last executing test programs:

27.49104858s ago: executing program 1 (id=2085):
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$kcm(0xa, 0x1, 0x0)
r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x400454a4, &(0x7f0000000040))
socket$l2tp(0x2, 0x2, 0x73)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="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", 0x136}, {&(0x7f00000002c0)="01aa53d5015febfb0b5dfa07aba124bfdab77d6b265b4545400da52023d8baf8654d584cdbcfd5713c5765d1e87b0fcdef8404cef3e051f630280e0248e16c7e9e9bc9812aa0ab535ccb756852f1947662c15d6af4aa0b1c1f1e933ceb1dffe5858890005c6b04c526092de299184c0055749ac7f50406e63993d3825c50b15857249d0c7116682627f4e2fe831fa4a9c1818a261b3918247bc90992414c8e618b6bf5c3c43b65f6a3b5546409fc5cbccfe70329b73b186f1fd046ea52edc73ec4981ee4a44120ec8f8db504bcb8512d3b95137b383df32dff32efa503bbb10c2e9eca028d201aa3e86825bf0f5b72cb1963aba8261c7b4f9cc3ca69cdc41a3a6c073263ab3cd17a5e6d99c97804b8f39e87a9684cb979abeecd5510cd9e308317454f654736ab398d7248906dd507ae525e90cd00fefc8dce6633f06e16a67eea974143b8e261af41e457a15b91c8f94ffac4d6920be6fc5940011b974861670e822dca589459676f5f9d80336876a229dd5cf80000000000", 0x179}, {&(0x7f0000000100)="0c96c2990c90023b8e5c34c1327440eabea6ae3692de3f41d3d9844ddf4dd239e13f15a6dda935ca94a167891f42edbfd16925c296e72222691c9fda3ef90d8272ce86e71ddad55470c0ac33967e5b3ec0e1b2a078bab634369f7773cad684cb3e9eed9cbbc67f7b7f5c0d26846aa13282", 0x71}, {&(0x7f00000058c0)="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", 0x28c}], 0x4}}], 0x1, 0xc880)
sendto$inet6(r5, &(0x7f0000000280)='2', 0x1, 0x0, 0x0, 0x0)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r6=>0x0})
sendto$packet(r3, &(0x7f0000000180)="05030400d3fc02000000ab5d71acedd7c9560385dcb1894f84d7dc049806892f05ce811c88f7", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r7 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
fsopen(&(0x7f0000000080)='nfs\x00', 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb653, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x3a, [{{0x9, 0x4, 0x0, 0x31, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x7ff, 0x6, 0x1, {0x22, 0x7e5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x2, 0xc, 0xab, 0x10, 0xc}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x440a}}]})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x595, &(0x7f00000010c0)={{0x12, 0x1, 0x310, 0x36, 0x36, 0x1, 0xff, 0x67c, 0x1001, 0x6970, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x583, 0x4, 0xfd, 0x10, 0xa0, 0x1, [{{0x9, 0x4, 0x94, 0x7, 0x5, 0x81, 0x91, 0x98, 0x4, [], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0x1, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x8, 0xb, 0x30}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xb9, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x631}, @generic={0x69, 0x10, "cf9a84fc8d3a0723cc34294aa5dbacdd453bf32ca3f0bf0019c79de6c3e8b274abc7ef1306f1d602e82bb4ff44f0eefe67aa35fbcd7d253c1e0e9c18822f8f3b1e64af7630ddb6767f34ea49f864a000229237fa75a11e1dba7c5cd5fe66a93bbb9043037d7827"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xffb1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x60, 0x8, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x7}]}}]}}, {{0x9, 0x4, 0x11, 0xc, 0xc, 0x92, 0x56, 0xfe, 0x1, [@generic={0x2, 0x1}, @uac_control={{0xa, 0x24, 0x1, 0x5, 0x9b}, [@processing_unit={0xb, 0x24, 0x7, 0x1, 0x2, 0xac, "f109cce0"}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x5, 0x5}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x9, 'v'}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x2, 0x4, [0x1, 0x5, 0x7, 0x1], 0xf9}]}], [{{0x9, 0x5, 0x9, 0xc, 0x40, 0x8, 0x3, 0xfc, [@generic={0xb8, 0x3, "1d2d1575e573e544a9a921dcbf16a726e01c3b26118160152d72f1980a635baea04b2c81cfc4397da1eb2a55d538b7fea5d418e231b85e58bddde13e5c450e0c55a2a3c1ef828b9ff04dab4139c2c698c1bebbaa6c0884922242091240356b3d4875b148b58d414004781c6c993a57bdb0c18d55d150f508681b1a1bec02193ccc1137632d0a06730a7896d7d7ef10b792b3019d287d5891f502af7315119cc1390f79baee5c309e433cb7b52cf6548b3a0787e94f2b"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x3, 0x1, 0xe1}}, {{0x9, 0x5, 0x1b, 0x1, 0x400, 0x80, 0xf7, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x7, 0xf2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x5}, @generic={0x2, 0x1}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x9, 0x61, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x1, 0x81, 0xf2}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x7, 0x8, 0x81}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x7, 0x0, 0x23, [@generic={0xb5, 0x0, "f5270fba41ed2d0189a2b4f290c4440b6d5679af8022e55aa05aeedc50c85094102deb3817d6a241db979b2e9f3f2520fe912e1e78ffc2fa2a2c0b1c77f1d36e5a81d5b3d1fe9bb3fe86c0da3a8f0947614d1dc2d534cdd349fe26fd36418b993819d81856473acd6257c7b84764ec9ba19a301cd731ead98d881f767ff1e8e61178b598c2ac0d8e62bafa6358aeaf7e901b260285461b6fbae5882ed33f5cf4317ec393952c8c3fe5b4193d7c238c1945faa0"}, @generic={0x2, 0x30}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x9d, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0xbe}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x4, 0x0, 0x9}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x40, 0x7f, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x6, 0x32, 0x9}}]}}, {{0x9, 0x4, 0x4, 0x5c, 0x6, 0xb4, 0x5e, 0x89, 0x40, [], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x9a, 0x2, 0x2, [@generic={0x65, 0x5, "18f68496ac619421f776fb17ce4e34a0e2f05fa7ff1c611daa545c2db41f982c1f922b4f894d5db6b5cf86c55f9d4df5b7cdb1cfeefe78a4accd35daa0e62797a0668c3c71925f0e223a1c67bbe57b8974c1497f7154ce05c4807b7eae6d1b144d7e54"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x50, 0x2, 0x9}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0x74, 0x0, 0x9}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x4, 0x7, 0x2}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x3d, 0x1, 0x9}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x7, 0x7, 0x2}}]}}, {{0x9, 0x4, 0xf3, 0x3, 0x6, 0xa4, 0x2e, 0xa5, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, '4Wk'}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xc5b9, 0x50, 0x81}, {0x6, 0x24, 0x1a, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x8, 0xfffc}]}, @hid_hid={0x9, 0x21, 0xc1ba, 0x1, 0x1, {0x22, 0x358}}], [{{0x9, 0x5, 0xd, 0x10, 0x40, 0xd, 0xfd, 0x8, [@generic={0x8a, 0x2, "a89bf3a63ec1be582abf8b0fda27a332287ba5297b579277755721aa27a4dc4381b3207c4ca4d4099421fece7aa3bb283c3c210ba0f1ec79f70d3ed10de4ee184923694bcbd5697bd8321b449758e4d408829ea34252830bed027e4f80b3c868e5eb7a671e79ecc18b7b7f0464e774e79f6c9a442078a75d38fc6a9c33f3c2ad0d5530a1ee141f59"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x1}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x2, 0xa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x8}]}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0xa, 0x1, 0xb, [@generic={0xb8, 0x4, "dae41c9d6ff58daccf5a55ecfcc501c4ef4111a71702c131196ba942fbc72fb5e53879b146bcd6a432b7fd1131aaadc046765653dd18066c1988c16b966503405b656b8f74466e40935b226935a0780d799d3e45a3df90056a31fdb3923811a43d6ec192e2569c970a6701a926df7d1925d80f0cf50967642f55fcf383279c233226658639c8bfaffc75d9354aa049f3aa0f9a2a67acbe6c83e975adafc99f68009194911d968711f60984a23f68921cf072ea88ab84"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x9d}]}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x80, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}]}}, {{0x9, 0x5, 0x3, 0x5, 0x20, 0x3, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x8}]}}, {{0x9, 0x5, 0xa, 0x2, 0x0, 0x5, 0x2, 0xff, [@generic={0x21, 0x1, "c9abe4cdf942191e4a2da2f499010ece194e3e53fec30b56c240809617fdf4"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xff, 0x7, 0xc7, 0x10, 0xd}, 0x41, &(0x7f0000000100)={0x5, 0xf, 0x41, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x33, "c7956e29e3f26e742008dab1f0d105d0"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "56866646fd26ec9107788a13662d84bc"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xa, 0x10, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x3, 0x8, 0x6}]}, 0x1, [{0x18, &(0x7f0000000180)=@string={0x18, 0x3, "f540555a96af934ff064e71b41dd992ebea3a26e7118"}}]})
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x56, 0x0, 0x0, {0x0, 0x1}, {0x61, 0x1002}, @rumble={0x10, 0xffff}})

25.441959155s ago: executing program 2 (id=2095):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) (async)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x30, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)
keyctl$get_persistent(0x16, 0x0, 0x0) (async)
read$watch_queue(0xffffffffffffffff, &(0x7f0000000200)=""/88, 0x58)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_io_uring_setup(0x5437, &(0x7f0000000140)={0x0, 0x955d, 0x2000, 0x0, 0xfdfffffd}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) (async)
preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}], 0x1, 0x0, 0x5)

24.899122486s ago: executing program 2 (id=2096):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x1ab)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet6(0xa, 0x800, 0x200)
r2 = openat$cuse(0xffffff9c, 0x0, 0x2, 0x0)
r3 = eventfd2(0xa, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0})
syz_emit_ethernet(0x46, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4)
r7 = eventfd2(0x7, 0x80001)
r8 = openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x400, 0x0)
io_submit(r0, 0x6, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6829, r2, &(0x7f0000000100)="757dee77fd48c344e8d7ba12895deeaf", 0x10, 0x0, 0x0, 0x1, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8ae, r1, &(0x7f0000000140)="e3573d1336a662c2081f3c8f34b8a98f66e88cc36c1c04708ae976522788dc3660c2af5fc1", 0x25, 0x7, 0x0, 0x3, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f00000003c0)="0901999834e6b2c1f70663db6240120cdc078885ab2384e59ae365354d00fca9b1d3ac9c466f", 0x26, 0x256, 0x0, 0x7, r7}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x6, r8, &(0x7f00000002c0)="a8c2da3fe292330ff3d5d238856e66e6c2f0c5aaf2c1de07563dbaf1f482530a8425b1612731261f3ad5da5553be72a830f4339d2328761891fb8ed23c1dcef687727ef624f587688e3be228d05a46b60b2d00fa1c3d78e1a38b7d976862347bd8bd496b86da3af9bb65e50347497d6f493d705c070f9c0d6793e1fdc379604b54f1971820ff8014371fc7e2486500d022cfae856f5768f0dd43722164a281304b0e2b893ca5b9cbe7d465dc7c5cef158fb85c13", 0xb4, 0xffffffffffff6d7b, 0x0, 0x1, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0x7f, r8, &(0x7f0000001640)="7da19482a934ccc1d16bea2213081b4e3800b98b9466f38da174166bdc0b832d5fc5f1eeb3e4b935bfefa835c8859ae19d599c85ac20cc2a1cd53162c604e0a4c4bc1ac76dfa07ef4145116d53f076e996e586a11371d3f9d6b4ee5259a0862499e5eebfa37dda96d6e0fa6021afe173a950ee9aede88ee88cf9e8be0ea2046825d83aaa8e3c3cf14a3e76f3a2d01db555f83b1ddb6303b1613eba6c9e003715b2a58054598d629ead8b318ab524e34cc9c837c02aadbfe63c8db850cb725fdc659360af51f2d8a3ab1f6442e52d924cd21cf131c44a0c21f091624cb3dd09ce876fea6aba", 0xe5, 0xf, 0x0, 0x1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x8, 0x7462, r3, &(0x7f0000001540)="2759eb0424bdd04499b325657805529ce40b0f7e2a9b40cb9794909d3f742067b18a81f7610bb4415f3bab7a17bb925e4375aa4f933a0184436ad44cfb4cbb79cbb1c8eaae583ea1519e849030af8dfa966f9629425763c422299858b9f191b7", 0x60, 0xc, 0x0, 0x3, r7}])
r9 = socket$kcm(0x10, 0x2, 0x10)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0x2001, r9}, 0x0)

24.239787242s ago: executing program 1 (id=2099):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100b})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
epoll_create1(0x0)
dup(0xffffffffffffffff)
syz_emit_ethernet(0x227, 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x1c, &(0x7f00000004c0)=@raw=[@exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff9}, @alu={0x4, 0x1, 0x4, 0x5, 0x7, 0xffffffffffffffe0, 0xfffffffffffffff0}, @generic={0x4, 0x7, 0x2, 0x3ff, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @map_val={0x18, 0x7, 0x2, 0x0, r2}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r3, 0xae03, 0xb6)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x14, 0xd, 0x20, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
r5 = timerfd_create(0x6, 0x800)
read(r5, 0x0, 0x0)
timerfd_settime(r5, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10)

23.985757766s ago: executing program 1 (id=2101):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='sys_enter\x00', r0}, 0x10)
r1 = getpgid(0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x8)
socket(0x10, 0x3, 0x0)
r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480)=<r4=>0x0, &(0x7f0000000500)=<r5=>0x0)
r6 = eventfd2(0x936, 0x80000)
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000000)=r6, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x900000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
tgkill(r1, r1, 0x0)
listen(0xffffffffffffffff, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00'})

23.92376129s ago: executing program 2 (id=2102):
prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) (async)
prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil)
r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x2dca, 0x80, 0x0, 0x110}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000300))
openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x691, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000600)={0xe83, 0x1, 0x3})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f0000000440)=@multiplanar_overlay={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, <r4=>0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "934b39eb"}, 0x0, 0x3, {0x0}, 0x4, 0x0, <r5=>0xffffffffffffffff})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000240)}, 0x10)
r6 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10) (async)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000002200)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0), 0x106}}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x1, 0xf) (async)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x1, 0xf)
r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82200000904000002ca744d00090503034d00ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/100, 0x64)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYRESOCT=r4, @ANYRES64, @ANYRESHEX=r5, @ANYBLOB="24e9191cdbad7b5a71998235760974ac3dac3f9deec5d56d49b4e1bdae016fb18fa166c9f1f7fcfb9e43cbbb0f72d461ada2f6229fe7fc990c1130767b92ba02663ea91d0e9481e0e4c6d4f9dd8a180ab6615b67346ae6304ae146889e11146aea2e415d7e24d2724b5bf3f6e91469b7a0a0622f78cc86cf8466dae61d9d0f9b2e986c3c1c27cf3ccaa47ec2f26af3a3850ec1607bdfeb2190c99032899c2c149c5a0449", @ANYRESDEC=r3, @ANYRES64=r6, @ANYRES32=r1], 0xd1)
syz_usb_disconnect(r7) (async)
syz_usb_disconnect(r7)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r8], 0x1)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001600ebffffff0000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0)
dup2(r0, r8) (async)
r10 = dup2(r0, r8)
io_uring_register$IORING_UNREGISTER_FILES(r10, 0x3, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_FILES(r10, 0x3, 0x0, 0x0)
syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) (async)
r11 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000))
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000000200)=[r12], 0x1)
dup2(r11, r12) (async)
dup2(r11, r12)

22.998317109s ago: executing program 1 (id=2107):
openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0)
fsopen(&(0x7f0000000000)='udf\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0)
socket(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0x101, 0x6701e32d}}, 0x28)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001540)={0x7, 0x0, [{0xf000, 0x3e, &(0x7f00000000c0)=""/62}, {0xd000, 0xfc, &(0x7f00000001c0)=""/252}, {0x10000, 0x1e, &(0x7f0000000100)=""/30}, {0x2000, 0x90, &(0x7f0000000340)=""/144}, {0x10000, 0xbf, &(0x7f0000000400)=""/191}, {0x100000, 0x7f, &(0x7f00000004c0)=""/127}, {0xf000, 0x1000, &(0x7f0000000540)=""/4096}]})
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

21.913684356s ago: executing program 1 (id=2112):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x1ab)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet6(0xa, 0x800, 0x200)
r2 = openat$cuse(0xffffff9c, 0x0, 0x2, 0x0)
r3 = eventfd2(0xa, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0})
syz_emit_ethernet(0x46, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4)
r7 = eventfd2(0x7, 0x80001)
r8 = openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x400, 0x0)
io_submit(r0, 0x6, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6829, r2, &(0x7f0000000100)="757dee77fd48c344e8d7ba12895deeaf", 0x10, 0x0, 0x0, 0x1, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x8ae, r1, &(0x7f0000000140)="e3573d1336a662c2081f3c8f34b8a98f66e88cc36c1c04708ae976522788dc3660c2af5fc1", 0x25, 0x7, 0x0, 0x3, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f00000003c0)="0901999834e6b2c1f70663db6240120cdc078885ab2384e59ae365354d00fca9b1d3ac9c466f", 0x26, 0x256, 0x0, 0x7, r7}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x6, r8, &(0x7f00000002c0)="a8c2da3fe292330ff3d5d238856e66e6c2f0c5aaf2c1de07563dbaf1f482530a8425b1612731261f3ad5da5553be72a830f4339d2328761891fb8ed23c1dcef687727ef624f587688e3be228d05a46b60b2d00fa1c3d78e1a38b7d976862347bd8bd496b86da3af9bb65e50347497d6f493d705c070f9c0d6793e1fdc379604b54f1971820ff8014371fc7e2486500d022cfae856f5768f0dd43722164a281304b0e2b893ca5b9cbe7d465dc7c5cef158fb85c13", 0xb4, 0xffffffffffff6d7b, 0x0, 0x1, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0x7f, r8, &(0x7f0000001640)="7da19482a934ccc1d16bea2213081b4e3800b98b9466f38da174166bdc0b832d5fc5f1eeb3e4b935bfefa835c8859ae19d599c85ac20cc2a1cd53162c604e0a4c4bc1ac76dfa07ef4145116d53f076e996e586a11371d3f9d6b4ee5259a0862499e5eebfa37dda96d6e0fa6021afe173a950ee9aede88ee88cf9e8be0ea2046825d83aaa8e3c3cf14a3e76f3a2d01db555f83b1ddb6303b1613eba6c9e003715b2a58054598d629ead8b318ab524e34cc9c837c02aadbfe63c8db850cb725fdc659360af51f2d8a3ab1f6442e52d924cd21cf131c44a0c21f091624cb3dd09ce876fea6aba", 0xe5, 0xf, 0x0, 0x1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x8, 0x7462, r3, &(0x7f0000001540)="2759eb0424bdd04499b325657805529ce40b0f7e2a9b40cb9794909d3f742067b18a81f7610bb4415f3bab7a17bb925e4375aa4f933a0184436ad44cfb4cbb79cbb1c8eaae583ea1519e849030af8dfa966f9629425763c422299858b9f191b7", 0x60, 0xc, 0x0, 0x3, r7}])
r9 = socket$kcm(0x10, 0x2, 0x10)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0x2001, r9}, 0x0)

21.641655295s ago: executing program 1 (id=2113):
memfd_create(&(0x7f0000000000)='\x00', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f000001aac0), 0x0, 0x0)
preadv(r0, &(0x7f0000001880), 0x0, 0x4000009, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="a441df2bb1be1432", 0x8}], 0x2}}], 0x1, 0x0)
accept4(r2, 0x0, 0x0, 0xc0800)
sendmmsg$unix(r2, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
munlockall()
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
modify_ldt$write(0x1, &(0x7f0000000080), 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x3, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = fcntl$dupfd(r3, 0x0, r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, r4}, 0x14)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x10})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xd4)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)=""/108, 0x6c}], 0x1}}], 0x1, 0x40, &(0x7f0000000440)={0x77359400})
socket$nl_xfrm(0x10, 0x3, 0x6)

20.918924737s ago: executing program 2 (id=2115):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x2001380}}, 0x50)
read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10)
syz_fuse_handle_req(r0, &(0x7f00000070c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x0, {0x0, 0x4, 0x200}}})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_id}, 0x20)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x90000000})
ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0)

20.393812127s ago: executing program 2 (id=2117):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfc}, 0x0)

19.319977679s ago: executing program 2 (id=2122):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xce9d6d23b7fefd6a, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x10, r2, 0x0)
r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
dup3(r3, r4, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000180)=""/172)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xf, &(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4004120}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000216abbac41002cbddf2502be18192afa65db863024b18622917d1a8d899a9b63fb"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r8 = dup(r7)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000040))
ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = getpid()
process_vm_readv(r9, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00', @ANYBLOB="010000", @ANYBLOB='Q'], 0x70}}, 0x0)

12.489853227s ago: executing program 4 (id=2139):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0)
r2 = epoll_create(0x3)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3e7}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
prctl$PR_GET_TSC(0x43, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103})
io_uring_enter(r3, 0x46f6, 0x0, 0x0, 0x0, 0x0)
write(r6, &(0x7f0000000200)='~', 0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040))
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x25)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000001880)="02458848", 0x4, 0x0, &(0x7f0000000340)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @local}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
getpgrp(0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

10.753744459s ago: executing program 4 (id=2144):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x79, 0x5d, 0x6c, 0x8, 0xc45, 0x6128, 0xc46d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x1, 0x40}}]}}]}}, 0x0)
unlinkat$binderfs_device(0xffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00')
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x9a03, 0x1}, {0x4c, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x4, {0xfffd, 0x7}, 0x0, 0x0}})
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "84920b0b273d24afeb6a1b86b47a26b3eea39b269666b35f199c5935a41c092dc7f522e75a05c1b265b85065f1d23c3020a70fc2097bc2aefa7dbbef50fb53b2cafd497011ab260893246b9dd951b8ff777b1750efe18715087bbab6e883e6b00d92de6145a659487fd58d623c8280df480ec7f3"}, 0x7f)

8.081588617s ago: executing program 4 (id=2146):
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8002600220001000101020000000503"], 0x2b)
syz_emit_ethernet(0x92, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x5, @local, @local, {[@lsrr={0x83, 0x13, 0xd5, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, @broadcast]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@local}, {@multicast1}, {@remote}, {@private}, {@dev}, {@local}]}]}}}}}}}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
unshare(0x2040400)
connect$rxrpc(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd86, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "03cb205446b35e9fdda8dc1da531434702c9749eae0535603177a6c7d4ef62d735d825f43a1b79a8606e0d5bea7b466637394bfeb1e76f8c"}}, 0x0, 0x0, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r4}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7b, r4})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
r6 = open(&(0x7f0000000400)='./bus\x00', 0x4003e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff6, 0x11, r6, 0x0)
ftruncate(r5, 0x7fff)
prctl$PR_SET_MM_MAP(0x41555856, 0xe, &(0x7f0000000040)={&(0x7f00009a6000/0x1000)=nil, &(0x7f0000396000/0x3000)=nil, &(0x7f000047f000/0x2000)=nil, &(0x7f00008f6000/0x2000)=nil, &(0x7f0000185000/0x3000)=nil, &(0x7f000075f000/0x3000)=nil, &(0x7f0000785000/0x1000)=nil, &(0x7f00000ce000/0xc000)=nil, &(0x7f00005e8000/0x4000)=nil, &(0x7f00007b9000/0x3000)=nil, &(0x7f00004de000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0xf, &(0x7f00000000c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @map_idx, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @kfunc, @tail_call]}, 0x0}, 0x90)
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000008c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x10000})

7.654157678s ago: executing program 3 (id=2148):
unshare(0x62040200)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000000f80)={0x2c, 0x0, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf5ff, 0x2)

6.737741888s ago: executing program 3 (id=2149):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100b})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
epoll_create1(0x0)
dup(0xffffffffffffffff)
syz_emit_ethernet(0x227, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x1c, &(0x7f00000004c0)=@raw=[@exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff9}, @alu={0x4, 0x1, 0x4, 0x5, 0x7, 0xffffffffffffffe0, 0xfffffffffffffff0}, @generic={0x4, 0x7, 0x2, 0x3ff, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @map_val={0x18, 0x7, 0x2, 0x0, r3}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0xae03, 0xb6)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x14, 0xd, 0x20, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
r6 = timerfd_create(0x6, 0x800)
read(r6, 0x0, 0x0)
timerfd_settime(r6, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10)

6.318996963s ago: executing program 3 (id=2150):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000004c0), 0x7)
r2 = io_uring_setup(0x3eae, &(0x7f0000000080))
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)
landlock_create_ruleset(&(0x7f0000000200)={0xc405, 0x3}, 0x10, 0x0)
r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0)
openat$mixer(0xffffffffffffff9c, 0x0, 0xb1547b3f4f90dca1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv(r6, &(0x7f0000000340)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.id\x00')
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$unix(0x1, 0x1, 0x0)

5.303621826s ago: executing program 3 (id=2151):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result}], 0x1c)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f, {}, {}, @raw32}], 0xffc8)
mq_open(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x79c4ef6859c3e5df}, {&(0x7f0000000240)=""/153}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d87213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc775510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c30540e0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b6113fd00f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

4.509743926s ago: executing program 0 (id=2152):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0)
r2 = epoll_create(0x3)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3e7}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
prctl$PR_GET_TSC(0x43, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103})
io_uring_enter(r3, 0x46f6, 0x0, 0x0, 0x0, 0x0)
write(r6, &(0x7f0000000200)='~', 0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040))
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x25)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000001880)="02458848", 0x4, 0x0, &(0x7f0000000340)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @local}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
getpgrp(0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

4.23179219s ago: executing program 3 (id=2153):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x22)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25)

3.790243572s ago: executing program 4 (id=2154):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="5100330080000000ffffffffffff08021100000008221100000000000000000000009dab0000000000000100040600000000000025030000002a01003c04000000007107000000000000007660"], 0x88}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macsec0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r4, @ANYBLOB="dadb"], 0x20}}, 0x0)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2718, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000001080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000019e80))
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmmsg$inet(r6, &(0x7f000001c880)=[{{0x0, 0x0, 0x0}}, {{&(0x7f000001c300)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f000001c840)=[{0x0}, {&(0x7f000001c5c0)="3103c893427549cc612e7dccfd4c10e48ae0cda55341a6cff288745a023ddc750e3b86f883a708670f73d0bf0042a43a96b2121cc17c41869c6d3c18d603514c35b0fd82711b36c3c1de917243a36d0d463368d17c35b5700e0a7ef198b69cb77d0998f0b6b0fd884f7246aad0d272", 0x6f}, {&(0x7f000001c640)="baa45f4d744c639eb08f542e4ad35350d0d4657532e08d73083fc15e2f57f02e6c6b24665c694ad6b39e44532b58467bc973eed08e079ed0c575fe297fc7a591e2f4df359a7507e9d9b556394cf425d5dcb3741addb57e77545dc1f69f50b9a9533af4b576a50c1ef01633a7f13053e8c5f242d896ff611a9a339445a1b0662b6fcfd9c37ec110f89aa7480419e32afa62115936aa142275f16466f5b4942d583141435cc17dafc2cb026025794d22e1fd93a3eed59447315ff656a45520a35c721f65a980efed0c4307d837c9b28d7ac29d2cb71a2767ff6856fb24a5244d7fb4960f06d6dc8d7753f42d842ea1", 0xee}, {&(0x7f000001c740)="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", 0xfe}], 0x4}}], 0x2, 0x20000000)
r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r10, 0xc0585611, &(0x7f0000000880)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "546aa58d"}, 0x0, 0x2, {0x0}})
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
r12 = dup(r11)
getsockopt(r11, 0x28, 0x0, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000000)=0x4, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00', @ANYRES32=r4, @ANYBLOB="0b2a020000000000"], 0x20}}, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x80)
r14 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_WATCH_KEY(0x20, r14, r13, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r12, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, <r15=>0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETFB2(r13, 0xc06464ce, &(0x7f00000003c0)={r15, 0x8001, 0x8, 0xa0c, 0x0, [], [0x10001, 0xfffffffc, 0x0, 0x1], [0x286, 0x10001, 0x4, 0x5d93], [0x9, 0x2, 0x80000001]})

3.130288377s ago: executing program 0 (id=2155):
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@link_local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa, 0x20}, @timestamp={0x8, 0xa}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @exp_fastopen={0xfe, 0x6, 0xf989, "e6ff"}, @window={0x3, 0x3, 0x8}, @nop, @fastopen={0x22, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)

2.93371836s ago: executing program 0 (id=2156):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$alg(r0, &(0x7f0000000040)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x10, 0x29, 0x3e, 0x3d}], 0x10}], 0x1, 0x0) (fail_nth: 3)

2.408308491s ago: executing program 3 (id=2157):
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060b08000034e40000000000000000050005000a0000000500010040000000000000000000000009000200"], 0x58}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090004010000000000001c140000fe00000100000000140013"], 0x30}}, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
read$char_usb(r4, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x9}, 0x8)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)

2.400213333s ago: executing program 0 (id=2158):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100b})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
epoll_create1(0x0)
dup(0xffffffffffffffff)
syz_emit_ethernet(0x227, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x1c, &(0x7f00000004c0)=@raw=[@exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff9}, @alu={0x4, 0x1, 0x4, 0x5, 0x7, 0xffffffffffffffe0, 0xfffffffffffffff0}, @generic={0x4, 0x7, 0x2, 0x3ff, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @map_val={0x18, 0x7, 0x2, 0x0, r3}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0xae03, 0xb6)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x14, 0xd, 0x20, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
r6 = timerfd_create(0x6, 0x800)
read(r6, 0x0, 0x0)
timerfd_settime(r6, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10)

2.332965045s ago: executing program 4 (id=2159):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000004c0), 0x7)
r2 = io_uring_setup(0x3eae, &(0x7f0000000080))
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)
landlock_create_ruleset(&(0x7f0000000200)={0xc405, 0x3}, 0x10, 0x0)
r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0)
openat$mixer(0xffffffffffffff9c, 0x0, 0xb1547b3f4f90dca1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv(r6, &(0x7f0000000340)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.id\x00')
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$unix(0x1, 0x1, 0x0)

1.789468718s ago: executing program 0 (id=2160):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000003a00290200000000000000000a00000008000000", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0)
fcntl$setsig(r1, 0xa, 0x21)
fcntl$setlease(r1, 0x400, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x4143, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc4382, 0x0)
r4 = dup(r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@acquire={0x174, 0x17, 0x100, 0x0, 0xfffffffd, {{@in6=@private0}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@loopback}, 0x0, @in6=@mcast1}]}, @policy_type={0xa}]}, 0x174}}, 0x0)
open(&(0x7f0000000100)='.\x00', 0x591002, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r6, r4, 0x0, 0x8a000)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x4}, 0x10)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
r7 = openat$mixer(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r8 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup3(r7, r8, 0x0)

868.428205ms ago: executing program 0 (id=2161):
syz_io_uring_setup(0x24b9, &(0x7f0000000300), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009"], 0x5c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3e, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18}, './control\x00'})
syz_usb_connect(0x0, 0x34, &(0x7f0000001380)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090222000100000000090400000129fddd00090500000000000000070594ef"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
syz_usbip_server_init(0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, r2, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "98ff00"}}}}}}, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000d00)=ANY=[@ANYBLOB="0000020000008035"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x0, 0x0, 0xf, "221f748b7108eac3bfc11f6a220e2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)

0s ago: executing program 4 (id=2162):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x9d, &(0x7f0000000180)={0x5, 0xf, 0x9d, 0x2, [@wireless={0xb}, @generic={0x8d, 0x10, 0x0, "6a66a17ba6f3dfb30a417a26ff2e4c76046cf4fcbdcab3217b7d513caa2a7bdf813a16cbaeb21d16be222d8b2fc82fdd7c7306e1750ed16af6db7ad5a82e61874f93f90908472dc3a55f7839b7a8a792ca8ad7288d07c59222e0f1084128bc0f7e461141d0cff03ceee9a0a78c6b75375f665646b6539fea8b40743ace635189d1c8892209e0d07db2a5"}]}})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', <r3=>0x0})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6gre0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080027bd7000fddbdf25150000005400018008000100", @ANYRES32=r3, @ANYBLOB="0800030001a80000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="14000200626f6e645f736c6176655f3100000000080003000300000014000200726f73653000000000000000000000000c00018008000100", @ANYRES32=r7, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETVNETLE(r8, 0x400454dc, &(0x7f0000000040))
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7})
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f0000000000)={{@host}})
socket$inet_smc(0x2b, 0x1, 0x0)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r10, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1004.662093][T16219] RSP: 002b:00000000f57265a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1004.670541][T16219] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5726620
[ 1004.678531][T16219] RDX: 000000000000000f RSI: 00000000f741fff4 RDI: 0000000000000000
[ 1004.686607][T16219] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1004.694597][T16219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1004.702587][T16219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1004.710688][T16219]  </TASK>
[ 1004.864099][ T5235] usb 4-1: USB disconnect, device number 64
[ 1005.005483][T16240] trusted_key: syz.2.1887 sent an empty control message without MSG_MORE.
[ 1005.454493][ T1191] usb 2-1: USB disconnect, device number 55
[ 1005.736524][T16258] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1006.849330][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1006.926684][T16288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1894'.
[ 1006.990862][T16288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1894'.
[ 1007.022132][T16288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1894'.
[ 1007.077269][T16288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1894'.
[ 1007.157491][   T47] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1007.836897][ T5247] Bluetooth: hci4: unexpected subevent 0x01 length: 78 > 18
[ 1010.599678][ T1191] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1010.819330][ T1191] usb 5-1: Using ep0 maxpacket: 8
[ 1010.858402][ T1191] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1010.947455][ T1191] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1011.000607][ T1191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1011.057631][ T1191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1011.117524][ T1191] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1011.187498][ T1191] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1011.207569][ T1191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.248997][ T1191] usb 5-1: Product: syz
[ 1011.253215][ T1191] usb 5-1: Manufacturer: syz
[ 1011.307430][ T1191] usb 5-1: SerialNumber: syz
[ 1011.335440][ T1191] usb 5-1: config 0 descriptor??
[ 1011.550501][ T1191] rc_core: IR keymap rc-imon-rsc not found
[ 1011.556368][ T1191] Registered IR keymap rc-empty
[ 1011.628357][ T1191] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1011.662919][ T1191] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28
[ 1011.714396][ T1191] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90
[ 1011.827384][ T1191] usb 5-1: USB disconnect, device number 55
[ 1012.117561][T16372] tipc: Invalid UDP bearer configuration
[ 1012.117621][T16372] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1015.440263][T16415] xt_NFQUEUE: number of total queues is 0
[ 1016.677514][   T47] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1016.891756][   T47] usb 2-1: Using ep0 maxpacket: 16
[ 1016.912469][   T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1016.946302][   T47] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1016.988564][   T47] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1017.037456][   T47] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1017.073276][   T47] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1017.098812][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.117861][ T5286] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1017.125827][   T47] usb 2-1: Product: syz
[ 1017.130669][   T47] usb 2-1: Manufacturer: syz
[ 1017.135338][   T47] usb 2-1: SerialNumber: syz
[ 1017.357598][ T5286] usb 5-1: Using ep0 maxpacket: 8
[ 1017.397491][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1017.420419][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1017.477407][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1017.517471][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1017.527859][T16421] batman_adv: batadv0: Adding interface: macvtap1
[ 1017.537666][T16421] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1017.563097][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1017.608695][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1017.628099][T16421] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[ 1017.683479][ T5286] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1017.724112][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.767673][ T5286] usb 5-1: Product: syz
[ 1017.794514][ T5286] usb 5-1: Manufacturer: syz
[ 1017.811146][ T5286] usb 5-1: SerialNumber: syz
[ 1017.828432][ T5286] usb 5-1: config 0 descriptor??
[ 1017.877868][   T47] usb 2-1: USB disconnect, device number 56
[ 1017.966809][T15876] udevd[15876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1018.147668][ T5286] usb 5-1: can't set config #0, error -71
[ 1018.188390][ T5286] usb 5-1: USB disconnect, device number 56
[ 1018.757796][ T5287] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1018.987744][ T5287] usb 2-1: Using ep0 maxpacket: 32
[ 1019.023126][ T5287] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=89.65
[ 1019.055372][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.077192][ T5287] usb 2-1: Product: syz
[ 1019.092864][ T5287] usb 2-1: Manufacturer: syz
[ 1019.105530][ T5287] usb 2-1: SerialNumber: syz
[ 1019.155513][ T5287] usb 2-1: config 0 descriptor??
[ 1019.174820][ T5287] net1080 2-1:0.0: probe with driver net1080 failed with error -22
[ 1019.370381][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1019.390608][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1019.400041][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1019.430659][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1019.445734][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1019.460470][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1019.609552][ T1191] usb 2-1: USB disconnect, device number 57
[ 1020.848625][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1021.186022][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1021.443106][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1021.489398][T16434] chnl_net:caif_netlink_parms(): no params data found
[ 1021.577532][ T5247] Bluetooth: hci1: command tx timeout
[ 1021.962658][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1022.363069][T16434] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1022.397642][T16434] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1022.441394][T16434] bridge_slave_0: entered allmulticast mode
[ 1022.469653][T16434] bridge_slave_0: entered promiscuous mode
[ 1022.509122][T16434] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1022.516284][T16434] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1022.528137][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1022.548508][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1022.578005][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1022.579874][T16434] bridge_slave_1: entered allmulticast mode
[ 1022.595487][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1022.607739][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1022.616415][T16434] bridge_slave_1: entered promiscuous mode
[ 1022.622644][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1022.922477][T16453] xt_TCPMSS: Only works on TCP SYN packets
[ 1023.248395][T16434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1023.282584][T16456] fuse: Bad value for 'group_id'
[ 1023.290899][T16434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1023.300547][T16456] fuse: Bad value for 'group_id'
[ 1023.657759][ T5247] Bluetooth: hci1: command tx timeout
[ 1023.780356][T16434] team0: Port device team_slave_0 added
[ 1023.869128][T16434] team0: Port device team_slave_1 added
[ 1023.877035][   T35] bridge_slave_1: left allmulticast mode
[ 1023.896059][   T35] bridge_slave_1: left promiscuous mode
[ 1023.908057][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.950817][   T35] bridge_slave_0: left allmulticast mode
[ 1023.960631][   T35] bridge_slave_0: left promiscuous mode
[ 1023.966404][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1024.527636][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1024.568592][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1024.577155][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1024.586340][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1024.594669][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1024.602375][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1024.777519][ T5247] Bluetooth: hci0: command tx timeout
[ 1025.037728][ T5286] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1025.267660][ T5286] usb 2-1: Using ep0 maxpacket: 8
[ 1025.286067][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1025.312164][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1025.333601][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1025.356975][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1025.367722][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1025.430571][ T5286] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1025.447456][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.455530][ T5286] usb 2-1: Product: syz
[ 1025.487379][ T5286] usb 2-1: Manufacturer: syz
[ 1025.492208][ T5286] usb 2-1: SerialNumber: syz
[ 1025.519496][ T5286] usb 2-1: config 0 descriptor??
[ 1025.648236][ T5286] rc_core: IR keymap rc-imon-rsc not found
[ 1025.654146][ T5286] Registered IR keymap rc-empty
[ 1025.678491][ T5286] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1025.709145][ T5286] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29
[ 1025.729946][T16463] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1025.748994][ T5247] Bluetooth: hci1: command tx timeout
[ 1025.767789][ T5286] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90
[ 1025.790061][T16463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1025.811183][T16463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1026.062711][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1026.093975][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1026.126946][   T35] bond0 (unregistering): Released all slaves
[ 1026.605453][T16434] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1026.630472][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1026.702424][ T5247] Bluetooth: hci6: command tx timeout
[ 1026.709389][T16434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1026.729784][T16434] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1026.736771][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1026.762815][T16434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1026.877502][ T5247] Bluetooth: hci0: command tx timeout
[ 1027.464005][T16434] hsr_slave_0: entered promiscuous mode
[ 1027.480637][T16434] hsr_slave_1: entered promiscuous mode
[ 1027.516384][T16434] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1027.527065][T16434] Cannot create hsr debugfs directory
[ 1027.699727][   T35] hsr_slave_0: left promiscuous mode
[ 1027.709262][   T35] hsr_slave_1: left promiscuous mode
[ 1027.725625][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1027.738005][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1027.764775][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1027.777676][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1027.818090][ T5247] Bluetooth: hci1: command tx timeout
[ 1027.852285][   T35] veth1_macvtap: left promiscuous mode
[ 1027.887676][   T35] veth0_macvtap: left promiscuous mode
[ 1027.893381][   T35] veth1_vlan: left promiscuous mode
[ 1027.927732][   T35] veth0_vlan: left promiscuous mode
[ 1028.789490][ T5247] Bluetooth: hci6: command tx timeout
[ 1028.937617][ T5247] Bluetooth: hci0: command tx timeout
[ 1029.605321][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1029.751745][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1030.528479][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1030.539240][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1030.549171][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1030.558054][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1030.565790][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1030.573816][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1030.857438][ T5247] Bluetooth: hci6: command tx timeout
[ 1031.017490][ T5247] Bluetooth: hci0: command tx timeout
[ 1032.650329][ T5289] usb 2-1: USB disconnect, device number 58
[ 1032.787702][ T5247] Bluetooth: hci4: command tx timeout
[ 1032.937524][ T5247] Bluetooth: hci6: command tx timeout
[ 1033.054921][T16451] chnl_net:caif_netlink_parms(): no params data found
[ 1033.366653][T16465] chnl_net:caif_netlink_parms(): no params data found
[ 1034.396482][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1034.617788][T16465] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1034.624963][T16465] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1034.670549][T16465] bridge_slave_0: entered allmulticast mode
[ 1034.688251][T16465] bridge_slave_0: entered promiscuous mode
[ 1034.704703][T16486] chnl_net:caif_netlink_parms(): no params data found
[ 1034.840116][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1034.867507][ T5247] Bluetooth: hci4: command tx timeout
[ 1034.893944][T16451] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1034.931641][T16451] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1034.954831][T16451] bridge_slave_0: entered allmulticast mode
[ 1034.988877][T16451] bridge_slave_0: entered promiscuous mode
[ 1035.019000][T16451] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1035.035626][T16451] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1035.067671][T16451] bridge_slave_1: entered allmulticast mode
[ 1035.075082][T16451] bridge_slave_1: entered promiscuous mode
[ 1035.110927][T16465] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1035.127584][T16465] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1035.134869][T16465] bridge_slave_1: entered allmulticast mode
[ 1035.228879][T16465] bridge_slave_1: entered promiscuous mode
[ 1035.440061][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.605063][T16451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1035.770159][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1035.850150][T16451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1035.920489][T16465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1035.960980][T16465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1036.222100][T16451] team0: Port device team_slave_0 added
[ 1036.269211][T16451] team0: Port device team_slave_1 added
[ 1036.347101][T16465] team0: Port device team_slave_0 added
[ 1036.578944][T16465] team0: Port device team_slave_1 added
[ 1036.585061][ T5286] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1036.636567][T16486] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1036.645067][T16486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1036.664871][T16486] bridge_slave_0: entered allmulticast mode
[ 1036.676355][T16486] bridge_slave_0: entered promiscuous mode
[ 1036.698127][T16486] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1036.715541][T16486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1036.726029][T16486] bridge_slave_1: entered allmulticast mode
[ 1036.748543][T16486] bridge_slave_1: entered promiscuous mode
[ 1036.756103][T16434] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1036.807798][ T5286] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0
[ 1036.847426][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.855615][ T5286] usb 2-1: Product: syz
[ 1036.870558][T16451] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1036.878111][ T5286] usb 2-1: Manufacturer: syz
[ 1036.882735][ T5286] usb 2-1: SerialNumber: syz
[ 1036.887374][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1036.887402][T16451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1036.889546][T16451] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1036.913357][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1036.939007][ T5247] Bluetooth: hci4: command tx timeout
[ 1036.978818][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1037.004811][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1037.012148][ T5286] usb 2-1: config 0 descriptor??
[ 1037.020067][ T5286] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected
[ 1037.027904][ T5286] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84
[ 1037.036771][ T5286] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[ 1037.051923][ T5286] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82
[ 1037.059768][T16451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1037.060304][ T5286] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[ 1037.079977][ T5286] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[ 1037.088199][ T5286] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[ 1037.106235][ T5286] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3
[ 1037.135695][ T5286] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1037.199965][T16434] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1037.281376][T16434] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1037.379967][T16465] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1037.386953][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1037.447541][T16465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1037.480786][T16465] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1037.497547][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1037.547500][T16465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1037.648150][T16486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1037.688754][T16434] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1037.727388][T16530] team_slave_0: entered promiscuous mode
[ 1037.733112][T16530] team_slave_1: entered promiscuous mode
[ 1037.771689][T16530] team_slave_0: left promiscuous mode
[ 1037.777167][T16530] team_slave_1: left promiscuous mode
[ 1037.939503][T16451] hsr_slave_0: entered promiscuous mode
[ 1037.958855][T16451] hsr_slave_1: entered promiscuous mode
[ 1037.987474][T16451] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1037.995074][T16451] Cannot create hsr debugfs directory
[ 1038.019171][ T5286] usb 2-1: USB disconnect, device number 59
[ 1038.044217][ T5286] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1038.074946][ T5286] keyspan 2-1:0.0: device disconnected
[ 1038.100492][T16486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1038.347761][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1038.416226][T16486] team0: Port device team_slave_0 added
[ 1038.683192][T16486] team0: Port device team_slave_1 added
[ 1038.822265][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1038.913376][T16465] hsr_slave_0: entered promiscuous mode
[ 1038.948273][T16465] hsr_slave_1: entered promiscuous mode
[ 1038.977479][T16465] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1038.985089][T16465] Cannot create hsr debugfs directory
[ 1039.020341][ T5247] Bluetooth: hci4: command tx timeout
[ 1039.107792][T16486] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1039.127406][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1039.158076][T16545] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1039.181517][T16486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1039.361493][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.470800][T16486] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1039.482991][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1039.509031][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1039.582959][T16486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1039.871624][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.348874][T16486] hsr_slave_0: entered promiscuous mode
[ 1040.376269][T16486] hsr_slave_1: entered promiscuous mode
[ 1040.399403][T16486] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1040.406993][T16486] Cannot create hsr debugfs directory
[ 1041.046176][T16451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.492513][T16451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.864253][T16451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.953490][T16434] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1042.142800][T16451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.559101][T16434] 8021q: adding VLAN 0 to HW filter on device team0
[ 1042.738679][   T35] bridge_slave_1: left allmulticast mode
[ 1042.759035][   T35] bridge_slave_1: left promiscuous mode
[ 1042.780218][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1042.853314][   T35] bridge_slave_0: left allmulticast mode
[ 1042.870187][   T35] bridge_slave_0: left promiscuous mode
[ 1042.875973][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1042.908174][ T5286] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1042.971501][   T35] bridge_slave_1: left allmulticast mode
[ 1042.977197][   T35] bridge_slave_1: left promiscuous mode
[ 1043.007530][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1043.058276][   T35] bridge_slave_0: left allmulticast mode
[ 1043.063970][   T35] bridge_slave_0: left promiscuous mode
[ 1043.076175][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1043.107889][ T5286] usb 2-1: Using ep0 maxpacket: 8
[ 1043.115215][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1043.128691][   T35] bridge_slave_1: left allmulticast mode
[ 1043.134368][   T35] bridge_slave_1: left promiscuous mode
[ 1043.154401][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1043.160336][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1043.188238][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1043.227560][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1043.248539][   T35] bridge_slave_0: left allmulticast mode
[ 1043.254233][   T35] bridge_slave_0: left promiscuous mode
[ 1043.257955][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1043.279305][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1043.307003][ T5286] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1043.317619][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.325645][ T5286] usb 2-1: Product: syz
[ 1043.363453][ T5286] usb 2-1: Manufacturer: syz
[ 1043.373584][ T5286] usb 2-1: SerialNumber: syz
[ 1043.398561][ T5286] usb 2-1: config 0 descriptor??
[ 1043.576402][ T5286] rc_core: IR keymap rc-imon-rsc not found
[ 1043.598518][ T5286] Registered IR keymap rc-empty
[ 1043.619763][T16578] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1043.627589][ T5286] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1043.659396][ T5286] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30
[ 1043.692023][T16578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1043.703119][ T5286] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90
[ 1043.767979][T16578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1043.809884][ T5286] usb 2-1: USB disconnect, device number 60
[ 1046.511714][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1046.594702][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1046.689699][   T35] bond0 (unregistering): Released all slaves
[ 1047.329011][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1047.361910][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1047.380468][   T35] bond0 (unregistering): Released all slaves
[ 1047.843602][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1047.891787][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1047.922617][   T35] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1047.949651][   T35] bond0 (unregistering): Released all slaves
[ 1048.234065][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.241378][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1048.300441][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.307700][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1048.323480][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'.
[ 1048.783851][T16451] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1048.814281][T16451] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1048.964921][T16451] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1049.295284][T16451] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1049.307874][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'.
[ 1049.643815][T16434] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1050.180302][   T35] hsr_slave_0: left promiscuous mode
[ 1050.208430][   T35] hsr_slave_1: left promiscuous mode
[ 1050.229086][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1050.236610][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1050.288605][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1050.296070][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1050.368707][T16645] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1050.490378][   T35] hsr_slave_0: left promiscuous mode
[ 1050.567564][   T35] hsr_slave_1: left promiscuous mode
[ 1050.601916][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1050.621036][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1050.650200][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1050.667623][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1050.722897][   T35] hsr_slave_0: left promiscuous mode
[ 1050.773920][   T35] hsr_slave_1: left promiscuous mode
[ 1050.791043][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1050.810816][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1051.003658][   T35] veth1_macvtap: left promiscuous mode
[ 1051.020116][   T35] veth0_macvtap: left promiscuous mode
[ 1051.039947][   T35] veth1_vlan: left promiscuous mode
[ 1051.045321][   T35] veth0_vlan: left promiscuous mode
[ 1051.088238][   T35] veth1_macvtap: left promiscuous mode
[ 1051.119431][   T35] veth0_macvtap: left promiscuous mode
[ 1051.125207][   T35] veth1_vlan: left promiscuous mode
[ 1051.153375][   T35] veth0_vlan: left promiscuous mode
[ 1051.166699][   T35] veth1_macvtap: left promiscuous mode
[ 1051.179378][   T35] veth0_macvtap: left promiscuous mode
[ 1051.185052][   T35] veth1_vlan: left promiscuous mode
[ 1051.208810][   T35] veth0_vlan: left promiscuous mode
[ 1053.788783][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1053.929206][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1054.711678][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.718270][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.770321][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1056.919582][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1059.681521][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1059.868244][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1061.726967][T16651] batadv0: entered promiscuous mode
[ 1061.842774][T16434] veth0_vlan: entered promiscuous mode
[ 1061.893477][T16434] veth1_vlan: entered promiscuous mode
[ 1061.979047][T16465] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1062.019345][T16465] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1062.198937][T16465] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1062.251457][T16465] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1062.361067][T16434] veth0_macvtap: entered promiscuous mode
[ 1062.542118][T16434] veth1_macvtap: entered promiscuous mode
[ 1062.942329][T16451] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1063.178135][ T5314] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1063.230765][T16434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.252900][T16434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.296313][T16434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.326077][T16434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.348734][T16434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.367379][T16434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.389698][T16434] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1063.428335][T16451] 8021q: adding VLAN 0 to HW filter on device team0
[ 1063.435169][ T5314] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1063.457629][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.466949][ T5314] usb 2-1: Product: syz
[ 1063.507633][ T5314] usb 2-1: Manufacturer: syz
[ 1063.512389][ T5314] usb 2-1: SerialNumber: syz
[ 1063.530170][ T5314] usb 2-1: config 0 descriptor??
[ 1063.543686][T16434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.604518][T16434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.647836][T16434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.677599][T16434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.699963][T16434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.717377][T16434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.739673][T16434] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1063.797657][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.804824][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1063.900630][T16434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.927689][T16434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.936447][T16434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.987441][T16434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.018364][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1064.025653][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1064.201808][   T25] usb 2-1: USB disconnect, device number 61
[ 1064.468759][T16486] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1064.513467][T16486] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1064.594731][T16486] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1064.725646][T16486] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1064.750399][T16465] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1064.782598][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1064.841706][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1064.874128][T16465] 8021q: adding VLAN 0 to HW filter on device team0
[ 1064.961115][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1064.968309][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1065.001906][T16451] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1065.065325][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1065.072635][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1065.139131][ T2575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1065.168606][ T2575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1065.297597][ T5314] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[ 1065.507947][T16451] veth0_vlan: entered promiscuous mode
[ 1065.519500][ T5314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64
[ 1065.570333][ T5314] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1065.594058][ T5314] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1065.606108][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1065.628170][ T5314] usb 2-1: SerialNumber: syz
[ 1065.635730][T16465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1065.640665][T16677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1065.730386][T16451] veth1_vlan: entered promiscuous mode
[ 1065.982575][T16486] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1066.142460][T16486] 8021q: adding VLAN 0 to HW filter on device team0
[ 1066.183482][T16465] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1066.250691][T16451] veth0_macvtap: entered promiscuous mode
[ 1066.287904][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1066.295195][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1066.343768][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1066.351221][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1066.403183][T16451] veth1_macvtap: entered promiscuous mode
[ 1066.603818][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1066.631033][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.657939][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1066.678347][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.709715][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1066.730820][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.771196][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1066.797510][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.839996][T16451] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1066.909891][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.946262][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.958935][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.970669][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.991621][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1067.018900][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1067.040780][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1067.074546][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1067.109409][T16451] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1067.166276][T16465] veth0_vlan: entered promiscuous mode
[ 1067.201308][T16451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.237411][T16451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.246191][T16451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.277484][T16451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.381654][T16465] veth1_vlan: entered promiscuous mode
[ 1067.585655][T16486] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1067.699081][T16465] veth0_macvtap: entered promiscuous mode
[ 1067.747833][T16465] veth1_macvtap: entered promiscuous mode
[ 1067.894157][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1067.957342][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1068.040293][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1068.049564][ T5314] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[ 1068.092537][ T5314] usb 2-1: USB disconnect, device number 62
[ 1068.100284][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.117222][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1068.132898][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.149811][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1068.168993][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.181862][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1068.203652][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.223021][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1068.246750][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.288599][T16465] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1068.398397][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1068.443821][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.460518][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1068.507725][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.527391][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1068.545202][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'.
[ 1068.554758][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.577925][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1068.617170][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.637403][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1068.667426][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1068.686090][T16465] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1068.706224][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1068.715176][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1068.734073][T16486] veth0_vlan: entered promiscuous mode
[ 1068.775846][T16465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.813074][T16465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.833351][T16465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.852736][T16465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.920204][T16486] veth1_vlan: entered promiscuous mode
[ 1069.159435][T16486] veth0_macvtap: entered promiscuous mode
[ 1069.183612][T16486] veth1_macvtap: entered promiscuous mode
[ 1069.247974][T16748] xt_TCPMSS: Only works on TCP SYN packets
[ 1069.434077][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1069.465016][T16755] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1069.483928][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1069.487436][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1069.540211][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.577735][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1069.637360][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.667447][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1069.709526][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.750723][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1069.763602][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1968'.
[ 1069.779606][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.820291][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1069.847519][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.877352][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1069.905852][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1069.939559][T16486] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1069.993374][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1070.036140][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1070.067422][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1070.087638][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1070.119971][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1070.147423][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1070.181577][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1070.218017][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1070.235874][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1070.267337][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1070.287370][T16486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1070.312621][T16486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1070.359034][T16486] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1070.423450][T16486] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.467589][T16486] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.495782][T16486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.528022][T16486] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.597555][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1070.619314][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1070.991443][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1071.028346][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1071.282917][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1071.312132][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1072.247694][   T47] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1072.307604][ T5286] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[ 1072.457608][   T47] usb 2-1: Using ep0 maxpacket: 8
[ 1072.471059][   T47] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1072.518824][   T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1072.538452][ T5286] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64
[ 1072.556741][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1072.577028][ T5286] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1072.603070][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1072.624124][ T5286] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1072.646532][   T47] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1072.662085][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1072.683278][ T5286] usb 4-1: SerialNumber: syz
[ 1072.699934][   T47] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1072.722422][T16789] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1072.734151][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'.
[ 1072.753439][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.773573][   T47] usb 2-1: Product: syz
[ 1072.778750][   T47] usb 2-1: Manufacturer: syz
[ 1072.797534][   T47] usb 2-1: SerialNumber: syz
[ 1072.814157][   T47] usb 2-1: config 0 descriptor??
[ 1072.997490][   T47] rc_core: IR keymap rc-imon-rsc not found
[ 1073.011755][   T47] Registered IR keymap rc-empty
[ 1073.051700][T16772] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1073.061359][   T47] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1073.083474][T16772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1073.096657][   T47] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31
[ 1073.114919][   T47] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90
[ 1073.125705][T16772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1073.229481][ T1191] usb 2-1: USB disconnect, device number 63
[ 1073.595156][ T5286] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[ 1073.656956][ T5286] usb 4-1: USB disconnect, device number 65
[ 1074.933430][   T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1075.281490][   T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1075.347117][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'.
[ 1075.539760][   T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1075.689953][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1075.700839][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1075.709873][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1075.718626][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1075.766347][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1075.775166][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1075.981460][   T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.697655][    T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1076.759616][T16837] chnl_net:caif_netlink_parms(): no params data found
[ 1076.820003][   T53] bridge_slave_1: left allmulticast mode
[ 1076.825966][   T53] bridge_slave_1: left promiscuous mode
[ 1076.844077][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.880577][   T53] bridge_slave_0: left allmulticast mode
[ 1076.913534][   T53] bridge_slave_0: left promiscuous mode
[ 1076.920238][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.988925][    T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[ 1077.019100][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.027146][    T9] usb 3-1: Product: syz
[ 1077.057373][    T9] usb 3-1: Manufacturer: syz
[ 1077.067625][    T9] usb 3-1: SerialNumber: syz
[ 1077.085594][    T9] usb 3-1: config 0 descriptor??
[ 1077.121386][    T9] gspca_main: sonixb-2.14.0 probing 0c45:608f
[ 1077.668305][    T9] sonixb 3-1:0.0: Error reading register 00: -110
[ 1077.792332][T16844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1077.817692][ T5243] Bluetooth: hci0: command tx timeout
[ 1077.869989][T16844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1078.005521][T16844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1078.060577][T16844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1078.773497][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1078.789384][ T5286] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1078.827571][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1078.858986][   T53] bond0 (unregistering): Released all slaves
[ 1078.989314][ T5286] usb 2-1: Using ep0 maxpacket: 8
[ 1079.045062][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1079.075620][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1079.118568][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1079.186130][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1079.199267][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1079.258095][ T5286] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1079.275631][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.297178][ T5286] usb 2-1: Product: syz
[ 1079.301472][ T5286] usb 2-1: Manufacturer: syz
[ 1079.306276][ T5286] usb 2-1: SerialNumber: syz
[ 1079.313618][ T5286] usb 2-1: config 0 descriptor??
[ 1079.551024][ T1191] usb 3-1: USB disconnect, device number 65
[ 1079.567450][ T5286] rc_core: IR keymap rc-imon-rsc not found
[ 1079.573664][T16878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1079.599515][T16865] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1079.608862][ T5286] Registered IR keymap rc-empty
[ 1079.629620][T16865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1079.629877][ T5286] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1079.709203][ T5286] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32
[ 1079.748270][T16865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1079.780621][ T5286] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90
[ 1079.897730][ T5243] Bluetooth: hci0: command tx timeout
[ 1079.936040][T16837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.968146][ T5286] usb 2-1: USB disconnect, device number 64
[ 1079.998698][T16837] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1080.005968][T16837] bridge_slave_0: entered allmulticast mode
[ 1080.026199][T16837] bridge_slave_0: entered promiscuous mode
[ 1080.086193][T16837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.110741][T16837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1080.131139][T16837] bridge_slave_1: entered allmulticast mode
[ 1080.169156][T16837] bridge_slave_1: entered promiscuous mode
[ 1080.612985][T16837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1080.913085][   T53] hsr_slave_0: left promiscuous mode
[ 1081.065346][   T53] hsr_slave_1: left promiscuous mode
[ 1081.153354][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1081.181223][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1081.221569][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1081.247939][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1081.317399][ T5289] usb 2-1: new low-speed USB device number 65 using dummy_hcd
[ 1081.455751][   T53] veth1_macvtap: left promiscuous mode
[ 1081.525771][   T53] veth0_macvtap: left promiscuous mode
[ 1081.549538][ T5289] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1081.559463][   T53] veth1_vlan: left promiscuous mode
[ 1081.564816][   T53] veth0_vlan: left promiscuous mode
[ 1081.570807][ T5289] usb 2-1: config 0 has no interface number 0
[ 1081.576955][ T5289] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1081.595565][ T5289] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1081.611246][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.632739][ T5289] usb 2-1: config 0 descriptor??
[ 1081.668013][ T5289] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1081.886498][T16891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1081.957062][T16891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1081.977955][ T5243] Bluetooth: hci0: command tx timeout
[ 1082.080716][T16891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.136851][T16891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1083.246672][ T5247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1083.260156][ T5247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1083.270253][ T5247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1083.280642][ T5247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1083.290189][ T5247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1083.297900][ T5247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1083.337610][   T29] kauditd_printk_skb: 976 callbacks suppressed
[ 1083.337629][   T29] audit: type=1326 audit(1725783712.854:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.2003" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73bd579 code=0x0
[ 1084.067542][ T5243] Bluetooth: hci0: command tx timeout
[ 1084.411457][   T53] team0 (unregistering): Port device team_slave_1 removed
[ 1084.621463][   T53] team0 (unregistering): Port device team_slave_0 removed
[ 1085.431624][ T5243] Bluetooth: hci5: command tx timeout
[ 1086.363651][T16837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1086.404997][    T9] usb 2-1: USB disconnect, device number 65
[ 1086.413432][    T9] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected
[ 1086.715215][T16837] team0: Port device team_slave_0 added
[ 1086.804082][T16837] team0: Port device team_slave_1 added
[ 1086.953171][T16837] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1086.986142][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1087.100318][T16837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1087.161391][T16837] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1087.179514][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1087.278906][T16837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1088.127828][ T5243] Bluetooth: hci5: command tx timeout
[ 1088.160997][T16935] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1088.853507][T16837] hsr_slave_0: entered promiscuous mode
[ 1088.893524][T16837] hsr_slave_1: entered promiscuous mode
[ 1089.788143][ T5235] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1089.952434][   T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1089.997415][ T5235] usb 2-1: Using ep0 maxpacket: 8
[ 1090.010471][ T5235] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1090.036403][ T5235] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1090.112478][T16919] chnl_net:caif_netlink_parms(): no params data found
[ 1090.113216][ T5235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1090.138257][ T5243] Bluetooth: hci5: command tx timeout
[ 1090.198535][ T5235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1090.259571][ T5235] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1090.355043][ T5235] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1090.375672][ T5235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.407134][ T5235] usb 2-1: Product: syz
[ 1090.418062][   T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.428525][ T5235] usb 2-1: Manufacturer: syz
[ 1090.433107][ T5235] usb 2-1: SerialNumber: syz
[ 1090.479003][ T5235] usb 2-1: config 0 descriptor??
[ 1090.658310][ T5235] rc_core: IR keymap rc-imon-rsc not found
[ 1090.694573][T16942] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1090.717575][ T5235] Registered IR keymap rc-empty
[ 1090.752949][ T5235] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1090.763576][T16945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1090.828446][ T5235] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33
[ 1090.913717][ T5235] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90
[ 1090.957759][T16945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1091.010114][   T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.047212][ T5235] usb 2-1: USB disconnect, device number 66
[ 1092.059695][   T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.217745][ T5247] Bluetooth: hci5: command tx timeout
[ 1092.260218][T16835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1092.279583][T16835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1092.295834][T16835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1092.309939][T16919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1092.317113][T16919] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1092.330009][T16835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1092.342659][T16835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1092.350457][T16835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1092.387966][T16919] bridge_slave_0: entered allmulticast mode
[ 1092.399726][T16919] bridge_slave_0: entered promiscuous mode
[ 1092.617695][T16835] Bluetooth: hci7: command 0x0406 tx timeout
[ 1092.782675][T16919] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1092.805109][T16919] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1092.821462][T16919] bridge_slave_1: entered allmulticast mode
[ 1092.838972][T16919] bridge_slave_1: entered promiscuous mode
[ 1093.096659][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2013'.
[ 1093.482624][T16919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1093.529038][T16919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1093.828654][T16919] team0: Port device team_slave_0 added
[ 1093.935880][T16919] team0: Port device team_slave_1 added
[ 1094.111954][T16919] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1094.147533][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1094.207404][T16919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1094.389323][T16919] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1094.445128][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1094.457803][ T5243] Bluetooth: hci4: command tx timeout
[ 1094.593346][T16919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1094.719165][   T53] bridge_slave_1: left allmulticast mode
[ 1094.736640][   T53] bridge_slave_1: left promiscuous mode
[ 1094.750319][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1094.773033][   T53] bridge_slave_0: left allmulticast mode
[ 1094.786175][   T53] bridge_slave_0: left promiscuous mode
[ 1094.804321][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1095.212525][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'.
[ 1096.085772][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1096.134166][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1096.156638][T17014] xt_TCPMSS: Only works on TCP SYN packets
[ 1096.170525][   T53] bond0 (unregistering): Released all slaves
[ 1096.371790][T16919] hsr_slave_0: entered promiscuous mode
[ 1096.401615][T16919] hsr_slave_1: entered promiscuous mode
[ 1096.435680][T16919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1096.446128][T16919] Cannot create hsr debugfs directory
[ 1096.503580][T16837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1096.538235][ T5243] Bluetooth: hci4: command tx timeout
[ 1096.563167][T16837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1096.787427][T16837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1097.224454][T16837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1097.516963][   T53] hsr_slave_0: left promiscuous mode
[ 1097.540283][   T53] hsr_slave_1: left promiscuous mode
[ 1097.568615][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1097.576094][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1097.609545][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1097.617008][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1097.693585][   T53] veth1_macvtap: left promiscuous mode
[ 1097.708912][   T53] veth0_macvtap: left promiscuous mode
[ 1097.714737][   T53] veth1_vlan: left promiscuous mode
[ 1097.727498][   T53] veth0_vlan: left promiscuous mode
[ 1098.625116][ T5243] Bluetooth: hci4: command tx timeout
[ 1100.001350][   T53] team0 (unregistering): Port device team_slave_1 removed
[ 1100.052731][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2023'.
[ 1100.380148][   T53] team0 (unregistering): Port device team_slave_0 removed
[ 1100.702032][ T5243] Bluetooth: hci4: command tx timeout
[ 1101.742461][ T5286] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[ 1101.978775][ T5286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64
[ 1102.000004][ T5286] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1102.083795][ T5286] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1102.107369][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1102.129340][ T5286] usb 2-1: SerialNumber: syz
[ 1102.175228][T17049] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1102.461480][T17053] xt_TCPMSS: Only works on TCP SYN packets
[ 1102.997560][T17060] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1103.071860][T16989] chnl_net:caif_netlink_parms(): no params data found
[ 1104.278051][T16989] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1104.305732][T16989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1104.336260][T16989] bridge_slave_0: entered allmulticast mode
[ 1104.372445][T16989] bridge_slave_0: entered promiscuous mode
[ 1104.413978][T16989] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1104.447579][T16989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1104.462300][ T5286] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[ 1104.470995][T16989] bridge_slave_1: entered allmulticast mode
[ 1104.495408][T16989] bridge_slave_1: entered promiscuous mode
[ 1104.528928][ T5286] usb 2-1: USB disconnect, device number 67
[ 1104.750285][T16989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1104.962067][T16989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1105.351725][   T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1105.590898][T16989] team0: Port device team_slave_0 added
[ 1106.052164][   T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1106.160834][T16989] team0: Port device team_slave_1 added
[ 1106.429733][   T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1106.626212][T16989] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1106.650623][T16989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1106.740550][T17104] FAULT_INJECTION: forcing a failure.
[ 1106.740550][T17104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1106.744056][T16989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1106.808032][T17104] CPU: 1 UID: 0 PID: 17104 Comm: syz.0.2032 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0
[ 1106.818848][T17104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1106.828927][T17104] Call Trace:
[ 1106.832222][T17104]  <TASK>
[ 1106.835159][T17104]  dump_stack_lvl+0x241/0x360
[ 1106.839851][T17104]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1106.845160][T17104]  ? __pfx__printk+0x10/0x10
[ 1106.849775][T17104]  ? __pfx_lock_release+0x10/0x10
[ 1106.854811][T17104]  should_fail_ex+0x3b0/0x4e0
[ 1106.859489][T17104]  _copy_from_user+0x2f/0xe0
[ 1106.864241][T17104]  cmsghdr_from_user_compat_to_kern+0x5b1/0x950
[ 1106.870485][T17104]  ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10
[ 1106.877246][T17104]  ____sys_sendmsg+0x18d/0x7d0
[ 1106.882013][T17104]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1106.887312][T17104]  __sys_sendmmsg+0x4af/0x740
[ 1106.891993][T17104]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1106.897193][T17104]  ? __pfx_lock_acquire+0x10/0x10
[ 1106.902223][T17104]  ? get_pid_task+0x23/0x1f0
[ 1106.906807][T17104]  ? __pfx_lock_release+0x10/0x10
[ 1106.911840][T17104]  ? kstrtouint_from_user+0x128/0x190
[ 1106.917213][T17104]  ? __pfx_lock_release+0x10/0x10
[ 1106.922237][T17104]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 1106.927951][T17104]  ? __fget_files+0x3f6/0x470
[ 1106.932619][T17104]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1106.938666][T17104]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1106.944985][T17104]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 1106.950514][T17104]  __do_fast_syscall_32+0xb4/0x110
[ 1106.955610][T17104]  ? exc_page_fault+0x590/0x8c0
[ 1106.960472][T17104]  do_fast_syscall_32+0x34/0x80
[ 1106.965305][T17104]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1106.971716][T17104] RIP: 0023:0xf73bd579
[ 1106.975766][T17104] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1106.995364][T17104] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 1107.003778][T17104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003cc0
[ 1107.011744][T17104] RDX: 0000000000000001 RSI: 0000000000008000 RDI: 0000000000000000
[ 1107.019718][T17104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1107.027794][T17104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1107.035839][T17104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1107.043805][T17104]  </TASK>
[ 1107.129059][T16837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1107.301789][   T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.420592][T16989] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1107.457509][T16989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1107.539367][T16989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1107.768969][T16837] 8021q: adding VLAN 0 to HW filter on device team0
[ 1107.814256][T16989] hsr_slave_0: entered promiscuous mode
[ 1107.878026][T16989] hsr_slave_1: entered promiscuous mode
[ 1107.884619][T16989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1107.897814][T16989] Cannot create hsr debugfs directory
[ 1107.958360][T16919] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1107.989680][T16919] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1108.074829][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1108.081969][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1108.128119][T16919] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1108.178348][T16919] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1108.460448][T15012] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.467659][T15012] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1108.686983][   T53] bridge_slave_1: left allmulticast mode
[ 1108.692769][   T53] bridge_slave_1: left promiscuous mode
[ 1108.727748][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.778442][   T53] bridge_slave_0: left allmulticast mode
[ 1108.784145][   T53] bridge_slave_0: left promiscuous mode
[ 1108.826475][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1110.351049][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1110.395605][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1110.439710][   T53] bond0 (unregistering): Released all slaves
[ 1110.525059][T16837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1111.549992][   T53] hsr_slave_0: left promiscuous mode
[ 1111.607649][   T53] hsr_slave_1: left promiscuous mode
[ 1111.617822][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1111.625296][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1111.687375][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1111.695490][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1111.795014][   T53] veth1_macvtap: left promiscuous mode
[ 1111.827406][   T53] veth0_macvtap: left promiscuous mode
[ 1111.833105][   T53] veth1_vlan: left promiscuous mode
[ 1111.877631][   T53] veth0_vlan: left promiscuous mode
[ 1113.504009][   T53] team0 (unregistering): Port device team_slave_1 removed
[ 1113.652263][   T53] team0 (unregistering): Port device team_slave_0 removed
[ 1115.192401][T16837] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1115.258863][T16919] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1115.398413][T16837] veth0_vlan: entered promiscuous mode
[ 1115.476183][T16837] veth1_vlan: entered promiscuous mode
[ 1115.600305][T16919] 8021q: adding VLAN 0 to HW filter on device team0
[ 1115.726858][T16989] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1115.762143][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1115.769337][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1115.805951][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1115.813159][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1115.855117][T16989] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1115.879137][T16989] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1115.938727][T16989] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1116.007544][T16837] veth0_macvtap: entered promiscuous mode
[ 1116.080410][T16837] veth1_macvtap: entered promiscuous mode
[ 1116.142093][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.148617][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.169886][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1116.207251][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.234021][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1116.267676][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.287409][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1116.325001][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.347359][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1116.369939][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.389146][T16837] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1116.445713][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.480244][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.517477][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.548123][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.575102][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.597509][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.627509][T16837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.647482][T16837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.668894][T16837] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1116.707706][T16837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.727400][T16837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.736142][T16837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.757488][T16837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.895528][T16919] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1117.022384][T16989] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1117.120818][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1117.146524][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1117.212725][T16989] 8021q: adding VLAN 0 to HW filter on device team0
[ 1117.243763][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1117.250975][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1117.311990][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.319191][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1117.328560][ T7655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1117.336408][ T7655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1117.583835][T17181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'.
[ 1117.590971][T16919] veth0_vlan: entered promiscuous mode
[ 1117.635464][T16919] veth1_vlan: entered promiscuous mode
[ 1117.741771][T16989] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1117.895350][T16919] veth0_macvtap: entered promiscuous mode
[ 1117.944032][T16919] veth1_macvtap: entered promiscuous mode
[ 1117.972061][T16989] veth0_vlan: entered promiscuous mode
[ 1118.025359][T16989] veth1_vlan: entered promiscuous mode
[ 1118.060744][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.083872][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.104798][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.126445][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.155645][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.185515][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.206240][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.228616][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.255542][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.274411][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.298589][T16919] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1118.349510][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.374755][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.396772][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.417047][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.447587][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.487388][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.497255][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.527404][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.547939][T16919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.580035][T16919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.599041][T16919] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1118.635566][T16919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.667510][T16919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.676257][T16919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.697454][T16919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.744319][T16989] veth0_macvtap: entered promiscuous mode
[ 1118.764888][T16989] veth1_macvtap: entered promiscuous mode
[ 1118.930201][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1118.977358][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.987220][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.044006][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.077536][T17188] vivid-003: disconnect
[ 1119.097124][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.109081][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.119643][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.143543][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.155718][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.181581][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.193411][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.212952][T17192] xt_TCPMSS: Only works on TCP SYN packets
[ 1119.227084][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.240552][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'.
[ 1119.288196][T16989] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1119.357213][T17185] vivid-003: reconnect
[ 1119.360041][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.394720][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.439447][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.464981][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.499063][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.527730][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.562648][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.607546][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.638126][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.662213][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.684029][T16989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.715139][T16989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.752899][T16989] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1119.787245][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.790698][T16989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1119.825505][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.855294][T16989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1119.885575][T16989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1119.914016][T16989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1120.150188][T15012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1120.230087][T15012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1120.248314][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2036'.
[ 1120.461331][ T7655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1120.505997][ T7655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1120.606178][T17213] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1120.721944][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1120.765163][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1121.119309][T14030] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1121.272022][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2039'.
[ 1121.338396][T14030] usb 5-1: Using ep0 maxpacket: 16
[ 1121.364390][T14030] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1121.409384][T14030] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1121.492167][T14030] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1121.551181][T14030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.600804][T14030] usb 5-1: config 0 descriptor??
[ 1121.648466][T14030] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1122.284023][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1122.417241][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1123.637411][   T47] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1123.707959][T17254] netlink: 'syz.3.2050': attribute type 1 has an invalid length.
[ 1123.855200][ T5314] usb 5-1: USB disconnect, device number 57
[ 1123.867418][   T47] usb 2-1: Using ep0 maxpacket: 8
[ 1123.881392][   T47] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1123.930260][   T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1123.976369][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1123.993198][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1124.020031][   T47] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1124.036185][   T47] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1124.047395][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1124.067411][   T47] usb 2-1: Product: syz
[ 1124.071637][   T47] usb 2-1: Manufacturer: syz
[ 1124.076349][   T47] usb 2-1: SerialNumber: syz
[ 1124.115372][   T47] usb 2-1: config 0 descriptor??
[ 1124.227373][   T47] rc_core: IR keymap rc-imon-rsc not found
[ 1124.241966][   T47] Registered IR keymap rc-empty
[ 1124.259224][   T47] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1124.290372][   T47] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input34
[ 1124.307748][   T47] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90
[ 1124.339491][T17238] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1124.401444][T17238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1124.455308][T17238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1124.469482][    T8] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1124.487432][    T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1124.489044][ T5314] usb 2-1: USB disconnect, device number 68
[ 1124.679657][    T9] usb 4-1: device descriptor read/64, error -71
[ 1124.736264][    T8] usb 5-1: config index 0 descriptor too short (expected 12336, got 72)
[ 1124.755281][    T8] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[ 1124.790908][    T8] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[ 1124.807337][    T8] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[ 1124.840303][    T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1124.865545][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1124.884927][    T8] usb 5-1: Product: syz
[ 1124.898341][    T8] usb 5-1: Manufacturer: syz
[ 1124.903828][    T8] usb 5-1: SerialNumber: syz
[ 1124.947611][    T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1125.118798][    T9] usb 4-1: device descriptor read/64, error -71
[ 1125.136662][T17261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1125.257722][    T9] usb usb4-port1: attempt power cycle
[ 1125.297737][T17261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1125.398846][T17274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1125.437494][T17263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1125.531521][T17274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1125.570897][T17261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1125.586247][T17280] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1125.619005][T17263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1125.645215][T17261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1125.674027][    T8] usb 5-1: USB disconnect, device number 58
[ 1125.710568][    T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1125.760368][    T9] usb 4-1: device descriptor read/8, error -71
[ 1125.807387][ T5314] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1126.010481][ T5314] usb 2-1: Using ep0 maxpacket: 16
[ 1126.021558][ T5314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1126.047915][ T5314] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1126.058873][    T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1126.084725][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.111045][    T9] usb 4-1: device descriptor read/8, error -71
[ 1126.119197][ T5314] usb 2-1: config 0 descriptor??
[ 1126.250112][    T9] usb usb4-port1: unable to enumerate USB device
[ 1126.257438][    T8] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1126.344760][T17278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1126.373363][T17278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1126.462066][    T8] usb 5-1: config index 0 descriptor too short (expected 12336, got 72)
[ 1126.480687][    T8] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[ 1126.511129][    T8] usb 5-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[ 1126.538424][    T8] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[ 1126.559882][    T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1126.577186][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1126.591284][    T8] usb 5-1: Product: syz
[ 1126.599430][    T8] usb 5-1: Manufacturer: syz
[ 1126.607879][    T8] usb 5-1: SerialNumber: syz
[ 1126.848369][    T8] usb 5-1: USB disconnect, device number 59
[ 1127.048198][T17278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1127.078305][T17278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1127.126312][ T5314] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1
[ 1127.202026][T17295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2061'.
[ 1127.211361][ T5314] hid-generic 0003:0158:0100.0006: unexpected long global item
[ 1127.260681][ T5314] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22
[ 1127.647511][    T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1127.859367][ T5289] usb 2-1: USB disconnect, device number 69
[ 1127.870367][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1127.916617][    T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1127.936840][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1127.951870][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.964273][T17297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1127.999703][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1128.293743][    T9] usb 4-1: USB disconnect, device number 70
[ 1128.695725][T17325] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1130.271682][    T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1130.494219][    T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1130.514093][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[ 1130.560708][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1130.572313][T17351] bond_slave_0: entered promiscuous mode
[ 1130.578110][T17351] bond_slave_1: entered promiscuous mode
[ 1130.599130][T17351] bond_slave_0: left promiscuous mode
[ 1130.605211][T17351] bond_slave_1: left promiscuous mode
[ 1130.611937][    T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1130.627369][    T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1130.655121][    T9] usb 3-1: Manufacturer: syz
[ 1130.671980][    T9] usb 3-1: config 0 descriptor??
[ 1130.688124][    T9] igorplugusb 3-1:0.0: endpoint incorrect
[ 1130.960047][    T9] usb 3-1: USB disconnect, device number 66
[ 1132.448749][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2088'.
[ 1132.545398][T17392] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1133.037439][ T1191] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[ 1133.241068][ T1191] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1133.250161][ T1191] usb 2-1: not running at top speed; connect to a high speed hub
[ 1133.269718][ T1191] usb 2-1: config 1 interface 0 altsetting 49 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1133.304085][ T1191] usb 2-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1133.367490][ T1191] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1133.375319][ T1191] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40
[ 1133.375354][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.375375][ T1191] usb 2-1: Product: syz
[ 1133.375391][ T1191] usb 2-1: Manufacturer: syz
[ 1133.375407][ T1191] usb 2-1: SerialNumber: syz
[ 1133.378112][T17375] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1133.639100][T17375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1133.646634][T17375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1133.672962][ T1191] usbhid 2-1:1.0: can't add hid device: -71
[ 1133.713609][T14030] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1133.757533][ T1191] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[ 1133.771436][ T1191] usb 2-1: USB disconnect, device number 70
[ 1133.909469][T14030] usb 5-1: Using ep0 maxpacket: 8
[ 1133.923521][T14030] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1133.923554][T14030] usb 5-1: config 0 has no interface number 0
[ 1133.923597][T14030] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1133.923640][T14030] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1133.923665][T14030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.928025][T14030] usb 5-1: config 0 descriptor??
[ 1133.946441][T14030] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1134.197772][T14030] usb 5-1: USB disconnect, device number 60
[ 1134.197866][    C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1134.202509][T14030] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected
[ 1135.827503][ T5314] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1135.990695][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'.
[ 1136.039965][ T5314] usb 3-1: Using ep0 maxpacket: 8
[ 1136.057065][ T5314] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1136.086925][ T5314] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1136.169434][ T5314] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1136.199276][ T5314] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1136.242458][ T5314] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1136.251758][T17448] pim6reg: entered allmulticast mode
[ 1136.277446][ T5314] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1136.323044][T17448] pim6reg: left allmulticast mode
[ 1136.332159][ T5314] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1136.361169][ T5314] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1136.424239][ T5314] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1136.455143][ T5314] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1136.489078][   T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2
[ 1136.498925][ T5314] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1136.564761][ T5314] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1136.607970][ T5314] usb 3-1: string descriptor 0 read error: -22
[ 1136.633704][ T5314] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1136.664289][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.695986][T17458] sctp: [Deprecated]: syz.4.2109 (pid 17458) Use of int in maxseg socket option.
[ 1136.695986][T17458] Use struct sctp_assoc_value instead
[ 1136.707727][ T5314] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1136.910101][ T5314] usb 3-1: USB disconnect, device number 67
[ 1136.959318][T17467] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1137.203545][    T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1137.428535][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1137.442341][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 1137.470204][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1137.503245][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1137.553298][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1137.576931][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1137.609366][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 1137.631934][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1137.650241][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1137.711015][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1137.777056][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1137.837330][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 1137.848898][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1137.878923][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1137.934350][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1137.962067][T15012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1137.986215][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1138.030891][    T9] usb 4-1: string descriptor 0 read error: -22
[ 1138.050049][    T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1138.078821][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1138.127711][    T9] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1138.301966][T15012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.584815][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'.
[ 1138.649511][T15012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.885050][ T5286] usb 4-1: USB disconnect, device number 71
[ 1139.103276][T15012] batman_adv: batadv0: Removing interface: macvtap1
[ 1139.150391][T16835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1139.161480][T16835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1139.171678][T16835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1139.184478][T16835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1139.198048][T16835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1139.205448][T16835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1139.287934][T15012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1139.771369][T17499] sctp: [Deprecated]: syz.3.2121 (pid 17499) Use of int in max_burst socket option.
[ 1139.771369][T17499] Use struct sctp_assoc_value instead
[ 1140.031723][T17489] chnl_net:caif_netlink_parms(): no params data found
[ 1140.096881][T15012] bridge_slave_1: left allmulticast mode
[ 1140.123220][T15012] bridge_slave_1: left promiscuous mode
[ 1140.144433][T15012] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1140.534856][T15012] bridge_slave_0: left allmulticast mode
[ 1140.547425][T15012] bridge_slave_0: left promiscuous mode
[ 1140.553624][T15012] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.834775][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'.
[ 1141.257502][T16835] Bluetooth: hci1: command tx timeout
[ 1141.538497][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1141.561347][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1141.570261][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1141.638125][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1141.668886][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1141.677498][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1141.945353][T17520] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1142.165415][T17528] program syz.3.2128 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1143.353884][ T5243] Bluetooth: hci1: command tx timeout
[ 1143.820472][ T5243] Bluetooth: hci4: command tx timeout
[ 1143.957459][ T5286] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[ 1143.966330][T15012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1144.011728][T15012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1144.044382][T15012] bond0 (unregistering): Released all slaves
[ 1144.171614][ T5286] usb 5-1: config 0 has an invalid interface number: 112 but max is 0
[ 1144.216524][ T5286] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1144.249750][ T5286] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1144.286098][ T5286] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 1144.307334][ T5286] usb 5-1: config 0 has no interface number 0
[ 1144.313576][ T5286] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[ 1144.351105][ T5286] usb 5-1: config 0 interface 112 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1144.406055][ T5286] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[ 1144.447395][ T5286] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 1144.517395][ T5286] usb 5-1: config 0 interface 112 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[ 1144.565720][ T5286] usb 5-1: config 0 interface 112 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE
[ 1144.603967][ T5286] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1144.634803][ T5286] usb 5-1: config 0 interface 112 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1144.672902][ T5286] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64
[ 1144.705560][ T5286] usb 5-1: config 0 interface 112 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[ 1144.736275][ T5286] usb 5-1: config 0 interface 112 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[ 1144.769980][T17557] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 1144.772595][ T5286] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[ 1144.776622][T17557] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1144.817519][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.835801][ T5286] usb 5-1: Product: syz
[ 1144.845938][ T5286] usb 5-1: Manufacturer: syz
[ 1144.850958][ T5286] usb 5-1: SerialNumber: syz
[ 1144.859212][ T5286] usb 5-1: config 0 descriptor??
[ 1144.866307][T17557] vhci_hcd vhci_hcd.0: Device attached
[ 1144.888968][T17539] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1144.946707][T17539] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1144.986867][T17489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.006253][T17539] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1145.024573][T17489] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.055252][T17489] bridge_slave_0: entered allmulticast mode
[ 1145.066476][T17568] xt_TCPMSS: Only works on TCP SYN packets
[ 1145.078794][T17539] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1145.100238][T17489] bridge_slave_0: entered promiscuous mode
[ 1145.197766][    T9] usb 16-1: SetAddress Request (2) to port 0
[ 1145.216137][ T5286] mvusb_mdio 5-1:0.112: probe with driver mvusb_mdio failed with error -5
[ 1145.216309][    T9] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1145.417414][ T5243] Bluetooth: hci1: command tx timeout
[ 1145.439128][T17489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.464625][T17489] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.493117][T17489] bridge_slave_1: entered allmulticast mode
[ 1145.503205][T17489] bridge_slave_1: entered promiscuous mode
[ 1145.525576][T17560] vhci_hcd: connection reset by peer
[ 1145.534594][ T3021] vhci_hcd: stop threads
[ 1145.555162][ T3021] vhci_hcd: release socket
[ 1145.562544][ T3021] vhci_hcd: disconnect device
[ 1145.655323][T17489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1145.713310][T17539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1145.769407][T17539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1145.789431][T15012] hsr_slave_0: left promiscuous mode
[ 1145.809377][T15012] hsr_slave_1: left promiscuous mode
[ 1145.819536][T15012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1145.837884][T15012] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1145.868209][T15012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1145.892398][ T5235] usb 5-1: USB disconnect, device number 61
[ 1145.897567][ T5243] Bluetooth: hci4: command tx timeout
[ 1145.899049][T15012] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1146.055272][T15012] veth1_macvtap: left promiscuous mode
[ 1146.086645][T15012] veth0_macvtap: left promiscuous mode
[ 1146.129092][T15012] veth1_vlan: left promiscuous mode
[ 1146.134565][T15012] veth0_vlan: left promiscuous mode
[ 1146.305488][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'.
[ 1147.086165][T17588] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1147.499582][ T5243] Bluetooth: hci1: command tx timeout
[ 1147.977635][ T5243] Bluetooth: hci4: command tx timeout
[ 1148.907346][T15012] team0 (unregistering): Port device team_slave_1 removed
[ 1148.947716][ T5289] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1148.948964][ T5243] Bluetooth: hci6: command 0x0406 tx timeout
[ 1149.141047][T15012] team0 (unregistering): Port device team_slave_0 removed
[ 1149.185797][ T5289] usb 5-1: Using ep0 maxpacket: 8
[ 1149.197233][ T5289] usb 5-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d
[ 1149.227396][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1149.245918][ T5289] usb 5-1: Product: syz
[ 1149.254028][ T5289] usb 5-1: Manufacturer: syz
[ 1149.264519][ T5289] usb 5-1: SerialNumber: syz
[ 1149.299314][ T5289] usb 5-1: config 0 descriptor??
[ 1149.334779][ T5289] gspca_main: sonixj-2.14.0 probing 0c45:6128
[ 1150.063675][T16835] Bluetooth: hci4: command tx timeout
[ 1150.378392][    T9] usb 16-1: device descriptor read/8, error -110
[ 1150.426627][ T5289] gspca_sonixj: reg_w err -71
[ 1150.434169][ T5289] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[ 1150.466303][ T5289] usb 5-1: USB disconnect, device number 62
[ 1150.820123][    T9] usb usb16-port1: attempt power cycle
[ 1151.149060][T17489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1151.244330][T16835] Bluetooth: hci5: link tx timeout
[ 1151.250042][T16835] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1151.452233][T17489] team0: Port device team_slave_0 added
[ 1151.469621][T17489] team0: Port device team_slave_1 added
[ 1151.489166][    T9] usb usb16-port1: unable to enumerate USB device
[ 1151.776555][T17489] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1151.807442][T17489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1151.867324][T17489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1151.905238][T17489] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1151.927329][T17489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1151.997317][T17489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1152.201750][T17521] chnl_net:caif_netlink_parms(): no params data found
[ 1152.557400][ T5289] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1152.756646][ T5289] usb 5-1: Using ep0 maxpacket: 8
[ 1152.793415][ T5289] usb 5-1: config index 0 descriptor too short (expected 64902, got 95)
[ 1152.832454][ T5289] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1152.908000][ T5289] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1152.927954][ T5289] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1152.988913][T17489] hsr_slave_0: entered promiscuous mode
[ 1153.006428][ T5289] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1153.018244][T17489] hsr_slave_1: entered promiscuous mode
[ 1153.036042][T17489] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1153.037298][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.047596][T17489] Cannot create hsr debugfs directory
[ 1153.072949][ T5289] usb 5-1: Product: syz
[ 1153.077182][ T5289] usb 5-1: Manufacturer: syz
[ 1153.126279][ T5289] usb 5-1: SerialNumber: syz
[ 1153.337471][T16835] Bluetooth: hci5: command 0x0406 tx timeout
[ 1153.382422][T17521] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1153.389975][T17521] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1153.397228][T17521] bridge_slave_0: entered allmulticast mode
[ 1153.416051][T17521] bridge_slave_0: entered promiscuous mode
[ 1153.426447][T17521] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1153.434489][T17521] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1153.442399][T17521] bridge_slave_1: entered allmulticast mode
[ 1153.450350][T17521] bridge_slave_1: entered promiscuous mode
[ 1153.673721][T17521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1153.696282][ T5289] usb 5-1: 0:2 : does not exist
[ 1153.754235][T17521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1154.039475][T15012] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.311194][T17649] fuse: Bad value for 'fd'
[ 1154.441727][T15012] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.553743][T17521] team0: Port device team_slave_0 added
[ 1154.610388][T17521] team0: Port device team_slave_1 added
[ 1154.663714][T17649] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2151'.
[ 1154.811804][T15012] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.930796][T17661] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[ 1155.254662][   T47] usb 5-1: USB disconnect, device number 63
[ 1155.449997][T15012] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1155.598871][T17521] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1155.605875][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1155.777332][T17521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1155.807530][T17676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2154'.
[ 1155.829722][T17521] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1155.836685][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1155.978388][T17521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1156.292677][T17677] veth1_macvtap: left promiscuous mode
[ 1156.305793][T17683] FAULT_INJECTION: forcing a failure.
[ 1156.305793][T17683] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1156.338745][T17677] macsec0: entered promiscuous mode
[ 1156.347377][T17677] macsec0: entered allmulticast mode
[ 1156.403422][T17683] CPU: 1 UID: 0 PID: 17683 Comm: syz.0.2156 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0
[ 1156.414236][T17683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1156.424313][T17683] Call Trace:
[ 1156.427620][T17683]  <TASK>
[ 1156.430578][T17683]  dump_stack_lvl+0x241/0x360
[ 1156.435286][T17683]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1156.440522][T17683]  ? __pfx__printk+0x10/0x10
[ 1156.445141][T17683]  ? __pfx_lock_release+0x10/0x10
[ 1156.450295][T17683]  should_fail_ex+0x3b0/0x4e0
[ 1156.455092][T17683]  _copy_from_user+0x2f/0xe0
[ 1156.459712][T17683]  cmsghdr_from_user_compat_to_kern+0x3e6/0x950
[ 1156.465984][T17683]  ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10
[ 1156.472778][T17683]  ? __might_fault+0xaa/0x120
[ 1156.477501][T17683]  ____sys_sendmsg+0x18d/0x7d0
[ 1156.482306][T17683]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1156.487638][T17683]  __sys_sendmmsg+0x4af/0x740
[ 1156.492364][T17683]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1156.497639][T17683]  ? __pfx_lock_acquire+0x10/0x10
[ 1156.502788][T17683]  ? get_pid_task+0x23/0x1f0
[ 1156.507405][T17683]  ? __pfx_lock_release+0x10/0x10
[ 1156.512459][T17683]  ? kstrtouint_from_user+0x128/0x190
[ 1156.517963][T17683]  ? __pfx_lock_release+0x10/0x10
[ 1156.523120][T17683]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 1156.528799][T17683]  ? __fget_files+0x3f6/0x470
[ 1156.533779][T17683]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1156.539977][T17683]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1156.546347][T17683]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 1156.551927][T17683]  __do_fast_syscall_32+0xb4/0x110
[ 1156.557155][T17683]  ? exc_page_fault+0x590/0x8c0
[ 1156.562048][T17683]  do_fast_syscall_32+0x34/0x80
[ 1156.566933][T17683]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1156.573294][T17683] RIP: 0023:0xf73bd579
[ 1156.577381][T17683] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1156.597179][T17683] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 1156.605696][T17683] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040
[ 1156.613766][T17683] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 1156.621849][T17683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1156.629945][T17683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1156.637943][T17683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1156.645948][T17683]  </TASK>
[ 1156.984239][T15012] bridge_slave_1: left allmulticast mode
[ 1157.001744][T15012] bridge_slave_1: left promiscuous mode
[ 1157.025637][T15012] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1157.063167][T15012] bridge_slave_0: left allmulticast mode
[ 1157.076060][T15012] bridge_slave_0: left promiscuous mode
[ 1157.084221][T15012] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1157.187468][ T5314] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1157.377635][ T5314] usb 4-1: Using ep0 maxpacket: 32
[ 1157.389845][ T5314] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1157.413827][ T5314] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1157.455023][ T5314] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1157.476259][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1157.504429][ T5314] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1157.544852][ T5314] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1157.595604][ T5314] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1157.620896][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1157.656008][ T5314] usb 4-1: config 0 descriptor??
[ 1157.675264][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'.
[ 1157.883714][ T5314] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1157.922259][ T5314] usb 4-1: USB disconnect, device number 72
[ 1157.940087][ T5314] usblp0: removed
[ 1158.527592][ T5289] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1158.717324][ T5289] usb 4-1: Using ep0 maxpacket: 32
[ 1158.749291][ T5289] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1158.757738][ T5289] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1158.766349][ T5289] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1158.817357][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1158.827167][ T5289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1158.877335][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1158.917344][ T5289] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1158.926462][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.959437][ T5289] usb 4-1: config 0 descriptor??
[ 1159.210494][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1159.227723][ T5289] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1159.247798][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1159.277189][    C1] usblp0: nonzero read bulk status received: -71
[ 1159.346517][ T5286] usb 4-1: USB disconnect, device number 73
[ 1159.384793][T17687] ==================================================================
[ 1159.393072][T17687] BUG: KASAN: double-free in kref_put+0x4ab/0x7c0
[ 1159.399511][T17687] Free of addr ffff888029261a80 by task syz.3.2157/17687
[ 1159.406546][T17687] 
[ 1159.408872][T17687] CPU: 1 UID: 0 PID: 17687 Comm: syz.3.2157 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0
[ 1159.419640][T17687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1159.429702][T17687] Call Trace:
[ 1159.432985][T17687]  <TASK>
[ 1159.435917][T17687]  dump_stack_lvl+0x241/0x360
[ 1159.440614][T17687]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1159.445831][T17687]  ? __pfx__printk+0x10/0x10
[ 1159.450443][T17687]  ? _printk+0xd5/0x120
[ 1159.454613][T17687]  ? __virt_addr_valid+0x183/0x530
[ 1159.459735][T17687]  ? __virt_addr_valid+0x183/0x530
[ 1159.464951][T17687]  print_report+0x169/0x550
[ 1159.469476][T17687]  ? __virt_addr_valid+0x183/0x530
[ 1159.474602][T17687]  ? __virt_addr_valid+0x183/0x530
[ 1159.479810][T17687]  ? __virt_addr_valid+0x45f/0x530
[ 1159.484932][T17687]  ? __phys_addr+0xba/0x170
[ 1159.489450][T17687]  ? kref_put+0x4ab/0x7c0
[ 1159.493795][T17687]  kasan_report_invalid_free+0x11a/0x140
[ 1159.499470][T17687]  ? kref_put+0x4ab/0x7c0
[ 1159.503843][T17687]  ? kref_put+0x4ab/0x7c0
[ 1159.508278][T17687]  poison_slab_object+0xf4/0x150
[ 1159.513245][T17687]  __kasan_slab_free+0x37/0x60
[ 1159.518035][T17687]  ? kref_put+0x4ab/0x7c0
[ 1159.522383][T17687]  kfree+0x149/0x360
[ 1159.526301][T17687]  kref_put+0x4ab/0x7c0
[ 1159.530487][T17687]  raw_release+0x138/0x1e0
[ 1159.534928][T17687]  ? __pfx_raw_release+0x10/0x10
[ 1159.539885][T17687]  __fput+0x24a/0x8a0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1159.543903][T17687]  __ia32_sys_close+0x7f/0x110
[ 1159.548684][T17687]  __do_fast_syscall_32+0xb4/0x110
[ 1159.553816][T17687]  ? exc_page_fault+0x590/0x8c0
[ 1159.558684][T17687]  do_fast_syscall_32+0x34/0x80
[ 1159.563557][T17687]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1159.569926][T17687] RIP: 0023:0xf741d579
[ 1159.574017][T17687] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1159.593746][T17687] RSP: 002b:00000000f56f5530 EFLAGS: 00000206 ORIG_RAX: 0000000000000006
[ 1159.602185][T17687] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f56f5b40
[ 1159.610316][T17687] RDX: 0000000000000000 RSI: 00000000f740fff4 RDI: 0000000000000000
[ 1159.618309][T17687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1159.626289][T17687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1159.634363][T17687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1159.642367][T17687]  </TASK>
[ 1159.645396][T17687] 
[ 1159.647719][T17687] Allocated by task 17699:
[ 1159.652132][T17687]  kasan_save_track+0x3f/0x80
[ 1159.656816][T17687]  __kasan_kmalloc+0x98/0xb0
[ 1159.661413][T17687]  __kmalloc_node_track_caller_noprof+0x225/0x440
[ 1159.667836][T17687]  memdup_user+0x2b/0xc0
[ 1159.672088][T17687]  raw_ioctl+0xd0f/0x3cd0
[ 1159.676431][T17687]  __se_compat_sys_ioctl+0x51c/0xca0
[ 1159.681731][T17687]  __do_fast_syscall_32+0xb4/0x110
[ 1159.686933][T17687]  do_fast_syscall_32+0x34/0x80
[ 1159.689725][ T5289] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1159.691774][T17687]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1159.705695][T17687] 
[ 1159.708020][T17687] Freed by task 17687:
[ 1159.712084][T17687]  kasan_save_track+0x3f/0x80
[ 1159.716771][T17687]  kasan_save_free_info+0x40/0x50
[ 1159.721817][T17687]  poison_slab_object+0xe0/0x150
[ 1159.726772][T17687]  __kasan_slab_free+0x37/0x60
[ 1159.731552][T17687]  kfree+0x149/0x360
[ 1159.735459][T17687]  kref_put+0x4ab/0x7c0
[ 1159.739625][T17687]  raw_release+0x138/0x1e0
[ 1159.744055][T17687]  __fput+0x24a/0x8a0
[ 1159.748046][T17687]  __ia32_sys_close+0x7f/0x110
[ 1159.752849][T17687]  __do_fast_syscall_32+0xb4/0x110
[ 1159.757976][T17687]  do_fast_syscall_32+0x34/0x80
[ 1159.762835][T17687]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1159.769168][T17687] 
[ 1159.771490][T17687] The buggy address belongs to the object at ffff888029261a80
[ 1159.771490][T17687]  which belongs to the cache kmalloc-16 of size 16
[ 1159.785423][T17687] The buggy address is located 0 bytes inside of
[ 1159.785423][T17687]  16-byte region [ffff888029261a80, ffff888029261a90)
[ 1159.798538][T17687] 
[ 1159.800865][T17687] The buggy address belongs to the physical page:
[ 1159.807288][T17687] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29261
[ 1159.816140][T17687] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1159.823264][T17687] page_type: 0xfdffffff(slab)
[ 1159.827961][T17687] raw: 00fff00000000000 ffff88801ac41640 dead000000000100 dead000000000122
[ 1159.836549][T17687] raw: 0000000000000000 0000000000800080 00000001fdffffff 0000000000000000
[ 1159.845142][T17687] page dumped because: kasan: bad access detected
[ 1159.851597][T17687] page_owner tracks the page as allocated
[ 1159.857365][T17687] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 14166, tgid 14166 (syz-executor), ts 924419807140, free_ts 924419384848
[ 1159.878735][T17687]  post_alloc_hook+0x1f3/0x230
[ 1159.883510][T17687]  get_page_from_freelist+0x2e4c/0x2f10
[ 1159.889077][T17687]  __alloc_pages_noprof+0x256/0x6c0
[ 1159.894300][T17687]  alloc_slab_page+0x5f/0x120
[ 1159.899080][T17687]  allocate_slab+0x5a/0x2f0
[ 1159.903683][T17687]  ___slab_alloc+0xcd1/0x14b0
[ 1159.908366][T17687]  __slab_alloc+0x58/0xa0
[ 1159.912702][T17687]  __kmalloc_node_noprof+0x286/0x440
[ 1159.917991][T17687]  __kvmalloc_node_noprof+0x72/0x190
[ 1159.923299][T17687]  xt_replace_table+0x1a2/0x780
[ 1159.928167][T17687]  __do_replace+0x1ae/0xa50
[ 1159.932724][T17687]  do_ip6t_set_ctl+0xd28/0x1270
[ 1159.937597][T17687]  nf_setsockopt+0x295/0x2c0
[ 1159.942213][T17687]  do_sock_setsockopt+0x3af/0x720
[ 1159.947248][T17687]  __sys_setsockopt+0x1ae/0x250
[ 1159.952115][T17687]  __se_compat_sys_socketcall+0x85a/0x1430
[ 1159.958024][T17687] page last free pid 14166 tgid 14166 stack trace:
[ 1159.964521][T17687]  free_unref_page+0xd22/0xea0
[ 1159.969299][T17687]  vfree+0x186/0x2e0
[ 1159.973205][T17687]  compat_copy_entries_to_user+0x5b3/0x680
[ 1159.979044][T17687]  do_ip6t_get_ctl+0xe48/0x1820
[ 1159.983902][T17687]  nf_getsockopt+0x299/0x2c0
[ 1159.988593][T17687]  ipv6_getsockopt+0x263/0x380
[ 1159.993366][T17687]  tcp_getsockopt+0x163/0x1c0
[ 1159.998050][T17687]  do_sock_getsockopt+0x3c4/0x7e0
[ 1160.003084][T17687]  __sys_getsockopt+0x271/0x330
[ 1160.007943][T17687]  __se_compat_sys_socketcall+0x349/0x1430
[ 1160.013763][T17687]  __do_fast_syscall_32+0xb4/0x110
[ 1160.018890][T17687]  do_fast_syscall_32+0x34/0x80
[ 1160.023746][T17687]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1160.030098][T17687] 
[ 1160.032431][T17687] Memory state around the buggy address:
[ 1160.038151][T17687]  ffff888029261980: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[ 1160.046216][T17687]  ffff888029261a00: 00 05 fc fc fa fb fc fc fa fb fc fc 00 01 fc fc
[ 1160.054374][T17687] >ffff888029261a80: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc
[ 1160.062435][T17687]                    ^
[ 1160.066504][T17687]  ffff888029261b00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[ 1160.074574][T17687]  ffff888029261b80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[ 1160.082634][T17687] ==================================================================
[ 1160.114897][T17687] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1160.122179][T17687] CPU: 1 UID: 0 PID: 17687 Comm: syz.3.2157 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0
[ 1160.132966][T17687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1160.143045][T17687] Call Trace:
[ 1160.146341][T17687]  <TASK>
[ 1160.149289][T17687]  dump_stack_lvl+0x241/0x360
[ 1160.153981][T17687]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1160.159199][T17687]  ? __pfx__printk+0x10/0x10
[ 1160.163803][T17687]  ? preempt_schedule+0xe1/0xf0
[ 1160.168675][T17687]  ? vscnprintf+0x5d/0x90
[ 1160.173113][T17687]  panic+0x349/0x860
[ 1160.177206][T17687]  ? check_panic_on_warn+0x21/0xb0
[ 1160.182363][T17687]  ? __pfx_panic+0x10/0x10
[ 1160.186793][T17687]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 1160.192800][T17687]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1160.199170][T17687]  ? print_report+0x502/0x550
[ 1160.203900][T17687]  check_panic_on_warn+0x86/0xb0
[ 1160.208878][T17687]  ? kref_put+0x4ab/0x7c0
[ 1160.213246][T17687]  end_report+0x77/0x160
[ 1160.217521][T17687]  kasan_report_invalid_free+0x12a/0x140
[ 1160.223262][T17687]  ? kref_put+0x4ab/0x7c0
[ 1160.227591][T17687]  ? kref_put+0x4ab/0x7c0
[ 1160.231920][T17687]  poison_slab_object+0xf4/0x150
[ 1160.237051][T17687]  __kasan_slab_free+0x37/0x60
[ 1160.241817][T17687]  ? kref_put+0x4ab/0x7c0
[ 1160.246143][T17687]  kfree+0x149/0x360
[ 1160.250038][T17687]  kref_put+0x4ab/0x7c0
[ 1160.254189][T17687]  raw_release+0x138/0x1e0
[ 1160.258693][T17687]  ? __pfx_raw_release+0x10/0x10
[ 1160.263750][T17687]  __fput+0x24a/0x8a0
[ 1160.267837][T17687]  __ia32_sys_close+0x7f/0x110
[ 1160.272608][T17687]  __do_fast_syscall_32+0xb4/0x110
[ 1160.277725][T17687]  ? exc_page_fault+0x590/0x8c0
[ 1160.282576][T17687]  do_fast_syscall_32+0x34/0x80
[ 1160.287423][T17687]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1160.293749][T17687] RIP: 0023:0xf741d579
[ 1160.297808][T17687] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1160.317679][T17687] RSP: 002b:00000000f56f5530 EFLAGS: 00000206 ORIG_RAX: 0000000000000006
[ 1160.326099][T17687] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f56f5b40
[ 1160.334082][T17687] RDX: 0000000000000000 RSI: 00000000f740fff4 RDI: 0000000000000000
[ 1160.342052][T17687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1160.350099][T17687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1160.358060][T17687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1160.366197][T17687]  </TASK>
[ 1160.369320][T17687] Kernel Offset: disabled
[ 1160.373679][T17687] Rebooting in 86400 seconds..