last executing test programs:

7m6.379918824s ago: executing program 3 (id=6865):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
close_range(0xffffffffffffffff, r0, 0x2)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x8010)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
inotify_init1(0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000)

7m6.13118968s ago: executing program 3 (id=6866):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000000000000700000044042800000000001c000000000300000000000008000000", @ANYBLOB="ac8af1695e5b"], 0x38}}], 0x1, 0x8040)

7m5.965556226s ago: executing program 3 (id=6867):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000200)=0x40000, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0xb1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4000002000000000)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d00))
r5 = fsopen(&(0x7f0000000400)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af00, &(0x7f00000000c0))
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000340)=&(0x7f00000001c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000002c0)=0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x3f)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
unshare(0x20000400)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0)
preadv2(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/11, 0xb}], 0x1, 0x0, 0x0, 0x14)
sendmmsg$alg(r7, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="a60f6adb0f78e1a23c", 0x9}], 0x1}], 0x1, 0x0)
io_setup(0xff, &(0x7f0000000380))

7m5.575747566s ago: executing program 3 (id=6868):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000898000/0x4000)=nil, 0x4000, 0x65)
r0 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
fsopen(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
msgget$private(0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
shmget(0x3, 0x1000, 0x5966b1275afd629a, &(0x7f0000ffc000/0x1000)=nil)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x18, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, 0x0)
getgid()
r5 = getpid()
r6 = getpgrp(0x0)
kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
gettid()
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)

7m4.576607926s ago: executing program 3 (id=6869):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be42", 0x118}, {&(0x7f0000000f00)="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", 0x10e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48", 0x22}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b3", 0x3d}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888edcc42fbbb6f7", 0xa5}, {&(0x7f00000010c0)="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", 0x1ea}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f27025", 0x3b}, {&(0x7f0000000740)="b1f56ee29c730b28d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea", 0x23}], 0x2}}], 0x4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000540)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834f5425a3a07e7580444ea6f7ae55d88fecf90b1a7511bf746bec8cba00000000000000000000000000000900eed27fce5e74cf8ddb6a7b0a78d2e0cb0564132338b04c360e4067346e77b05748245aca652ecfef16ccb67c45e1a052f4f14aae11a8880aae3bf8919f0268d1ef010c0b2088d3c3abb83e900f5e8b", 0x9b, 0x11, 0x0, 0x0)

7m4.435362705s ago: executing program 3 (id=6870):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000040)=0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e24, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x74, 0x0, &(0x7f0000000100))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = dup(r8)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}}, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x24008884}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
socket$inet6(0xa, 0x3, 0x2c)
io_setup(0x4, &(0x7f00000014c0))
syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8080, &(0x7f0000000280)={0xa, 0x2e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

9.555683343s ago: executing program 4 (id=8121):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$kcm(0x10, 0x2, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="f53a9e2ffb7f22000884a1472501012200000100"/33, @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58}, 0x10)
r4 = socket$kcm(0xa, 0x5, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
r6 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5})
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0)
syz_usb_connect$uac1(0x4, 0x110, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0x0, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x0, 0x9, "07a1"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0xa, 0x6, 0x6], 0x8}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x7, "88632aa5"}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0xf, 0x2, "f027"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x3, 0xf, 0xe00, 0x3, 0x6}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0xc1, "ef757afc44f1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x4, 0xa, 0x9, "37cc2c1a580a3c1cbe"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x6, 0x7, "cb"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x9, 0x0, "1526ea02"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0xa7, 0x3, {0x7, 0x25, 0x1, 0x3, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x10, 0x1, 0x9, 0x7, "fe"}, @as_header={0x7, 0x24, 0x1, 0xff, 0xe, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xae, 0x3, 0x40, 0x3, "b34e8b7214b180df"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x10, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0x17, 0xb}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x3, "fe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x87, 0xeb, 0x5, {0x7, 0x25, 0x1, 0x0, 0x10, 0x3}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x8, 0x3, 0x1, 0x0, 0x6}, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0xe, 0x88}]}, 0x6, [{0x2a, &(0x7f0000000200)=@string={0x2a, 0x3, "d28c988da73ca880c349cb645a9d3ec81b5420cf421ee46eb7b6c2e25fa777dafde5e2526c38ca66"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0xbe, &(0x7f0000000280)=@string={0xbe, 0x3, "198b994da5a0bf3da8fbba0f71378d099e7029b7e3cc0db3d6ba751dcac8dd4e54b3527cfea78c94bedc68b14ea167d3cb9e8fbca287df40686ec0ec80a6df22f51b2946fe5b8f74cefa4780033936d01fad4c3e0b21267b97a4533ffc469e9863e49845f71156d2427ce70b47cf8148587163455b4c45d55aa06f8ec9beeb0cfdfd33eb183550b1896ce25104576256794addecb57b9a676b2a181c688925dece6d014daee1fd0d2c2e46ca03304a0550817b46634a507d24c9178a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}, {0x15, &(0x7f0000000380)=@string={0x15, 0x3, "6e27a8cb501411cfd07ec0ed95285889da84df"}}, {0xe6, &(0x7f00000003c0)=@string={0xe6, 0x3, "7bb892fbc6922b96d5a966508bdfd9b102e422e52ef229f10248b4e993964d3cc8d33d15fbfed2498fa3adf9c7268a90298872009740759c483daaa0570a8cdc36117d719aac7a6a9184d03a3c05d87618640be694c120c079398f625efb28591c00d626c3694904cef2ea901715bc60c6ceadd8acb53a1c9547f94b6aa5eedec0048a35440c06418e77a5501eff38491934fd2d087e66df033e4e4c8a97a5053d13f8dd0f5ee2bf5fab1ad5656a43f3116d1e23c04b89a6ffcab62f3552d0dfda2dc3e34d3acde17cf721520e294345467889dfd19ee496af397c509d28536f6eeef359"}}]}) (async)
r7 = syz_usb_connect$uac1(0x4, 0x110, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0x0, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x0, 0x9, "07a1"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0xa, 0x6, 0x6], 0x8}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x7, "88632aa5"}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0xf, 0x2, "f027"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x3, 0xf, 0xe00, 0x3, 0x6}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0xc1, "ef757afc44f1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x4, 0xa, 0x9, "37cc2c1a580a3c1cbe"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x6, 0x7, "cb"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x9, 0x0, "1526ea02"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0xa7, 0x3, {0x7, 0x25, 0x1, 0x3, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x10, 0x1, 0x9, 0x7, "fe"}, @as_header={0x7, 0x24, 0x1, 0xff, 0xe, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xae, 0x3, 0x40, 0x3, "b34e8b7214b180df"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x10, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0x17, 0xb}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x3, "fe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x87, 0xeb, 0x5, {0x7, 0x25, 0x1, 0x0, 0x10, 0x3}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x8, 0x3, 0x1, 0x0, 0x6}, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0xe, 0x88}]}, 0x6, [{0x2a, &(0x7f0000000200)=@string={0x2a, 0x3, "d28c988da73ca880c349cb645a9d3ec81b5420cf421ee46eb7b6c2e25fa777dafde5e2526c38ca66"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0xbe, &(0x7f0000000280)=@string={0xbe, 0x3, "198b994da5a0bf3da8fbba0f71378d099e7029b7e3cc0db3d6ba751dcac8dd4e54b3527cfea78c94bedc68b14ea167d3cb9e8fbca287df40686ec0ec80a6df22f51b2946fe5b8f74cefa4780033936d01fad4c3e0b21267b97a4533ffc469e9863e49845f71156d2427ce70b47cf8148587163455b4c45d55aa06f8ec9beeb0cfdfd33eb183550b1896ce25104576256794addecb57b9a676b2a181c688925dece6d014daee1fd0d2c2e46ca03304a0550817b46634a507d24c9178a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}, {0x15, &(0x7f0000000380)=@string={0x15, 0x3, "6e27a8cb501411cfd07ec0ed95285889da84df"}}, {0xe6, &(0x7f00000003c0)=@string={0xe6, 0x3, "7bb892fbc6922b96d5a966508bdfd9b102e422e52ef229f10248b4e993964d3cc8d33d15fbfed2498fa3adf9c7268a90298872009740759c483daaa0570a8cdc36117d719aac7a6a9184d03a3c05d87618640be694c120c079398f625efb28591c00d626c3694904cef2ea901715bc60c6ceadd8acb53a1c9547f94b6aa5eedec0048a35440c06418e77a5501eff38491934fd2d087e66df033e4e4c8a97a5053d13f8dd0f5ee2bf5fab1ad5656a43f3116d1e23c04b89a6ffcab62f3552d0dfda2dc3e34d3acde17cf721520e294345467889dfd19ee496af397c509d28536f6eeef359"}}]})
syz_usb_ep_write(r7, 0xa6, 0x78, &(0x7f0000000540)="ebc69ba50a72323d4c72a7643e964bff5249c2c4e266846be6a53988cd3b580095483fa1198911a3021d39575c3c3a9bd873e339976c520af281bd2b45a361028ddf5740f72cd934db0e21c4ab69650b488a150228aaf49527f38fdfd6c53864abf44426450712ce2d51fd86d03dd0b5a3d301e8e2f00297")

9.153944465s ago: executing program 4 (id=8125):
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r2, 0x4bfa, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000"])

8.971968251s ago: executing program 4 (id=8126):
syz_open_dev$usbfs(&(0x7f0000000000), 0x75, 0x20001)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
socket(0x10, 0x3, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000380)={0x20, 0x21, 0xdf, {0xdf, 0x4, "47ade4e6ff943b80b2e913e7b592e6bb5cbf02d6ed77e62d69d7a162872aa467f630557599749c4255b53fcfb8699036795985558f8de5cc284d3589d40ef7231ef28c0d0064e1f6843bb051a52529731e60ee5756e49b55b555ca2f42de19dc2e81d3b47f1ae5204b6d3e3bf3dbaa9a58da9744221a7b22af0ab7646647b3bfa5eaaea4e732f89aec7529b29d5151b722fa59a60be784685e1b117280027bbed1caed70777ca560770010dfd99ff902d2507339059b1f92ab75f37274fc47189615d3fc2588a35925e052c8e138791f416a45dda717e50d3b945c4464"}}, 0x0, &(0x7f0000000880)={0x0, 0xf, 0xb, {0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xca, 0x4, 0x9, 0x8, "62d01fac", "e0d3d5d8"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x80, 0x7, 0x2, 0x1, 0xb, 0xf}}}, &(0x7f0000000d80)={0x84, &(0x7f00000009c0)={0x20, 0x9, 0x35, "71b00854c52d39fb03ab8b184f52d304d270e7b1dc4072a13d6c37b9c6ff1c0c06a6f2bb597bb592c305e4a32431b3e8a0a94da859"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x800, 0x10}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "eaa3"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @random="4a403c7b9594"}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "acc3"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0xf9}})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7", 0xf)
ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d17, &(0x7f0000000980))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)

5.830497288s ago: executing program 4 (id=8142):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0)
write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1/file0', [{0x20, '#! '}, {0x20, '/dev/nullb0\x00'}, {0x20, '#'}, {0x20, '#! '}, {0x20, '/dev/nullb0\x00'}, {0x20, '@'}], 0xa, "7fe363472b904e89894821afed7b7f72f4961b59e68d48ad15d4fcb7794d08757e9c145f221ac7687bdcd8c90d50743f86ab92c8e6827b5ccbd873d2de40517c29203178d5f241397007b8c64aa096d6"}, 0x87)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000000), &(0x7f0000000040)={'U-', 0x5}, 0x16, 0x1)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000bc0))
ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000700090000000f00000008000300", @ANYRES32=r6, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000000000000080026006c09000008000c006400000008000d000000000010005a800c0000800500020030000000"], 0x6c}}, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
fcntl$setpipe(r0, 0x408, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120199e9000050cb4640450e109cdb43299dc8718f3bafb01097492940a80909021b00090000000009"], 0x0)

4.718637903s ago: executing program 0 (id=8144):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x715cb}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
connect$inet(r1, &(0x7f0000002d80)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000080)=0x7ff, 0x4)
r4 = socket(0x2b, 0x80801, 0x0)
bind$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

4.466921441s ago: executing program 0 (id=8145):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000dc)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff8800000000000000000000000000000000000100"/40, 0x28}], 0x1}, 0x0)

4.327780975s ago: executing program 0 (id=8146):
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r2, 0x4bfa, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000e1"])

4.189890635s ago: executing program 0 (id=8148):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x0, 0x0, 0x0, 0x0, 0xe353, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40000000]})
r1 = eventfd(0x0)
unshare(0x22020600)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x2)
flock(r4, 0x2)
setsockopt$sock_attach_bpf(r2, 0x119, 0x8, &(0x7f0000000000), 0x4)
writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x20000023896)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3a9bd5a8a"})
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="d544991bfd088548", 0x8}, {&(0x7f0000000280)="ff4841f7b3c08880dba79cb2840da4e270765ccd1becd19277467b0fe7cc3e0f66d8e14e397b535b9ae16589df9b39f4c31bd21a21437c5bc765cd95dcaa35cff5d075ab20167e0a0c36305c924a094c11afa678475f9cf328f1adb9851764396022aa868cb3191cf47f51e693fa1e", 0x6f}], 0x2)
gettid()
r8 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
close(r1)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "5390e55e4a0113ad12a9692b8eaab89b3a186c"})
r10 = dup(r9)
write$UHID_INPUT(r10, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d330987f70e06d038e7ff7fc6e5539b324b298b089b0708354a090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193b63735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d759be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d6e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bacdc76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5092f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b1cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b384c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a119b616d41826137ba5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4f006738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba30642f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e51f7d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d2462374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a0000ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6994ff2bdfb14cb6d648cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

3.489148459s ago: executing program 2 (id=8151):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000200000000000000000003003e0000000000000000007c80000040000000000000000000000000f8000000000000000038"], 0x9a) (async, rerun: 32)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000001ac0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x29, 0x0, @empty, @private}}}}) (async)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=0x0, @ANYBLOB="0108005dd4b1ddcfe6ebcb92259b1f00000b", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x24, 0x11, 0x0, 0x0, @binary="863c0c29d932bc949b553791c5e48ba1f4bed0cbdd123b7f262fe96987bc058b"}]}, 0x38}, 0x1, 0x3000000}, 0x40)

3.280605234s ago: executing program 0 (id=8152):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010103}, {@multicast1}, {@remote, 0x5}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000061d000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000480)="648388460062bad104b000ee0f155e28640f58bb62366766c7442400bbe300006766c7442402000000006766c744240600000000670f0114240f20c06635200000000f22c066b8e0faffff0f23c80f21f86635040040000f23f836650fc7695a0f01c8b80e000f00d0", 0x69}], 0x1, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f00000003c0), 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000000000050000000a004e200e8a34c38f"], 0x310)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa4, 0xd2, 0xff, 0x40, 0x5f3, 0x240, 0x1b24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4e, 0xaf, 0x32}}]}}]}}, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000440)={0x1, {{0xa, 0x4e20, 0x3, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0xe0, 0x188, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @empty, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
fcntl$getownex(r3, 0x10, &(0x7f0000000400))
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.689685475s ago: executing program 4 (id=8154):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000002c0)=0xa0000)
r2 = dup(r1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, <r3=>0xffffffffffffffff})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100))
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000d80)={&(0x7f0000000300)={{@my=0x0}, {}, 0x400, "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"}, 0x418})
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='.\x00', 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000040)=0xfffffffd, 0x4)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0)

2.558839108s ago: executing program 2 (id=8155):
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000240))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5)
sendto$inet(r2, &(0x7f0000000080)="fe", 0x1, 0x80, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @rand_addr=0x64010101}, 0x8)
sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)
fstatfs(r2, &(0x7f0000000100)=""/8)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
getrandom(&(0x7f0000000880)=""/288, 0x120, 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x363)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00')
execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780))
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="0008744fd9711482156612800b0001006572737061c19f7ae7e6cab8288ab05a57000000000000006e8200090000000000000028bd936cf10fc062d06c9f8c1bf05e6757a9d50ff951c02b69d1b311a0cc9fda000000"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8000)
socket$nl_xfrm(0x10, 0x3, 0x6)

2.012454244s ago: executing program 1 (id=8156):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="cd21f051c07550513810be15fd1d158be75262e9f2e619dd9c836ad7f0b9859a3e60f0b68bab4913cda7b3358bff82cfb6", 0x31}, {&(0x7f0000000400)="173289d6669db1104c3720b7a603eff34b5245c5c7c44d12c66b3f8274355bd90487057b275c26e6832cb1082e5c6bcac3903b60fbb0a696423ff372c2fedc3c3aef3e6afef32f19c21197815728a30e5429e1ef923b38023d6facf153c6c26374ece879d861dae0ada3d737d006ec1c7ef5fa3c615b3d1e12", 0x79}, {&(0x7f0000000580)="90fac2c7e831d5724a5a9fca3fac77cdbe4a551eb7ea325d4c7a4ad617f1904524a3aa74f77970051df448985b65e0171523df8877754e65de9b982a706e697cec529ada8437668d14", 0x49}, {&(0x7f0000000480)="4342faca89eb3fdc57f7e0a12d95c2ec7af0fda0a559a1969eea77cccd6b00bf5486", 0x22}], 0x4, 0xffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
syz_open_dev$evdev(&(0x7f0000000140), 0x9, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x2}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_TSS_ADDR(r6, 0xaea2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8100080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a14080028bd7000fbdbdf250800010002000000085503000200000008001d000300000008000100010000000800010002000000080001000200000008001500020000000800150005000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4048844)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x7}}]}, 0x2c}}, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000000500), 0x77, 0x1a1281)
ioctl$USBDEVFS_FREE_STREAMS(r10, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r10, 0x80005520, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f00000004c0)={0xa0, 0x2000, 0x2000, 0x240, 0x0, 0x0, 0x0, 0x2, {0x0, 0xfffffffc, 0x1}, {0x8000}, {0x0, 0x5d8}, {0x0, 0x1000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x5})
r11 = socket$inet6(0xa, 0x1, 0x2000000)
ioctl$sock_SIOCGIFBR(r11, 0x8940, &(0x7f0000000040)=@generic={0x1, 0xfffffffffffffff8})
pidfd_getfd(0xffffffffffffffff, r9, 0x0)

1.587299087s ago: executing program 1 (id=8157):
capset(&(0x7f0000000300)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000100)={0x800, 0x9, 0x0, 0x6, 0x7ff})
syz_open_dev$vim2m(0x0, 0xfffffffffffffff9, 0x2) (async)
syz_open_dev$vim2m(0x0, 0xfffffffffffffff9, 0x2)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x400}}, 0x18) (async)
write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x400}}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES8, @ANYRES64, @ANYRES32=r1], 0x18}}, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000)
shmdt(r2) (async)
shmdt(r2)
r3 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18004, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) (async)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04015b0c"], 0x7)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
statx(r3, &(0x7f0000000140)='./file0\x00', 0x400, 0x40, 0x0) (async)
statx(r3, &(0x7f0000000140)='./file0\x00', 0x400, 0x40, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000003080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280), 0x0)
socket$inet(0x2, 0x0, 0x0)
utimes(0x0, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x8)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
socket$netlink(0x10, 0x3, 0x15)

1.582138272s ago: executing program 2 (id=8158):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.279641244s ago: executing program 1 (id=8159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000014000905000000000000000002000000", @ANYBLOB="08000a000000000008000200e000000208000400ac1414aa080001007f00000108000400ac14"], 0x48}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000000003404000001ed0a0014040000170000803c400000000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.170049065s ago: executing program 1 (id=8160):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x803, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1})
r2 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x810)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
creat(&(0x7f0000000500)='./file0\x00', 0xd931d3864d39ddd8)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
creat(0x0, 0x1de)
chown(0x0, 0x0, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000380600fe880000000000000000000400000001fe8000000000000000000000000000aa00000000ca14751e446239a30bbfac931c68042c998cd8661b96fb85c5d642d3019808c49bb118c55c100eded0adfc12927f7ad53dcadd3efe82456f15d8911ee0c00b10fa844aeb3c2ff30fd023050c8f5e4712aeb83aa887550af7af0e89299e0e9dcc946bc708bc45cd8121850255c215df567c993681db07a11924b513b56d04e0b2a00327179249bea82a26040038a9ba00a72e236cc364081fb6d8718bececc9eb07b43f191ba67f942e593201f038fd461e1355cd59", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001d12bb9b69de4386bf2ae6a3b321505c68cd1d12c52a2d43d2c855000000000000000000"], 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ppoll(&(0x7f00000001c0)=[{r3, 0x100}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1.081939605s ago: executing program 4 (id=8161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000540)={0xa, 0x4e23, 0x1000000080000, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@dstopts_2292={{0x12, 0x29, 0x36, {0x2c}}}, @hopopts={{0x18}}], 0x30}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000580)={0x0, 0x0, 0x7f, {0x7f, 0x0, "f42784bd98a609ba0eb6d3e8d1aef81ba1aa1a491b3dbb1bca8d7881f9133bb42cd667d373fe8b864e6893f6937ee6e492e3e8740207e6fba23a2c5f2d7041ba0a4364aaf31455e5b04aa61a914ba9fbe1cd0b0bc7fed9f4541de7247043eb52ddb29d5d2944952bf37263478eb1b3ac781923faa25af5beab1f9a8fe3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73)
socket$inet6(0xa, 0x6, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r4], 0x40}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100636f6e6e6c696d6974000000140002800800024000001c00080001"], 0xac}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0)

955.821117ms ago: executing program 1 (id=8162):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX])
write$binfmt_script(r1, &(0x7f0000000100), 0x10010)
close_range(r1, r0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0)
utimensat(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)

942.268838ms ago: executing program 1 (id=8163):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
dup(r0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
socket$kcm(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r4=>0x0})
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="4dcdc7d96a760000002c00050000000000060000", 0x14, 0x24004840, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x2}, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000003c0)="05", 0x1)
r7 = accept$alg(r6, 0x0, 0x0)
write$binfmt_script(r7, &(0x7f0000000600), 0xfec8)
recvmmsg(r7, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/4095, 0xfff}, {&(0x7f0000000040)=""/73, 0x49}], 0x2}, 0x1}], 0x1, 0x40000100, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

745.263737ms ago: executing program 2 (id=8164):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x1, 0x0)
fcntl$setpipe(r0, 0x408, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

560.22212ms ago: executing program 2 (id=8165):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000000000000700000044042800000000001c00000000000000f000000008000000", @ANYBLOB="ac8af1695e5b"], 0x38}}], 0x1, 0x8040)

375.426665ms ago: executing program 2 (id=8166):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$kcm(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002100)="71d4accacb", 0x5}], 0x1, &(0x7f0000004800)=[{0x10, 0x0, 0xb}, {0x10, 0x1, 0x2}], 0x20}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000003c0)={'gretap0\x00', <r1=>0x0, 0x80, 0x7800, 0x4, 0x100, {{0x1c, 0x4, 0x0, 0x6, 0x70, 0x64, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xc, 0x3, 0x0, [{@broadcast, 0x8d2c}, {@remote, 0x80000000}, {@rand_addr=0x64010101, 0x1}, {@remote, 0x10001}]}, @noop, @timestamp={0x44, 0x8, 0x35, 0x0, 0x6, [0x9]}, @ssrr={0x89, 0x13, 0x79, [@loopback, @multicast1, @multicast1, @empty]}, @timestamp_prespec={0x44, 0x14, 0x1b, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x1}, 0x3}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0x7, 0xc7, [@rand_addr=0x64010100]}]}}}}})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r2, 0x702, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x2, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x301}, 0x14}}, 0x8000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0xc0}}, 0x0)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1, 0xe, 0x4}, 0xfd}, 0x18)
io_uring_setup(0x4e5e, &(0x7f0000000000)={0x0, 0xfffffff9, 0x1f, 0x400000, 0xfffffffd})

0s ago: executing program 0 (id=8167):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x0, 0x7ffffffd}, 0x20)
bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9, 0x4}, 0x20)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @dev}}}}}}, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c2000905"], 0x0)
getsockname$qrtr(r2, &(0x7f0000000080), &(0x7f0000000100)=0xc)
connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

ngs: Mfr=0, Product=0, SerialNumber=0
[ 2408.219413][T26697] usb 3-1: config 0 descriptor??
[ 2408.235138][T26697] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 2408.686812][   T82] team0: Port device bond0 removed
[ 2408.703050][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2408.765192][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2408.804606][   T82] bond0 (unregistering): Released all slaves
[ 2409.103577][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2409.114798][ T5089] Bluetooth: hci7: command tx timeout
[ 2409.142777][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2409.181858][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2409.272944][ T9819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2409.539929][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7879'.
[ 2409.696989][ T9819] hsr_slave_0: entered promiscuous mode
[ 2409.704550][ T9819] hsr_slave_1: entered promiscuous mode
[ 2409.714691][ T9819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2409.727660][ T9819] Cannot create hsr debugfs directory
[ 2410.077738][T26697] gspca_nw80x: reg_w err -110
[ 2410.082545][T26697] nw80x 3-1:0.0: probe with driver nw80x failed with error -110
[ 2410.102111][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7880'.
[ 2410.117445][ T9909] netlink: 'syz.4.7880': attribute type 14 has an invalid length.
[ 2410.181228][ T9909] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2410.190337][ T9909] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2410.199264][ T9909] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2410.208065][ T9909] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2410.225416][ T9909] vxlan0: entered promiscuous mode
[ 2410.627653][ T5321] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 2410.798260][ T5321] usb 5-1: Using ep0 maxpacket: 32
[ 2410.830893][ T5321] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 2410.877614][ T5321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2410.923342][ T5321] usb 5-1: config 0 descriptor??
[ 2411.064997][ T9675] veth0_vlan: entered promiscuous mode
[ 2411.163041][ T9786] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2411.187562][ T5089] Bluetooth: hci7: command tx timeout
[ 2411.224778][T28881] usb 3-1: USB disconnect, device number 86
[ 2411.385457][ T9786] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2411.410686][ T9786] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2411.581485][   T82] hsr_slave_0: left promiscuous mode
[ 2411.595654][   T82] hsr_slave_1: left promiscuous mode
[ 2411.603823][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2411.617427][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2411.638638][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2411.646312][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2411.671709][   T82] hsr_slave_0: left promiscuous mode
[ 2411.690941][   T82] hsr_slave_1: left promiscuous mode
[ 2411.698484][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2411.718015][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2411.725519][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2411.792162][   T82] veth1_macvtap: left promiscuous mode
[ 2411.800070][   T82] veth0_macvtap: left promiscuous mode
[ 2411.805720][   T82] veth1_vlan: left promiscuous mode
[ 2411.811344][   T82] veth0_vlan: left promiscuous mode
[ 2411.818125][   T82] veth1_macvtap: left promiscuous mode
[ 2411.824025][   T82] veth0_macvtap: left promiscuous mode
[ 2411.837055][   T82] veth1_vlan: left promiscuous mode
[ 2411.843342][   T82] veth0_vlan: left promiscuous mode
[ 2412.891465][   T82] team0 (unregistering): Port device team_slave_1 removed
[ 2412.974061][   T29] audit: type=1326 audit(1726787635.887:15656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9907 comm="syz.4.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7fc00000
[ 2412.996724][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2413.016543][ T5321] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 2413.018301][   T82] team0 (unregistering): Port device team_slave_0 removed
[ 2413.050359][ T5321] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 2413.107798][ T5321] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 2415.204170][ T9952] can: request_module (can-proto-3) failed.
[ 2415.209291][ T9954] xt_hashlimit: max too large, truncated to 1048576
[ 2415.437962][   T82] team0 (unregistering): Port device team_slave_1 removed
[ 2415.525264][   T82] team0 (unregistering): Port device team_slave_0 removed
[ 2416.393959][ T9786] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2416.459734][ T9675] veth1_vlan: entered promiscuous mode
[ 2417.014850][ T9675] veth0_macvtap: entered promiscuous mode
[ 2417.169591][ T9675] veth1_macvtap: entered promiscuous mode
[ 2417.259864][ T9786] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2417.280452][ T9819] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2417.320989][ T9819] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2417.344231][ T9819] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2417.363859][ T9819] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2417.413690][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.438212][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.449043][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.467489][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.478156][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.490981][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.501325][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.512194][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.523190][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.534660][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.544612][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.555299][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.568131][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2417.586378][ T9786] 8021q: adding VLAN 0 to HW filter on device team0
[ 2417.600780][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.614194][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.624902][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.635747][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.646747][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.658756][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.669248][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.680889][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.692936][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.704257][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.724824][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.741573][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.753148][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.763963][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.775883][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2417.802875][ T9675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2417.813438][ T9675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2417.826818][ T9675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2417.839312][ T9675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2417.874830][T19283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2417.882025][T19283] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2417.926065][ T1496] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2417.933235][ T1496] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2417.984339][   T82] IPVS: stop unused estimator thread 0...
[ 2418.109963][ T9786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2418.183579][T19283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2418.204020][T19283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2418.310433][ T9786] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2418.547176][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2418.567371][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2418.665921][ T9819] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2418.761193][ T9819] 8021q: adding VLAN 0 to HW filter on device team0
[ 2418.791287][ T9786] veth0_vlan: entered promiscuous mode
[ 2418.819165][ T9786] veth1_vlan: entered promiscuous mode
[ 2418.884479][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2418.891670][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2419.005620][ T1496] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2419.012862][ T1496] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2419.127222][ T9786] veth0_macvtap: entered promiscuous mode
[ 2419.141748][ T9786] veth1_macvtap: entered promiscuous mode
[ 2419.148154][T12642] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 2419.214376][ T9819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2419.266396][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2419.307416][T12642] usb 3-1: Using ep0 maxpacket: 16
[ 2419.314624][T12642] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[ 2419.327419][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.347664][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2419.347787][T12642] usb 3-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config
[ 2419.367321][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.397399][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2419.407509][T12642] usb 3-1: config 0 has no interface number 0
[ 2419.414030][T12642] usb 3-1: config 0 interface 214 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[ 2419.417392][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.442448][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2419.455094][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.470619][T12642] usb 3-1: Dual-Role OTG device on HNP port
[ 2419.478991][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2419.498118][T12642] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 2419.501469][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.507228][T12642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2419.517350][T12642] usb 3-1: Product: syz
[ 2419.517375][T12642] usb 3-1: Manufacturer: syz
[ 2419.517396][T12642] usb 3-1: SerialNumber: syz
[ 2419.543574][T12642] usb 3-1: config 0 descriptor??
[ 2419.583189][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2419.625843][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.642851][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2419.668502][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.682043][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2419.734535][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2419.745921][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.757227][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2419.771261][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.782138][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2419.793469][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.803392][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2419.814761][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.824760][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2419.836326][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.846569][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2419.858068][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.870280][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2419.882599][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.893443][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2419.917674][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2419.934795][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2419.948978][ T9786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2419.962347][ T9786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2419.971858][ T9786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2419.981119][ T9786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2420.078787][ T9819] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2420.178362][ T9989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2420.197228][ T9989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2420.239236][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2420.247129][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2420.309538][ T9819] veth0_vlan: entered promiscuous mode
[ 2420.334763][ T1496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2420.348517][ T1496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2420.372774][ T9819] veth1_vlan: entered promiscuous mode
[ 2420.449745][ T9819] veth0_macvtap: entered promiscuous mode
[ 2420.488788][ T9819] veth1_macvtap: entered promiscuous mode
[ 2420.570968][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2420.592978][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2420.623621][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2420.654721][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2420.694083][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2420.726051][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2420.794883][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2420.846776][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2420.883065][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2420.912254][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2420.942711][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2420.995055][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.026746][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2421.094857][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.142141][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2421.167312][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.191068][ T9819] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2421.221279][T10023] netlink: 'syz.0.7854': attribute type 12 has an invalid length.
[ 2421.250707][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2421.279661][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.307011][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2421.317804][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.347083][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2421.378559][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.391334][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2421.402272][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.412559][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2421.423470][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.436896][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2421.471942][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.502010][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2421.531208][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.575389][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2421.586236][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.599334][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2421.614291][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2421.643341][ T9819] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2421.683443][ T9819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2421.695420][ T9819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2421.706112][ T9819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2421.717461][ T9819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2421.918714][ T1505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2421.938692][ T1505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2421.971811][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2421.982730][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2422.943266][ T5229] usb 3-1: USB disconnect, device number 87
[ 2422.967834][T12642] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 2423.163229][T12642] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2423.203627][T12642] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2423.237428][T12642] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2423.257669][T12642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2423.292415][T10040] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 2423.338458][T12642] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 2423.481353][T10053] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0
[ 2423.493617][T10044] IPVS: stopping backup sync thread 10053 ...
[ 2423.662057][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2423.709131][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2423.848012][T10063] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7905'.
[ 2423.945010][T10063] bond0: entered promiscuous mode
[ 2423.967889][T10063] bond_slave_0: entered promiscuous mode
[ 2423.993175][T10063] bond_slave_1: entered promiscuous mode
[ 2424.018085][T10063] bond0: entered allmulticast mode
[ 2424.042460][T10063] bond_slave_0: entered allmulticast mode
[ 2424.068213][T10063] bond_slave_1: entered allmulticast mode
[ 2424.109253][T10065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7905'.
[ 2424.440072][T10083] trusted_key: encrypted_key: keyword 'ne•' not recognized
[ 2425.244984][   T29] audit: type=1326 audit(1726787648.157:15657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.0.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e9d7def9 code=0x7ffc0000
[ 2425.339060][   T29] audit: type=1326 audit(1726787648.197:15658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.0.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e9d7def9 code=0x7ffc0000
[ 2425.361699][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2425.443920][   T29] audit: type=1326 audit(1726787648.197:15659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.0.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb3e9d7def9 code=0x7ffc0000
[ 2425.472980][   T29] audit: type=1326 audit(1726787648.207:15660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.0.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e9d7def9 code=0x7ffc0000
[ 2425.518583][   T29] audit: type=1326 audit(1726787648.207:15661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.0.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e9d7def9 code=0x7ffc0000
[ 2425.872826][T12642] usb 2-1: USB disconnect, device number 13
[ 2425.929392][T10109] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7917'.
[ 2425.953973][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7917'.
[ 2426.957452][T12642] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 2427.137508][T12642] usb 2-1: Using ep0 maxpacket: 32
[ 2427.144643][T12642] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 2427.153790][T12642] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2427.185504][T12642] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 151, changing to 11
[ 2427.197937][T12642] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 17729, setting to 1024
[ 2427.209596][T12642] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2427.228332][T12642] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2427.246295][T12642] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2427.255660][T12642] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2427.264305][T12642] usb 2-1: Product: syz
[ 2427.271307][T12642] usb 2-1: Manufacturer: syz
[ 2427.275965][T12642] usb 2-1: SerialNumber: syz
[ 2427.289943][T12642] usb 2-1: config 0 descriptor??
[ 2427.297066][T10116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2427.322338][T12642] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2427.343775][T12642] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 2427.791657][T10122] fuse: Bad value for 'fd'
[ 2427.850211][ T7527] usb 2-1: USB disconnect, device number 14
[ 2427.881136][ T7527] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[ 2428.927780][ T7527] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 2428.948243][T26698] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 2429.097226][T10134] usb usb6: usbfs: process 10134 (syz.4.7926) did not claim interface 0 before use
[ 2429.119252][ T7527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2429.130709][ T7527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2429.141502][ T7527] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2429.154969][ T7527] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[ 2429.164453][ T7527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2429.173140][T26698] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2429.185574][T26698] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2429.197879][T26698] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2429.207063][T26698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2429.216233][ T7527] usb 3-1: config 0 descriptor??
[ 2429.231013][T10132] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 2429.243758][T26698] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 2429.448665][T28881] usb 2-1: USB disconnect, device number 15
[ 2429.572425][   T29] audit: type=1326 audit(1726787652.487:15662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2429.595002][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2429.605372][   T29] audit: type=1326 audit(1726787652.487:15663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2429.628219][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2429.633050][ T7527] prodikeys 0003:041E:2801.00A0: unexpected long global item
[ 2429.636748][   T29] audit: type=1326 audit(1726787652.487:15664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2429.663310][ T7527] prodikeys 0003:041E:2801.00A0: hid parse failed
[ 2429.664570][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2429.689890][ T7527] prodikeys 0003:041E:2801.00A0: probe with driver prodikeys failed with error -22
[ 2429.691754][   T29] audit: type=1326 audit(1726787652.487:15665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2429.723137][   T29] audit: type=1326 audit(1726787652.487:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.4.7927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2429.745809][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2429.846368][T26698] usb 3-1: USB disconnect, device number 88
[ 2429.927580][ T5229] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 2430.026019][T10145] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7929'.
[ 2430.041449][T10145] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7929'.
[ 2430.082151][ T5229] usb 2-1: config 2 has an invalid interface number: 48 but max is 0
[ 2430.101854][ T5229] usb 2-1: config 2 has no interface number 0
[ 2430.109809][ T5229] usb 2-1: config 2 interface 48 has no altsetting 0
[ 2430.116584][ T5229] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=a0.c8
[ 2430.136383][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2430.169814][ T5229] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state.
[ 2430.207949][ T5229] cxusb: set interface failed
[ 2430.217842][ T5229] dvb-usb: bulk message failed: -22 (1/0)
[ 2430.241407][ T5229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2430.274929][ T5229] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R))
[ 2430.284873][T10153] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2430.290587][ T5229] usb 2-1: media controller created
[ 2430.314208][ T5229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2430.441694][ T5229] DVB: Unable to find symbol lgdt330x_attach()
[ 2430.458327][ T5229] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)'
[ 2430.479846][ T5229] dvb-usb: bulk message failed: -22 (1/0)
[ 2430.485645][ T5229] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected.
[ 2430.513325][ T5229] usb 2-1: USB disconnect, device number 16
[ 2430.588625][ T5229] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
[ 2430.987690][T12642] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 2431.159504][T12642] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 2431.207328][T12642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2431.227492][T12642] usb 3-1: config 0 descriptor??
[ 2431.256888][T12642] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 2431.321957][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7937'.
[ 2431.341952][T10173] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[ 2431.892511][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2431.915814][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2432.268246][T10188] netlink: 'syz.1.7941': attribute type 1 has an invalid length.
[ 2432.276270][T10188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7941'.
[ 2432.339680][T12642] gspca_stv06xx: HDCS-1000/1100 sensor detected
[ 2432.540180][ T5229] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 2432.708211][ T5229] usb 2-1: Using ep0 maxpacket: 16
[ 2432.725003][ T5229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2432.735557][ T5229] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2432.746938][ T5229] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=ff.40
[ 2432.759443][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 2432.767807][ T5229] usb 2-1: Product: syz
[ 2432.772259][ T5229] usb 2-1: SerialNumber: syz
[ 2432.810160][T10166] netlink: 'syz.2.7935': attribute type 10 has an invalid length.
[ 2432.831667][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2432.849796][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2432.995197][ T5229] usb 2-1: 0:2 : does not exist
[ 2433.025217][ T5229] usb 2-1: USB disconnect, device number 17
[ 2433.075514][T12642] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71
[ 2433.110618][T12642] usb 3-1: USB disconnect, device number 89
[ 2433.694262][T10195] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 2434.291861][ T7527] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 2434.468980][ T7527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2434.481351][ T7527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2434.524786][ T7527] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2434.547415][ T7527] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2434.580850][ T7527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2434.605242][ T7527] usb 3-1: config 0 descriptor??
[ 2435.184825][ T5089] Bluetooth: hci5: unexpected event for opcode 0x2005
[ 2435.197363][ T5089] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 2435.217513][T12642] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 2435.242200][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7951'.
[ 2435.303164][ T7527] usbhid 3-1:0.0: can't add hid device: -71
[ 2435.324656][ T7527] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2435.353294][ T7527] usb 3-1: USB disconnect, device number 90
[ 2435.368902][T12642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2435.383667][T12642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2435.403825][T12642] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[ 2435.413914][T12642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2435.435188][T12642] usb 2-1: config 0 descriptor??
[ 2435.851669][T12642] usbhid 2-1:0.0: can't add hid device: -32
[ 2435.859311][T12642] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[ 2435.944471][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7952'.
[ 2436.959134][T10236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7955'.
[ 2436.968758][T10238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7955'.
[ 2437.457435][T12642] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 2437.617401][T12642] usb 3-1: Using ep0 maxpacket: 16
[ 2437.624810][T12642] usb 3-1: config index 0 descriptor too short (expected 2340, got 36)
[ 2437.633522][T12642] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[ 2437.641787][T12642] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2437.650969][T12642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2437.662157][T12642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2437.676864][T12642] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 2437.686156][T12642] usb 3-1: New USB device strings: Mfr=1, Product=32, SerialNumber=0
[ 2437.695287][T12642] usb 3-1: Product: syz
[ 2437.699789][T12642] usb 3-1: Manufacturer: syz
[ 2437.706789][T12642] usb 3-1: config 0 descriptor??
[ 2438.024231][T12642] usbhid 3-1:0.0: can't add hid device: -71
[ 2438.033548][ T7527] usb 2-1: USB disconnect, device number 18
[ 2438.042103][T12642] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2438.067744][T12642] usb 3-1: USB disconnect, device number 91
[ 2438.759990][T10276] fuse: Unknown parameter 'rooÃmode'
[ 2439.190652][ T5089] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 2439.200188][ T5089] Bluetooth: hci5: Injecting HCI hardware error event
[ 2439.214826][   T55] Bluetooth: hci5: hardware error 0x00
[ 2440.178100][T10293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7970'.
[ 2440.205735][T10293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7970'.
[ 2441.007545][ T7526] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 2441.068550][T10315] loop4: detected capacity change from 0 to 7
[ 2441.078399][T10315] Dev loop4: unable to read RDB block 7
[ 2441.084751][T10315]  loop4: unable to read partition table
[ 2441.097008][T10315] loop4: partition table beyond EOD, truncated
[ 2441.105004][T10315] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2441.189152][ T7526] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 2441.215768][ T7526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2441.253329][ T7526] usb 3-1: config 0 descriptor??
[ 2441.289153][ T7526] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 2441.347786][   T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 2441.475475][T10324] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[ 2441.893977][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2441.909528][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2442.380237][ T7526] gspca_stv06xx: HDCS-1000/1100 sensor detected
[ 2442.751979][   T55] Bluetooth: Wrong link type (-71)
[ 2442.849173][T10308] netlink: 'syz.2.7975': attribute type 10 has an invalid length.
[ 2442.874613][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2442.902004][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2443.138993][ T7526] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71
[ 2443.170111][ T7526] usb 3-1: USB disconnect, device number 92
[ 2443.389117][T10357] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[ 2443.443088][T10358] fuse: Unknown parameter 'root'
[ 2443.547671][ T5281] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 2443.712769][ T5281] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2443.722264][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2443.733130][ T5281] usb 2-1: config 0 descriptor??
[ 2443.750855][ T5281] cp210x 2-1:0.0: cp210x converter detected
[ 2443.958743][ T7526] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 2444.149243][ T7526] usb 3-1: Using ep0 maxpacket: 8
[ 2444.161998][ T7526] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[ 2444.171464][ T7526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2444.179671][ T7526] usb 3-1: Product: syz
[ 2444.185846][ T7526] usb 3-1: Manufacturer: syz
[ 2444.190666][ T7526] usb 3-1: SerialNumber: syz
[ 2444.197617][ T7526] usb 3-1: config 0 descriptor??
[ 2444.204795][ T7526] cdc_phonet 3-1:0.0: skipping garbage
[ 2444.214529][ T7526] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22
[ 2444.239741][ T5281] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 2444.414464][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7992'.
[ 2444.427420][T10360] bridge_slave_1: left allmulticast mode
[ 2444.433134][T10360] bridge_slave_1: left promiscuous mode
[ 2444.447763][T10360] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2444.457151][T10360] bridge_slave_0: left allmulticast mode
[ 2444.466882][T10360] bridge_slave_0: left promiscuous mode
[ 2444.467565][T10363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7992'.
[ 2444.476019][T10360] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2444.481758][    C0] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[ 2444.507885][ T5281] usb 2-1: cp210x converter now attached to ttyUSB0
[ 2444.662262][ T1845] usb 3-1: USB disconnect, device number 93
[ 2446.061622][T10372] loop4: detected capacity change from 0 to 7
[ 2446.072936][T10372] Dev loop4: unable to read RDB block 7
[ 2446.078818][T10372]  loop4: unable to read partition table
[ 2446.085294][T10372] loop4: partition table beyond EOD, truncated
[ 2446.092519][T10372] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2446.324320][ T7526] usb 2-1: USB disconnect, device number 19
[ 2446.343551][ T7526] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2446.382195][ T7526] cp210x 2-1:0.0: device disconnected
[ 2446.524115][ T1845] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 2446.666417][T10391] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[ 2446.687538][ T1845] usb 3-1: Using ep0 maxpacket: 32
[ 2446.689057][ T1845] usb 3-1: config 0 has an invalid interface number: 202 but max is 0
[ 2446.689089][ T1845] usb 3-1: config 0 has no interface number 0
[ 2446.689129][ T1845] usb 3-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2446.690908][ T1845] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 2446.690943][ T1845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2446.690969][ T1845] usb 3-1: Product: syz
[ 2446.690989][ T1845] usb 3-1: Manufacturer: syz
[ 2446.691009][ T1845] usb 3-1: SerialNumber: syz
[ 2446.693207][ T1845] usb 3-1: config 0 descriptor??
[ 2446.737799][ T1845] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2446.788116][   T55] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[ 2446.788287][   T55] Bluetooth: hci7: Injecting HCI hardware error event
[ 2446.792642][ T5089] Bluetooth: hci7: hardware error 0x00
[ 2447.063098][T10405] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2447.459247][ T5281] usb 3-1: USB disconnect, device number 94
[ 2447.460489][T19283] usb 3-1: Failed to submit usb control message: -71
[ 2447.487716][T19283] usb 3-1: unable to send the bmi data to the device: -71
[ 2447.505919][T19283] usb 3-1: unable to get target info from device
[ 2447.522524][T19283] usb 3-1: could not get target info (-71)
[ 2447.529094][T19283] usb 3-1: could not probe fw (-71)
[ 2447.660387][T10407] loop4: detected capacity change from 0 to 7
[ 2447.667178][T10407] Dev loop4: unable to read RDB block 7
[ 2447.677967][T10407]  loop4: unable to read partition table
[ 2447.688015][T10407] loop4: partition table beyond EOD, truncated
[ 2447.694426][T10407] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2447.778553][T10411] [U] 
[ 2447.781306][T10411] [U] 
[ 2447.784034][T10411] [U] 
[ 2447.786751][T10411] [U] 
[ 2447.791059][T10411] [U] 
[ 2447.793812][T10411] [U] 
[ 2447.796548][T10411] [U] 
[ 2447.799278][T10411] [U] 
[ 2447.802549][T10411] [U] 
[ 2447.805293][T10411] [U] 
[ 2447.808030][T10411] [U] 
[ 2447.810762][T10411] [U] 
[ 2447.815173][T10411] [U] 
[ 2447.817925][T10411] [U] 
[ 2447.820652][T10411] [U] 
[ 2447.823379][T10411] [U] 
[ 2447.827771][T10411] [U] 
[ 2447.830529][T10411] [U] 
[ 2447.833277][T10411] [U] 
[ 2447.835985][T10411] [U] 
[ 2447.847964][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8008'.
[ 2447.860305][T10411] [U] 
[ 2447.863064][T10411] [U] 
[ 2447.865787][T10411] [U] 
[ 2447.868523][T10411] [U] 
[ 2447.912183][T10411] [U] 
[ 2448.045164][T10422] netlink: 'syz.2.8010': attribute type 10 has an invalid length.
[ 2448.074029][T10422] batman_adv: batadv0: Adding interface: team0
[ 2448.080773][T10422] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2448.108502][T10422] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 2448.121594][T10423] netlink: 'syz.2.8010': attribute type 10 has an invalid length.
[ 2448.138552][T10423] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8010'.
[ 2448.159170][T10423] team0: entered promiscuous mode
[ 2448.164464][T10423] team_slave_0: entered promiscuous mode
[ 2448.174640][T10423] team_slave_1: entered promiscuous mode
[ 2448.187189][T10423] 8021q: adding VLAN 0 to HW filter on device team0
[ 2448.202574][T10423] batman_adv: batadv0: Interface activated: team0
[ 2448.213815][T10423] batman_adv: batadv0: Interface deactivated: team0
[ 2448.226868][T10423] batman_adv: batadv0: Removing interface: team0
[ 2448.257470][ T5281] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 2448.408259][ T5281] usb 2-1: device descriptor read/64, error -71
[ 2448.647568][ T5281] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 2448.789134][ T5281] usb 2-1: device descriptor read/64, error -71
[ 2448.903758][ T5281] usb usb2-port1: attempt power cycle
[ 2448.947592][ T5089] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[ 2449.257359][ T5281] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 2449.288722][ T5281] usb 2-1: device descriptor read/8, error -71
[ 2449.539613][ T5281] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 2449.605667][ T5281] usb 2-1: device descriptor read/8, error -71
[ 2449.635518][ T7527] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 2449.717993][ T5281] usb usb2-port1: unable to enumerate USB device
[ 2449.743299][T10433] cannot load conntrack support for proto=3
[ 2449.757335][   T29] kauditd_printk_skb: 22 callbacks suppressed
[ 2449.757355][   T29] audit: type=1326 audit(1726787672.667:15689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2449.758506][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8015'.
[ 2449.763810][   T29] audit: type=1326 audit(1726787672.667:15690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2449.829482][ T7527] usb 3-1: config index 0 descriptor too short (expected 64575, got 68)
[ 2449.848903][ T7527] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2449.865338][   T29] audit: type=1326 audit(1726787672.667:15691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2449.870663][ T7527] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[ 2449.909816][   T29] audit: type=1326 audit(1726787672.667:15692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2449.913504][ T7527] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 2449.959426][   T29] audit: type=1326 audit(1726787672.667:15693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2449.981895][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2449.983953][ T7527] usb 3-1: config index 1 descriptor too short (expected 64575, got 68)
[ 2449.989726][   T29] audit: type=1326 audit(1726787672.667:15694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2450.000261][ T7527] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2450.045411][ T7527] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[ 2450.063224][ T7527] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 2450.070550][   T29] audit: type=1326 audit(1726787672.667:15695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2450.098559][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2450.137153][ T7527] usb 3-1: string descriptor 0 read error: -71
[ 2450.142463][   T29] audit: type=1326 audit(1726787672.667:15696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2450.175475][ T7527] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2450.214364][ T7527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2450.228054][   T29] audit: type=1326 audit(1726787672.667:15697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2450.236567][ T7527] usb 3-1: can't set config #1, error -71
[ 2450.281403][ T7527] usb 3-1: USB disconnect, device number 95
[ 2450.299493][   T29] audit: type=1326 audit(1726787672.667:15698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.4.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65697def9 code=0x7ffc0000
[ 2450.493197][T10438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8017'.
[ 2450.946586][ T1507] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2451.045023][ T1507] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2451.239855][ T1507] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2451.294551][T10448] netlink: 'syz.1.8020': attribute type 10 has an invalid length.
[ 2451.342620][T10448] team0: Port device netdevsim0 added
[ 2451.432116][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2451.445292][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2451.455221][ T1507] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2451.467953][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2451.476237][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2451.484903][   T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 2451.497401][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2451.537678][ T5281] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 2451.699897][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2451.718502][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2451.718679][ T1507] bridge_slave_1: left allmulticast mode
[ 2451.729029][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 2451.745401][ T1507] bridge_slave_1: left promiscuous mode
[ 2451.746138][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 2451.756333][ T1507] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2451.762556][ T5281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[ 2451.782804][ T1507] bridge_slave_0: left allmulticast mode
[ 2451.788800][ T1507] bridge_slave_0: left promiscuous mode
[ 2451.794657][ T1507] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2451.805168][ T5281] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[ 2451.814500][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2451.823048][ T5281] usb 3-1: Product: syz
[ 2451.828717][ T5281] usb 3-1: Manufacturer: syz
[ 2451.833447][ T5281] usb 3-1: SerialNumber: syz
[ 2451.844315][ T5281] usb 3-1: config 0 descriptor??
[ 2451.862829][ T5281] usb 3-1: ucan: probing device on interface #0
[ 2451.876299][ T5281] usb 3-1: ucan: invalid endpoint configuration
[ 2451.887539][ T7526] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 2451.903899][ T5281] usb 3-1: ucan: probe failed; try to update the device firmware
[ 2452.078672][T10450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2452.102776][T10450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2452.144622][T12642] usb 3-1: USB disconnect, device number 96
[ 2452.611216][ T1507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2452.629088][ T1507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2452.641060][ T1507] bond0 (unregistering): Released all slaves
[ 2452.873179][T10463] loop4: detected capacity change from 0 to 7
[ 2452.907523][T10463] Dev loop4: unable to read RDB block 7
[ 2452.927370][T10463]  loop4: unable to read partition table
[ 2452.933339][T10463] loop4: partition table beyond EOD, truncated
[ 2452.994508][T10463] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2453.302468][T10453] chnl_net:caif_netlink_parms(): no params data found
[ 2453.446964][T10487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8027'.
[ 2453.478823][ T1507] hsr_slave_0: left promiscuous mode
[ 2453.484728][ T1507] hsr_slave_1: left promiscuous mode
[ 2453.551787][ T7526] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[ 2453.587598][ T5089] Bluetooth: hci6: command tx timeout
[ 2453.601935][ T1507] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2453.649968][ T1507] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2453.715426][ T1507] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2453.738772][ T7526] usb 2-1: not running at top speed; connect to a high speed hub
[ 2453.739255][ T1507] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2453.793450][ T7526] usb 2-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config
[ 2453.833632][ T7526] usb 2-1: config 247 has 1 interface, different from the descriptor's value: 2
[ 2453.866561][ T7526] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=90.6c
[ 2453.886898][ T7526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2453.936434][ T7526] usb 2-1: Product: syz
[ 2453.936439][ T1507] veth1_macvtap: left promiscuous mode
[ 2453.936467][ T7526] usb 2-1: Manufacturer: syz
[ 2453.944833][ T1507] veth0_macvtap: left promiscuous mode
[ 2453.959657][ T1507] veth1_vlan: left promiscuous mode
[ 2453.969516][ T7526] usb 2-1: SerialNumber: syz
[ 2453.969710][ T1507] veth0_vlan: left promiscuous mode
[ 2454.097750][T26698] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 2454.202805][T10478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2454.230241][T10478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2454.269685][T26698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2454.294171][T26698] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2454.322621][T26698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2454.363469][T26698] usb 3-1: config 0 descriptor??
[ 2454.825570][T26698] keytouch 0003:0926:3333.00A1: fixing up Keytouch IEC report descriptor
[ 2454.879543][T26698] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.00A1/input/input173
[ 2455.022103][T26698] keytouch 0003:0926:3333.00A1: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[ 2455.067671][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2455.171849][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2455.288419][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2455.329630][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2455.389342][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2455.440770][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2455.668133][ T5089] Bluetooth: hci6: command tx timeout
[ 2455.754141][T26697] usb 3-1: USB disconnect, device number 97
[ 2456.124272][ T1507] team0 (unregistering): Port device team_slave_1 removed
[ 2456.183297][ T7526] ch9200 2-1:247.0: probe with driver ch9200 failed with error -22
[ 2456.207546][ T7526] usb 2-1: USB disconnect, device number 25
[ 2456.300285][ T1507] team0 (unregistering): Port device team_slave_0 removed
[ 2456.409707][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2456.462646][T10503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[ 2456.469236][T10503] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 2456.479715][T10503] vhci_hcd vhci_hcd.0: Device attached
[ 2456.667411][ T5229] vhci_hcd: vhci_device speed not set
[ 2456.729270][ T5229] usb 13-1: new full-speed USB device number 3 using vhci_hcd
[ 2457.338806][T10504] vhci_hcd: connection reset by peer
[ 2457.346562][ T1508] vhci_hcd: stop threads
[ 2457.352022][ T1508] vhci_hcd: release socket
[ 2457.367941][ T1508] vhci_hcd: disconnect device
[ 2457.748916][ T5089] Bluetooth: hci6: command tx timeout
[ 2457.801625][T10495] dummy0: entered promiscuous mode
[ 2457.857613][T10495] dummy0: left promiscuous mode
[ 2458.301840][T10453] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2458.320600][T10453] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2458.360270][T10453] bridge_slave_0: entered allmulticast mode
[ 2458.403665][T10453] bridge_slave_0: entered promiscuous mode
[ 2458.438766][T10453] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2458.473401][T10453] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2458.495042][T10538] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000
[ 2458.504285][T10453] bridge_slave_1: entered allmulticast mode
[ 2458.548753][T10453] bridge_slave_1: entered promiscuous mode
[ 2458.704963][T10453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2458.742578][T10453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2458.852269][T10453] team0: Port device team_slave_0 added
[ 2458.907655][T26697] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 2458.927377][ T5281] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 2458.934542][T10453] team0: Port device team_slave_1 added
[ 2459.029848][T10453] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2459.043135][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2459.070624][T26697] usb 3-1: Using ep0 maxpacket: 16
[ 2459.081073][T10453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2459.094191][T26697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2459.105909][T26697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2459.117653][ T5281] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2459.128512][ T5281] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2459.140278][T10453] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2459.147583][T26697] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 2459.157036][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2459.184810][T26697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2459.197855][T26697] usb 3-1: config 0 descriptor??
[ 2459.204588][ T5281] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2459.224080][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2459.232988][ T5281] usb 2-1: Product: syz
[ 2459.240424][T10453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2459.251356][ T5281] usb 2-1: Manufacturer: syz
[ 2459.256059][ T5281] usb 2-1: SerialNumber: syz
[ 2459.280173][ T5281] usb 2-1: config 0 descriptor??
[ 2459.345678][T10453] hsr_slave_0: entered promiscuous mode
[ 2459.355229][T10453] hsr_slave_1: entered promiscuous mode
[ 2459.361963][T10453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2459.371107][T10453] Cannot create hsr debugfs directory
[ 2459.611229][T26697] samsung 0003:0419:0001.00A2: unknown main item tag 0x1
[ 2459.634549][T26697] samsung 0003:0419:0001.00A2: unknown main item tag 0x0
[ 2459.660761][T26697] samsung 0003:0419:0001.00A2: item fetching failed at offset 3/5
[ 2459.686655][T26697] samsung 0003:0419:0001.00A2: parse failed
[ 2459.700721][T26697] samsung 0003:0419:0001.00A2: probe with driver samsung failed with error -22
[ 2459.813137][T12642] usb 3-1: USB disconnect, device number 98
[ 2459.827586][ T5089] Bluetooth: hci6: command tx timeout
[ 2460.176527][T10453] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2460.186712][T10453] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2460.198381][T10453] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2460.209138][T10453] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2460.336624][T10453] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2460.377200][T10453] 8021q: adding VLAN 0 to HW filter on device team0
[ 2460.392793][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2460.400002][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2460.426738][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2460.433960][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2460.575860][T10453] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2460.660429][T10453] veth0_vlan: entered promiscuous mode
[ 2460.699373][T10453] veth1_vlan: entered promiscuous mode
[ 2460.754490][T10453] veth0_macvtap: entered promiscuous mode
[ 2460.783318][T10453] veth1_macvtap: entered promiscuous mode
[ 2460.818489][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.835379][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.855745][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.866972][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.878829][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.889819][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.900161][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.913980][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.935850][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.950172][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.972075][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.993929][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.015637][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2461.040796][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.052550][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2461.063742][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.076369][T10453] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2461.109003][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2461.135911][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.151923][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2461.169969][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.196394][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2461.216675][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.229263][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2461.246561][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.264116][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2461.281473][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.305140][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2461.321008][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.342324][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2461.366376][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.382924][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2461.399799][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.415670][T10453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2461.434919][T10453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2461.453469][T10453] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2461.478390][T10453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2461.497516][T10453] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2461.510246][T10453] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2461.521900][T10453] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2461.677891][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2461.718047][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2461.744320][ T1845] usb 2-1: USB disconnect, device number 26
[ 2461.796243][ T1507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2461.835328][ T1507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2461.848456][   T25] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 2461.898066][ T5229] vhci_hcd: vhci_device speed not set
[ 2462.031061][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2462.058417][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2462.101954][   T25] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 2462.130316][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2462.164612][   T25] usb 3-1: config 0 descriptor??
[ 2462.208675][ T1845] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 2462.379099][ T1845] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 2462.400988][ T1845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2462.438714][ T1845] usb 2-1: config 0 descriptor??
[ 2462.465134][ T1845] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 2462.780548][T10646] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2463.014627][   T25] hid-led 0003:27B8:01ED.00A3: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0
[ 2463.071991][T10616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2463.081251][   T25] hid-led 0003:27B8:01ED.00A3: ThingM blink(1) v1 initialized
[ 2463.103418][T10616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2463.228538][T10608] vlan2: entered promiscuous mode
[ 2463.298801][   T25] usb 3-1: USB disconnect, device number 99
[ 2463.542512][ T1845] gspca_stv06xx: HDCS-1000/1100 sensor detected
[ 2464.019271][T10616] netlink: 'syz.1.8048': attribute type 10 has an invalid length.
[ 2464.051522][T10616] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 2464.070126][T10616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2464.085862][T10616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2464.247445][ T5281] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 2464.303482][ T1845] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71
[ 2464.315183][ T1845] usb 2-1: USB disconnect, device number 27
[ 2464.409179][ T5281] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2464.427389][ T5281] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2464.444150][ T5281] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2464.453297][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2464.465144][T10652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2464.489508][ T5281] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 2464.749927][ T1845] usb 3-1: USB disconnect, device number 100
[ 2464.885358][T10657] fuse: Unknown parameter 'G'
[ 2464.890791][T10658] fuse: Unknown parameter 'G'
[ 2464.899340][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8057'.
[ 2464.913072][T10660] FAULT_INJECTION: forcing a failure.
[ 2464.913072][T10660] name failslab, interval 1, probability 0, space 0, times 0
[ 2464.933445][T10660] CPU: 1 UID: 0 PID: 10660 Comm: syz.1.8058 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[ 2464.943930][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2464.954031][T10660] Call Trace:
[ 2464.957348][T10660]  <TASK>
[ 2464.960299][T10660]  dump_stack_lvl+0x241/0x360
[ 2464.965000][T10660]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2464.970212][T10660]  ? __pfx__printk+0x10/0x10
[ 2464.974827][T10660]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[ 2464.980825][T10660]  ? __pfx___might_resched+0x10/0x10
[ 2464.986126][T10660]  should_fail_ex+0x3b0/0x4e0
[ 2464.990838][T10660]  should_failslab+0xac/0x100
[ 2464.995602][T10660]  ? __alloc_skb+0x1c3/0x440
[ 2465.000246][T10660]  kmem_cache_alloc_node_noprof+0x71/0x320
[ 2465.006100][T10660]  __alloc_skb+0x1c3/0x440
[ 2465.010543][T10660]  ? __pfx___alloc_skb+0x10/0x10
[ 2465.015504][T10660]  ? netlink_ack_tlv_len+0x6e/0x200
[ 2465.020724][T10660]  netlink_ack+0x13f/0xa30
[ 2465.025503][T10660]  ? __pfx_lock_acquire+0x10/0x10
[ 2465.030544][T10660]  ? __pfx_fou_nl_get_doit+0x10/0x10
[ 2465.035878][T10660]  netlink_rcv_skb+0x262/0x430
[ 2465.040671][T10660]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2465.045719][T10660]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2465.051037][T10660]  ? __netlink_deliver_tap+0x77e/0x7c0
[ 2465.056525][T10660]  genl_rcv+0x28/0x40
[ 2465.060519][T10660]  netlink_unicast+0x7f6/0x990
[ 2465.065305][T10660]  ? __pfx_netlink_unicast+0x10/0x10
[ 2465.070605][T10660]  ? __virt_addr_valid+0x183/0x530
[ 2465.075759][T10660]  ? __check_object_size+0x49c/0x900
[ 2465.081063][T10660]  netlink_sendmsg+0x8e4/0xcb0
[ 2465.085855][T10660]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2465.091163][T10660]  ? aa_sock_msg_perm+0x91/0x160
[ 2465.096125][T10660]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2465.101429][T10660]  __sock_sendmsg+0x221/0x270
[ 2465.106124][T10660]  ____sys_sendmsg+0x52a/0x7e0
[ 2465.110906][T10660]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2465.116217][T10660]  __sys_sendmsg+0x2aa/0x390
[ 2465.120825][T10660]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2465.125948][T10660]  ? vfs_write+0x7bf/0xc90
[ 2465.130412][T10660]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 2465.136760][T10660]  ? do_syscall_64+0x100/0x230
[ 2465.141635][T10660]  ? do_syscall_64+0xb6/0x230
[ 2465.146335][T10660]  do_syscall_64+0xf3/0x230
[ 2465.150892][T10660]  ? clear_bhb_loop+0x35/0x90
[ 2465.155594][T10660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2465.161503][T10660] RIP: 0033:0x7f7f96f7def9
[ 2465.165930][T10660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2465.185548][T10660] RSP: 002b:00007f7f97df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2465.193985][T10660] RAX: ffffffffffffffda RBX: 00007f7f97135f80 RCX: 00007f7f96f7def9
[ 2465.201975][T10660] RDX: 0000000000000080 RSI: 0000000020000200 RDI: 0000000000000003
[ 2465.209954][T10660] RBP: 00007f7f97df7090 R08: 0000000000000000 R09: 0000000000000000
[ 2465.217945][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2465.225960][T10660] R13: 0000000000000000 R14: 00007f7f97135f80 R15: 00007f7f9725fa28
[ 2465.233958][T10660]  </TASK>
[ 2465.237121][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2465.557565][ T5281] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 2465.717996][ T5281] usb 2-1: Using ep0 maxpacket: 32
[ 2465.725953][ T5281] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 2465.734589][ T5281] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 2465.745919][ T5281] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 151, changing to 11
[ 2465.758942][ T5281] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 17729, setting to 1024
[ 2465.770677][ T5281] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 2465.808257][ T5281] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2465.830617][ T5281] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2465.849756][ T5281] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2465.877549][ T5281] usb 2-1: Product: syz
[ 2465.881793][ T5281] usb 2-1: Manufacturer: syz
[ 2465.886429][ T5281] usb 2-1: SerialNumber: syz
[ 2465.911250][ T5281] usb 2-1: config 0 descriptor??
[ 2465.917004][T10663] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 2465.931784][ T5281] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 2465.964733][ T5281] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 2466.007013][T10669] netlink: 292 bytes leftover after parsing attributes in process `syz.4.8061'.
[ 2466.493686][T10681] fuse: Bad value for 'fd'
[ 2466.562142][T12642] usb 2-1: USB disconnect, device number 28
[ 2466.573399][T12642] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[ 2467.497362][ T5281] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 2467.677457][ T5281] usb 2-1: Using ep0 maxpacket: 32
[ 2467.685127][ T5281] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2467.707489][ T5281] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2467.716165][ T5281] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2467.734262][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2467.744420][ T5281] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2467.754861][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2467.792077][ T5281] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2467.817364][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2467.844250][ T5281] usb 2-1: config 0 descriptor??
[ 2467.861784][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8069'.
[ 2467.917913][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8069'.
[ 2468.008306][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 2468.015969][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 2468.072956][ T5281] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 2468.101669][ T5281] usb 2-1: USB disconnect, device number 29
[ 2468.129651][ T5281] usblp0: removed
[ 2468.178232][T26697] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 2468.349113][T26697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2468.367061][T26697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2468.377102][T26697] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[ 2468.400344][T26697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2468.424391][T10689] xt_ipvs: protocol family 7 not supported
[ 2468.426676][T26697] usb 3-1: config 0 descriptor??
[ 2468.687732][T26697] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[ 2468.828236][T26697] usb 2-1: device descriptor read/64, error -71
[ 2469.077406][T26697] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[ 2469.217555][T26697] usb 2-1: device descriptor read/64, error -71
[ 2469.339719][T26697] usb usb2-port1: attempt power cycle
[ 2469.546370][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2469.579555][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2469.677573][T26697] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[ 2469.718148][T26697] usb 2-1: device descriptor read/8, error -71
[ 2469.978921][T26697] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[ 2470.028783][T26697] usb 2-1: device descriptor read/8, error -71
[ 2470.157555][T26697] usb usb2-port1: unable to enumerate USB device
[ 2470.652359][ T1496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2470.865572][ T1496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2470.947025][T12642] usb 3-1: USB disconnect, device number 101
[ 2471.023314][ T1496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2471.215953][ T1496] team0: Port device netdevsim0 removed
[ 2471.310181][ T1496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2471.361066][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2471.374132][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2471.399829][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2471.415885][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2471.425264][   T55] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2471.449794][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2471.667842][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8082'.
[ 2471.785722][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8082'.
[ 2472.130008][ T1496] bridge_slave_1: left allmulticast mode
[ 2472.141879][ T1496] bridge_slave_1: left promiscuous mode
[ 2472.157682][ T1496] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2472.186841][ T1496] bridge_slave_0: left allmulticast mode
[ 2472.194032][ T1496] bridge_slave_0: left promiscuous mode
[ 2472.200707][ T1496] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2472.446854][T10746] FAULT_INJECTION: forcing a failure.
[ 2472.446854][T10746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2472.504389][T10746] CPU: 1 UID: 0 PID: 10746 Comm: syz.4.8085 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[ 2472.514865][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2472.524951][T10746] Call Trace:
[ 2472.528242][T10746]  <TASK>
[ 2472.531186][T10746]  dump_stack_lvl+0x241/0x360
[ 2472.535887][T10746]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2472.541107][T10746]  ? __pfx__printk+0x10/0x10
[ 2472.545713][T10746]  ? snprintf+0xda/0x120
[ 2472.549977][T10746]  should_fail_ex+0x3b0/0x4e0
[ 2472.554688][T10746]  _copy_to_user+0x2f/0xb0
[ 2472.559130][T10746]  simple_read_from_buffer+0xca/0x150
[ 2472.564566][T10746]  proc_fail_nth_read+0x1e9/0x250
[ 2472.569636][T10746]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2472.575229][T10746]  ? rw_verify_area+0x55e/0x6f0
[ 2472.580185][T10746]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2472.585807][T10746]  vfs_read+0x201/0xbc0
[ 2472.590004][T10746]  ? __pfx_lock_release+0x10/0x10
[ 2472.595092][T10746]  ? __pfx_vfs_read+0x10/0x10
[ 2472.599819][T10746]  ? __fget_files+0x3f3/0x470
[ 2472.604552][T10746]  ? __fdget_pos+0x24e/0x320
[ 2472.609197][T10746]  ksys_read+0x1a0/0x2c0
[ 2472.613488][T10746]  ? __pfx_ksys_read+0x10/0x10
[ 2472.618306][T10746]  ? do_syscall_64+0x100/0x230
[ 2472.623127][T10746]  ? do_syscall_64+0xb6/0x230
[ 2472.627858][T10746]  do_syscall_64+0xf3/0x230
[ 2472.632410][T10746]  ? clear_bhb_loop+0x35/0x90
[ 2472.637144][T10746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2472.643086][T10746] RIP: 0033:0x7fa65697c93c
[ 2472.647540][T10746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 2472.667256][T10746] RSP: 002b:00007fa6567f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2472.675726][T10746] RAX: ffffffffffffffda RBX: 00007fa656b35f80 RCX: 00007fa65697c93c
[ 2472.683804][T10746] RDX: 000000000000000f RSI: 00007fa6567f90a0 RDI: 0000000000000004
[ 2472.691824][T10746] RBP: 00007fa6567f9090 R08: 0000000000000000 R09: 0000000000000000
[ 2472.699837][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2472.707845][T10746] R13: 0000000000000000 R14: 00007fa656b35f80 R15: 00007fa656c5fa28
[ 2472.715886][T10746]  </TASK>
[ 2472.719086][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2472.991653][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2473.023085][T10748] loop4: detected capacity change from 0 to 7
[ 2473.031322][T10748] Dev loop4: unable to read RDB block 7
[ 2473.045221][T10748]  loop4: unable to read partition table
[ 2473.052221][T10748] loop4: partition table beyond EOD, truncated
[ 2473.060080][T10748] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2473.608283][   T55] Bluetooth: hci7: command tx timeout
[ 2473.865382][ T1496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2473.888899][ T1496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2473.905855][ T1496] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 2473.933590][ T1496] bond0 (unregistering): Released all slaves
[ 2473.969946][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'.
[ 2474.007709][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'.
[ 2474.452447][T10728] chnl_net:caif_netlink_parms(): no params data found
[ 2474.887411][ T1496] hsr_slave_0: left promiscuous mode
[ 2474.917441][ T1496] hsr_slave_1: left promiscuous mode
[ 2474.939175][ T1496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2474.957666][ T1496] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2474.968850][ T1496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2474.976461][ T1496] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2475.067461][ T1496] veth1_macvtap: left promiscuous mode
[ 2475.073082][ T1496] veth0_macvtap: left promiscuous mode
[ 2475.091462][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2475.094422][ T1496] veth1_vlan: left promiscuous mode
[ 2475.104134][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2475.105596][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2475.129030][ T1496] veth0_vlan: left promiscuous mode
[ 2475.135742][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2475.147380][ T5089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2475.156809][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2475.670406][   T55] Bluetooth: hci7: command tx timeout
[ 2476.093980][ T1496] team0 (unregistering): Port device team_slave_1 removed
[ 2476.180921][ T1496] team0 (unregistering): Port device team_slave_0 removed
[ 2477.093736][T10728] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2477.103260][T10728] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2477.110843][T10728] bridge_slave_0: entered allmulticast mode
[ 2477.117855][T10728] bridge_slave_0: entered promiscuous mode
[ 2477.126604][T10728] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2477.134636][T10728] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2477.142721][T10728] bridge_slave_1: entered allmulticast mode
[ 2477.150010][T10728] bridge_slave_1: entered promiscuous mode
[ 2477.206805][   T55] Bluetooth: hci4: command tx timeout
[ 2477.260855][T10728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2477.286302][T10728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2477.489776][T10728] team0: Port device team_slave_0 added
[ 2477.536719][T10728] team0: Port device team_slave_1 added
[ 2477.746594][T10728] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2477.772291][   T55] Bluetooth: hci7: command tx timeout
[ 2477.782478][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2477.808548][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2477.826106][T10728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2477.875837][T10728] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2477.899301][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2477.955202][T10728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2478.101443][T10728] hsr_slave_0: entered promiscuous mode
[ 2478.121427][T10728] hsr_slave_1: entered promiscuous mode
[ 2478.129823][T10728] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2478.147802][T10728] Cannot create hsr debugfs directory
[ 2478.239197][ T5321] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 2478.270510][ T5321] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 2478.272794][T10794] chnl_net:caif_netlink_parms(): no params data found
[ 2478.292561][ T5321] usb 5-1: USB disconnect, device number 117
[ 2478.495725][T10794] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2478.503212][T10794] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2478.513689][T10794] bridge_slave_0: entered allmulticast mode
[ 2478.521269][T10794] bridge_slave_0: entered promiscuous mode
[ 2478.536304][T10794] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2478.543949][T10794] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2478.552180][T10794] bridge_slave_1: entered allmulticast mode
[ 2478.559844][T10794] bridge_slave_1: entered promiscuous mode
[ 2478.800032][T10794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2478.972376][ T1496] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2478.997308][ T1496] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2479.061104][T10794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2479.235452][ T1496] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2479.266235][ T5089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2479.268211][ T1496] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2479.276507][T26579] Bluetooth: hci4: command tx timeout
[ 2479.292519][T26579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2479.315323][T26579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2479.325697][T26579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2479.335682][T26579] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2479.347509][T26579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2479.542705][ T1496] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2479.557452][ T1496] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2479.587948][T10794] team0: Port device team_slave_0 added
[ 2479.600377][T10794] team0: Port device team_slave_1 added
[ 2479.711367][ T1496] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2479.721762][ T1496] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2479.752138][T10794] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2479.760490][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2479.790812][T10794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2479.828363][   T55] Bluetooth: hci7: command tx timeout
[ 2479.889702][T10794] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2479.896710][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2479.924082][T10794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2480.019392][T10794] hsr_slave_0: entered promiscuous mode
[ 2480.030498][T10794] hsr_slave_1: entered promiscuous mode
[ 2480.047651][T10794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2480.055265][T10794] Cannot create hsr debugfs directory
[ 2480.274648][ T1496] bridge_slave_1: left allmulticast mode
[ 2480.280759][ T1496] bridge_slave_1: left promiscuous mode
[ 2480.286532][ T1496] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2480.299404][ T1496] bridge_slave_0: left allmulticast mode
[ 2480.305177][ T1496] bridge_slave_0: left promiscuous mode
[ 2480.311508][ T1496] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2480.515908][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2480.546260][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2481.162327][ T1496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2481.181624][ T1496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2481.195748][ T1496] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 2481.208027][ T1496] bond0 (unregistering): Released all slaves
[ 2481.222510][ T1496] bond1 (unregistering): Released all slaves
[ 2481.347826][   T55] Bluetooth: hci4: command tx timeout
[ 2481.414340][T10728] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2481.438991][   T55] Bluetooth: hci5: command tx timeout
[ 2481.452010][T10728] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2481.492106][T10844] chnl_net:caif_netlink_parms(): no params data found
[ 2481.520279][T10728] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2481.583717][T10728] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2481.674594][T10794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2481.865392][T10794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2481.986204][T10794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2482.091479][ T1496] hsr_slave_0: left promiscuous mode
[ 2482.112348][ T1496] hsr_slave_1: left promiscuous mode
[ 2482.120474][ T1496] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2482.137878][ T1496] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2482.149302][ T1496] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2482.167464][ T1496] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2482.222750][ T1496] veth1_macvtap: left promiscuous mode
[ 2482.247462][ T1496] veth0_macvtap: left promiscuous mode
[ 2482.253202][ T1496] veth1_vlan: left promiscuous mode
[ 2482.259589][ T1496] veth0_vlan: left promiscuous mode
[ 2483.428474][   T55] Bluetooth: hci4: command tx timeout
[ 2483.508658][   T55] Bluetooth: hci5: command tx timeout
[ 2483.919917][ T1496] team0 (unregistering): Port device team_slave_1 removed
[ 2484.048578][ T1496] team0 (unregistering): Port device team_slave_0 removed
[ 2484.932306][T10794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2485.047535][T10844] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2485.054670][T10844] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2485.073494][T10844] bridge_slave_0: entered allmulticast mode
[ 2485.082249][T10844] bridge_slave_0: entered promiscuous mode
[ 2485.091381][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2485.091584][T10844] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2485.105396][T10844] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2485.122247][T10844] bridge_slave_1: entered allmulticast mode
[ 2485.133404][T10844] bridge_slave_1: entered promiscuous mode
[ 2485.245711][T10844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2485.415976][T10844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2485.451681][T10728] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2485.550762][ T1496] IPVS: stop unused estimator thread 0...
[ 2485.559189][T10844] team0: Port device team_slave_0 added
[ 2485.565802][T10794] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2485.588533][   T55] Bluetooth: hci5: command tx timeout
[ 2485.623510][T10844] team0: Port device team_slave_1 added
[ 2485.643349][T10794] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2485.658243][T10794] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2485.731466][T10728] 8021q: adding VLAN 0 to HW filter on device team0
[ 2485.759260][T10794] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2485.798167][T10844] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2485.805182][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2485.844553][T10844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2485.862372][T10844] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2485.869656][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2485.895565][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2485.903979][T10844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2485.985053][ T1507] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2485.992202][ T1507] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2486.019692][ T1507] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2486.026834][ T1507] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2486.046483][T10844] hsr_slave_0: entered promiscuous mode
[ 2486.055614][T10844] hsr_slave_1: entered promiscuous mode
[ 2486.068162][T10844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2486.075779][T10844] Cannot create hsr debugfs directory
[ 2486.412251][T10794] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2486.496966][T10728] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2486.566311][T10794] 8021q: adding VLAN 0 to HW filter on device team0
[ 2486.772338][T19283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2486.779573][T19283] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2486.839610][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2486.846829][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2487.080925][T10728] veth0_vlan: entered promiscuous mode
[ 2487.123051][T10844] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2487.135328][T10844] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2487.155092][T10728] veth1_vlan: entered promiscuous mode
[ 2487.164480][T10844] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2487.185632][T10844] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2487.279532][T10794] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2487.342114][T10728] veth0_macvtap: entered promiscuous mode
[ 2487.363499][T10728] veth1_macvtap: entered promiscuous mode
[ 2487.444802][T10794] veth0_vlan: entered promiscuous mode
[ 2487.463914][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2487.481711][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.496734][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2487.509329][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.527707][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2487.548527][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.570968][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2487.593559][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.615171][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2487.633852][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.646546][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2487.667823][   T55] Bluetooth: hci5: command tx timeout
[ 2487.669698][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.695699][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2487.708245][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.729032][T10728] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2487.762113][T10794] veth1_vlan: entered promiscuous mode
[ 2487.788823][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2487.801063][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.812104][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2487.835008][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.853950][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2487.896166][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2487.937418][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2487.977060][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.007120][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.033058][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.049063][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.060375][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.071352][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.083043][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.117308][T10728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.128147][T10728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.141137][T10728] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2488.172544][T10794] veth0_macvtap: entered promiscuous mode
[ 2488.207705][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8109'.
[ 2488.217863][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8109'.
[ 2488.236789][T10794] veth1_macvtap: entered promiscuous mode
[ 2488.261030][T10728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.291092][T10728] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.317719][T10728] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.326492][T10728] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.386648][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.399493][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.415623][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.428447][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.446466][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.460389][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.483603][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.495828][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.507124][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.523917][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.542562][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.557558][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.570157][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.584552][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.607118][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.622149][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.654039][T10794] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2488.676502][T10844] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2488.732001][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.743133][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.755565][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.769536][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.780138][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.791163][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.806516][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.817128][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.828336][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.844094][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.854146][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.873792][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.884057][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.900979][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.914150][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.928276][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.938782][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.949765][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.973328][T10794] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2489.050679][T10844] 8021q: adding VLAN 0 to HW filter on device team0
[ 2489.079673][T10794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2489.095549][T10794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2489.111550][T10794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2489.123544][T10794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2489.191926][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2489.199092][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2489.263944][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2489.271190][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2489.313920][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2489.326972][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2489.503135][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2489.516335][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2489.531642][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2489.562164][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2489.722625][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2489.756241][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2489.814512][T10844] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2489.970345][T10844] veth0_vlan: entered promiscuous mode
[ 2490.032328][T10844] veth1_vlan: entered promiscuous mode
[ 2490.123974][T10844] veth0_macvtap: entered promiscuous mode
[ 2490.150929][T10844] veth1_macvtap: entered promiscuous mode
[ 2490.220034][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2490.256482][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.296499][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2490.305283][ T5281] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x7
[ 2490.329461][ T5281] hid-generic 0000:0000:0000.00A4: ignoring exceeding usage max
[ 2490.337362][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.340184][ T5281] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0
[ 2490.355325][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2490.390849][ T5281] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x6
[ 2490.390864][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.390892][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2490.407308][ T5281] hid-generic 0000:0000:0000.00A4: unknown main item tag 0xd
[ 2490.424015][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.452613][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2490.469775][ T5281] hid-generic 0000:0000:0000.00A4: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 2490.492463][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.523696][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2490.622497][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.656762][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2490.689670][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.703417][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2490.718809][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.731102][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2490.743354][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.790553][T10844] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2490.855560][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2490.898317][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.913322][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2490.952743][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2490.973665][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2490.990282][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2491.004484][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2491.033390][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2491.053690][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2491.067299][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2491.092684][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2491.106533][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2491.119680][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2491.134915][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2491.146810][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2491.160618][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2491.173608][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2491.190296][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2491.205361][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2491.222099][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2491.261912][T10844] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2491.323390][T10844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2491.358865][T10844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2491.387387][T10844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2491.396163][T10844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2491.644011][ T8693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2491.668755][ T8693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2491.741488][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2491.764298][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2491.829562][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8116'.
[ 2491.870609][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8116'.
[ 2491.978548][   T29] kauditd_printk_skb: 11 callbacks suppressed
[ 2491.978568][   T29] audit: type=1326 audit(1726787714.887:15710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.007376][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2492.095637][   T29] audit: type=1326 audit(1726787714.887:15711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.118841][   T29] audit: type=1326 audit(1726787714.887:15712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.141371][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2492.167803][   T29] audit: type=1326 audit(1726787714.887:15713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.190555][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2492.259273][   T29] audit: type=1326 audit(1726787714.887:15714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.330753][   T29] audit: type=1326 audit(1726787714.887:15715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.384655][   T29] audit: type=1326 audit(1726787714.897:15716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.407202][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2492.492423][   T29] audit: type=1326 audit(1726787714.897:15717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.546892][   T29] audit: type=1326 audit(1726787714.897:15718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.592405][   T29] audit: type=1326 audit(1726787714.897:15719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.2.8118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41b37def9 code=0x7ffc0000
[ 2492.757487][ T7526] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 2492.928390][ T7526] usb 2-1: Using ep0 maxpacket: 16
[ 2492.964298][ T7526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2493.054321][ T7526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2493.082705][ T7526] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2493.128819][ T7526] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2493.158465][ T7526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2493.180309][ T7526] usb 2-1: config 0 descriptor??
[ 2493.287418][ T5229] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 2493.459820][ T5229] usb 5-1: Using ep0 maxpacket: 32
[ 2493.499317][ T5229] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2493.551370][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 2493.583531][ T5229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 2493.630244][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.654192][ T5229] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2493.665108][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.699352][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.706648][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.707565][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2493.714770][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.740536][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.748956][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8128'.
[ 2493.765590][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.779340][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.788035][ T5229] usb 5-1: config 0 descriptor??
[ 2493.795240][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8128'.
[ 2493.806344][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.806829][T11054] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2493.841861][ T7526] microsoft 0003:045E:07DA.00A5: unknown main item tag 0x0
[ 2493.844662][ T5229] hub 5-1:0.0: USB hub found
[ 2493.939570][ T7526] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00A5/input/input175
[ 2493.995701][ T7526] microsoft 0003:045E:07DA.00A5: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 2494.079390][ T7526] usb 2-1: USB disconnect, device number 34
[ 2494.124780][ T5229] hub 5-1:0.0: 9 ports detected
[ 2494.131188][ T5229] hub 5-1:0.0: insufficient power available to use all downstream ports
[ 2494.392611][T26698] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 2494.581505][T26698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2494.610397][T26698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2494.652609][T26698] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[ 2494.683258][T26698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2494.714714][T26698] usb 3-1: config 0 descriptor??
[ 2495.173439][T26698] usbhid 3-1:0.0: can't add hid device: -71
[ 2495.194283][ T5229] hub 5-1:0.0: hub_hub_status failed (err = -32)
[ 2495.209811][ T5229] hub 5-1:0.0: config failed, can't get hub status (err -32)
[ 2495.214080][T26698] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2495.234281][ T5229] usbhid 5-1:0.0: can't add hid device: -32
[ 2495.242702][ T5229] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[ 2495.252617][T26698] usb 3-1: USB disconnect, device number 102
[ 2495.602820][T11099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8138'.
[ 2495.637953][T11099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8138'.
[ 2496.069726][T26698] usb 5-1: USB disconnect, device number 118
[ 2496.087337][ T5229] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 2496.269845][ T5229] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 2496.297566][ T5229] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 2496.325524][ T5229] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 2496.353405][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2496.368171][ T5321] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 2496.376014][ T5229] usb 2-1: Product: syz
[ 2496.381713][ T5229] usb 2-1: Manufacturer: syz
[ 2496.386346][ T5229] usb 2-1: SerialNumber: syz
[ 2496.398444][ T5229] usb 2-1: config 0 descriptor??
[ 2496.417707][T11105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2496.425238][T11105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2496.539551][ T5321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 2496.564402][ T5321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 2496.577584][T26698] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 2496.605975][ T5321] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2496.619455][ T5321] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2496.631277][ T5321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2496.658256][ T5321] usb 3-1: config 0 descriptor??
[ 2496.664112][T11116] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2496.674564][T11105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2496.690082][T11105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2496.717769][T26698] usb 5-1: device descriptor read/64, error -71
[ 2496.892448][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2496.908839][ T5229] Error reading MAC address
[ 2496.918010][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2496.931194][ T5229] usb 2-1: USB disconnect, device number 35
[ 2496.959552][T26698] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 2497.107853][T26698] usb 5-1: device descriptor read/64, error -71
[ 2497.230270][T26698] usb usb5-port1: attempt power cycle
[ 2497.380176][ T5321] usbhid 3-1:0.0: can't add hid device: -71
[ 2497.393827][ T5321] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2497.413671][ T5321] usb 3-1: USB disconnect, device number 103
[ 2497.587483][T26698] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 2497.608273][T26698] usb 5-1: device descriptor read/8, error -71
[ 2497.767544][ T5281] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 2497.887661][T26698] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 2497.909000][T26698] usb 5-1: device descriptor read/8, error -71
[ 2497.938669][ T5281] usb 2-1: Using ep0 maxpacket: 8
[ 2497.952354][ T5281] usb 2-1: config 0 has an invalid interface number: 141 but max is 1
[ 2497.971361][ T5281] usb 2-1: config 0 has no interface number 1
[ 2497.985037][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2497.997796][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2498.012264][ T5281] usb 2-1: New USB device found, idVendor=0411, idProduct=016f, bcdDevice=54.fe
[ 2498.022620][T26698] usb usb5-port1: unable to enumerate USB device
[ 2498.029627][T11136] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8149'.
[ 2498.030070][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2498.047659][ T5281] usb 2-1: Product: syz
[ 2498.050268][T11136] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8149'.
[ 2498.052010][ T5281] usb 2-1: Manufacturer: syz
[ 2498.066031][ T5281] usb 2-1: SerialNumber: syz
[ 2498.074486][ T5281] usb 2-1: config 0 descriptor??
[ 2498.105265][ T5281] usb 2-1: Found UVC 0.00 device syz (0411:016f)
[ 2498.126546][ T5281] usb 2-1: No valid video chain found.
[ 2498.246669][T11139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8150'.
[ 2498.260314][T11139] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8150'.
[ 2498.327042][ T5281] usb 2-1: USB disconnect, device number 36
[ 2498.425767][T11141] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †<)Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼
[ 2500.542331][T11195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8159'.
[ 2500.564271][T11195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8159'.
[ 2501.031409][T11205] "syz.1.8163" (11205) uses obsolete ecb(arc4) skcipher
[ 2501.067388][ T5321] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 2501.223442][ T5321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2501.250620][ T5321] usb 5-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00
[ 2501.281306][ T5321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2501.306373][ T5321] usb 5-1: config 0 descriptor??
[ 2501.746609][ T5321] aquacomputer_d5next 0003:0C70:F001.00A6: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.4-1/input0
[ 2501.849944][T11213] ------------[ cut here ]------------
[ 2501.855607][T11213] WARNING: CPU: 0 PID: 11213 at include/linux/cpumask.h:135 io_sq_offload_create+0xd2f/0xfd0
[ 2501.865967][T11213] Modules linked in:
[ 2501.869944][T11213] CPU: 0 UID: 0 PID: 11213 Comm: syz.2.8166 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[ 2501.881570][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2501.891881][T11213] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2501.897993][T11213] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 7c 12 3e f6 e9 95 f3 ff ff e8 42 89 d6 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c
[ 2501.918734][T11213] RSP: 0018:ffffc90003f97c40 EFLAGS: 00010287
[ 2501.924854][T11213] RAX: ffffffff8bbdf53e RBX: ffffc90003f97e0c RCX: 0000000000040000
[ 2501.933251][T11213] RDX: ffffc90009849000 RSI: 000000000000117a RDI: 000000000000117b
[ 2501.941400][T11213] RBP: ffffc90003f97d40 R08: ffffffff8bbdf22b R09: 1ffffffff2038b85
[ 2501.949608][T11213] R10: dffffc0000000000 R11: fffffbfff2038b86 R12: ffff88806c3e8000
[ 2501.957688][T11213] R13: 0000000000400000 R14: 1ffff920007f2f94 R15: ffffc90003f97cc0
[ 2501.965697][T11213] FS:  00007fa41c16f6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
[ 2501.975269][T11213] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2501.982473][T11213] CR2: 000000110c38346d CR3: 000000002d3f8000 CR4: 00000000003506f0
[ 2501.990632][T11213] DR0: ffffffffffffffff DR1: 7ffffffffffffffd DR2: 0000000000000000
[ 2501.998953][T11213] DR3: 0000000080000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2502.007321][T11213] Call Trace:
[ 2502.010648][T11213]  <TASK>
[ 2502.014017][T11213]  ? __warn+0x168/0x4e0
[ 2502.018339][T11213]  ? io_sq_offload_create+0xd2f/0xfd0
[ 2502.023773][T11213]  ? report_bug+0x2b3/0x500
[ 2502.028408][T11213]  ? io_sq_offload_create+0xd2f/0xfd0
[ 2502.033843][T11213]  ? handle_bug+0x60/0x90
[ 2502.038344][T11213]  ? exc_invalid_op+0x1a/0x50
[ 2502.043066][T11213]  ? asm_exc_invalid_op+0x1a/0x20
[ 2502.048239][T11213]  ? io_sq_offload_create+0xa1b/0xfd0
[ 2502.053680][T11213]  ? io_sq_offload_create+0xd2e/0xfd0
[ 2502.059201][T11213]  ? io_sq_offload_create+0xd2f/0xfd0
[ 2502.064648][T11213]  ? __pfx_io_sq_offload_create+0x10/0x10
[ 2502.070568][T11213]  ? io_allocate_scq_urings+0x426/0x640
[ 2502.076196][T11213]  io_uring_create+0x792/0x1360
[ 2502.081673][T11213]  __se_sys_io_uring_setup+0x2ba/0x330
[ 2502.087740][T11213]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 2502.093808][T11213]  ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0
[ 2502.100219][T11213]  ? syscall_user_dispatch+0x4e/0x90
[ 2502.105572][T11213]  do_syscall_64+0xf3/0x230
[ 2502.110228][T11213]  ? clear_bhb_loop+0x35/0x90
[ 2502.114966][T11213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2502.121008][T11213] RIP: 0033:0x7fa41b37def9
[ 2502.125464][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2502.145210][T11213] RSP: 002b:00007fa41c16f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 2502.153779][T11213] RAX: ffffffffffffffda RBX: 00007fa41b535f80 RCX: 00007fa41b37def9
[ 2502.161901][T11213] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000004e5e
[ 2502.170009][T11213] RBP: 00007fa41b3f0b76 R08: 0000000000000000 R09: 0000000000000000
[ 2502.178140][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2502.186814][T11213] R13: 0000000000000000 R14: 00007fa41b535f80 R15: 00007fa41b65fa28
[ 2502.195360][T11213]  </TASK>
[ 2502.198529][T11213] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2502.205839][T11213] CPU: 0 UID: 0 PID: 11213 Comm: syz.2.8166 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0
[ 2502.216270][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 2502.226339][T11213] Call Trace:
[ 2502.229634][T11213]  <TASK>
[ 2502.232582][T11213]  dump_stack_lvl+0x241/0x360
[ 2502.237299][T11213]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2502.242523][T11213]  ? __pfx__printk+0x10/0x10
[ 2502.247158][T11213]  ? vscnprintf+0x5d/0x90
[ 2502.251510][T11213]  panic+0x349/0x880
[ 2502.255431][T11213]  ? __warn+0x177/0x4e0
[ 2502.259603][T11213]  ? __pfx_panic+0x10/0x10
[ 2502.264056][T11213]  __warn+0x34b/0x4e0
[ 2502.268055][T11213]  ? io_sq_offload_create+0xd2f/0xfd0
[ 2502.273482][T11213]  report_bug+0x2b3/0x500
[ 2502.277837][T11213]  ? io_sq_offload_create+0xd2f/0xfd0
[ 2502.283245][T11213]  handle_bug+0x60/0x90
[ 2502.287425][T11213]  exc_invalid_op+0x1a/0x50
[ 2502.292031][T11213]  asm_exc_invalid_op+0x1a/0x20
[ 2502.296901][T11213] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0
[ 2502.302898][T11213] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 7c 12 3e f6 e9 95 f3 ff ff e8 42 89 d6 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c
[ 2502.322521][T11213] RSP: 0018:ffffc90003f97c40 EFLAGS: 00010287
[ 2502.328617][T11213] RAX: ffffffff8bbdf53e RBX: ffffc90003f97e0c RCX: 0000000000040000
[ 2502.336607][T11213] RDX: ffffc90009849000 RSI: 000000000000117a RDI: 000000000000117b
[ 2502.344597][T11213] RBP: ffffc90003f97d40 R08: ffffffff8bbdf22b R09: 1ffffffff2038b85
[ 2502.352586][T11213] R10: dffffc0000000000 R11: fffffbfff2038b86 R12: ffff88806c3e8000
[ 2502.360602][T11213] R13: 0000000000400000 R14: 1ffff920007f2f94 R15: ffffc90003f97cc0
[ 2502.368598][T11213]  ? io_sq_offload_create+0xa1b/0xfd0
[ 2502.373996][T11213]  ? io_sq_offload_create+0xd2e/0xfd0
[ 2502.379402][T11213]  ? __pfx_io_sq_offload_create+0x10/0x10
[ 2502.385155][T11213]  ? io_allocate_scq_urings+0x426/0x640
[ 2502.390742][T11213]  io_uring_create+0x792/0x1360
[ 2502.395614][T11213]  __se_sys_io_uring_setup+0x2ba/0x330
[ 2502.401100][T11213]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 2502.407122][T11213]  ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0
[ 2502.413389][T11213]  ? syscall_user_dispatch+0x4e/0x90
[ 2502.418706][T11213]  do_syscall_64+0xf3/0x230
[ 2502.423234][T11213]  ? clear_bhb_loop+0x35/0x90
[ 2502.427937][T11213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2502.433852][T11213] RIP: 0033:0x7fa41b37def9
[ 2502.438291][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2502.457923][T11213] RSP: 002b:00007fa41c16f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 2502.466368][T11213] RAX: ffffffffffffffda RBX: 00007fa41b535f80 RCX: 00007fa41b37def9
[ 2502.474361][T11213] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000004e5e
[ 2502.482484][T11213] RBP: 00007fa41b3f0b76 R08: 0000000000000000 R09: 0000000000000000
[ 2502.490478][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2502.498473][T11213] R13: 0000000000000000 R14: 00007fa41b535f80 R15: 00007fa41b65fa28
[ 2502.506481][T11213]  </TASK>
[ 2502.509769][T11213] Kernel Offset: disabled
[ 2502.514113][T11213] Rebooting in 86400 seconds..