last executing test programs:

10.168479246s ago: executing program 2 (id=532):
epoll_create(0x8)
r0 = creat(0x0, 0x1de)
close(r0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x18, 0xc8, "0b6646251e1e2453"}}}}, 0xf)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0)
fadvise64(r1, 0x0, 0x0, 0x5)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}}}, 0x7)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)

9.162038728s ago: executing program 2 (id=537):
r0 = mq_open(&(0x7f00000001c0)='eth0\xd2', 0x42, 0x0, 0x0)
r1 = dup2(r0, r0)
mq_notify(r1, &(0x7f0000000040)={0x20000000})
read$FUSE(r1, 0x0, 0x0)
mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x53)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/246, 0xf6}], 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x2, 0x3, 0x84)
socket$alg(0x26, 0x5, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
socket(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e", 0x8c1}], 0x3)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4)

8.176795968s ago: executing program 2 (id=540):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1})
r3 = socket(0x10, 0x2, 0x0)
quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000003180)=@nullb, 0xee01, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r4, 0xe7d02281b1d40d47, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x888}, 0x0)
syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x24)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0407ff0200000000000032b66092b882c2f81b2fd1dcb83e02abf936d6dd6d4c78608eb03c1f638d402be0c57d0837b87d2a48f4fd17c96e2ab033dff6a125148fd6959519c071e8bb84a318b8ee9c43c7ecf1936184c6d81bb7d5f1525f530100000806a7ec6b827128c7e44c28f686ed16ac3d375c33db60245e3c4b5069b93e4a4170d7d65b92ebaca3f7675043d2bca647b3f8b78d6d362be54f6b0432d7ce1037412434f399fa8e241e04baa680af1edd5f5148a92c01429b4c5800d5ecd89cbe1b0f6266457b549ec20f44886006e1ec48aa5d7558a1c12b2011e45a68e266af01534f1819c3d5ac9dbd1b96f3ac40f4d4ab80db5082b24f"], 0x102)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
creat(0x0, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xad, 0x0, &(0x7f0000000000)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x1e, 0x0, &(0x7f0000000880)="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"})
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000})

8.029913183s ago: executing program 0 (id=541):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0xf, {0xf, 0x0, "a7ea3163fdfa964e45d3456808"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x1882, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x80000, 0x11b}, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf251400000018000180140002006e657464657673696d3000000000000008001400adf4b75c080010000000000008000f000000010008000e"], 0x4c}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r4, 0x0, 0x40)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000d40)="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", 0x16c}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196d953bcaf1aff06d181d51662fdaa52e46d7905c0b4c632602c810f1e6a6c98f0eaed1d795bc3495ea0b47ca0c44465d4b8b46dac524f2e179f22b486aaef3b7e436e9dc1ecdf10a3a2d59c839a8185d2fa5d802e15426193f256bb89fa695b0c2c5110a54f63b1a930f3bd73111ce745c418dd1b44e29bf1a828d1", 0x173}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000640)="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", 0x17a}, {&(0x7f0000000180)="03d54d849954097d5aeaacbe306754b3937816912081916a7d18908aea81d325a9c76d02f9eeed9daa3bb047de3228def84ccd1a1064d9ae9aab7e78b908af54f2e120c8d2bed7617a7a7533b1ee8fa46b1d91f115811a404eb511e02ae2ba718366c778ec0e6fe7e98faf627f47009fa4f5f1de8519313ebf6b0d48864d60a44a2a1fc8a2393995a0dc8f4f237a8f00698a9c9e581cc8f8c2befd33f93fed416e062a3f8e5350ffae9f3d1d7b8e349ae7f18cfb910da9685a5319fd2e13d10e48bc4f6b18a19b65baae27e8cfa98efe0a", 0xd1}, {0x0}], 0x3}}], 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r6, @ANYBLOB="b1000000050000e2280012000c00010076657468"], 0x48}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0x2, 0x2, 0x0, 0x0, r8}}, 0x18}, 0x1, 0x300000000000000}, 0x0)

7.917684745s ago: executing program 1 (id=542):
r0 = socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0))
lseek(r2, 0x0, 0x3)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
dup(r3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9f}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2}, 0x8)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090585", @ANYRESDEC], 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418})
r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f00000002c0)=ANY=[])
fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xfff, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600), 0x0)
accept4(r0, &(0x7f0000000280)=@xdp, 0x0, 0x800)

6.671995693s ago: executing program 2 (id=544):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04030b00b700fffffffffffe0003"], 0xe)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0xffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x92, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080))
pipe(0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0xffffffff}, 0x2c)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040601080000000000000000000000000500010007"], 0x1c}}, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000400)=ANY=[@ANYBLOB="3c0e000000000000c9084a30ee1000000000000000000000ffff6401010207500000000112000300a200000000000000f9ffffffffffff4832f1f3593bd15adcff2282000000000000050000000000000003000000000000000000000000000000000000000000000019000000"], 0x80)
io_uring_setup(0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

6.102745266s ago: executing program 3 (id=545):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffc76, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004900), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8083}, 0x10)
ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000700))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
sendmsg$nl_crypto(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40810}, 0x4000)
r6 = syz_open_dev$vim2m(&(0x7f0000000400), 0x32918300, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0xf, 0x1, 0x0, "27110000000000000010002200"})
sendto$rxrpc(r2, 0x0, 0x0, 0x24000000, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @remote, 0x8}}, 0x24)
ioctl$RTC_UIE_ON(r3, 0x7003)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000080)="8fe9c6acafc05fec4360cebb5d5b5c5d22e0", &(0x7f0000000100)=""/63, &(0x7f0000000180)="68382f65304ac9bb1c6f87f66a0d3fc4e7e80163ebc0d1fbcce1d89069650586a3e2fbcc8f33482e9e0249bba04794dbc8758269ba32be52d59b091238a75b3339d764f60cd76c8da13ed51b5e55af1ca4eec69cc7e2c24c1e9ebbfd0351308241bcc47e6aef8e15a4f534820c5bcd543bc9823b1bb8e057b9a6622dce4e7f46817580900410677ccf1310e3c13e054b5bedf611dd2d3a69945212bd685c1e7817b88cfca7c0df2377aa6cb584cfb71ba5b4417f544e4d0fe331ec9b00675531f0", &(0x7f0000000300), 0x1ff, r3}, 0x38)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5002, 0x0)

5.765977246s ago: executing program 0 (id=546):
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x1, @vbi={0x4d6, 0x6, 0x0, 0x3132564e, [0x8], [0x4], 0x108}})
listen(0xffffffffffffffff, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0), 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x6, @private1}, 0x1c)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000048c0)='./file0\x00', 0x101cc0, 0x88)
fsync(r2)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)

5.616308198s ago: executing program 1 (id=547):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000000))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000101010200000000000000000a000000300002802c00018014000300fe8000000000000000000000000000bb14000400fe8000000000000000000800000000aa08001a40000000060c00198008000200020000000800034000"], 0x60}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r4 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000240))
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa2}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r6, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x3ff, @remote, 0x29ccafc8}}, 0x24)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e047200ac0c1400000020f0ddf9a66a"], 0x0)

5.607064533s ago: executing program 2 (id=548):
socket$inet6(0xa, 0x6, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00100000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000030007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008001d004600000076000000bf9100000000000063080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4)
r4 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
r5 = syz_io_uring_setup(0x24f9, 0x0, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0)
listen(r4, 0x3)
socket$l2tp6(0xa, 0x2, 0x73)
ftruncate(0xffffffffffffffff, 0xc17a)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0xdc1, 0x113040)
r8 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r9 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg(r9, &(0x7f0000001500), 0x588, 0x0)

4.883374331s ago: executing program 1 (id=549):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x200000100000011, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0xfd, 0x9, 0x9}}}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
memfd_create(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

4.695606564s ago: executing program 0 (id=550):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000002140)={{0xa, 0x4e20, 0x0, @mcast1, 0x2}, {0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1, {[0x0, 0x8, 0x5, 0xa, 0x400, 0x9, 0xfffffffd, 0x7fffffff]}}, 0x5c)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r0, 0x303, 0x0, 0x0, {0x7}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x3, 0xffffffff}]}, 0x1c}}, 0x0)
syz_io_uring_setup(0x2ddc, &(0x7f00000006c0), 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="020d0300100000000000000000000000080012000200000000000000000000000600320003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006"], 0x80}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmmsg$sock(r3, &(0x7f0000003e80)=[{{&(0x7f00000033c0)=@rc={0x1f, @any, 0x6}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003440)="74097e3a07de48f9ce07e58f3f998abc1c2d7430d9c5bb8689f733620093cdb3afc1d063", 0x24}, {&(0x7f0000003480)="166c2b4c01e9ad6fa29f43f73bb24de2c7bf233a002d5ca9bd418d3d3e0c162961abcdd3316ef0c9475b5aec3da3174d38786830981c1726cd71cd69e3b297f33cb3078d4ebc468a95d530145945ee91a26e577da17eabc7bd89be5aa78ffcc8851a3b906ce89307395de7826bde7cc6c100efbf790341c38b108b6915be25939b36fcd20fe7e661d1fa4841ef11c8ef688a8f6dce42974d4957c2b39aeffd1e536de6f67c9da82e907d4db0aa2b2ce9800e28525ca9b25a", 0xb8}, {&(0x7f0000003580)}, {&(0x7f00000035c0)="01", 0x1}, {&(0x7f00000036c0)="d6c4ed32258f5b2a85bf873e31a8c5738224568987ea931fba7739f622e69d8913aea60ae6719f873484e6e31ee509c2ad44899ef82c8972605f1f74b14ce9544ed52adaba7478", 0x47}], 0x5, &(0x7f00000037c0)=[@timestamping={{0x10, 0x1, 0x25, 0x1ff}}, @txtime={{0x14, 0x1, 0x3d, 0x1ff}}], 0x24}}, {{&(0x7f0000003800)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003880)="5ed3666fbefd82ac81412bbb8364cd3d321118046d42a38de76ac14bec714d6d84c35dbed3ae1c6166a14b18ecb622dc48", 0x31}, {&(0x7f00000038c0)="8d0228fe73cd8ce23caad447cfe007c96e1fb48840dacf91c08d9cf5980b6b49e4872b21af83649218877842b1f971e9ab5222752e7bd55b69862883d02c82308367a281b2536bcb", 0x48}, {&(0x7f0000003940)="25397731a2395104dc865f55731a1c45dd349e8c499f82da9e45fe003052c2c4ee7e7d4499974df6af53db6a8dcb469352a46450179d347bd424bf476d47f2a89bac6aa2923b79e7088f63c9df9ca92aec9e90c2d14e5ac710364ade5bbb4fe4bffe521a87ee3c84cf6fb00745b4e48b74e59fdeb00ed2a8b3e4256c254a9136b51009bcbaa6f19f0c6b3167c7e7fdac2f04b616b1ac86a59d64099cde3055e4ffd3e5", 0xa3}, {&(0x7f0000003a00)="ae8690adefbfeeeac2397363e2d59ad05cc26cbe733339070e24cb4112585c5e252c7a6a6f3188daea6fd321838c6c6a16a165c2d1f9605fb5f906664bde58af12153ed3bcbd352cc958b236718a2001e8709ed181d4cbf3b61283f36b17e44ee2690d75c1e29790a5a0a783b4ad090cc3ee24a21bb045f508ad0a636d697509ec3355e11dee743d0582cb40136a327832f415b5d9b20c1c9e473a84d105e8d2655154b99130cf315086b02183a9b6d4ed68d7c8339d4cfeaf37829a431c5e0c74b8162fc8cca05fc1cf8f595c7a9cc4cc6634585c45fceb0728c4c4b458c51ddf5ec7165a5c87abf1e038bc18", 0xed}, {&(0x7f0000003b00)="89e1185c796207134eb673626f2cfa21713a562952bca6596d944a4453e9be98e6c4cf71ddd557e131dd0c64f7652d40c44239655246cf039a997ab894276a47da245dd93dd5a046d76c1c5563ae48efcee3de98d4eafecda25886edd10d2945215f82c3971a7b08dae5b918d8bda20d", 0x70}], 0x5, &(0x7f0000003c40)=[@timestamping={{0x10}}, @mark={{0x10, 0x1, 0x24, 0x5}}, @mark={{0x10, 0x1, 0x24, 0x4}}], 0x30}}, {{&(0x7f0000003cc0)=@isdn={0x22, 0x8, 0xf4, 0x3, 0x1f}, 0x80, &(0x7f0000003dc0)=[{0x0}], 0x1, &(0x7f0000003e00)=[@mark={{0x10, 0x1, 0x24, 0x10001}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @txtime={{0x14, 0x1, 0x3d, 0x101}}, @txtime={{0x14, 0x1, 0x3d, 0xe}}, @mark={{0x10}}], 0x70}}], 0x3, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x4000)
read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000300)=0x49b9, 0x4)
shutdown(r7, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0)

4.389907504s ago: executing program 1 (id=552):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000002a1001c0"])
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x109842, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000140)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401})
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r9 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x200040, 0x0)
r10 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=<r11=>0x0)
syz_io_uring_setup(0x4072, &(0x7f0000000080), &(0x7f0000000100)=<r12=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r12, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x14})
io_uring_enter(r10, 0x7a98, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r13, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0)

3.683989993s ago: executing program 3 (id=553):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r1, &(0x7f0000005180)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0)
dup3(r0, r1, 0x0)
ioctl$RTC_PLL_SET(r0, 0x401c7012, &(0x7f0000000140)={0x7, 0x2, 0xb9, 0x1, 0x401, 0x99e, 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x1)
epoll_create1(0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9001c0018"], 0x21)
epoll_create1(0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x9)
shutdown(r4, 0x1)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={r5}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x15, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg0\x00'})

3.577264867s ago: executing program 4 (id=554):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0x541b, 0x0)
socket$inet6(0xa, 0x800, 0x9)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000002c000e801400018008000100e0000002080002"], 0x90}}, 0x0)
ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f00000003c0)={{0x1, @addr=0x5}, 0x8, 0xfffffffffffff29c, 0x7fff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES16=r5, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r4, @ANYRESDEC=r0], 0x12c}}, 0x0)
io_uring_setup(0x5237, &(0x7f00000002c0))
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
sendto$packet(r7, &(0x7f0000000340)="0b051000e0ff030006004788aa96a18553443a18c7fe00000800440f00002d7a70ce669d11e1", 0x26, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="4ee1b9f7b138"}, 0x14)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @multicast}, 0x10)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

2.598845746s ago: executing program 0 (id=555):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf09000000e5ff0055090100000000009500000000000000bf91000000000000b7020000000000008500000010000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = memfd_secret(0x80000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/226, 0xe2, 0x1, &(0x7f0000000580)=""/161, 0xa1}, &(0x7f00000001c0)=0x40)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x5}]}]}]}]}, 0x34}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

2.598190713s ago: executing program 3 (id=556):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet(0xa, 0x801, 0x0)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100), 0x4)
accept4(r0, 0x0, 0x0, 0xc0800)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x0, [0x8, 0x40, 0x7ff]}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000480)={<r1=>0x0, 0x5}, &(0x7f0000000580)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r1, @in={{0x2, 0x4e22, @multicast2}}, 0x10001, 0x4, 0x0, 0x5, 0x14, 0x6, 0x8}, &(0x7f00000005c0)=0x9c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000340)={&(0x7f00000003c0)={0x1d, r3}, 0x10, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="010000000500"/16, @ANYRES64=0x0, @ANYRES64=<r4=>0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000006c0)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @multicast1}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20)
sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000e2ffffffffffffff00000000dd80d75448bc3c22"], 0x48}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x140c, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x85}, 0x0)
close(r2)

2.339058801s ago: executing program 4 (id=557):
socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x0)
sendto(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r2, &(0x7f00000006c0)=""/223, 0xdf, 0x5)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a", 0x62}, {&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e1", 0x60}], 0x2}}], 0x1, 0x0)
connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendto$inet(r1, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10)
r3 = gettid()
sigaltstack(&(0x7f00000000c0)={&(0x7f0000002400)=""/4095, 0x0, 0xfff}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0)
rt_sigqueueinfo(r3, 0x21, &(0x7f0000000000))
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
dup(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601046c000091a229986557c560d8319e5a74849d7c000000000000000000050005000a0099717fbe6500f95eda333d23260300000500010006000000050000000900020073797a300000000013000321742cd1665716e5479000197f457c266600cd76df391846496ef0f1d032fe16ac15e2a6c93f354d16c7f724b0125bd54909cc8daf1f16771a6260801065f2077d5de2dc565941f1062892b4bbd8f5c7fc10"], 0x58}}, 0x0)

2.078192527s ago: executing program 3 (id=558):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x9)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2000020}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x8e98, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000180))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000200)={0x3, 0xfa, 0x9a, 0x3, 0x9})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x9})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x3})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = dup3(r6, r5, 0x0)
r8 = syz_io_uring_setup(0x2e4d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000400), &(0x7f0000000280)=<r9=>0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000000040)=<r10=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r8, 0x41b, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000340)={0x0, 0x109000})

1.967131773s ago: executing program 2 (id=559):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[], 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
read$hidraw(r5, 0x0, 0x0)
syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000000)='B')
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabb6a177a0000008100f9ff08060001080006320900000000000000ac1e0101aaaaaaaaaa0cf3ffffff"], 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@newqdisc={0xdc, 0x24, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5057dede}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x9a, 0x1, 0xf2, 0xd0f76369cdd33016, 0xfffffff8, 0xed7d, 0x7}}, {0x12, 0x2, [0x30, 0x5, 0x200, 0x0, 0x2, 0xa16, 0x5]}}, {{0x1c, 0x1, {0x4, 0x7, 0x8, 0xdd2, 0x0, 0x7fffffff, 0x9, 0x9}}, {0x16, 0x2, [0xfc00, 0x9, 0xffff, 0x81, 0x1, 0x3, 0x1, 0x6, 0x1]}}, {{0x1c, 0x1, {0xe, 0x7f, 0x1ff, 0x6, 0x1, 0x18, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x7, 0xdb, 0x3, 0xd71, 0x0, 0x4, 0x6}}, {0x4}}]}]}, 0xdc}}, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.829674071s ago: executing program 0 (id=560):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
syz_emit_ethernet(0x36, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
syz_open_dev$tty1(0xc, 0x4, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x240)

1.672062749s ago: executing program 4 (id=561):
syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x101001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
socket$inet6_sctp(0x1c, 0x0, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x27, 0x0, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ffb75e07009c5e6f426ebb117c0caba25f"})
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000004000000c1fe0080130003000d3407"], 0x2c}}, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4)
ioctl$TCSBRK(r3, 0x40049409, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000020c0)}, &(0x7f0000000080)=0x6b)
setsockopt$inet6_int(r5, 0x29, 0x14, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x4e22, 0xffffff85, @remote, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f000001aa80)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x16}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x4}}], 0x24}, 0x40)
r7 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x7, 0x7, 0xc, 0x6, 0x2, 0x3, 0x81, 0x218, 0x34, 0xfe, 0x10, 0x0, 0x20, 0x1, 0x7700, 0x800, 0x800}, [{0x3, 0x1, 0x3, 0xdb2, 0x46, 0x2, 0x1, 0x9}], "a75c30684862bbfc3a6f8d9b24c33e8d542f868459d80e161db043563d229783b8aa42dd526a32ef3293a96319623daf38cd861c13878917c0c1f46a75c495f9272d5ef0031a8604a2bfbd9c3d39e6b309f9499963dbb0779fd26239dc1ddb3cfc4911105471230e68754a21dd0bcebd410b4d427db2614d24380de542752ade141a0af3a1bb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8da)

1.648896349s ago: executing program 1 (id=562):
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x1, @vbi={0x4d6, 0x6, 0x0, 0x3132564e, [0x8], [0x4], 0x108}})
listen(0xffffffffffffffff, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0), 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x6, @private1}, 0x1c)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f00000048c0)='./file0\x00', 0x101cc0, 0x88)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)

1.267499327s ago: executing program 4 (id=563):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000100), &(0x7f0000000700)}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)}], 0x1}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
gettid()
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000c40000decd0000000000000000000000ea12cad5392dd1db96d520c35b4a8783719e6ecd262c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x8, 0xf, &(0x7f0000000480)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bind$alg(r3, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
socket$netlink(0x10, 0x3, 0x8000000004)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x4161, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.229156743s ago: executing program 3 (id=564):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x1c)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
r3 = dup2(r1, r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
r5 = openat$dir(0xffffff9c, &(0x7f0000001080)='./file0\x00', 0x400, 0xb0)
mknodat(r5, &(0x7f00000010c0)='./file0\x00', 0x1000, 0x9)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000000000))
read$FUSE(r4, &(0x7f000001aa80)={0x2020}, 0xfffffffffffffde5)
readv(r3, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f00000043c0)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000011c0)="bc", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r6, 0x1)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rdma_dest={0x18}], 0x18}, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x10000001)
write$vhost_msg_v2(r3, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000380)=""/121, 0x79, 0x0, 0x0, 0x2}}, 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b400000000060000480340001800b0001006578746864720000240002800800034000000000080001400000000808000440000000220500020000000000280001800d00010073796e70726f78790000000014000280050002000000000008000340000200000900010073797a30"], 0xfc}, 0x1, 0x0, 0x0, 0x51}, 0x0)

900.778362ms ago: executing program 4 (id=565):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7f5b, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x0, 0x3014}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9b000/0x2000)=nil})
r5 = dup(r3)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e8ad721c9df73eb8c4a2dd07a99d2947392a5ac7b74a497aefdf5f6090c2da417ed248ede20de39170c44e95ac1a499ea331590eaf1d0a1388a8085805069a0b275", 0xb2}], 0x1, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040))
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0x10000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40a01, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12)

666.385811ms ago: executing program 0 (id=566):
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x541b, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, &(0x7f0000000400)={{0x3, 0x0, 0x1, 0x2}})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x327fc29d2c57a920}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="65010000"], 0x188}}, 0x40048d5)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'geneve0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000380)="163c8f3f8a5d66571e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000010000000000000008000100000000007473b253"], 0x24}}, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000c00)=ANY=[@ANYBLOB="06000000000000fd9b000040"])
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400000903000000092100000001222da914a8585550e8bdda2900090581030000000000"], 0x0)
unshare(0x66000080)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030901020000000000000000010000000900010073797a30000000000900030073797a31000000006c000000060a010400000000000000000100000008000b400000000044000480140001800c0001006e6f747261636b00040002802c0001800c00010062697477697365001c000280080003400000000408000240000000000800014000000000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x0, 0x0, {0x34}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0)

478.270344ms ago: executing program 1 (id=567):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$packet(0x11, 0x0, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x401)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
pread64(r3, 0x0, 0x0, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x2, 0x8000, 0x3, 0xfffffff8, 0x0, "2c1a1e67ea7f68fb26db62aee0f8946bbef5f4"})
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000140)={'\x00', 0xffff, 0x0, 0x7, 0x0, 0x3, 0x0, 0x5000, '\x00', 0xbd2})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x0, 0x0, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x1c)

416.977602ms ago: executing program 4 (id=568):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r5}]}}}]}, 0x38}}, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYRES8=r1, @ANYBLOB="04dd4bf15852b90100679f61ab401b901e005d1bb8babceb439b7ab1f0fef15e913e7c15af8a70ce3e55dbafadd25a8913161836f0eef4fa098a90", @ANYBLOB=',group_id', @ANYRESDEC=0x0])
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
dup3(r7, r6, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x80000}, 0x20)
r8 = socket(0x1e, 0x1, 0x0)
pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0)
io_setup(0x100, &(0x7f0000000280)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000900)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}])
connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r8, &(0x7f0000000080), 0x2000011a)
r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000040000000b0f065e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 3 (id=569):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a00000000000000000000000000001800048014000180090001007866726d0000000004000280140000001100010000000000000000000000010a13c25861bb1714d2b62bb69c04bd5c209ba73f0352a633b3ee76b04f299ff556aec684faf63a32e43f6d03e95a1e67e31572ebd87caf2cb5bc2d5fa61a0570ba2ca894cccb7ad67e542964d4bf3e2c314bcb2d3b1f2cce6405"], 0x54}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x803, 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c, 0x0}}], 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r1 = getpid()
syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x14}}}}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='ext4_journal_start\x00', r2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_SPNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000011c35b400304106098c6800000010902120001000000000904"], 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000731119000000000085c19368e12f75f04d0000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = syz_pidfd_open(r1, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5)
mkdir(0x0, 0x0)

kernel console output (not intermixed with test programs):

arams data found
[  231.706772][   T25] usb 2-1: device descriptor read/8, error -71
[  231.826533][   T25] usb usb2-port1: unable to enumerate USB device
[  232.218877][ T7676] =======================================================
[  232.218877][ T7676] WARNING: The mand mount option has been deprecated and
[  232.218877][ T7676]          and is ignored by this kernel. Remove the mand
[  232.218877][ T7676]          option from the mount to silence this warning.
[  232.218877][ T7676] =======================================================
[  232.441980][ T2981] hsr_slave_0: left promiscuous mode
[  232.497829][ T2981] hsr_slave_1: left promiscuous mode
[  232.506989][ T5281] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  232.534066][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.539107][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'.
[  232.556280][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.567181][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.595052][ T7679] loop4: detected capacity change from 0 to 7
[  232.615846][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.637389][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.680650][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.690365][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.720895][ T2981] veth1_macvtap: left promiscuous mode
[  232.725921][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.726690][ T2981] veth0_macvtap: left promiscuous mode
[  232.735956][ T5281] usb 3-1: Using ep0 maxpacket: 16
[  232.740621][ T2981] veth1_vlan: left promiscuous mode
[  232.754281][ T2981] veth0_vlan: left promiscuous mode
[  232.762325][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.766395][ T5281] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config
[  232.771471][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.790417][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.805725][ T7679] ldm_validate_partition_table(): Disk read failed.
[  232.815969][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.844294][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.847328][ T5287] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  232.855741][ T7679] Buffer I/O error on dev loop4, logical block 0, async page read
[  232.863063][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  232.881390][ T5281] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191
[  232.897522][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  232.911225][ T7679] Dev loop4: unable to read RDB block 0
[  232.963364][ T5281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  232.973474][ T7679]  loop4: unable to read partition table
[  233.017438][ T5281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  233.025979][ T5281] usb 3-1: Manufacturer: syz
[  233.046294][ T5287] usb 5-1: Using ep0 maxpacket: 16
[  233.051702][ T7679] loop4: partition table beyond EOD, truncated
[  233.054836][ T5287] usb 5-1: config index 0 descriptor too short (expected 236, got 129)
[  233.073614][ T5281] usb 3-1: config 0 descriptor??
[  233.091731][ T5287] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  233.099644][ T7679] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  233.099644][ T7679] 
) failed (rc=-5)
[  233.104605][ T5287] usb 5-1: config 36 has 0 interfaces, different from the descriptor's value: 10
[  233.129570][ T5287] usb 5-1: New USB device found, idVendor=1e2d, idProduct=00f1, bcdDevice=41.fa
[  233.139287][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.221179][ T5287] usb 5-1: Product: syz
[  233.255343][ T5287] usb 5-1: Manufacturer: syz
[  233.298916][ T5287] usb 5-1: SerialNumber: syz
[  233.317700][ T7697] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.391'.
[  233.389120][ T5281] rc_core: IR keymap rc-hauppauge not found
[  233.420884][ T5281] Registered IR keymap rc-empty
[  233.451375][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  233.500666][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  233.596559][ T5241] Bluetooth: hci8: command tx timeout
[  233.614385][ T5281] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  233.684127][ T5281] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11
[  233.718793][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  233.757072][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  233.776126][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  233.795913][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  233.837290][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  233.846376][ T5286] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  233.889038][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  233.965276][ T5287] usb 5-1: USB disconnect, device number 23
[  233.976612][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  234.015795][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  234.055351][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  234.078153][ T5281] mceusb 3-1:0.0: Error: mce write urb status = -71
[  234.104059][ T5281] mceusb 3-1:0.0: Registered Ø‹ with mce emulator interface version 1
[  234.138000][ T5281] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  234.158772][ T5286] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 5
[  234.158826][ T5286] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  234.191264][ T5286] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  234.191304][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  234.191327][ T5286] usb 2-1: SerialNumber: syz
[  234.199812][ T5281] usb 3-1: USB disconnect, device number 29
[  234.581849][ T5286] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  235.056372][ T5287] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  235.243210][ T5287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.243247][ T5287] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  235.245873][ T5287] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  235.245897][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.245913][ T5287] usb 3-1: Product: syz
[  235.245926][ T5287] usb 3-1: Manufacturer: syz
[  235.245938][ T5287] usb 3-1: SerialNumber: syz
[  235.309656][ T2981] team0 (unregistering): Port device team_slave_1 removed
[  235.558746][ T2981] team0 (unregistering): Port device team_slave_0 removed
[  235.559753][ T5287] cdc_ncm 3-1:1.0: bind() failure
[  235.563751][ T5287] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  235.563785][ T5287] cdc_ncm 3-1:1.1: bind() failure
[  235.568804][ T5287] usb 3-1: USB disconnect, device number 30
[  235.659649][ T5241] Bluetooth: hci8: command tx timeout
[  237.380804][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.425808][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.467743][ T7652] bridge_slave_0: entered allmulticast mode
[  237.515836][ T7652] bridge_slave_0: entered promiscuous mode
[  237.530544][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.563620][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.576268][ T7652] bridge_slave_1: entered allmulticast mode
[  237.584570][ T7652] bridge_slave_1: entered promiscuous mode
[  237.746350][ T5241] Bluetooth: hci8: command tx timeout
[  237.932021][ T5287] usb 2-1: USB disconnect, device number 25
[  237.965330][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.006957][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'.
[  238.039875][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.193560][ T7723] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.397' sets config #0
[  238.321517][ T7652] team0: Port device team_slave_0 added
[  238.340330][ T7652] team0: Port device team_slave_1 added
[  238.452545][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.507516][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.549913][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.629479][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.665835][   T29] audit: type=1800 audit(1727962080.083:290): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.402" name="/" dev="fuse" ino=1 res=0 errno=0
[  238.671902][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.713478][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.839547][ T7652] hsr_slave_0: entered promiscuous mode
[  238.875377][ T7652] hsr_slave_1: entered promiscuous mode
[  238.901391][ T7652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  238.928921][ T7652] Cannot create hsr debugfs directory
[  239.392563][ T7758] block device autoloading is deprecated and will be removed.
[  239.411064][ T7758] syz.0.403: attempt to access beyond end of device
[  239.411064][ T7758] md34: rw=2048, sector=0, nr_sectors = 8 limit=0
[  240.001189][ T7652] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  240.019342][ T7652] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  240.049002][ T7652] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  240.075707][ T5286] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  240.085496][ T7652] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  240.239726][ T5286] usb 1-1: Using ep0 maxpacket: 8
[  240.269176][ T5286] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  240.290285][ T5286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  240.311864][ T5286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  240.347180][ T5286] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.388188][ T7652] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.416214][ T5286] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  240.425329][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.459074][ T7652] 8021q: adding VLAN 0 to HW filter on device team0
[  240.518628][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.526126][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.556479][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.563636][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.607703][ T7780] vlan2: entered promiscuous mode
[  240.618060][ T7780] vlan2: entered allmulticast mode
[  240.623581][ T7780] hsr_slave_1: entered allmulticast mode
[  240.636642][ T7780] hsr_slave_1: left allmulticast mode
[  240.715751][ T5286] usb 1-1: GET_CAPABILITIES returned 0
[  240.721866][ T5286] usbtmc 1-1:16.0: can't read capabilities
[  240.874390][ T7786] netlink: 'syz.2.407': attribute type 10 has an invalid length.
[  240.885289][ T7786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.911387][ T7786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.962106][ T7786] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  240.979795][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  241.021899][ T7652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.070772][ T5284] usb 1-1: USB disconnect, device number 10
[  241.367094][ T7652] veth0_vlan: entered promiscuous mode
[  241.394110][ T7652] veth1_vlan: entered promiscuous mode
[  242.364567][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.510842][ T7652] veth0_macvtap: entered promiscuous mode
[  242.807931][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.958373][ T7652] veth1_macvtap: entered promiscuous mode
[  243.025130][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.075843][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.136405][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.161673][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.194381][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.235755][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.245757][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.256911][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.266987][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.277498][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.287633][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.298161][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.315849][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.326465][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.346230][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.356768][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.368516][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.541408][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.627760][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.640525][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.655050][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.690747][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.721214][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.755988][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.772105][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.783300][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.794489][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.795774][   T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  243.814678][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.828820][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.841752][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.853118][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.873444][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.884069][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.895229][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.914102][ T7652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.975272][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'.
[  243.984365][ T7652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.006020][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.017185][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.031143][   T25] usb 1-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  244.056598][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.056894][ T7652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.088138][   T25] usb 1-1: config 0 descriptor??
[  244.389216][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.469331][ T7652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.485846][ T7652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.494625][ T7652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.513969][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.536542][ T7652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.560756][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.570355][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.591124][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.622154][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  244.630847][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.670807][   T25] wacom 0003:056A:0029.0009: Unknown device_type for 'HID 056a:0029'. Assuming pen.
[  244.692951][   T25] wacom 0003:056A:0029.0009: hidraw0: USB HID v0.00 Device [HID 056a:0029] on usb-dummy_hcd.0-1/input0
[  244.727159][   T25] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0029.0009/input/input12
[  245.024855][    T8] usb 1-1: USB disconnect, device number 11
[  245.135218][ T7786] syz.2.407 (7786): drop_caches: 1
[  245.261220][   T11] bridge_slave_1: left allmulticast mode
[  245.267065][   T11] bridge_slave_1: left promiscuous mode
[  245.276726][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.311555][   T11] bridge_slave_0: left allmulticast mode
[  245.319281][   T11] bridge_slave_0: left promiscuous mode
[  245.327995][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.095809][   T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  246.138024][ T7862] Failed to get privilege flags for destination (handle=0x0:0x0)
[  246.255848][   T25] usb 1-1: Using ep0 maxpacket: 16
[  246.269837][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.297373][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.310761][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  246.344187][   T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  246.382758][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.406438][   T25] usb 1-1: config 0 descriptor??
[  246.504584][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.523836][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.542628][   T11] bond0 (unregistering): Released all slaves
[  246.660684][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.679832][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.700499][ T5232] Bluetooth: hci2: command tx timeout
[  246.843077][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.857543][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.865079][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.872489][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.880406][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.887783][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.898095][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.905697][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.914143][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.921814][   T25] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  246.944214][   T25] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input15
[  246.971261][   T25] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  247.212402][ T2454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.246913][ T2454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.339026][ T5232] Bluetooth: hci6: command 0x0406 tx timeout
[  247.458666][    T8] usb 1-1: USB disconnect, device number 12
[  247.603915][   T11] hsr_slave_0: left promiscuous mode
[  247.687656][   T11] hsr_slave_1: left promiscuous mode
[  247.753216][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.775947][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.816489][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.823999][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.898293][ T5241] Bluetooth: hci6: unexpected event for opcode 0x0403
[  248.070405][   T11] veth1_macvtap: left promiscuous mode
[  248.077867][   T11] veth0_macvtap: left promiscuous mode
[  248.083519][   T11] veth1_vlan: left promiscuous mode
[  248.088921][   T11] veth0_vlan: left promiscuous mode
[  248.775995][    T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  248.783748][ T5241] Bluetooth: hci2: command tx timeout
[  248.964285][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.006073][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.017965][    T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  249.027329][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  249.038121][    T8] usb 1-1: SerialNumber: syz
[  249.527491][   T11] team0 (unregistering): Port device team_slave_1 removed
[  249.742860][   T11] team0 (unregistering): Port device team_slave_0 removed
[  250.120896][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.430'.
[  250.866580][ T5241] Bluetooth: hci2: command tx timeout
[  251.392523][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'.
[  251.414123][ T7898] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.432284][ T7898] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.445309][ T7898] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.456069][ T7898] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.861642][    T8] usb 1-1: 0:2 : does not exist
[  251.866657][    T8] usb 1-1: unit 5 not found!
[  251.894812][    T8] usb 1-1: USB disconnect, device number 13
[  252.013286][ T5239] udevd[5239]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.045187][ T7843] chnl_net:caif_netlink_parms(): no params data found
[  252.663097][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.712713][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.725968][ T7843] bridge_slave_0: entered allmulticast mode
[  252.739871][ T7843] bridge_slave_0: entered promiscuous mode
[  252.757316][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.774286][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.817705][ T7843] bridge_slave_1: entered allmulticast mode
[  252.857049][ T7843] bridge_slave_1: entered promiscuous mode
[  252.936283][ T5241] Bluetooth: hci2: command tx timeout
[  253.184213][ T7843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.279472][ T7843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.504175][ T7843] team0: Port device team_slave_0 added
[  253.534228][ T7843] team0: Port device team_slave_1 added
[  253.625836][ T5232] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  253.641478][ T5232] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  253.651000][ T5232] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  253.662378][ T5232] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  253.674020][ T5232] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  253.680744][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.705378][ T5232] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  253.901792][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.946385][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.953394][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.984936][ T7843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.005034][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.012967][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.040757][ T7843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.129361][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.222952][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.422765][ T5241] Bluetooth: hci6: unexpected event for opcode 0x2028
[  254.523460][ T7843] hsr_slave_0: entered promiscuous mode
[  254.532780][ T7843] hsr_slave_1: entered promiscuous mode
[  254.555241][ T7843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  254.591787][ T7843] Cannot create hsr debugfs directory
[  255.019936][ T7959] chnl_net:caif_netlink_parms(): no params data found
[  255.106073][ T5284] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  255.204259][   T11] bridge_slave_1: left allmulticast mode
[  255.211730][   T11] bridge_slave_1: left promiscuous mode
[  255.222044][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.232350][   T11] bridge_slave_0: left allmulticast mode
[  255.250550][   T11] bridge_slave_0: left promiscuous mode
[  255.276039][ T5284] usb 1-1: Using ep0 maxpacket: 16
[  255.276420][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.295177][ T5284] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  255.325205][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.365854][ T5284] usb 1-1: Product: syz
[  255.375350][ T5284] usb 1-1: Manufacturer: syz
[  255.381165][ T5284] usb 1-1: SerialNumber: syz
[  255.392333][ T5284] usb 1-1: config 0 descriptor??
[  255.402263][ T5241] Bluetooth: hci6: unexpected event for opcode 0x0000
[  255.438080][ T5284] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  255.737635][ T5241] Bluetooth: hci8: command tx timeout
[  255.985890][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  255.992445][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  256.279505][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.310096][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.329739][   T11] bond0 (unregistering): Released all slaves
[  256.456032][ T2454] usb 1-1: Failed to submit usb control message: -110
[  256.477216][ T2454] usb 1-1: unable to send the bmi data to the device: -110
[  256.488303][ T2454] usb 1-1: unable to get target info from device
[  256.496069][ T2454] usb 1-1: could not get target info (-110)
[  256.502336][ T2454] usb 1-1: could not probe fw (-110)
[  256.561565][ T5299] usb 1-1: USB disconnect, device number 14
[  257.260592][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.296024][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.306307][ T7959] bridge_slave_0: entered allmulticast mode
[  257.338289][ T7959] bridge_slave_0: entered promiscuous mode
[  257.458674][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  257.476102][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  257.486373][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  257.497316][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.506831][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  257.523616][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  257.636339][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.644613][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.655204][ T7959] bridge_slave_1: entered allmulticast mode
[  257.667603][ T7959] bridge_slave_1: entered promiscuous mode
[  257.746379][ T5281] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  257.828338][ T5241] Bluetooth: hci8: command tx timeout
[  257.878693][   T11] hsr_slave_0: left promiscuous mode
[  257.892519][   T11] hsr_slave_1: left promiscuous mode
[  257.914462][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.923132][ T5281] usb 1-1: Using ep0 maxpacket: 32
[  257.933352][ T5281] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.5f
[  257.936834][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.944408][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.963437][ T5281] usb 1-1: Product: syz
[  257.968914][ T5281] usb 1-1: Manufacturer: syz
[  257.971165][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.976060][ T5281] usb 1-1: SerialNumber: syz
[  257.987800][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.989957][ T5281] usb 1-1: config 0 descriptor??
[  258.002278][ T5281] usb-storage 1-1:0.0: USB Mass Storage device detected
[  258.017639][ T5281] usb-storage 1-1:0.0: Quirks match for vid 057b pid 0000: 1
[  258.058072][   T11] veth1_macvtap: left promiscuous mode
[  258.075910][   T11] veth0_macvtap: left promiscuous mode
[  258.081594][   T11] veth1_vlan: left promiscuous mode
[  258.105878][   T11] veth0_vlan: left promiscuous mode
[  258.927454][   T11] team0 (unregistering): Port device team_slave_1 removed
[  259.000829][   T11] team0 (unregistering): Port device team_slave_0 removed
[  259.421467][ T5241] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  259.442560][ T5241] Bluetooth: hci6: Injecting HCI hardware error event
[  259.452315][ T5241] Bluetooth: hci6: hardware error 0x00
[  259.656580][ T5232] Bluetooth: hci5: command tx timeout
[  259.895696][ T5232] Bluetooth: hci8: command tx timeout
[  259.949094][ T7959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.981225][ T7959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.098887][ T7959] team0: Port device team_slave_0 added
[  260.108843][ T7959] team0: Port device team_slave_1 added
[  260.252216][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.262393][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.289856][ T7959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.329716][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.336832][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.391765][ T7959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.500118][ T7843] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  260.521114][ T7843] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  260.628435][ T7843] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  260.658176][ T7959] hsr_slave_0: entered promiscuous mode
[  260.664832][ T7959] hsr_slave_1: entered promiscuous mode
[  260.680869][ T7959] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  260.689655][ T7959] Cannot create hsr debugfs directory
[  260.713332][ T7843] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  261.016562][ T5299] usb 1-1: USB disconnect, device number 15
[  261.043795][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.229723][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.375158][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.450508][ T8009] chnl_net:caif_netlink_parms(): no params data found
[  261.496712][ T5241] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  261.518231][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.738076][ T5241] Bluetooth: hci5: command tx timeout
[  261.925095][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.939961][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.948526][ T8009] bridge_slave_0: entered allmulticast mode
[  261.955916][ T8009] bridge_slave_0: entered promiscuous mode
[  261.978124][ T5241] Bluetooth: hci8: command tx timeout
[  262.024298][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.061741][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.080432][ T8009] bridge_slave_1: entered allmulticast mode
[  262.089962][ T8009] bridge_slave_1: entered promiscuous mode
[  262.112940][   T11] bridge_slave_1: left allmulticast mode
[  262.148343][   T11] bridge_slave_1: left promiscuous mode
[  262.154139][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.187212][   T11] bridge_slave_0: left allmulticast mode
[  262.199855][   T11] bridge_slave_0: left promiscuous mode
[  262.206257][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.899623][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.913576][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.927724][   T11] bond0 (unregistering): Released all slaves
[  263.039841][   T11] IPVS: stopping backup sync thread 7502 ...
[  263.074459][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.196632][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.401753][ T7843] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.415338][ T8009] team0: Port device team_slave_0 added
[  263.424131][ T8009] team0: Port device team_slave_1 added
[  263.514948][ T7959] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  263.533977][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.542533][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.571134][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.601655][ T7959] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  263.632364][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.641906][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.671172][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.711823][   T11] hsr_slave_0: left promiscuous mode
[  263.732974][   T11] hsr_slave_1: left promiscuous mode
[  263.762834][   T11] veth1_macvtap: left promiscuous mode
[  263.768526][   T11] veth0_macvtap: left promiscuous mode
[  263.774132][   T11] veth1_vlan: left promiscuous mode
[  263.780617][   T11] veth0_vlan: left promiscuous mode
[  263.815949][ T5241] Bluetooth: hci5: command tx timeout
[  264.591593][   T11] team0 (unregistering): Port device team_slave_1 removed
[  264.660765][   T11] team0 (unregistering): Port device team_slave_0 removed
[  265.478794][ T7959] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  265.494512][ T7959] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  265.524906][ T7843] 8021q: adding VLAN 0 to HW filter on device team0
[  265.670227][ T8009] hsr_slave_0: entered promiscuous mode
[  265.701778][ T8009] hsr_slave_1: entered promiscuous mode
[  265.713158][ T8009] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.722814][ T8009] Cannot create hsr debugfs directory
[  265.816778][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.824023][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.843642][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.850915][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.897610][ T5241] Bluetooth: hci5: command tx timeout
[  266.338696][ T7959] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.530715][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.616586][ T7959] 8021q: adding VLAN 0 to HW filter on device team0
[  266.711423][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.718627][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.821527][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.828740][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.019475][ T7843] veth0_vlan: entered promiscuous mode
[  267.054945][ T7843] veth1_vlan: entered promiscuous mode
[  267.303334][ T7843] veth0_macvtap: entered promiscuous mode
[  267.381728][ T7843] veth1_macvtap: entered promiscuous mode
[  267.527992][ T8009] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  267.566613][ T8009] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  267.646806][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.676513][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.701770][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.726468][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.738533][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.751510][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.763691][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.775704][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.787132][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.799773][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.811142][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.837160][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.858517][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.896611][ T8009] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  267.930892][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.944621][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.970281][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  267.996591][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.021085][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.039537][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.064681][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.083906][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.100961][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.114347][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.125833][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.139169][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.150389][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.162999][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.175788][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.190032][ T7843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.200434][ T7843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.211648][ T7843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.222446][ T7843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.248083][ T8009] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  268.271036][ T7959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.305414][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  268.315993][ T5240] Bluetooth: hci3: command 0x0406 tx timeout
[  268.601849][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.625443][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.780283][ T7959] veth0_vlan: entered promiscuous mode
[  268.837216][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.867894][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.951701][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.981440][ T7959] veth1_vlan: entered promiscuous mode
[  269.074657][ T8009] 8021q: adding VLAN 0 to HW filter on device team0
[  269.183324][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.190650][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.345571][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.352839][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.517390][   T29] audit: type=1326 audit(1727962110.943:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.0.458" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x0
[  269.539239][ T8009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  269.551187][ T8009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  269.580023][ T5299] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  269.606885][ T7959] veth0_macvtap: entered promiscuous mode
[  269.620113][ T7959] veth1_macvtap: entered promiscuous mode
[  269.674189][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.697384][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.710376][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.721313][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.731738][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.743797][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.757592][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.757863][ T5299] usb 5-1: config index 0 descriptor too short (expected 4114, got 18)
[  269.768732][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.787895][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.796435][ T5299] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  269.799386][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.820515][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.824274][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.855783][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.865742][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.876364][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.888955][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.891200][ T5299] usb 5-1: Product: syz
[  269.931776][ T5299] usb 5-1: Manufacturer: syz
[  269.933880][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.944873][ T5299] usb 5-1: SerialNumber: syz
[  269.947131][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.947149][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.947169][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.947187][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.947204][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.947220][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.947236][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.947250][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.947266][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.947281][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.947298][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.947313][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.947330][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.947345][ T7959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.947362][ T7959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.948871][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.974867][ T5299] usb 5-1: config 0 descriptor??
[  270.126533][ T8009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.173285][ T7959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.193297][ T7959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.205165][ T7959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.217469][ T7959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.385022][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.405703][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.523592][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.539152][ T5299] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  270.551821][ T5299] asix 5-1:0.0: probe with driver asix failed with error -32
[  270.578785][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.619691][ T8009] veth0_vlan: entered promiscuous mode
[  270.633951][ T8009] veth1_vlan: entered promiscuous mode
[  270.799668][ T8009] veth0_macvtap: entered promiscuous mode
[  270.839870][ T8009] veth1_macvtap: entered promiscuous mode
[  270.889525][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.900280][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.910486][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.921327][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.931700][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.942450][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.953151][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.963796][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.973763][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.985083][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.995902][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.006977][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.017130][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.027729][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.037814][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.052707][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.064427][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.074953][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.086652][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.097711][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.109349][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.119602][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.130217][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.140228][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.150813][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.161002][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.171616][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.182951][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.194574][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.204541][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.215268][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.225250][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.238866][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.248944][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.256528][   T51] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  271.259737][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.279037][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.490468][ T8009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.491924][   T51] usb 4-1: Using ep0 maxpacket: 8
[  271.508235][ T8009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.536630][   T51] usb 4-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config
[  271.547337][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 23097, setting to 64
[  271.560594][ T8009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.581401][   T51] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  271.592989][ T8009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.623968][   T51] usb 4-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d
[  271.633732][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.686210][   T51] usb 4-1: Product: syz
[  271.690437][   T51] usb 4-1: Manufacturer: syz
[  271.741066][   T51] usb 4-1: SerialNumber: syz
[  271.768562][   T51] usb 4-1: config 0 descriptor??
[  271.890816][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.925244][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.077283][ T2454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.096468][ T2454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.117532][   T51] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  272.299388][   T51] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  272.315440][   T51] usb 4-1: USB disconnect, device number 20
[  272.374053][ T5239] udevd[5239]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  272.523014][ T8134] netlink: 'syz.1.449': attribute type 12 has an invalid length.
[  272.536598][ T8134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.449'.
[  272.582157][ T8134] team0: Device ipvlan2 is already an upper device of the team interface
[  272.758924][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  272.977787][ T5281] usb 5-1: USB disconnect, device number 24
[  273.017389][   T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  273.175875][   T25] usb 2-1: Using ep0 maxpacket: 16
[  273.191374][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.203559][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.213724][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  273.226796][   T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  273.236634][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.250061][ T5284] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  273.261146][   T25] usb 2-1: config 0 descriptor??
[  273.315752][ T5286] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  273.377619][ T5281] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  273.421716][ T5284] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  273.437400][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  273.462429][ T5284] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  273.474659][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.487330][ T5284] usb 1-1: Product: Й
[  273.493237][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  273.509719][ T5284] usb 1-1: SerialNumber: �꨺঱馱�⅃ﳋ潙
[  273.520085][ T5284] usb 1-1: config 0 descriptor??
[  273.536974][ T5286] usb 3-1: New USB device found, idVendor=0f11, idProduct=1101, bcdDevice=ed.45
[  273.548157][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.557547][ T5286] usb 3-1: Product: syz
[  273.560354][ T5281] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.561775][ T5286] usb 3-1: Manufacturer: syz
[  273.561794][ T5286] usb 3-1: SerialNumber: syz
[  273.564981][ T5286] usb 3-1: config 0 descriptor??
[  273.619587][ T5286] ldusb 3-1:0.0: Interrupt in endpoint not found
[  273.654886][ T5281] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  273.723182][ T5281] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  273.738715][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.748773][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.765746][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.768125][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.784280][ T5284] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22
[  273.799478][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.817878][ T5284] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  273.833351][ T5281] usb 5-1: Product: syz
[  273.835745][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.847575][ T5284] usb 1-1: USB disconnect, device number 16
[  273.855738][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.864991][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.874407][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.881706][ T5281] usb 5-1: Manufacturer: syz
[  273.881731][ T5281] usb 5-1: SerialNumber: syz
[  273.891150][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.900722][   T25] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  273.977608][   T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input16
[  274.036815][   T25] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  274.199230][ T5281] cdc_ncm 5-1:1.0: bind() failure
[  274.242806][ T5281] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  274.288143][ T5281] cdc_ncm 5-1:1.1: bind() failure
[  274.300772][ T5281] usb 5-1: USB disconnect, device number 25
[  274.585055][ T5287] usb 2-1: USB disconnect, device number 26
[  274.638373][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.792544][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.947582][ T8162] netlink: 'syz.4.456': attribute type 2 has an invalid length.
[  274.955537][   T29] audit: type=1326 audit(1727962116.373:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.0.455" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x0
[  274.974679][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.456'.
[  275.060895][ T5287] usb 3-1: USB disconnect, device number 31
[  275.270663][ T8162] bridge_slave_0: left allmulticast mode
[  275.293012][ T8162] bridge_slave_0: left promiscuous mode
[  275.301421][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.325227][ T8162] bridge_slave_1: left allmulticast mode
[  275.335862][ T8162] bridge_slave_1: left promiscuous mode
[  275.349953][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.363394][ T8170] capability: warning: `syz.1.460' uses deprecated v2 capabilities in a way that may be insecure
[  275.386667][ T8162] bond0: (slave bond_slave_0): Releasing backup interface
[  275.407375][ T8162] bond0: (slave bond_slave_1): Releasing backup interface
[  275.464612][ T8162] team0: Port device team_slave_0 removed
[  275.503796][ T8162] team0: Port device team_slave_1 removed
[  275.521048][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.536780][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.556201][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.572931][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.154762][ T8186] nft_compat: unsupported protocol 5
[  276.219149][ T8186] netlink: 1452 bytes leftover after parsing attributes in process `syz.3.465'.
[  276.424930][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.515805][   T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  276.620089][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'.
[  276.677581][   T25] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  276.687182][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.740410][   T25] usb 3-1: config 0 descriptor??
[  276.796461][   T25] gspca_main: spca508-2.14.0 probing 8086:0110
[  276.909104][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.988380][ T8197] vivid-000: =================  START STATUS  =================
[  276.999821][   T25] gspca_spca508: reg_read err -32
[  277.005406][   T25] gspca_spca508: reg_read err -32
[  277.012737][   T25] gspca_spca508: reg_read err -32
[  277.025963][ T8197] vivid-000: Generate PTS: true
[  277.044846][ T8197] vivid-000: Generate SCR: true
[  277.063338][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  277.095113][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.104760][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  277.117208][  T938] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  277.128343][ T8197] tpg source WxH: 320x180 (Y'CbCr)
[  277.133543][ T8197] tpg field: 1
[  277.144816][ T8197] tpg crop: 320x180@0x0
[  277.150988][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  277.169518][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  277.178905][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  277.187539][ T8197] tpg compose: 320x180@0x0
[  277.192043][ T8197] tpg colorspace: 8
[  277.200148][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  277.209110][ T8197] tpg transfer function: 0/0
[  277.216846][ T8197] tpg Y'CbCr encoding: 0/0
[  277.236823][ T8197] tpg quantization: 0/0
[  277.273977][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.286741][ T8197] tpg RGB range: 0/1
[  277.293904][ T8197] vivid-000: ==================  END STATUS  ==================
[  277.306200][  T938] usb 4-1: Using ep0 maxpacket: 8
[  277.314247][  T938] usb 4-1: config 0 has an invalid interface number: 101 but max is 0
[  277.325893][  T938] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  277.352301][  T938] usb 4-1: config 0 has no interface number 0
[  277.400326][  T938] usb 4-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30
[  277.454151][  T938] usb 4-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  277.485114][  T938] usb 4-1: config 0 interface 101 has no altsetting 0
[  277.530542][   T25] gspca_spca508: reg_read err -110
[  277.543842][   T25] gspca_spca508: reg_read err -32
[  277.564093][   T25] gspca_spca508: reg write: error -71
[  277.577184][   T25] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[  277.579425][  T938] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  277.601399][   T25] usb 3-1: USB disconnect, device number 32
[  277.619261][  T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.697138][  T938] usb 4-1: config 0 descriptor??
[  277.970194][  T938] usb 4-1: string descriptor 0 read error: -71
[  278.033435][  T938] gspca_main: vc032x-2.14.0 probing 046d:0892
[  278.043218][  T938] gspca_vc032x: reg_r err -71
[  278.048170][  T938] vc032x 4-1:0.101: probe with driver vc032x failed with error -71
[  278.061627][  T938] usb 4-1: USB disconnect, device number 21
[  278.514142][ T8221] kvm: requested 157562 ns i8254 timer period limited to 200000 ns
[  279.031495][   T35] bond0 (unregistering): Released all slaves
[  279.084096][ T8214] netlink: 'syz.0.476': attribute type 2 has an invalid length.
[  279.093234][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.476'.
[  279.118580][ T8216] bridge_slave_0: left allmulticast mode
[  279.131099][ T8216] bridge_slave_0: left promiscuous mode
[  279.150935][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.189292][ T8216] bridge_slave_1: left allmulticast mode
[  279.195198][ T8216] bridge_slave_1: left promiscuous mode
[  279.201259][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.224328][ T8216] bond0: (slave bond_slave_0): Releasing backup interface
[  279.256120][ T5241] Bluetooth: hci2: command tx timeout
[  279.263285][ T8216] bond0: (slave bond_slave_1): Releasing backup interface
[  279.356001][ T8216] team0: Port device team_slave_0 removed
[  279.412028][ T8216] team0: Port device team_slave_1 removed
[  279.437760][ T8216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.445269][ T8216] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.488147][ T8216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.496933][ T8216] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.028634][ T8199] chnl_net:caif_netlink_parms(): no params data found
[  280.654638][   T35] hsr_slave_0: left promiscuous mode
[  280.692556][   T35] hsr_slave_1: left promiscuous mode
[  280.800003][   T35] veth1_macvtap: left promiscuous mode
[  280.835930][   T35] veth0_macvtap: left promiscuous mode
[  280.841632][   T35] veth1_vlan: left promiscuous mode
[  280.867131][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  280.881876][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  280.890240][   T35] veth0_vlan: left promiscuous mode
[  280.896712][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  280.909030][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  280.928754][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  280.939556][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  280.948004][ T8252] netlink: 'syz.1.484': attribute type 1 has an invalid length.
[  281.053596][ T8252] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.484'.
[  281.248589][ T5232] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  281.260756][ T5232] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  281.275524][ T5232] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  281.285445][ T5232] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  281.296559][ T5232] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  281.310202][ T5232] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  281.337031][ T5232] Bluetooth: hci2: command tx timeout
[  283.021413][ T5241] Bluetooth: hci7: command tx timeout
[  283.192157][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.226882][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.250389][ T8199] bridge_slave_0: entered allmulticast mode
[  283.266858][ T8199] bridge_slave_0: entered promiscuous mode
[  283.295790][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.307729][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.315151][ T8199] bridge_slave_1: entered allmulticast mode
[  283.339470][ T8199] bridge_slave_1: entered promiscuous mode
[  283.417239][ T5241] Bluetooth: hci2: command tx timeout
[  283.417309][ T5232] Bluetooth: hci8: command tx timeout
[  283.539441][ T8199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.798043][ T8199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.005828][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.013725][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.031299][ T8199] team0: Port device team_slave_0 added
[  284.091073][ T8199] team0: Port device team_slave_1 added
[  284.378853][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.401347][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.431843][ T8199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.446705][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.453875][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.482995][ T8199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.496510][ T5284] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  284.655762][ T5284] usb 2-1: Using ep0 maxpacket: 8
[  284.686817][ T5284] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  284.695073][ T5284] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  284.724127][ T5284] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  284.746010][ T5284] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  284.758732][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.772111][ T5284] usbtmc 2-1:16.0: bulk endpoints not found
[  284.914319][ T8199] hsr_slave_0: entered promiscuous mode
[  284.939577][ T8199] hsr_slave_1: entered promiscuous mode
[  284.952814][ T8199] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  284.960840][ T8199] Cannot create hsr debugfs directory
[  285.038513][ T5281] usb 2-1: USB disconnect, device number 27
[  285.062235][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.084684][ T8259] chnl_net:caif_netlink_parms(): no params data found
[  285.095918][ T5232] Bluetooth: hci7: command tx timeout
[  285.115788][ T5284] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  285.141526][ T8253] chnl_net:caif_netlink_parms(): no params data found
[  285.261772][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.285213][ T5284] usb 3-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0
[  285.305877][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.315343][ T5284] usb 3-1: Product: syz
[  285.321991][ T5284] usb 3-1: Manufacturer: syz
[  285.327647][ T5284] usb 3-1: SerialNumber: syz
[  285.359147][ T5284] usb 3-1: config 0 descriptor??
[  285.373850][ T5284] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected
[  285.381649][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84
[  285.390799][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  285.398941][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82
[  285.408343][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  285.421841][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  285.446769][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  285.454543][ T5284] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  285.473908][ T5284] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  285.498379][ T5232] Bluetooth: hci2: command tx timeout
[  285.498391][ T5241] Bluetooth: hci8: command tx timeout
[  285.550615][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.722074][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.784889][ T8295] batadv0: entered promiscuous mode
[  285.802617][ T8295] batadv0: left promiscuous mode
[  285.924123][ T5284] usb 3-1: USB disconnect, device number 33
[  285.935729][ T5299] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  285.958904][ T5284] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  285.988390][ T5284] keyspan 3-1:0.0: device disconnected
[  286.121031][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.135963][ T8253] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.146808][ T5299] usb 2-1: Using ep0 maxpacket: 8
[  286.164071][ T8253] bridge_slave_0: entered allmulticast mode
[  286.185527][ T8253] bridge_slave_0: entered promiscuous mode
[  286.190405][ T5299] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  286.208298][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.217956][ T5299] usb 2-1: Product: syz
[  286.222191][ T5299] usb 2-1: Manufacturer: syz
[  286.227051][ T5299] usb 2-1: SerialNumber: syz
[  286.238050][ T5299] usb 2-1: config 0 descriptor??
[  286.248259][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.255422][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.275998][ T8259] bridge_slave_0: entered allmulticast mode
[  286.290450][ T8259] bridge_slave_0: entered promiscuous mode
[  286.301312][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.310397][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.318278][ T8259] bridge_slave_1: entered allmulticast mode
[  286.328815][ T8259] bridge_slave_1: entered promiscuous mode
[  286.514333][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.521852][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.529245][ T8253] bridge_slave_1: entered allmulticast mode
[  286.536818][ T8253] bridge_slave_1: entered promiscuous mode
[  286.600406][ T5299] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  286.761621][ T8318] ptrace attach of "./syz-executor exec"[7016] was attempted by "./syz-executor exec"[8318]
[  286.779489][ T8253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.945423][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.051305][ T8253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.125282][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.177309][ T5232] Bluetooth: hci7: command tx timeout
[  287.261458][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.556906][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.576290][ T5232] Bluetooth: hci8: command tx timeout
[  287.605699][   T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  287.760216][ T8253] team0: Port device team_slave_0 added
[  287.785728][   T25] usb 3-1: Using ep0 maxpacket: 8
[  287.799690][   T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  287.815482][ T8259] team0: Port device team_slave_0 added
[  287.823855][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.836173][   T25] usb 3-1: Product: syz
[  287.840993][   T25] usb 3-1: Manufacturer: syz
[  287.841321][ T8259] team0: Port device team_slave_1 added
[  287.846236][   T25] usb 3-1: SerialNumber: syz
[  287.868665][   T25] usb 3-1: config 0 descriptor??
[  287.931566][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.068262][ T8253] team0: Port device team_slave_1 added
[  288.099459][   T25] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  288.259635][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.444616][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.453144][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.481140][ T5299] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  288.516817][ T8259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.531262][ T5299] usb 2-1: USB disconnect, device number 28
[  288.581419][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.592474][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.655806][ T8259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.760046][ T8253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.802220][ T8253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.847822][ T8253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.937062][ T8259] hsr_slave_0: entered promiscuous mode
[  288.956048][ T8259] hsr_slave_1: entered promiscuous mode
[  288.962477][ T8259] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  288.995923][ T8259] Cannot create hsr debugfs directory
[  289.047863][ T8253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.065783][ T8253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.157288][ T8253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.256149][ T5232] Bluetooth: hci7: command tx timeout
[  289.455210][   T35] bridge_slave_1: left allmulticast mode
[  289.491062][   T35] bridge_slave_1: left promiscuous mode
[  289.515077][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.542236][   T35] bridge_slave_0: left allmulticast mode
[  289.548375][   T35] bridge_slave_0: left promiscuous mode
[  289.554082][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.656563][ T5232] Bluetooth: hci8: command tx timeout
[  290.368343][ T8334] sctp: [Deprecated]: syz.1.497 (pid 8334) Use of int in maxseg socket option.
[  290.368343][ T8334] Use struct sctp_assoc_value instead
[  290.594813][   T25] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  290.612520][   T25] usb 3-1: USB disconnect, device number 34
[  291.192253][   T35] bond0 (unregistering): Released all slaves
[  291.563668][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.587527][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.604908][   T35] bond0 (unregistering): Released all slaves
[  291.672269][ T8199] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  291.693276][ T8199] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  291.725685][ T5287] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  291.885835][ T5287] usb 3-1: Using ep0 maxpacket: 8
[  291.888278][ T8253] hsr_slave_0: entered promiscuous mode
[  291.898420][ T5287] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  291.907839][ T5287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  291.919046][ T5287] usb 3-1: config 0 has no interface number 0
[  291.925190][ T5287] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  291.939984][ T8253] hsr_slave_1: entered promiscuous mode
[  291.941071][ T5287] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  291.958396][ T5287] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  291.971122][ T5287] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  291.975542][ T8253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.986916][ T5287] usb 3-1: config 0 interface 52 has no altsetting 0
[  291.999430][ T5287] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  292.008919][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.020411][ T5287] usb 3-1: config 0 descriptor??
[  292.071166][ T8253] Cannot create hsr debugfs directory
[  292.091027][ T8199] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  292.387613][ T8199] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  292.403912][ T5287] usb 3-1: Can not set alternate setting to 1, error: -71
[  292.428768][ T5287] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71
[  292.472212][ T5287] usb 3-1: USB disconnect, device number 35
[  292.976741][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  292.989552][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  293.000355][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  293.011461][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  293.021114][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  293.029626][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  293.686018][ T5281] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  293.715231][   T35] hsr_slave_0: left promiscuous mode
[  293.729648][   T35] hsr_slave_1: left promiscuous mode
[  293.781629][   T35] hsr_slave_0: left promiscuous mode
[  293.816216][   T35] hsr_slave_1: left promiscuous mode
[  293.825999][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.833482][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.843283][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.854112][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.867949][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.895351][ T5281] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  293.915260][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  293.925612][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.934629][ T5281] usb 3-1: Product: syz
[  293.940749][ T5281] usb 3-1: Manufacturer: syz
[  293.945436][ T5281] usb 3-1: SerialNumber: syz
[  294.079624][   T35] veth1_macvtap: left promiscuous mode
[  294.095611][   T35] veth0_macvtap: left promiscuous mode
[  294.102345][   T35] veth1_vlan: left promiscuous mode
[  294.113046][   T35] veth0_vlan: left promiscuous mode
[  294.143044][   T35] veth1_macvtap: left promiscuous mode
[  294.151008][   T35] veth0_macvtap: left promiscuous mode
[  294.161147][   T35] veth1_vlan: left promiscuous mode
[  294.167638][   T35] veth0_vlan: left promiscuous mode
[  294.224624][ T5281] cdc_ncm 3-1:1.0: bind() failure
[  294.259406][ T5281] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  294.276518][ T5281] cdc_ncm 3-1:1.1: bind() failure
[  294.310362][ T5281] usb 3-1: USB disconnect, device number 36
[  295.109237][ T5232] Bluetooth: hci5: command tx timeout
[  295.655669][ T5299] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  295.857618][ T5299] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[  295.886679][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.921301][ T5299] usb 3-1: config 0 descriptor??
[  297.176041][ T5232] Bluetooth: hci5: command tx timeout
[  297.606500][   T35] team0 (unregistering): Port device team_slave_1 removed
[  297.727704][   T35] team0 (unregistering): Port device team_slave_0 removed
[  298.194653][ T5299] usb 3-1: can't set first interface for hiFace device.
[  298.202084][ T5299] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5
[  298.216117][ T5299] usb 3-1: USB disconnect, device number 37
[  299.190559][ T8199] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.247556][ T8380] netlink: 340 bytes leftover after parsing attributes in process `syz.2.509'.
[  299.268516][ T5232] Bluetooth: hci5: command tx timeout
[  299.380463][ T8199] 8021q: adding VLAN 0 to HW filter on device team0
[  299.453109][ T8348] chnl_net:caif_netlink_parms(): no params data found
[  299.541057][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.548299][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.630311][ T2936] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.637533][ T2936] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.728193][   T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  299.906037][   T25] usb 3-1: Using ep0 maxpacket: 8
[  299.949735][   T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  299.965970][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.978132][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.996571][   T25] usb 3-1: Product: syz
[  300.000789][   T25] usb 3-1: Manufacturer: syz
[  300.001974][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.007207][   T25] usb 3-1: SerialNumber: syz
[  300.021368][ T8348] bridge_slave_0: entered allmulticast mode
[  300.035322][   T25] usb 3-1: config 0 descriptor??
[  300.059763][ T8348] bridge_slave_0: entered promiscuous mode
[  300.145502][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.187330][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.203656][ T8348] bridge_slave_1: entered allmulticast mode
[  300.213856][ T8348] bridge_slave_1: entered promiscuous mode
[  300.262082][   T25] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  300.271665][ T8199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  300.488591][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.577694][ T8253] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  300.592035][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.690858][ T8253] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  300.790316][ T8348] team0: Port device team_slave_0 added
[  300.798909][ T8253] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  300.887794][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.920239][ T8259] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  300.945893][ T8348] team0: Port device team_slave_1 added
[  300.971763][ T8253] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  301.035541][ T8259] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  301.062424][ T8259] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  301.083427][ T8199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.145040][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.287709][ T8259] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  301.349615][ T5232] Bluetooth: hci5: command tx timeout
[  301.453922][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.504902][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.525433][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.571616][ T8348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.606675][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.613803][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.659609][ T8348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.764061][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.985359][ T8348] hsr_slave_0: entered promiscuous mode
[  301.997687][ T8348] hsr_slave_1: entered promiscuous mode
[  302.153102][ T8199] veth0_vlan: entered promiscuous mode
[  302.284079][ T8199] veth1_vlan: entered promiscuous mode
[  302.368677][   T25] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  302.389109][   T25] usb 3-1: USB disconnect, device number 38
[  302.592607][ T8253] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.702777][   T35] bridge_slave_1: left allmulticast mode
[  302.708826][   T35] bridge_slave_1: left promiscuous mode
[  302.716656][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.739366][   T35] bridge_slave_0: left allmulticast mode
[  302.745164][   T35] bridge_slave_0: left promiscuous mode
[  302.751414][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.982057][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.028753][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.047083][   T35] bond0 (unregistering): Released all slaves
[  304.253239][ T8253] 8021q: adding VLAN 0 to HW filter on device team0
[  304.329430][ T8199] veth0_macvtap: entered promiscuous mode
[  304.485737][   T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  304.543836][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.551094][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.564857][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.572160][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.650871][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.686272][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.693480][   T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  304.730430][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  304.773424][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.802825][   T25] usb 3-1: Product: syz
[  304.816942][   T25] usb 3-1: Manufacturer: syz
[  304.822569][   T25] usb 3-1: SerialNumber: syz
[  304.900331][ T8199] veth1_macvtap: entered promiscuous mode
[  304.927221][ T8259] 8021q: adding VLAN 0 to HW filter on device team0
[  305.102206][   T35] hsr_slave_0: left promiscuous mode
[  305.116242][   T35] hsr_slave_1: left promiscuous mode
[  305.130683][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.138848][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.167431][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.174921][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.190526][   T25] cdc_ncm 3-1:1.0: bind() failure
[  305.201758][   T25] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  305.216367][   T25] cdc_ncm 3-1:1.1: bind() failure
[  305.247595][   T25] usb 3-1: USB disconnect, device number 39
[  305.257870][   T35] veth1_macvtap: left promiscuous mode
[  305.263419][   T35] veth0_macvtap: left promiscuous mode
[  305.290191][   T35] veth1_vlan: left promiscuous mode
[  305.297835][   T35] veth0_vlan: left promiscuous mode
[  306.218271][ T5287] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  306.423476][   T35] team0 (unregistering): Port device team_slave_1 removed
[  306.438832][ T5287] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  306.462934][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.524454][ T5287] usb 3-1: config 0 descriptor??
[  306.539926][ T5287] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  306.564840][   T35] team0 (unregistering): Port device team_slave_0 removed
[  306.957791][ T5287] gspca_stv06xx: I2C: Read error writing address: -71
[  306.969399][ T5287] usb 3-1: USB disconnect, device number 40
[  307.737717][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.744858][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.816108][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.835153][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.849432][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.862177][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.873397][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.885085][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.895219][ T5287] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  307.900903][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.918718][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.932717][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.945379][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.003126][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.020207][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.031938][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.042019][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.053704][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.064009][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.076685][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.097376][ T5287] usb 3-1: Using ep0 maxpacket: 8
[  308.102542][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.115873][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.126123][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.139477][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.153508][ T5287] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  308.163744][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.170553][ T8199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.172913][ T5287] usb 3-1: Product: syz
[  308.189897][ T5287] usb 3-1: Manufacturer: syz
[  308.195330][ T8199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.196387][ T5287] usb 3-1: SerialNumber: syz
[  308.214729][ T5287] usb 3-1: config 0 descriptor??
[  308.225054][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.289682][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.296944][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.396660][ T8199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.405478][ T8199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.415400][ T8199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.436481][ T5287] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  308.446285][ T8199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.600378][ T8253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.666510][ T8259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  308.710114][ T8348] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  308.808527][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.848475][ T8259] veth0_vlan: entered promiscuous mode
[  308.865008][ T8259] veth1_vlan: entered promiscuous mode
[  308.918706][ T8348] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  308.984841][ T8348] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  309.023429][ T8348] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  309.149898][ T8259] veth0_macvtap: entered promiscuous mode
[  309.244995][ T8259] veth1_macvtap: entered promiscuous mode
[  309.346837][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.377756][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.423195][ T8253] veth0_vlan: entered promiscuous mode
[  309.517672][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.535028][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.558192][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.605676][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.626636][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.656579][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.667361][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.687696][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.723957][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.735159][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.748862][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  309.766722][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.778887][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.792279][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.805108][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.831707][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.843170][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.854779][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.867865][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.883575][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.900578][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.911604][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.924521][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.936188][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.947251][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.958320][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.970756][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.984257][ T8259] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.998232][ T8253] veth1_vlan: entered promiscuous mode
[  310.022617][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.038840][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.049592][ T8259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.063804][ T8259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.073021][ T8259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.082659][ T8259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.212027][ T8253] veth0_macvtap: entered promiscuous mode
[  310.293207][ T8253] veth1_macvtap: entered promiscuous mode
[  310.385071][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.398042][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.416517][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.440712][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.522586][ T8348] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.535363][ T8480] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  310.607623][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.646667][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.660232][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.683110][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.693182][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.704221][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.714819][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.725936][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.736383][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.747009][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.756937][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.767479][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.777744][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.784157][ T5287] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  310.788261][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.789978][ T8253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.820257][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.830819][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.840090][ T5287] usb 3-1: USB disconnect, device number 41
[  310.840734][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.857440][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.869307][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.882160][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.892162][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.902721][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.913317][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.924427][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.934395][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.945134][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.955058][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.965645][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.975491][ T8253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.986146][ T8253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.997553][ T8253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.022795][ T8253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.035522][ T8253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.065693][ T5285] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  311.084343][ T8253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.097444][ T8253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.114655][ T8348] 8021q: adding VLAN 0 to HW filter on device team0
[  311.155455][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.162787][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.234547][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.241789][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.253920][ T5285] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  311.275752][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.314070][ T5285] usb 5-1: config 0 descriptor??
[  311.417252][ T8348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  311.428879][ T8348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.584120][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.609655][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.795388][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.896845][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.919764][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.971329][ T8491] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.515'.
[  312.103086][ T5281] usb 5-1: USB disconnect, device number 26
[  312.211622][ T8348] veth0_vlan: entered promiscuous mode
[  312.234990][ T8348] veth1_vlan: entered promiscuous mode
[  312.359262][ T8348] veth0_macvtap: entered promiscuous mode
[  312.448203][ T8348] veth1_macvtap: entered promiscuous mode
[  312.476641][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.518733][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.529176][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.540033][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.551092][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.562828][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.572844][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.583425][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.593373][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.603894][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.613793][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.627669][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.645772][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.684370][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.764904][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.775628][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.790925][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.998775][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.010090][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.020964][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.031661][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.041619][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.052122][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.062923][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.074214][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.084211][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.094736][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.104848][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.115373][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.125273][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.135945][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.145841][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.156436][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.167225][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.178507][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.191756][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.202351][ T8348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.211188][ T8348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.220202][ T8348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.229035][ T8348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.230161][ T8504] program syz.0.519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  313.685402][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.698288][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.774534][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.786278][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.842513][ T8525] random: crng reseeded on system resumption
[  314.947634][ T5241] Bluetooth: Unexpected continuation frame (len 18)
[  315.139187][    T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  315.557378][    T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  315.569145][    T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  315.615650][    T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  315.668952][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.709967][ T8540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  315.731999][    T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  315.764004][   T29] audit: type=1326 audit(1727962157.173:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.1.529" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0
[  315.989276][ T8553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.530'.
[  316.115504][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'.
[  316.427309][ T8485] usb 5-1: USB disconnect, device number 27
[  316.697539][ T5241] Bluetooth: hci5: command 0x0405 tx timeout
[  316.919496][ T8485] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  317.207470][ T8485] usb 2-1: config 0 has no interfaces?
[  317.222251][ T8485] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  317.245918][ T8485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.261466][ T8485] usb 2-1: config 0 descriptor??
[  317.345791][   T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  317.427135][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  317.435722][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  317.505789][   T25] usb 4-1: Using ep0 maxpacket: 16
[  317.533176][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.595859][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.618734][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  317.647781][   T25] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  317.659834][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.674780][ T5286] usb 2-1: USB disconnect, device number 29
[  317.683742][   T25] usb 4-1: config 0 descriptor??
[  318.126637][   T25] uclogic 0003:28BD:0078.000C: interface is invalid, ignoring
[  318.349983][ T5299] usb 4-1: USB disconnect, device number 22
[  318.595845][    T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  318.768408][    T8] usb 1-1: Using ep0 maxpacket: 8
[  318.788014][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.829381][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.875319][    T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  318.946637][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.966185][  T938] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  318.974726][    T8] usb 1-1: config 0 descriptor??
[  319.147918][  T938] usb 2-1: Using ep0 maxpacket: 16
[  319.168334][  T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7
[  319.195744][  T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024
[  319.243877][  T938] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  319.254423][  T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.265055][  T938] usb 2-1: Product: syz
[  319.271584][  T938] usb 2-1: Manufacturer: syz
[  319.276765][  T938] usb 2-1: SerialNumber: syz
[  319.288398][  T938] usb 2-1: config 0 descriptor??
[  319.505362][    T8] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf3 found
[  319.574508][    T8] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf4 found
[  319.612870][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.741521][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.862563][ T8603] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  319.870444][  T938] IPVS: starting estimator thread 0...
[  319.876918][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'.
[  319.878284][  T938] usb 2-1: USB disconnect, device number 30
[  319.892501][ T5286] usb 1-1: USB disconnect, device number 17
[  319.995716][ T8604] IPVS: using max 17 ests per chain, 40800 per kthread
[  320.635761][  T938] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  320.825650][  T938] usb 4-1: Using ep0 maxpacket: 32
[  320.974821][  T938] usb 4-1: config index 0 descriptor too short (expected 64630, got 27)
[  320.983603][  T938] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  320.993600][  T938] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  321.016054][  T938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  321.025247][  T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.033485][  T938] usb 4-1: Product: syz
[  321.050010][  T938] usb 4-1: Manufacturer: syz
[  321.054760][  T938] usb 4-1: SerialNumber: syz
[  321.065716][ T1720] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  321.235702][ T1720] usb 3-1: Using ep0 maxpacket: 16
[  321.287540][ T1720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  321.300930][ T1720] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  321.310654][ T1720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.349401][ T1720] usb 3-1: config 0 descriptor??
[  321.358315][  T938] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  321.506847][ T1720] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17
[  321.658899][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.773211][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.911909][  T938] usb 4-1: USB disconnect, device number 23
[  321.912005][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'.
[  321.923362][  T938] usblp0: removed
[  322.345892][   T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  322.529003][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.570004][  T938] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  322.639834][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.685842][   T25] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  322.696068][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.720206][   T25] usb 1-1: config 0 descriptor??
[  322.756546][  T938] usb 2-1: Using ep0 maxpacket: 32
[  322.822367][  T938] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  322.868425][  T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.956300][   T25] usbhid 1-1:0.0: can't add hid device: -71
[  322.981487][   T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  323.051015][   T25] usb 1-1: USB disconnect, device number 18
[  323.057222][  T938] usb 2-1: config 0 descriptor??
[  323.147678][  T938] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state
[  323.154572][  T938] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  323.175112][  T938] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  323.234841][ T8641] bond0: entered promiscuous mode
[  323.240174][ T8641] bond_slave_0: entered promiscuous mode
[  323.246455][ T8641] bond_slave_1: entered promiscuous mode
[  323.387226][ T8641] bond0: left promiscuous mode
[  323.422750][ T5286] usb 2-1: USB disconnect, device number 31
[  323.425138][ T8641] bond_slave_0: left promiscuous mode
[  323.481481][ T8641] bond_slave_1: left promiscuous mode
[  324.142400][ T4671] bcm5974 3-1:0.0: could not read from device
[  324.228057][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  324.347095][ T8653] netlink: 68 bytes leftover after parsing attributes in process `syz.4.557'.
[  324.436499][ T1720] usb 3-1: USB disconnect, device number 42
[  324.459308][ T8649] can: request_module (can-proto-0) failed.
[  324.516498][ T8654] sock: sock_timestamping_bind_phc: sock not bind to device
[  324.865298][ T8543] syz.2.526 (8543) used greatest stack depth: 17520 bytes left
[  324.879022][ T8665] program syz.4.561 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  324.890435][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'.
[  324.912877][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'.
[  324.927337][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'.
[  325.005827][ T1720] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  325.164249][ T1720] usb 3-1: Using ep0 maxpacket: 16
[  325.192339][ T1720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.213887][ T1720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  325.241958][ T1720] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  325.252274][ T1720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.264611][ T1720] usb 3-1: config 0 descriptor??
[  325.682755][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'.
[  325.773104][ T1720] microsoft 0003:045E:07DA.000E: No inputs registered, leaving
[  325.782282][ T1720] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  325.795801][ T1720] microsoft 0003:045E:07DA.000E: no inputs found
[  325.802207][ T1720] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway
[  325.985695][ T5286] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  326.032610][ T8682] syz_tun: entered promiscuous mode
[  326.154494][ T8682] batadv_slave_1: entered promiscuous mode
[  326.162637][ T5286] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config
[  326.182220][ T8682] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  326.197921][ T8682] Cannot create hsr debugfs directory
[  326.213054][ T8682] fuse: Bad value for 'fd'
[  326.216510][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  326.232149][ T5286] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  326.245137][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.258244][ T5286] usb 1-1: config 0 descriptor??
[  326.269571][ T5286] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  326.343893][ T2936] tipc: Subscription rejected, illegal request
[  326.386479][ T5299] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  326.401083][   T30] INFO: task syz.2.261:6865 blocked for more than 143 seconds.
[  326.451784][ T5286] usb 3-1: USB disconnect, device number 43
[  326.459742][   T30]       Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[  326.471231][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  326.484996][   T30] task:syz.2.261       state:D stack:24864 pid:6865  tgid:6864  ppid:5248   flags:0x20000004
[  326.495860][   T30] Call Trace:
[  326.499211][   T30]  <TASK>
[  326.502226][   T30]  __schedule+0x1895/0x4b30
[  326.506953][   T30]  ? __pfx___schedule+0x10/0x10
[  326.511964][   T30]  ? __pfx_lock_release+0x10/0x10
[  326.517110][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  326.523315][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  326.529840][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  326.535018][   T30]  ? schedule+0x90/0x320
[  326.539667][   T30]  schedule+0x14b/0x320
[  326.543874][   T30]  ? down_read+0x6a5/0xa40
[  326.548435][   T30]  schedule_preempt_disabled+0x13/0x30
[  326.553953][   T30]  down_read+0x705/0xa40
[  326.558380][   T30]  ? __pfx_down_read+0x10/0x10
[  326.563333][   T30]  ? __filemap_get_folio+0x949/0xbd0
[  326.568748][   T30]  filemap_fault+0xd54/0x1950
[  326.573484][   T30]  ? pte_alloc_one+0x3b2/0x5d0
[  326.577701][ T5299] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  326.578964][   T30]  ? __pfx_filemap_fault+0x10/0x10
[  326.579002][   T30]  ? pte_alloc_one+0x442/0x5d0
[  326.579039][   T30]  ? __pfx_pte_alloc_one+0x10/0x10
[  326.579079][   T30]  ? blk_cgroup_congested+0x1b/0x200
[  326.579116][   T30]  ? blk_cgroup_congested+0x1f0/0x200
[  326.579157][   T30]  __do_fault+0x135/0x460
[  326.579187][   T30]  handle_pte_fault+0xd99/0x6800
[  326.579234][   T30]  ? __pfx_handle_pte_fault+0x10/0x10
[  326.579260][   T30]  ? mark_lock+0x9a/0x360
[  326.579288][   T30]  ? __lock_acquire+0x1384/0x2050
[  326.579345][   T30]  ? __thp_vma_allowable_orders+0x932/0x9f0
[  326.579380][   T30]  ? mt_find+0x2a9/0x920
[  326.579423][   T30]  handle_mm_fault+0x1106/0x1bb0
[  326.579488][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  326.579539][   T30]  ? __pfx_find_vma+0x10/0x10
[  326.579584][   T30]  ? vma_is_secretmem+0xd/0x50
[  326.579613][   T30]  ? check_vma_flags+0x3ee/0x5a0
[  326.579643][   T30]  __get_user_pages+0x1b16/0x48d0
[  326.579679][   T30]  ? __lock_acquire+0x1384/0x2050
[  326.579754][   T30]  ? __pfx___get_user_pages+0x10/0x10
[  326.579823][   T30]  get_user_pages_remote+0x31e/0xb60
[  326.579859][   T30]  ? __pfx_get_user_pages_remote+0x10/0x10
[  326.579908][   T30]  __access_remote_vm+0x257/0x830
[  326.579954][   T30]  ? __pfx___access_remote_vm+0x10/0x10
[  326.579996][   T30]  ? _raw_spin_unlock+0x28/0x50
[  326.580034][   T30]  compat_ptrace_request+0x824/0x9e0
[  326.580077][   T30]  ? __pfx_compat_ptrace_request+0x10/0x10
[  326.600910][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.605066][   T30]  ? wait_task_inactive+0x3cf/0x710
[  326.605119][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  326.640518][ T5299] usb 2-1: config 0 descriptor??
[  326.658344][ T5299] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  326.661294][   T30]  ? __pfx_wait_task_inactive+0x10/0x10
[  326.699789][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'.
[  326.704745][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  326.704795][   T30]  compat_arch_ptrace+0x4d4/0x800
[  326.710373][    T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  326.715540][   T30]  ? __pfx_compat_arch_ptrace+0x10/0x10
[  326.801652][   T30]  __se_compat_sys_ptrace+0x171/0x460
[  326.807252][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  326.813648][   T30]  ? __pfx___se_compat_sys_ptrace+0x10/0x10
[  326.819691][   T30]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  326.826437][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  326.831697][   T30]  __do_fast_syscall_32+0xb4/0x110
[  326.836935][   T30]  do_fast_syscall_32+0x34/0x80
[  326.842013][   T30]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  326.849382][   T30] RIP: 0023:0xf7fa0579
[  326.853521][   T30] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 000000000000001a
[  326.862271][   T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000000e5
[  326.870379][   T30] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000000000000
[  326.878614][   T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  326.887291][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  326.891964][    T8] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  326.895286][   T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  326.895326][   T30]  </TASK>
[  326.916152][   T30] 
[  326.916152][   T30] Showing all locks held in the system:
[  326.923945][   T30] 3 locks held by kworker/0:0/8:
[  326.929175][   T30] 2 locks held by kworker/u8:0/11:
[  326.934622][   T30] 1 lock held by khungtaskd/30:
[  326.938346][    T8] usb 4-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0
[  326.939675][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  326.957911][   T30] 3 locks held by kworker/1:2/1720:
[  326.963175][   T30] 2 locks held by getty/4991:
[  326.968019][   T30]  #0: ffff8880328790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  326.976018][    T8] usb 4-1: Manufacturer: syz
[  326.977914][   T30]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  326.993479][   T30] 3 locks held by kworker/1:6/5286:
[  326.999426][   T30] 5 locks held by kworker/0:7/5299:
[  327.004691][   T30]  #0: ffff888021ea4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  327.018739][   T30]  #1: ffffc9000441fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  327.025171][    T8] usb 4-1: config 0 descriptor??
[  327.031128][   T30]  #2: ffff88814475d190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  327.031217][   T30]  #3: ffff88805d725190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520
[  327.031282][   T30]  #4: ffff888068512160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520
[  327.031349][   T30] 1 lock held by syz.1.184/6290:
[  327.031363][   T30]  #0: ffff888148c90940 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490
[  327.031443][   T30] 2 locks held by syz.2.261/6865:
[  327.031457][   T30]  #0: ffff8880124ac418 (&mm->mmap_lock){++++}-{3:3}, at: __access_remote_vm+0xa4/0x830
[  327.031543][   T30]  #1: ffff888148c90940 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950
[  327.031617][   T30] 1 lock held by syz.0.319/7204:
[  327.031631][   T30]  #0: ffff888148c90940 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x150b/0x2480
[  327.031718][   T30] 1 lock held by syz.3.326/7253:
[  327.031732][   T30]  #0: ffff888148c90940 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490
[  327.031816][   T30] 2 locks held by syz.0.566/8690:
[  327.031832][   T30]  #0: ffff88806f2cb8c8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x32/0x100
[  327.031907][   T30]  #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  327.032002][   T30] 
[  327.032011][   T30] =============================================
[  327.032011][   T30] 
[  327.032022][   T30] NMI backtrace for cpu 1
[  327.032048][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[  327.032083][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  327.032097][   T30] Call Trace:
[  327.032106][   T30]  <TASK>
[  327.032116][   T30]  dump_stack_lvl+0x241/0x360
[  327.032145][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.032169][   T30]  ? __pfx__printk+0x10/0x10
[  327.054839][ T5299] gspca_stv06xx: I2C: Read error writing address: -71
[  327.055169][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  327.231109][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  327.236592][   T30]  ? _printk+0xd5/0x120
[  327.240793][   T30]  ? __pfx__printk+0x10/0x10
[  327.245419][   T30]  ? __wake_up_klogd+0xcc/0x110
[  327.250333][   T30]  ? __pfx__printk+0x10/0x10
[  327.255070][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  327.260212][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  327.266230][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  327.272235][   T30]  watchdog+0xff4/0x1040
[  327.276585][   T30]  ? watchdog+0x1ea/0x1040
[  327.281020][   T30]  ? __pfx_watchdog+0x10/0x10
[  327.285724][   T30]  kthread+0x2f0/0x390
[  327.289813][   T30]  ? __pfx_watchdog+0x10/0x10
[  327.294508][   T30]  ? __pfx_kthread+0x10/0x10
[  327.299121][   T30]  ret_from_fork+0x4b/0x80
[  327.303561][   T30]  ? __pfx_kthread+0x10/0x10
[  327.308252][   T30]  ret_from_fork_asm+0x1a/0x30
[  327.313067][   T30]  </TASK>
[  327.317222][   T30] Sending NMI from CPU 1 to CPUs 0:
[  327.322498][    C0] NMI backtrace for cpu 0
[  327.322517][    C0] CPU: 0 UID: 0 PID: 5281 Comm: kworker/0:3 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[  327.322539][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  327.322551][    C0] Workqueue: events nsim_dev_trap_report_work
[  327.322578][    C0] RIP: 0010:unwind_next_frame+0x6bc/0x22d0
[  327.322599][    C0] Code: 2a 30 bd 00 49 8b 2e e9 32 02 00 00 4d 89 ec 4d 89 ee 48 89 e8 4c 29 f0 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe <49> 8d 1c 46 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f
[  327.322615][    C0] RSP: 0018:ffffc90004146f50 EFLAGS: 00000246
[  327.322630][    C0] RAX: 0000000000000000 RBX: ffffffff902e7850 RCX: 0000000000000000
[  327.322642][    C0] RDX: 00000000000b0001 RSI: ffffffff90a45bc8 RDI: 0000000000000001
[  327.322654][    C0] RBP: ffffffff902e784c R08: 0000000000000004 R09: ffffc90004147110
[  327.322668][    C0] R10: ffffc90004147070 R11: ffffffff81808f50 R12: ffffffff902e784c
[  327.322681][    C0] R13: ffffffff902e784c R14: ffffffff902e784c R15: ffffffff8160841f
[  327.322696][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  327.322711][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  327.322724][    C0] CR2: 000000002f8fdff8 CR3: 000000004c76e000 CR4: 00000000003526f0
[  327.322740][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  327.322751][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  327.322763][    C0] Call Trace:
[  327.322770][    C0]  <NMI>
[  327.322777][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  327.322800][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  327.322828][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  327.322850][    C0]  ? nmi_handle+0x2a/0x5a0
[  327.322876][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  327.322901][    C0]  ? nmi_handle+0x14f/0x5a0
[  327.322919][    C0]  ? nmi_handle+0x2a/0x5a0
[  327.322938][    C0]  ? unwind_next_frame+0x6bc/0x22d0
[  327.322955][    C0]  ? default_do_nmi+0x63/0x160
[  327.322978][    C0]  ? exc_nmi+0x123/0x1f0
[  327.322999][    C0]  ? end_repeat_nmi+0xf/0x53
[  327.323015][    C0]  ? kthread+0x2ef/0x390
[  327.323034][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  327.323060][    C0]  ? unwind_next_frame+0x6bc/0x22d0
[  327.323078][    C0]  ? unwind_next_frame+0x6bc/0x22d0
[  327.323097][    C0]  ? unwind_next_frame+0x6bc/0x22d0
[  327.323114][    C0]  </NMI>
[  327.323120][    C0]  <TASK>
[  327.323131][    C0]  ? kthread+0x2f0/0x390
[  327.323150][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  327.323173][    C0]  arch_stack_walk+0x11c/0x150
[  327.323196][    C0]  ? kthread+0x2f0/0x390
[  327.323215][    C0]  stack_trace_save+0x118/0x1d0
[  327.323238][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  327.323265][    C0]  save_stack+0xfb/0x1f0
[  327.323284][    C0]  ? mark_lock+0x9a/0x360
[  327.323302][    C0]  ? __pfx_save_stack+0x10/0x10
[  327.323319][    C0]  ? post_alloc_hook+0x1f3/0x230
[  327.323345][    C0]  ? get_page_from_freelist+0x3045/0x3190
[  327.323364][    C0]  ? __alloc_pages_noprof+0x256/0x6c0
[  327.323382][    C0]  ? alloc_pages_mpol_noprof+0x3e8/0x680
[  327.323405][    C0]  ? alloc_slab_page+0x6a/0x120
[  327.323422][    C0]  ? allocate_slab+0x5a/0x2f0
[  327.323439][    C0]  ? ___slab_alloc+0xcd1/0x14b0
[  327.323465][    C0]  ? __slab_alloc+0x58/0xa0
[  327.323490][    C0]  ? __kmalloc_node_track_caller_noprof+0x281/0x440
[  327.323521][    C0]  ? kmalloc_reserve+0x111/0x2a0
[  327.323538][    C0]  ? __alloc_skb+0x1f3/0x440
[  327.323553][    C0]  ? nsim_dev_trap_report_work+0x254/0xaa0
[  327.323573][    C0]  ? process_scheduled_works+0xa63/0x1850
[  327.323597][    C0]  ? worker_thread+0x870/0xd30
[  327.323622][    C0]  ? kthread+0x2f0/0x390
[  327.323643][    C0]  __set_page_owner+0x92/0x800
[  327.323662][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  327.323688][    C0]  ? get_page_from_freelist+0x87d/0x3190
[  327.323707][    C0]  ? __pfx_lock_release+0x10/0x10
[  327.323735][    C0]  ? __pfx___set_page_owner+0x10/0x10
[  327.323758][    C0]  post_alloc_hook+0x1f3/0x230
[  327.323787][    C0]  get_page_from_freelist+0x3045/0x3190
[  327.323811][    C0]  ? unwind_next_frame+0x18e6/0x22d0
[  327.323828][    C0]  ? deref_stack_reg+0x17c/0x210
[  327.323847][    C0]  ? __asan_memset+0x23/0x50
[  327.323877][    C0]  __alloc_pages_noprof+0x256/0x6c0
[  327.323898][    C0]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  327.323927][    C0]  alloc_pages_mpol_noprof+0x3e8/0x680
[  327.323952][    C0]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  327.323976][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  327.324003][    C0]  ? alloc_pages_noprof+0xef/0x170
[  327.324027][    C0]  alloc_slab_page+0x6a/0x120
[  327.324046][    C0]  allocate_slab+0x5a/0x2f0
[  327.324066][    C0]  ___slab_alloc+0xcd1/0x14b0
[  327.324094][    C0]  ? __alloc_skb+0x1f3/0x440
[  327.324113][    C0]  ? __alloc_skb+0x1f3/0x440
[  327.324129][    C0]  __slab_alloc+0x58/0xa0
[  327.324157][    C0]  __kmalloc_node_track_caller_noprof+0x281/0x440
[  327.324183][    C0]  ? __alloc_skb+0x1f3/0x440
[  327.324200][    C0]  ? __alloc_skb+0x1f3/0x440
[  327.324216][    C0]  kmalloc_reserve+0x111/0x2a0
[  327.324235][    C0]  __alloc_skb+0x1f3/0x440
[  327.324251][    C0]  ? kasan_quarantine_put+0xdc/0x230
[  327.324272][    C0]  ? __pfx___alloc_skb+0x10/0x10
[  327.324289][    C0]  ? nsim_dev_trap_report_work+0x690/0xaa0
[  327.324310][    C0]  ? nsim_dev_trap_report_work+0x765/0xaa0
[  327.324333][    C0]  nsim_dev_trap_report_work+0x254/0xaa0
[  327.324362][    C0]  ? process_scheduled_works+0x976/0x1850
[  327.324387][    C0]  process_scheduled_works+0xa63/0x1850
[  327.324425][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  327.324455][    C0]  ? assign_work+0x364/0x3d0
[  327.324481][    C0]  worker_thread+0x870/0xd30
[  327.324517][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  327.324545][    C0]  ? __kthread_parkme+0x169/0x1d0
[  327.324572][    C0]  ? __pfx_worker_thread+0x10/0x10
[  327.324597][    C0]  kthread+0x2f0/0x390
[  327.324614][    C0]  ? __pfx_worker_thread+0x10/0x10
[  327.324639][    C0]  ? __pfx_kthread+0x10/0x10
[  327.324657][    C0]  ret_from_fork+0x4b/0x80
[  327.324683][    C0]  ? __pfx_kthread+0x10/0x10
[  327.324701][    C0]  ret_from_fork_asm+0x1a/0x30
[  327.324733][    C0]  </TASK>
[  327.333063][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  327.333082][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0
[  327.333111][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  327.333126][   T30] Call Trace:
[  327.333136][   T30]  <TASK>
[  327.333147][   T30]  dump_stack_lvl+0x241/0x360
[  327.333180][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.333205][   T30]  ? __pfx__printk+0x10/0x10
[  327.333237][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  327.333281][   T30]  ? vscnprintf+0x5d/0x90
[  327.333312][   T30]  panic+0x349/0x880
[  327.333348][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  327.333379][   T30]  ? __pfx_panic+0x10/0x10
[  327.333411][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  327.333439][   T30]  ? __irq_work_queue_local+0x137/0x410
[  327.333473][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  327.333499][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  327.333527][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  327.333559][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  327.333591][   T30]  watchdog+0x1033/0x1040
[  327.333626][   T30]  ? watchdog+0x1ea/0x1040
[  327.333664][   T30]  ? __pfx_watchdog+0x10/0x10
[  327.333697][   T30]  kthread+0x2f0/0x390
[  327.333720][   T30]  ? __pfx_watchdog+0x10/0x10
[  327.333751][   T30]  ? __pfx_kthread+0x10/0x10
[  327.333785][   T30]  ret_from_fork+0x4b/0x80
[  327.333820][   T30]  ? __pfx_kthread+0x10/0x10
[  327.333843][   T30]  ret_from_fork_asm+0x1a/0x30
[  327.333890][   T30]  </TASK>
[  328.067569][   T30] Kernel Offset: disabled
[  328.071989][   T30] Rebooting in 86400 seconds..