5239] Bluetooth: hci4: command tx timeout
[  495.376452][T12358] chnl_net:caif_netlink_parms(): no params data found
[  495.846099][T12458] loop7: detected capacity change from 0 to 16384
[  496.154694][T12358] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.191384][T12358] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.199318][T12358] bridge_slave_0: entered allmulticast mode
[  496.208309][T12358] bridge_slave_0: entered promiscuous mode
[  496.218233][T12358] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.226427][T12358] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.235623][T12358] bridge_slave_1: entered allmulticast mode
[  496.246746][T12358] bridge_slave_1: entered promiscuous mode
[  496.356492][T12453] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1404'.
[  496.464245][ T5239] Bluetooth: hci4: command tx timeout
[  496.570695][T12358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.654271][T12358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.852286][T12358] team0: Port device team_slave_0 added
[  496.864174][    T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  496.866532][T12358] team0: Port device team_slave_1 added
[  497.014955][T12358] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.022052][T12358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.094777][    T9] usb 2-1: Using ep0 maxpacket: 8
[  497.128384][    T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  497.149869][T12358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.164145][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.188957][    T9] usb 2-1: config 0 descriptor??
[  497.206768][T12358] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.213731][T12358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.303658][T12358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.570038][T12358] hsr_slave_0: entered promiscuous mode
[  497.646287][T12358] hsr_slave_1: entered promiscuous mode
[  498.544422][ T5239] Bluetooth: hci4: command tx timeout
[  499.689751][T12493] syz.3.1410: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3
[  499.693566][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  499.701110][T12493] ,mems_allowed=0-1
[  499.764328][T12493] CPU: 0 UID: 0 PID: 12493 Comm: syz.3.1410 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0
[  499.775134][T12493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  499.785215][T12493] Call Trace:
[  499.788512][T12493]  <TASK>
[  499.791459][T12493]  dump_stack_lvl+0x241/0x360
[  499.796174][T12493]  ? __pfx_dump_stack_lvl+0x10/0x10
[  499.801405][T12493]  ? __pfx__printk+0x10/0x10
[  499.806049][T12493]  ? __rcu_read_unlock+0xa1/0x110
[  499.811094][T12493]  warn_alloc+0x278/0x410
[  499.815457][T12493]  ? __pfx_warn_alloc+0x10/0x10
[  499.820323][T12493]  ? translate_table+0x174/0x2330
[  499.825354][T12493]  ? __get_vm_area_node+0x23d/0x270
[  499.830580][T12493]  __vmalloc_node_range_noprof+0x6a2/0x1400
[  499.836475][T12493]  ? arch_stack_walk+0x16d/0x1b0
[  499.841413][T12493]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  499.847743][T12493]  ? rcu_is_watching+0x15/0xb0
[  499.852495][T12493]  ? trace_kmalloc+0x1f/0xd0
[  499.857066][T12493]  ? __kmalloc_node_noprof+0x247/0x440
[  499.862504][T12493]  ? __kvmalloc_node_noprof+0x72/0x190
[  499.867951][T12493]  __kvmalloc_node_noprof+0x142/0x190
[  499.873307][T12493]  ? translate_table+0x174/0x2330
[  499.878321][T12493]  translate_table+0x174/0x2330
[  499.883171][T12493]  ? __pfx_translate_table+0x10/0x10
[  499.888443][T12493]  ? __might_fault+0xaa/0x120
[  499.893107][T12493]  ? __pfx_lock_release+0x10/0x10
[  499.898122][T12493]  ? __might_fault+0xaa/0x120
[  499.902957][T12493]  ? __might_fault+0xc6/0x120
[  499.907716][T12493]  ? _copy_from_user+0xa6/0xe0
[  499.912490][T12493]  ? copy_from_sockptr_offset+0x6b/0xb0
[  499.918027][T12493]  do_ip6t_set_ctl+0xe4c/0x1270
[  499.922866][T12493]  ? __pfx___might_resched+0x10/0x10
[  499.928138][T12493]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  499.933429][T12493]  ? __pfx_lock_release+0x10/0x10
[  499.938473][T12493]  ? __mutex_unlock_slowpath+0x21d/0x750
[  499.944108][T12493]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  499.950084][T12493]  ? __pfx_aa_sk_perm+0x10/0x10
[  499.954928][T12493]  nf_setsockopt+0x295/0x2c0
[  499.959511][T12493]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  499.965388][T12493]  do_sock_setsockopt+0x3af/0x720
[  499.970403][T12493]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  499.975931][T12493]  ? __fget_files+0x29/0x470
[  499.980508][T12493]  ? __fget_files+0x3f6/0x470
[  499.985175][T12493]  __sys_setsockopt+0x1ae/0x250
[  499.990014][T12493]  __x64_sys_setsockopt+0xb5/0xd0
[  499.995023][T12493]  do_syscall_64+0xf3/0x230
[  499.999512][T12493]  ? clear_bhb_loop+0x35/0x90
[  500.004264][T12493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.010153][T12493] RIP: 0033:0x7fb368779eb9
[  500.014564][T12493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  500.034164][T12493] RSP: 002b:00007fb3694c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  500.042578][T12493] RAX: ffffffffffffffda RBX: 00007fb368916058 RCX: 00007fb368779eb9
[  500.050550][T12493] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000c
[  500.058529][T12493] RBP: 00007fb3687e793e R08: 00000000000005c0 R09: 0000000000000000
[  500.066492][T12493] R10: 0000000020000840 R11: 0000000000000246 R12: 0000000000000000
[  500.074467][T12493] R13: 0000000000000000 R14: 00007fb368916058 R15: 00007fb368a3fa28
[  500.082432][T12493]  </TASK>
[  500.100823][    T9] asix 2-1:0.0: probe with driver asix failed with error -71
[  500.175758][T12493] Mem-Info:
[  500.178883][T12493] active_anon:8108 inactive_anon:0 isolated_anon:0
[  500.178883][T12493]  active_file:15448 inactive_file:38409 isolated_file:0
[  500.178883][T12493]  unevictable:768 dirty:151 writeback:0
[  500.178883][T12493]  slab_reclaimable:9567 slab_unreclaimable:98993
[  500.178883][T12493]  mapped:27390 shmem:2214 pagetables:843
[  500.178883][T12493]  sec_pagetables:0 bounce:0
[  500.178883][T12493]  kernel_misc_reclaimable:0
[  500.178883][T12493]  free:1314361 free_pcp:405 free_cma:0
[  500.248981][    T9] usb 2-1: USB disconnect, device number 71
[  500.263749][T12493] Node 0 active_anon:32516kB inactive_anon:0kB active_file:61764kB inactive_file:153552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109620kB dirty:608kB writeback:0kB shmem:7320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10120kB pagetables:3552kB sec_pagetables:0kB all_unreclaimable? no
[  500.374676][T12493] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  500.457375][T12493] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.525578][T12493] lowmem_reserve[]: 0 2467 2468 0 0
[  500.584030][T12493] Node 0 DMA32 free:1280604kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:34480kB inactive_anon:0kB active_file:61764kB inactive_file:152732kB unevictable:1536kB writepending:604kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:1936kB local_pcp:1124kB free_cma:0kB
[  500.673201][T12493] lowmem_reserve[]: 0 0 0 0 0
[  500.682033][T12493] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  500.718558][T12493] lowmem_reserve[]: 0 0 0 0 0
[  500.727861][T12493] Node 1 Normal free:3949872kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:84kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.779851][T12493] lowmem_reserve[]: 0 0 0 0 0
[  500.785085][T12493] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  500.803708][T12493] Node 0 DMA32: 3*4kB (E) 381*8kB (ME) 397*16kB (UME) 89*32kB (ME) 261*64kB (UME) 73*128kB (ME) 25*256kB (ME) 22*512kB (UME) 11*1024kB (UM) 2*2048kB (M) 295*4096kB (M) = 1279652kB
[  500.875300][T12493] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  500.897228][T12493] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 7*16kB (UM) 7*32kB (U) 7*64kB (U) 6*128kB (U) 3*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 963*4096kB (UM) = 3949872kB
[  500.981212][T12493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  500.993364][T12493] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  501.091933][T12493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  501.185775][T12493] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  501.234951][T12493] 56061 total pagecache pages
[  501.252193][T12493] 0 pages in swap cache
[  501.290138][T12493] Free swap  = 124604kB
[  501.332869][T12493] Total swap = 124996kB
[  501.342094][T12493] 2097051 pages RAM
[  501.346971][T12493] 0 pages HighMem/MovableOnly
[  501.351771][T12493] 426967 pages reserved
[  501.356270][T12493] 0 pages cma reserved
[  501.495262][T12358] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  501.569252][T12358] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  501.619904][T12358] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  501.671178][T12358] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  501.754055][    T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  501.834893][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  501.841565][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  502.024675][    T9] usb 2-1: Using ep0 maxpacket: 32
[  502.048125][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  502.101077][    T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  502.156946][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.162213][T12358] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.181924][    T9] usb 2-1: Product: syz
[  502.213926][    T9] usb 2-1: Manufacturer: syz
[  502.218570][    T9] usb 2-1: SerialNumber: syz
[  502.300215][    T9] usb 2-1: config 0 descriptor??
[  502.312399][T12358] 8021q: adding VLAN 0 to HW filter on device team0
[  502.327275][T12547] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  502.376182][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  502.429218][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.436439][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.635538][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.642694][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.054476][T12547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.064706][T12358] 8021q: adding VLAN 0 to HW filter on device batadv0
[  503.119103][T12547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.242515][T12358] veth0_vlan: entered promiscuous mode
[  503.290408][T12358] veth1_vlan: entered promiscuous mode
[  503.415150][T12358] veth0_macvtap: entered promiscuous mode
[  503.440030][T12358] veth1_macvtap: entered promiscuous mode
[  503.498593][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.498612][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.498621][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.498629][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.498636][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.498644][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.498651][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.498659][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.498671][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.498679][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.501709][T12358] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.519857][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.519876][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.519885][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.519893][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.519900][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.519908][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.519915][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.519923][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.519930][T12358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.519938][T12358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.523423][T12358] batman_adv: batadv0: Interface activated: batadv_slave_1
[  503.550894][T12358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  503.550934][T12358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  503.550961][T12358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  503.550987][T12358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.766101][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.766127][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.875019][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.875045][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.578619][ T5314] usb 2-1: USB disconnect, device number 72
[  505.224349][ T5314] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  505.414011][ T5314] usb 2-1: Using ep0 maxpacket: 32
[  505.415479][ T5314] usb 2-1: too many configurations: 33, using maximum allowed: 8
[  505.416594][ T5314] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  505.416621][ T5314] usb 2-1: config 0 has no interface number 0
[  505.416649][ T5314] usb 2-1: too many endpoints for config 0 interface 196 altsetting 219: 151, using maximum allowed: 30
[  505.416688][ T5314] usb 2-1: config 0 interface 196 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 151
[  505.416716][ T5314] usb 2-1: config 0 interface 196 has no altsetting 0
[  505.419067][ T5314] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  505.419092][ T5314] usb 2-1: config 0 has no interface number 0
[  505.419120][ T5314] usb 2-1: too many endpoints for config 0 interface 196 altsetting 219: 151, using maximum allowed: 30
[  505.419157][ T5314] usb 2-1: config 0 interface 196 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 151
[  505.419184][ T5314] usb 2-1: config 0 interface 196 has no altsetting 0
[  505.422768][ T5314] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  505.422795][ T5314] usb 2-1: config 0 has no interface number 0
[  505.422824][ T5314] usb 2-1: too many endpoints for config 0 interface 196 altsetting 219: 151, using maximum allowed: 30
[  505.422860][ T5314] usb 2-1: config 0 interface 196 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 151
[  505.422888][ T5314] usb 2-1: config 0 interface 196 has no altsetting 0
[  505.425435][ T5314] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  505.425461][ T5314] usb 2-1: config 0 has no interface number 0
[  505.425488][ T5314] usb 2-1: too many endpoints for config 0 interface 196 altsetting 219: 151, using maximum allowed: 30
[  505.425524][ T5314] usb 2-1: config 0 interface 196 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 151
[  505.425552][ T5314] usb 2-1: config 0 interface 196 has no altsetting 0
[  505.426583][ T5314] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  505.426607][ T5314] usb 2-1: config 0 has no interface number 0
[  505.426638][ T5314] usb 2-1: too many endpoints for config 0 interface 196 altsetting 219: 151, using maximum allowed: 30
[  505.426680][ T5314] usb 2-1: config 0 interface 196 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 151
[  505.426707][ T5314] usb 2-1: config 0 interface 196 has no altsetting 0
[  505.432908][ T5314] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  505.432936][ T5314] usb 2-1: config 0 has no interface number 0
[  505.432964][ T5314] usb 2-1: too many endpoints for config 0 interface 196 altsetting 219: 151, using maximum allowed: 30
[  505.433006][ T5314] usb 2-1: config 0 interface 196 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 151
[  505.433034][ T5314] usb 2-1: config 0 interface 196 has no altsetting 0
[  505.440378][ T5314] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  505.440406][ T5314] usb 2-1: config 0 has no interface number 0
[  505.440435][ T5314] usb 2-1: too many endpoints for config 0 interface 196 altsetting 219: 151, using maximum allowed: 30
[  505.440470][ T5314] usb 2-1: config 0 interface 196 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 151
[  505.440497][ T5314] usb 2-1: config 0 interface 196 has no altsetting 0
[  505.441684][ T5314] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  505.441710][ T5314] usb 2-1: config 0 has no interface number 0
[  505.441737][ T5314] usb 2-1: too many endpoints for config 0 interface 196 altsetting 219: 151, using maximum allowed: 30
[  505.441770][ T5314] usb 2-1: config 0 interface 196 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 151
[  505.441797][ T5314] usb 2-1: config 0 interface 196 has no altsetting 0
[  505.454416][ T5314] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae
[  505.454451][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.454472][ T5314] usb 2-1: Product: syz
[  505.454488][ T5314] usb 2-1: Manufacturer: syz
[  505.454502][ T5314] usb 2-1: SerialNumber: syz
[  505.473317][ T5314] usb 2-1: config 0 descriptor??
[  505.767040][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.777893][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.824569][ T5314] ums_eneub6250 2-1:0.196: USB Mass Storage device detected
[  505.914011][ T5285] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  505.985471][ T5314] usb 2-1: USB disconnect, device number 73
[  506.096303][ T5285] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35
[  506.096339][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.098647][ T5285] usb 1-1: config 0 descriptor??
[  506.105862][ T5285] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  506.105889][ T5285] dw2102: su3000_power_ctrl: 1, initialized 0
[  506.108272][ T5285] dvb-usb: bulk message failed: -22 (2/0)
[  506.131773][ T5285] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  506.527723][T12622] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  506.528893][  T940] IPVS: starting estimator thread 0...
[  506.616365][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.624616][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.645352][T12640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1433'.
[  506.674095][T12636] IPVS: using max 33 ests per chain, 79200 per kthread
[  506.674761][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.705610][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.940794][ T5285] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19)
[  507.772585][T12669] loop0: detected capacity change from 0 to 7
[  507.820111][T12669] Dev loop0: unable to read RDB block 7
[  507.845317][T12669]  loop0: unable to read partition table
[  507.873390][T12669] loop0: partition table beyond EOD, truncated
[  507.882785][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'.
[  507.903330][T12669] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  507.903330][T12669] 
) failed (rc=-5)
[  507.917432][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'.
[  507.996610][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'.
[  508.026112][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'.
[  508.038273][T12666] delete_channel: no stack
[  508.694637][   T47] usb 1-1: USB disconnect, device number 60
[  509.095461][T12702] xt_CONNSECMARK: invalid mode: 0
[  510.294927][T12738] xt_hashlimit: max too large, truncated to 1048576
[  510.387819][T12724] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  510.434050][T12744] xt_ecn: cannot match TCP bits for non-tcp packets
[  510.444830][T12724] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  510.617027][T12724] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  510.709828][T12752] netlink: 'syz.3.1454': attribute type 138 has an invalid length.
[  510.726163][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'.
[  511.004119][ T5284] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  511.235776][ T5284] usb 2-1: Using ep0 maxpacket: 8
[  511.265099][ T5284] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  511.294140][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.308414][ T5284] usb 2-1: Product: syz
[  511.332690][ T5284] usb 2-1: Manufacturer: syz
[  511.344137][   T47] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  511.351769][   T25] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  511.368472][ T5284] usb 2-1: SerialNumber: syz
[  511.397403][ T5284] usb 2-1: config 0 descriptor??
[  511.554027][   T25] usb 4-1: Using ep0 maxpacket: 16
[  511.561823][   T47] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  511.574758][   T25] usb 4-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  511.592620][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.601184][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.630226][   T25] usb 4-1: Product: syz
[  511.634328][ T5284] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  511.635374][   T47] usb 5-1: config 0 descriptor??
[  511.651801][   T25] usb 4-1: Manufacturer: syz
[  511.658783][   T25] usb 4-1: SerialNumber: syz
[  511.669197][   T47] cp210x 5-1:0.0: cp210x converter detected
[  511.683161][   T25] usb 4-1: config 0 descriptor??
[  511.700540][   T25] usb-storage 4-1:0.0: USB Mass Storage device detected
[  511.744299][ T5239] Bluetooth: hci4: command 0x0c1a tx timeout
[  511.847080][ T5284] usb write operation failed. (-71)
[  511.869475][ T5284] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  511.909787][ T5284] dvbdev: DVB: registering new adapter (Terratec H7)
[  511.930807][ T5284] usb 2-1: media controller created
[  511.944842][ T5284] usb read operation failed. (-71)
[  511.964118][ T5284] usb write operation failed. (-71)
[  511.987523][ T5284] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  512.063624][ T5284] usb 2-1: USB disconnect, device number 74
[  512.086245][   T47] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  512.086894][T12760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.130942][T12760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.169828][   T47] usb 5-1: cp210x converter now attached to ttyUSB0
[  512.402149][   T47] usb 5-1: USB disconnect, device number 43
[  512.423088][   T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  512.473723][   T47] cp210x 5-1:0.0: device disconnected
[  512.923990][ T5284] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  513.286019][T12799] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1464'.
[  513.367590][T12800] netlink: 'syz.4.1467': attribute type 138 has an invalid length.
[  513.404248][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'.
[  513.824129][ T5239] Bluetooth: hci4: command 0x0c1a tx timeout
[  514.155160][   T47] usb 4-1: USB disconnect, device number 51
[  514.918451][   T47] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  514.994581][ T5284] usb 3-1: unable to get BOS descriptor or descriptor too short
[  515.069147][ T5284] usb 3-1: unable to read config index 0 descriptor/start: -71
[  515.107711][ T5284] usb 3-1: can't read configurations, error -71
[  515.164036][   T47] usb 4-1: Using ep0 maxpacket: 8
[  515.198754][   T47] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  515.248673][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.304949][   T47] usb 4-1: config 0 descriptor??
[  515.854034][ T5281] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  515.907656][ T5239] Bluetooth: hci4: command 0x0c1a tx timeout
[  515.920675][   T47] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  515.931319][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  515.931336][   T29] audit: type=1800 audit(1725127158.632:347): pid=12819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1474" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  515.986170][   T47] asix 4-1:0.0: probe with driver asix failed with error -71
[  516.041127][   T47] usb 4-1: USB disconnect, device number 52
[  516.076278][ T5281] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  516.106967][ T5281] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.172321][ T5281] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  516.181867][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.193122][ T5281] usb 1-1: Product: syz
[  516.199809][ T5281] usb 1-1: Manufacturer: syz
[  516.239869][ T5281] usb 1-1: SerialNumber: syz
[  516.268612][ T5281] cdc_mbim 1-1:1.0: MBIM functional descriptor missing
[  516.280707][ T5281] cdc_mbim 1-1:1.0: bind() failure
[  516.580668][ T5281] usb 1-1: USB disconnect, device number 61
[  519.083519][T12849] syzkaller0: entered allmulticast mode
[  519.096457][T12854] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1482'.
[  519.374870][T12862] loop8: detected capacity change from 0 to 7
[  519.433424][T12862] Dev loop8: unable to read RDB block 7
[  519.441981][T12862]  loop8: unable to read partition table
[  519.457364][T12862] loop8: partition table beyond EOD, truncated
[  519.463856][T12862] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  519.463856][T12862] 
) failed (rc=-5)
[  519.882102][T12847] delete_channel: no stack
[  519.997694][T12873] unsupported nlmsg_type 40
[  520.124183][ T5314] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  520.344060][ T5314] usb 2-1: Using ep0 maxpacket: 16
[  520.353607][ T5314] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  520.383130][ T5314] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  520.446331][  T940] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  520.466819][ T5314] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  520.490854][ T5314] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  520.517205][ T5314] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  520.536406][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.557924][ T5314] usb 2-1: Product: syz
[  520.571069][ T5314] usb 2-1: Manufacturer: syz
[  520.581339][ T5314] usb 2-1: SerialNumber: syz
[  520.634057][   T25] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  520.673994][  T940] usb 3-1: Using ep0 maxpacket: 16
[  520.697367][  T940] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  520.721540][  T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.745836][  T940] usb 3-1: Product: syz
[  520.756491][  T940] usb 3-1: Manufacturer: syz
[  520.769315][  T940] usb 3-1: SerialNumber: syz
[  520.796129][  T940] usb 3-1: config 0 descriptor??
[  520.821459][  T940] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[  520.834054][   T25] usb 4-1: device descriptor read/64, error -71
[  520.884424][T12871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1490'.
[  521.024182][ T5314] usb 2-1: USB disconnect, device number 75
[  521.084161][ T5284] usb 3-1: USB disconnect, device number 55
[  521.176715][   T25] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  521.204050][   T47] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  521.366525][   T25] usb 4-1: device descriptor read/64, error -71
[  521.425165][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  521.453602][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  521.516608][   T47] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  521.544241][   T25] usb usb4-port1: attempt power cycle
[  521.549815][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.569842][   T47] usb 1-1: Product: syz
[  521.580991][   T47] usb 1-1: Manufacturer: syz
[  521.585755][   T47] usb 1-1: SerialNumber: syz
[  521.622633][   T47] usb 1-1: config 0 descriptor??
[  521.637097][   T47] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  521.666789][T12890] input: syz1 as /devices/virtual/input/input30
[  521.675433][   T47] usb 1-1: Detected SIO
[  521.679637][   T47] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7
[  521.733383][   T47] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  521.844621][   T47] usb 1-1: USB disconnect, device number 62
[  521.879822][   T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  521.937870][   T47] ftdi_sio 1-1:0.0: device disconnected
[  521.984233][   T25] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  522.014965][T12892] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  522.024359][T12892] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  522.033082][T12892] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  522.041887][T12892] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  522.074385][   T25] usb 4-1: device descriptor read/8, error -71
[  522.079993][T12892] vxlan0: entered promiscuous mode
[  522.121269][T12892] vxlan0: entered allmulticast mode
[  522.140414][T12892] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.149596][T12892] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.158747][T12892] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.167780][T12892] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  522.344164][   T25] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  522.354167][ T5314] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  522.384972][   T25] usb 4-1: device descriptor read/8, error -71
[  522.524475][   T25] usb usb4-port1: unable to enumerate USB device
[  522.548759][T12899] loop8: detected capacity change from 0 to 7
[  522.641461][T12899] Dev loop8: unable to read RDB block 7
[  522.655655][ T5314] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  522.694025][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.700800][T12899]  loop8: unable to read partition table
[  522.708383][T12899] loop8: partition table beyond EOD, truncated
[  522.725117][T12899] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  522.725117][T12899] 
) failed (rc=-5)
[  522.726228][ T5314] usb 3-1: config 0 descriptor??
[  522.771990][ T5314] gspca_main: cpia1-2.14.0 probing 0813:0001
[  522.783352][T12900] xt_CONNSECMARK: invalid mode: 0
[  522.995462][ T5314] gspca_cpia1: usb_control_msg 05, error -71
[  523.063637][ T5314] gspca_cpia1: usb_control_msg 01, error -71
[  523.108920][ T5314] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[  523.215069][ T5314] usb 3-1: USB disconnect, device number 56
[  524.134016][   T47] usb 2-1: new full-speed USB device number 76 using dummy_hcd
[  524.234467][   T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  524.412781][   T47] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  524.434153][   T47] usb 2-1: config 179 has no interface number 0
[  524.458554][   T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  524.478294][   T25] usb 3-1: Using ep0 maxpacket: 8
[  524.505086][   T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  524.513369][   T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  524.533489][   T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  524.551218][   T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 62124, setting to 64
[  524.573970][   T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  524.583785][   T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  524.609207][   T47] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  524.649807][   T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  524.663334][   T47] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  524.693982][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.708167][   T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  524.735987][T12920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  524.743304][T12920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  524.753930][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.998182][   T25] usb 3-1: usb_control_msg returned -32
[  525.031109][   T25] usbtmc 3-1:16.0: can't read capabilities
[  525.144054][ T5314] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  525.346944][   T25] usb 2-1: USB disconnect, device number 76
[  525.347008][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  525.347054][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  525.399577][ T5314] usb 5-1: config 0 has an invalid interface number: 18 but max is 0
[  525.439632][ T5314] usb 5-1: config 0 has no interface number 0
[  525.488029][ T5314] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  525.549851][ T5314] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  525.591799][ T5314] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  525.634309][ T5314] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  525.681096][ T5314] usb 5-1: Manufacturer: syz
[  525.698738][ T5314] usb 5-1: config 0 descriptor??
[  525.969304][  T940] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  525.980375][T12925] QAT: Device 0 not found
[  526.007119][  T940] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  526.053827][  T940] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  526.113986][T12948] loop8: detected capacity change from 0 to 7
[  526.133185][T12948] Dev loop8: unable to read RDB block 7
[  526.144062][T12948]  loop8: unable to read partition table
[  526.160722][T12948] loop8: partition table beyond EOD, truncated
[  526.168239][T12948] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  526.168239][T12948] 
) failed (rc=-5)
[  526.355151][ T5314] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0013/input/input31
[  526.496088][ T5314] sony 0003:054C:03D5.0013: input,hidraw1: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18
[  527.204168][ T5314] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  527.239717][ T5284] usb 3-1: USB disconnect, device number 57
[  527.375020][ T5314] usb 1-1: device descriptor read/64, error -71
[  527.530697][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  527.598463][    C0] ==================================================================
[  527.606541][    C0] BUG: KASAN: slab-use-after-free in lock_timer_base+0x1a7/0x240
[  527.614252][    C0] Read of size 4 at addr ffff888029b38e50 by task kworker/0:2/940
[  527.622117][    C0] 
[  527.624423][    C0] CPU: 0 UID: 0 PID: 940 Comm: kworker/0:2 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0
[  527.635078][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  527.645134][    C0] Workqueue: events mptcp_worker
[  527.650059][    C0] Call Trace:
[  527.653316][    C0]  <IRQ>
[  527.656141][    C0]  dump_stack_lvl+0x241/0x360
[  527.660805][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  527.665980][    C0]  ? __pfx__printk+0x10/0x10
[  527.670544][    C0]  ? _printk+0xd5/0x120
[  527.674679][    C0]  ? __virt_addr_valid+0x183/0x530
[  527.679775][    C0]  ? __virt_addr_valid+0x183/0x530
[  527.684866][    C0]  print_report+0x169/0x550
[  527.689351][    C0]  ? __virt_addr_valid+0x183/0x530
[  527.694440][    C0]  ? __virt_addr_valid+0x183/0x530
[  527.699531][    C0]  ? __virt_addr_valid+0x45f/0x530
[  527.704618][    C0]  ? __phys_addr+0xba/0x170
[  527.709105][    C0]  ? lock_timer_base+0x1a7/0x240
[  527.714035][    C0]  kasan_report+0x143/0x180
[  527.718530][    C0]  ? lock_timer_base+0x1a7/0x240
[  527.723456][    C0]  lock_timer_base+0x1a7/0x240
[  527.728203][    C0]  __try_to_del_timer_sync+0xb5/0x340
[  527.733553][    C0]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  527.739512][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  527.745471][    C0]  ? mptcp_pm_del_add_timer+0x132/0x250
[  527.750996][    C0]  ? __timer_delete_sync+0x15c/0x310
[  527.756260][    C0]  __timer_delete_sync+0x245/0x310
[  527.761348][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  527.766699][    C0]  ? __pfx___timer_delete_sync+0x10/0x10
[  527.772307][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  527.777669][    C0]  ? mptcp_pm_del_add_timer+0x132/0x250
[  527.783189][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  527.788891][    C0]  ? mptcp_pm_del_add_timer+0x132/0x250
[  527.794417][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  527.799602][    C0]  sk_stop_timer_sync+0x1c/0x90
[  527.804438][    C0]  mptcp_pm_del_add_timer+0x18d/0x250
[  527.809813][    C0]  mptcp_incoming_options+0x158d/0x2570
[  527.815350][    C0]  ? __pfx_mptcp_incoming_options+0x10/0x10
[  527.821227][    C0]  tcp_data_queue+0xf5/0x76c0
[  527.825887][    C0]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[  527.832111][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  527.838677][    C0]  ? tcp_urg+0x100/0x450
[  527.842904][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
[  527.848092][    C0]  ? __pfx_tcp_urg+0x10/0x10
[  527.852658][    C0]  ? ktime_get+0x9b/0xb0
[  527.856896][    C0]  tcp_rcv_established+0xfba/0x2020
[  527.862096][    C0]  ? __pfx_tcp_rcv_established+0x10/0x10
[  527.867759][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  527.872770][    C0]  tcp_v4_do_rcv+0x96d/0xc70
[  527.877341][    C0]  tcp_v4_rcv+0x2dc0/0x37f0
[  527.881839][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  527.886677][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  527.891507][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  527.896336][    C0]  ip_protocol_deliver_rcu+0x22e/0x440
[  527.901785][    C0]  ? ip_local_deliver_finish+0x230/0x5f0
[  527.907397][    C0]  ip_local_deliver_finish+0x341/0x5f0
[  527.912834][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  527.918804][    C0]  NF_HOOK+0x3a4/0x450
[  527.922851][    C0]  ? NF_HOOK+0x9a/0x450
[  527.926987][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  527.931552][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  527.937514][    C0]  ? ip_rcv_finish+0x406/0x560
[  527.942271][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  527.947377][    C0]  NF_HOOK+0x3a4/0x450
[  527.951425][    C0]  ? __lock_acquire+0x137a/0x2040
[  527.956432][    C0]  ? NF_HOOK+0x9a/0x450
[  527.960565][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  527.965131][    C0]  ? ip_rcv_core+0x801/0xd10
[  527.969699][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  527.974795][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  527.979295][    C0]  __netif_receive_skb+0x2bf/0x650
[  527.984399][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  527.989413][    C0]  ? __pfx___netif_receive_skb+0x10/0x10
[  527.995026][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  528.001420][    C0]  ? __pfx_lock_release+0x10/0x10
[  528.006424][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  528.011531][    C0]  process_backlog+0x662/0x15b0
[  528.016365][    C0]  ? process_backlog+0x33b/0x15b0
[  528.021388][    C0]  ? __pfx_process_backlog+0x10/0x10
[  528.026650][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  528.032610][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  528.038916][    C0]  __napi_poll+0xcb/0x490
[  528.043228][    C0]  net_rx_action+0x89b/0x1240
[  528.047890][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  528.052995][    C0]  ? sched_clock+0x4a/0x70
[  528.057397][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  528.063732][    C0]  handle_softirqs+0x2c4/0x970
[  528.068482][    C0]  ? do_softirq+0x11b/0x1e0
[  528.072963][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  528.078243][    C0]  do_softirq+0x11b/0x1e0
[  528.082555][    C0]  </IRQ>
[  528.085467][    C0]  <TASK>
[  528.088374][    C0]  ? __pfx_do_softirq+0x10/0x10
[  528.093200][    C0]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  528.098811][    C0]  ? mptcp_pm_nl_addr_send_ack+0x3ec/0x4e0
[  528.104600][    C0]  ? rcu_is_watching+0x15/0xb0
[  528.109353][    C0]  __local_bh_enable_ip+0x1bb/0x200
[  528.114536][    C0]  ? mptcp_pm_nl_addr_send_ack+0x3ec/0x4e0
[  528.120350][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  528.126101][    C0]  mptcp_pm_nl_addr_send_ack+0x3ec/0x4e0
[  528.131779][    C0]  ? __pfx_mptcp_pm_nl_addr_send_ack+0x10/0x10
[  528.138025][    C0]  ? mptcp_pm_nl_work+0x19e/0x1fc0
[  528.143184][    C0]  mptcp_pm_nl_work+0x18e8/0x1fc0
[  528.148217][    C0]  ? __pfx_mptcp_pm_nl_work+0x10/0x10
[  528.153575][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  528.158582][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  528.164402][    C0]  ? mark_lock+0x9a/0x350
[  528.168734][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  528.174697][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  528.181004][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  528.186355][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  528.191539][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  528.196895][    C0]  ? mptcp_worker+0x82/0x1440
[  528.201555][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  528.207263][    C0]  mptcp_worker+0x12f/0x1440
[  528.211837][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  528.218149][    C0]  ? __pfx_mptcp_worker+0x10/0x10
[  528.223174][    C0]  ? process_scheduled_works+0x945/0x1830
[  528.228874][    C0]  process_scheduled_works+0xa2c/0x1830
[  528.234412][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  528.240380][    C0]  ? assign_work+0x364/0x3d0
[  528.244954][    C0]  worker_thread+0x86d/0xd10
[  528.249527][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  528.255402][    C0]  ? __kthread_parkme+0x169/0x1d0
[  528.260407][    C0]  ? __pfx_worker_thread+0x10/0x10
[  528.265497][    C0]  kthread+0x2f0/0x390
[  528.269548][    C0]  ? __pfx_worker_thread+0x10/0x10
[  528.274641][    C0]  ? __pfx_kthread+0x10/0x10
[  528.279226][    C0]  ret_from_fork+0x4b/0x80
[  528.283619][    C0]  ? __pfx_kthread+0x10/0x10
[  528.288214][    C0]  ret_from_fork_asm+0x1a/0x30
[  528.292963][    C0]  </TASK>
[  528.295974][    C0] 
[  528.298360][    C0] Allocated by task 940:
[  528.302596][    C0]  kasan_save_track+0x3f/0x80
[  528.307263][    C0]  __kasan_kmalloc+0x98/0xb0
[  528.311842][    C0]  __kmalloc_cache_noprof+0x19c/0x2c0
[  528.317196][    C0]  mptcp_pm_alloc_anno_list+0x14e/0x390
[  528.322720][    C0]  mptcp_pm_create_subflow_or_signal_addr+0x1920/0x22c0
[  528.329634][    C0]  mptcp_pm_nl_work+0x19ae/0x1fc0
[  528.334642][    C0]  mptcp_worker+0x12f/0x1440
[  528.339224][    C0]  process_scheduled_works+0xa2c/0x1830
[  528.344765][    C0]  worker_thread+0x86d/0xd10
[  528.349334][    C0]  kthread+0x2f0/0x390
[  528.353380][    C0]  ret_from_fork+0x4b/0x80
[  528.357775][    C0]  ret_from_fork_asm+0x1a/0x30
[  528.362518][    C0] 
[  528.364905][    C0] Freed by task 12966:
[  528.368946][    C0]  kasan_save_track+0x3f/0x80
[  528.373616][    C0]  kasan_save_free_info+0x40/0x50
[  528.378616][    C0]  poison_slab_object+0xe0/0x150
[  528.383530][    C0]  __kasan_slab_free+0x37/0x60
[  528.388270][    C0]  kfree+0x149/0x360
[  528.392139][    C0]  remove_anno_list_by_saddr+0x156/0x190
[  528.397747][    C0]  mptcp_pm_nl_flush_addrs_doit+0x664/0xd60
[  528.403615][    C0]  genl_rcv_msg+0xb14/0xec0
[  528.408096][    C0]  netlink_rcv_skb+0x1e3/0x430
[  528.412833][    C0]  genl_rcv+0x28/0x40
[  528.416789][    C0]  netlink_unicast+0x7f6/0x990
[  528.421531][    C0]  netlink_sendmsg+0x8e4/0xcb0
[  528.426269][    C0]  __sock_sendmsg+0x221/0x270
[  528.430925][    C0]  ____sys_sendmsg+0x525/0x7d0
[  528.435668][    C0]  __sys_sendmsg+0x2b0/0x3a0
[  528.440231][    C0]  do_syscall_64+0xf3/0x230
[  528.444740][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.450610][    C0] 
[  528.452910][    C0] The buggy address belongs to the object at ffff888029b38e00
[  528.452910][    C0]  which belongs to the cache kmalloc-192 of size 192
[  528.466959][    C0] The buggy address is located 80 bytes inside of
[  528.466959][    C0]  freed 192-byte region [ffff888029b38e00, ffff888029b38ec0)
[  528.480646][    C0] 
[  528.482946][    C0] The buggy address belongs to the physical page:
[  528.489336][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29b38
[  528.498071][    C0] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  528.505503][    C0] page_type: 0xfdffffff(slab)
[  528.510160][    C0] raw: 00fff00000000000 ffff88801ac413c0 ffffea0000bd3380 dead000000000003
[  528.518723][    C0] raw: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000
[  528.527276][    C0] page dumped because: kasan: bad access detected
[  528.533729][    C0] page_owner tracks the page as allocated
[  528.539423][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5573, tgid 5573 (cmp), ts 78576722831, free_ts 78537901249
[  528.559465][    C0]  post_alloc_hook+0x1f3/0x230
[  528.564220][    C0]  get_page_from_freelist+0x2e4c/0x2f10
[  528.569754][    C0]  __alloc_pages_noprof+0x256/0x6c0
[  528.574935][    C0]  alloc_slab_page+0x5f/0x120
[  528.579590][    C0]  allocate_slab+0x5a/0x2f0
[  528.584074][    C0]  ___slab_alloc+0xcd1/0x14b0
[  528.588732][    C0]  __slab_alloc+0x58/0xa0
[  528.593037][    C0]  __kmalloc_node_noprof+0x286/0x440
[  528.598296][    C0]  allocate_slab+0xb6/0x2f0
[  528.602778][    C0]  ___slab_alloc+0xcd1/0x14b0
[  528.607453][    C0]  __slab_alloc+0x58/0xa0
[  528.611759][    C0]  kmem_cache_alloc_noprof+0x1c1/0x2a0
[  528.617193][    C0]  vm_area_dup+0x61/0x290
[  528.621502][    C0]  __split_vma+0x1a9/0xc30
[  528.625898][    C0]  do_vmi_align_munmap+0x433/0x18c0
[  528.631076][    C0]  do_vmi_munmap+0x261/0x2f0
[  528.635646][    C0] page last free pid 5572 tgid 5572 stack trace:
[  528.641949][    C0]  free_unref_folios+0x103a/0x1b00
[  528.647042][    C0]  folios_put_refs+0x76e/0x860
[  528.651788][    C0]  free_pages_and_swap_cache+0x5c8/0x690
[  528.657398][    C0]  tlb_flush_mmu+0x3a3/0x680
[  528.661966][    C0]  tlb_finish_mmu+0xd4/0x200
[  528.666534][    C0]  exit_mmap+0x44f/0xc80
[  528.670752][    C0]  __mmput+0x115/0x390
[  528.674801][    C0]  exit_mm+0x220/0x310
[  528.678846][    C0]  do_exit+0x9b2/0x27f0
[  528.682972][    C0]  do_group_exit+0x207/0x2c0
[  528.687538][    C0]  __x64_sys_exit_group+0x3f/0x40
[  528.692538][    C0]  x64_sys_call+0x2634/0x2640
[  528.697193][    C0]  do_syscall_64+0xf3/0x230
[  528.701677][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.707575][    C0] 
[  528.709882][    C0] Memory state around the buggy address:
[  528.715500][    C0]  ffff888029b38d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  528.723538][    C0]  ffff888029b38d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  528.731576][    C0] >ffff888029b38e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  528.739631][    C0]                                                  ^
[  528.746299][    C0]  ffff888029b38e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  528.754346][    C0]  ffff888029b38f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  528.762389][    C0] ==================================================================
[  528.770429][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  528.777773][    C0] CPU: 0 UID: 0 PID: 940 Comm: kworker/0:2 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0
[  528.788426][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  528.798493][    C0] Workqueue: events mptcp_worker
[  528.803436][    C0] Call Trace:
[  528.806705][    C0]  <IRQ>
[  528.809537][    C0]  dump_stack_lvl+0x241/0x360
[  528.814202][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  528.819383][    C0]  ? __pfx__printk+0x10/0x10
[  528.823954][    C0]  ? rcu_is_watching+0x15/0xb0
[  528.828708][    C0]  ? vscnprintf+0x5d/0x90
[  528.833015][    C0]  panic+0x349/0x860
[  528.836889][    C0]  ? __pfx_lock_release+0x10/0x10
[  528.841980][    C0]  ? check_panic_on_warn+0x21/0xb0
[  528.847069][    C0]  ? __pfx_panic+0x10/0x10
[  528.851465][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  528.856667][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  528.862542][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  528.868854][    C0]  check_panic_on_warn+0x86/0xb0
[  528.873768][    C0]  ? lock_timer_base+0x1a7/0x240
[  528.878685][    C0]  end_report+0x77/0x160
[  528.882914][    C0]  kasan_report+0x154/0x180
[  528.887400][    C0]  ? lock_timer_base+0x1a7/0x240
[  528.892316][    C0]  lock_timer_base+0x1a7/0x240
[  528.897060][    C0]  __try_to_del_timer_sync+0xb5/0x340
[  528.902418][    C0]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  528.908377][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  528.914343][    C0]  ? mptcp_pm_del_add_timer+0x132/0x250
[  528.919877][    C0]  ? __timer_delete_sync+0x15c/0x310
[  528.925143][    C0]  __timer_delete_sync+0x245/0x310
[  528.930232][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  528.935587][    C0]  ? __pfx___timer_delete_sync+0x10/0x10
[  528.941199][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  528.946551][    C0]  ? mptcp_pm_del_add_timer+0x132/0x250
[  528.952111][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  528.957808][    C0]  ? mptcp_pm_del_add_timer+0x132/0x250
[  528.963331][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  528.968508][    C0]  sk_stop_timer_sync+0x1c/0x90
[  528.973342][    C0]  mptcp_pm_del_add_timer+0x18d/0x250
[  528.978696][    C0]  mptcp_incoming_options+0x158d/0x2570
[  528.984235][    C0]  ? __pfx_mptcp_incoming_options+0x10/0x10
[  528.990126][    C0]  tcp_data_queue+0xf5/0x76c0
[  528.994874][    C0]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[  529.001127][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  529.007699][    C0]  ? tcp_urg+0x100/0x450
[  529.011921][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
[  529.017099][    C0]  ? __pfx_tcp_urg+0x10/0x10
[  529.021688][    C0]  ? ktime_get+0x9b/0xb0
[  529.025924][    C0]  tcp_rcv_established+0xfba/0x2020
[  529.031108][    C0]  ? __pfx_tcp_rcv_established+0x10/0x10
[  529.036727][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  529.041839][    C0]  tcp_v4_do_rcv+0x96d/0xc70
[  529.046416][    C0]  tcp_v4_rcv+0x2dc0/0x37f0
[  529.050908][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  529.055744][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  529.060574][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  529.065422][    C0]  ip_protocol_deliver_rcu+0x22e/0x440
[  529.070898][    C0]  ? ip_local_deliver_finish+0x230/0x5f0
[  529.076519][    C0]  ip_local_deliver_finish+0x341/0x5f0
[  529.081971][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  529.087932][    C0]  NF_HOOK+0x3a4/0x450
[  529.091982][    C0]  ? NF_HOOK+0x9a/0x450
[  529.096118][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  529.100687][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  529.106654][    C0]  ? ip_rcv_finish+0x406/0x560
[  529.111398][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  529.116492][    C0]  NF_HOOK+0x3a4/0x450
[  529.120545][    C0]  ? __lock_acquire+0x137a/0x2040
[  529.125574][    C0]  ? NF_HOOK+0x9a/0x450
[  529.129714][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  529.134303][    C0]  ? ip_rcv_core+0x801/0xd10
[  529.138898][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  529.144034][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  529.148527][    C0]  __netif_receive_skb+0x2bf/0x650
[  529.153641][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  529.158655][    C0]  ? __pfx___netif_receive_skb+0x10/0x10
[  529.164272][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  529.170248][    C0]  ? __pfx_lock_release+0x10/0x10
[  529.175338][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  529.180437][    C0]  process_backlog+0x662/0x15b0
[  529.185274][    C0]  ? process_backlog+0x33b/0x15b0
[  529.190296][    C0]  ? __pfx_process_backlog+0x10/0x10
[  529.195563][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  529.201522][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  529.207843][    C0]  __napi_poll+0xcb/0x490
[  529.212153][    C0]  net_rx_action+0x89b/0x1240
[  529.216819][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  529.221913][    C0]  ? sched_clock+0x4a/0x70
[  529.226311][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  529.232792][    C0]  handle_softirqs+0x2c4/0x970
[  529.237535][    C0]  ? do_softirq+0x11b/0x1e0
[  529.242015][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  529.247283][    C0]  do_softirq+0x11b/0x1e0
[  529.251612][    C0]  </IRQ>
[  529.254523][    C0]  <TASK>
[  529.257437][    C0]  ? __pfx_do_softirq+0x10/0x10
[  529.262267][    C0]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  529.267895][    C0]  ? mptcp_pm_nl_addr_send_ack+0x3ec/0x4e0
[  529.273699][    C0]  ? rcu_is_watching+0x15/0xb0
[  529.278452][    C0]  __local_bh_enable_ip+0x1bb/0x200
[  529.283633][    C0]  ? mptcp_pm_nl_addr_send_ack+0x3ec/0x4e0
[  529.289416][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  529.295116][    C0]  mptcp_pm_nl_addr_send_ack+0x3ec/0x4e0
[  529.300730][    C0]  ? __pfx_mptcp_pm_nl_addr_send_ack+0x10/0x10
[  529.306864][    C0]  ? mptcp_pm_nl_work+0x19e/0x1fc0
[  529.311955][    C0]  mptcp_pm_nl_work+0x18e8/0x1fc0
[  529.316981][    C0]  ? __pfx_mptcp_pm_nl_work+0x10/0x10
[  529.322346][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  529.327347][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  529.333133][    C0]  ? mark_lock+0x9a/0x350
[  529.337531][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  529.343489][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  529.349800][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  529.355153][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  529.360335][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  529.365685][    C0]  ? mptcp_worker+0x82/0x1440
[  529.370346][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  529.376054][    C0]  mptcp_worker+0x12f/0x1440
[  529.380631][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  529.386939][    C0]  ? __pfx_mptcp_worker+0x10/0x10
[  529.391946][    C0]  ? process_scheduled_works+0x945/0x1830
[  529.397646][    C0]  process_scheduled_works+0xa2c/0x1830
[  529.403178][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  529.409209][    C0]  ? assign_work+0x364/0x3d0
[  529.413778][    C0]  worker_thread+0x86d/0xd10
[  529.418353][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  529.424241][    C0]  ? __kthread_parkme+0x169/0x1d0
[  529.429255][    C0]  ? __pfx_worker_thread+0x10/0x10
[  529.434353][    C0]  kthread+0x2f0/0x390
[  529.438414][    C0]  ? __pfx_worker_thread+0x10/0x10
[  529.443503][    C0]  ? __pfx_kthread+0x10/0x10
[  529.448071][    C0]  ret_from_fork+0x4b/0x80
[  529.452469][    C0]  ? __pfx_kthread+0x10/0x10
[  529.457082][    C0]  ret_from_fork_asm+0x1a/0x30
[  529.461921][    C0]  </TASK>
[  529.465055][    C0] Kernel Offset: disabled
[  529.469374][    C0] Rebooting in 86400 seconds..