last executing test programs:

44.438273148s ago: executing program 0 (id=5377):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x30000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
getdents(r2, &(0x7f0000000080), 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x7, 0x0, &(0x7f0000000180))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000b00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1786dd6012000800103a00fe8000000000000000000000200000bbfe8000000000000000000000000000aa8b0090780200"/70], 0x0)
memfd_create(&(0x7f00000001c0)='\xff\xff\xff\xff\xff\xff', 0x1)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000140), 0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000002ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)

31.31332263s ago: executing program 1 (id=5392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1020, 0x3a, 0x300, 0x0, 0x0, {0x3}, [@generic="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", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x11, 0x0, 0x0, @str='\x88H'}]}]}, 0x1020}}, 0x0)

30.839664161s ago: executing program 1 (id=5393):
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x12, 0xffffffffffffffff, 0xde939000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a0584000000000000010902240001000000000904000001030000000921000000012205000905810300000000003f8295d27a1f4a5629eaf08691e8e6362c9756f6c7aac8d78cce2661f7b676b93085b56bf0c3861a0520f3e844e59b41927690b07e231a0272402883a6e49b1aff03b256a069b6b7bfee69"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000010000003000000020085000001010000fe9800000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="8cd1439c3a47847e1b257227cd5c1ad0cd9e4e0d74fefab362", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0xffffffffffffffe0, 0x0, 0x0, 0xb, 0x0, &(0x7f0000000780)="c1770b7eaba9fb5a4b7421"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13}, &(0x7f0000000240)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
connect$inet6(r8, 0x0, 0x0)
sendmsg$sock(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x2}}], 0x18}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000000101041900000000000000020000002400018014005536018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000b0000000000280007400000002c9966cccca64a08c973c41ade5f00f59bd4818de50bfa59801387d4af259fb80bd39043da6f28e97ef482958d6f082c3a81f1694c088d2353e7d7a3b1e9959928a866ecdc90eb04f15d2afd9a0d17888f38baa0ec552739610efc21860290ba7d5b99df152e31ec7094fe1a1be07922"], 0x64}}, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x48)
ppoll(&(0x7f00000005c0)=[{r10, 0x8021}, {r6, 0x1}, {r5, 0x2204}, {r4, 0xc440}, {r4, 0x100}, {r2, 0x8000}, {r6, 0x3000}, {r8, 0x6f850df4fcc181a3}], 0x8, &(0x7f0000000600)={0x0, 0x3938700}, &(0x7f0000000640)={[0x9]}, 0x8)
sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fsi_master_aspeed_opb_read\x00', r2}, 0x10)

12.466238978s ago: executing program 0 (id=5385):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0xffffffff, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty, 0xb4}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x1052b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11.237759995s ago: executing program 0 (id=5396):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000440)='jffs2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90v\b1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xff\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000400)='\x00\x00', &(0x7f0000000700)="dc", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000180)=';\xad~\xee', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000640)='dU|\xcbM\xe6\x91q\xe0\x05\xbes\xc0\xd2\xdb0}\xa6\xc4tly\xe0+\xb8~\xd9ymx\xa1\x06\xb4F\xf3Q:\xfem\xea\xed\xfc\x04\xf88\xe0\xa1&\xa8\xff\x10\xb3\xb2\x92N\f\x00!\xdbV\xc3\xca\r\x8c\xfb\x8esJ\xb3\x1bf\xce\v\x0e\xe3\xd5', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9\x1a\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000840)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000008c0)='\x96\x94\x17s\x1a\x87\xe9\xb7\xe0\xe7\r\x9b\xa3\xd7\xd2N\x03\x00\x00\x00\\\xcd\x9d\x00_\xbc\x91\x85\x92\xf1h\x1a\xd4tR\xf6a\n\xcd\x94\\\x88\xcb\xe9\xe6\xa7\xb7\xfeWN(;0\xcb\xf8R\x02f>\xf5/\v\x00\x9bZZz\x8e\xb3;\xa6L\xb8J\x8f\xf4\xe08\x192\x06\x85I\xfc1\x81I\xa4\xcan\x12\xe1\x99\x80\xe6=\x03V\x86e\xd5\xe2ej\xed\xd2\xe5\xef\x9f\x8f]\xab\x90\xa6\x16l$\xee\xfcUi\xba\xe5\xe1\x14\xae\xb6\b\xfc1,\x16\x16\xb9\xb6\x1f\x19\xe8\xad\xabm\xd0\x0f\x85\xeb\xfd\x12\x84|\x1ex\xa8^lv\xe1', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='\x00', &(0x7f0000000600)='\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000140)="8d", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f0000000c00)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\x1b\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\"V\x92\xda\x90\xb1\x9a\xea\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='romfs\x00', &(0x7f00000004c0)='\x19\x00\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000740)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f4&\xf1m\x13\x1b{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\)\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K', 0x0, r0)
fremovexattr(r0, &(0x7f0000000340)=@random={'system.', 'sockfs\x00'})
readv(r0, &(0x7f0000000480)=[{&(0x7f0000002fc0)=""/4095, 0xfff}], 0x1)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_pressure(r1, &(0x7f00000003c0)='io.pressure\x00', 0x2, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
socket$qrtr(0x2a, 0x2, 0x0)
preadv(r2, &(0x7f0000000040), 0x100000000000024f, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0', [{0x20, '*+^'}, {}, {0x20, 'memory.events\x00'}, {0x20, '%%/$!/--(%\xd2\x98c\xbfN_\xecg\x9c\xf5\xde3\xf0\xc6Cz\x8a\x17\x1b\x1c}\x7f\xcc\xae \x8fJJ)X\xd8\x88\x000\xcf\x01\xbf\x0e\xe4<]\xf9)\xb28F_\xf0Q\x01\xe2=i\x7f\x83\x7f\xaa\xf3\x06\x16\x9eO\x8a\xc1\v\x1b\xe5'}, {0x20, 'memory.events\x00'}, {0x20, '\x00'}], 0xa, "7bb0fc91edb166e4a28cdb19d59483873700ff266307135f1736d85b44f1fc5530f946f7e44d711749a637ecdefc226884927d6f9690dab7d7dfe6f0e3169d57fc8f0ff050f3dd45f9c920279dc939a98cb04e2c66b14cd4da58391c69b334d56dd51503b6d878e30069252faccf0800000054b21cad024d1ad1a524d91ee63fbc800d95db71bc156ee7aa7b473040c5377d"}, 0x110)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000000)={{0xec, 0xc0}, 'port1\x00', 0x4, 0x11, 0x4b61, 0xc, 0x40, 0x100, 0x760f, 0x0, 0x4, 0x2})
ptrace(0x4208, 0x0)

10.266908367s ago: executing program 0 (id=5398):
syz_open_dev$evdev(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000480)={@map, 0x35, 0x1d, 0x0, &(0x7f0000000380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='source', &(0x7f0000000380)='%\xd7\xad\xe0\xe9\x056W\xea\xe1\xe26\xdf\xbe\x97\x99\xe4\xe9%\xbe$\xc9\x86JJ\x12\xbc\xf7=\x0f1\v\xa9\xfcU\x96\xbf\xc7x\x83\xec\x11:A\xc5\xb4\x00'/62, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
r6 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0)
connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={<r7=>0x0, 0x4}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}]}, &(0x7f0000000100)=0x10)
shutdown(r4, 0x1)

9.793859983s ago: executing program 3 (id=5399):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="480300001000090400000000000000ffffffc300", @ANYRES32=r1, @ANYBLOB="00000000080000000400140024031680ac0001800c0003000000000000000000100006000000000000000000000000000c00040000000000000000002c000c"], 0x348}}, 0x0)

9.453267579s ago: executing program 3 (id=5400):
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x18, 0x92, 0x6})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='bridge_slave_0\x00', 0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000602007000000", @ANYRES32=r3, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r1], 0x44}}, 0x0)

7.302282264s ago: executing program 3 (id=5405):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xffffffffffffffff}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304000000000000000000007400", @ANYRES32=r4, @ANYBLOB="00df0000001e00001c0012800b00010062726964676500000c000280081d1500000000"], 0x3c}}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = syz_open_pts(r5, 0x141601)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0)

7.063679606s ago: executing program 0 (id=5406):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
unshare(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, 0x0}, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0xffff, '\x00', @p_u16=&(0x7f00000005c0)=0xff}})
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9c3, 0x4, {0xa, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3]}}})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x0, &(0x7f00000002c0))
creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7}, 0x8}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000400), 0x0}, 0x20)
lseek(0xffffffffffffffff, 0x200, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x8ca, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x50})
ioctl$UI_DEV_CREATE(r1, 0x5501)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1)
write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd1, 0x8d, 0xbc, 0x20, 0x8086, 0xb63, 0xe1fc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x96, 0xf7, 0xa5}}]}}]}}, 0x0)

7.039464051s ago: executing program 1 (id=5394):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r2 = accept$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4)

6.981944421s ago: executing program 4 (id=5407):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000001000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)

6.70621071s ago: executing program 1 (id=5410):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7b, 0x10100)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd2, 0xe4, 0x2d, 0x20, 0x5fc9, 0x63, 0x3048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd5, 0xaf, 0x53, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='security.selinux\x00', 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

6.58362557s ago: executing program 4 (id=5411):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x4, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0)
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x6, 0x0) (async, rerun: 32)
r4 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf9, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x28, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xb0, 0x8, 0x9}}}}}]}}]}}, 0x0) (rerun: 32)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0) (async)
syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "a531cef5"}]}}, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) (async, rerun: 64)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_io_uring_setup(0x2972, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1, 0x171}, &(0x7f0000ff0000), 0x0) (async)
gettid()
timer_create(0x0, 0x0, 0x0)

6.583238126s ago: executing program 0 (id=5412):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$mouse(&(0x7f00000002c0), 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x4000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000efff2800128008000100687372001c000280050007000100000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5], 0x48}}, 0x4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = eventfd(0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
r9 = eventfd(0x0)
unshare(0x2040400)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={r8, 0x7134, 0x2, r8})
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r8, 0x0, 0x2, r9})
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080))
ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f00000001c0)=0x2)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x10202})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
socket$netlink(0x10, 0x3, 0x0)

6.042304775s ago: executing program 2 (id=5414):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x7, 0x300000000000000}, 0x0)

6.041947875s ago: executing program 3 (id=5415):
syz_open_dev$evdev(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000480)={@map, 0x35, 0x1d, 0x0, &(0x7f0000000380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='source', &(0x7f0000000380)='%\xd7\xad\xe0\xe9\x056W\xea\xe1\xe26\xdf\xbe\x97\x99\xe4\xe9%\xbe$\xc9\x86JJ\x12\xbc\xf7=\x0f1\v\xa9\xfcU\x96\xbf\xc7x\x83\xec\x11:A\xc5\xb4\x00'/62, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
r6 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0)
connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={<r7=>0x0, 0x4}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}]}, &(0x7f0000000100)=0x10)
shutdown(r4, 0x1)

6.039638442s ago: executing program 4 (id=5416):
r0 = socket$inet(0x2, 0x2000080001, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, r0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
mlockall(0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x10000)
read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000a00)=0x40000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x21}}, {0x10000000000, 0x40000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in6=@dev, 0x3500}}, 0xe8)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000a00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffffffffffff00000000000000000000000000000000000000000000000000000a0010000100000000"], 0xc4}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
unshare(0x4040400)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0)
sendto$packet(r6, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="502c5e66bdd23251277048aa204d2a3901f1d383ab59d8f6c9e79cc6b0bedd3f00bc8d877896c94db2c1fd6658ac62301d88096ea9e87e41338a608d45949bbcacd4ed16a9b1f4e90f5acbf53390c03d9c60df70ffdf2e8601ab7bd56bd42172b565315a2727385a23b51182b49387f2b01ed6d4e2cb7ec4b8744636d28b144c2663e60d878a15077ac1cd6c87395d017bca38ea85113e4fb4e7ad6e7b244b64d0"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004041)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @mcast2, @remote, @remote}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5.794500282s ago: executing program 2 (id=5417):
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000080)="05", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x1c)
syz_open_dev$loop(0x0, 0x75f, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x11af, 0xdfd2, 0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x3b8, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x63}, @NFTA_SET_DESC={0x38c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0xd0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xafe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55af8554}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xea1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x89d7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x14c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x736}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x41d9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4351}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1009}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffe00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe704}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe896}]}]}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x3e0}, 0x1, 0x0, 0x0, 0x408c0}, 0x0)
r3 = getpid()
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002214e13ea345b81489"], 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
r9 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000fcdbdf253100000008005200", @ANYRES32=r3, @ANYBLOB='\b\x00R\x00', @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="080000ea4c14081301c8cdbc154e174d3c32f91732abb909267e641491b4953a6ca2f9ec245794a7b4ed0778d58dd77af0100ae659825574d6ad8af2436f40a686bc0fa46ac3f606365c03c36f061a46a568dcef1419c250590733e9e71a2ccffd0c89f5c5c0a6a2c1032156a4b2795a9239fad4c5ddbf380d9dd2c3fc50c069", @ANYRES32=r9, @ANYBLOB="0c009900090000000e00000008005200", @ANYRES32=r3, @ANYBLOB="080001003400000008000300", @ANYRES32=r10, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x200088d3}, 0x80)
mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe)

5.599621116s ago: executing program 4 (id=5418):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, <r4=>0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2808b08}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4001, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x2)
dup3(r2, r3, 0x0)
open$dir(0x0, 0x0, 0x1)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x14}, 0x14}}, 0x8000)
sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}}, 0x48040)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r9 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)="f4000900062c2c25fe80000000fe8000dc9f8d0f238466cc00007a000000ad6e2f911b51818462", 0x27}, {&(0x7f0000001780)="8c", 0x1}], 0x2, 0x0, 0x0, 0x74}, 0x0)
ptrace$getenv(0x4201, r5, 0xfffffffffffffffe, &(0x7f0000000140))

5.047744937s ago: executing program 1 (id=5419):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="610f0100000056"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="20140a0000004720b36c0b3e20c8a8e5"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000280)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x4, 0x8, 0x2, 0x80, 0x9, 0x2})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc)
syz_emit_ethernet(0x52, &(0x7f0000000a00)=ANY=[@ANYBLOB="000000000000aaaaaa0086dd60"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0)
r2 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
close(0x3)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000000)=""/123, 0x7b}], 0x5}, 0x40000102)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

4.518961066s ago: executing program 4 (id=5420):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000003b0007010000000000000000047c00000c0001800e000600800a0000"], 0x20}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x10, 0x8})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000010095"], &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000196c0)=ANY=[@ANYBLOB="4c00000002060108000000000000000000000000110003006d3b9cc3686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a30000000000500040003000000"], 0x4c}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000004040)=[{{0x0, 0x45, &(0x7f0000003d00)=[{&(0x7f0000003c40)="a924499df30c135979a363743f2a92a45c92a76c9a4ee4", 0x17}], 0x1, &(0x7f0000003d40)=ANY=[], 0x2e0}}], 0x1, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000019840)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@local}, {@remote}, {@multicast2}, {@private}, {}]}, @generic={0x7, 0x11, "2b68a780aff0ac19cf8c9de8d561a1"}, @noop, @noop, @lsrr={0x83, 0xb, 0x39, [@rand_addr, @multicast1]}]}}}}})
r8 = socket$inet(0x2, 0x3, 0x4)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfff1}}}}]}, 0x78}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000d00)={'geneve0\x00', 0x0})

2.873171502s ago: executing program 4 (id=5421):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000040)={0x11, 0xf7, r7}, 0x14)
socket$packet(0x11, 0x3, 0x300)
writev(r4, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/35, @ANYRES32], 0xb8}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

1.956912246s ago: executing program 2 (id=5423):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@updpolicy={0xe4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, {0xfffffffffffffffe}, 0x8000, 0x20000}, [@user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in=@multicast2, 0x0, 0xa}}]}, 0xe4}}, 0x10004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000070000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0)

1.956169769s ago: executing program 3 (id=5424):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d1}, 0x4000010)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0xffffff86, 0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = io_uring_setup(0x3eae, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_emit_ethernet(0x67, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x68, 0xe0, 0x4d, 0x20, 0xe6f, 0x582c, 0x3168, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x47, 0xd0, 0x0, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0xd}}]}}]}}]}}, 0x0)

1.667661502s ago: executing program 2 (id=5425):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004700)=[{{&(0x7f0000000b80)={0xa, 0x4e22, 0x2, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000002280)=[@hopopts={{0x18, 0x29, 0x36, {0x33}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x11}}}], 0x30}}, {{&(0x7f0000002480)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xc95}, 0x1c, 0x0, 0x0, &(0x7f0000002680)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28, 0x3800}}], 0x2, 0x0)

1.645868145s ago: executing program 3 (id=5426):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r0) (async, rerun: 64)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async, rerun: 32)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 32)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000004000100f0ff000010000000000000002000000000000000"], 0x24, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r6, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000004c0)="b9800000c00f3235004000000f30660fc7b68f000000660f38412f650f11a005417a26c4e143c20e02b9940b00000f320f01c9c4e275b99a09000000c4c26d36a9720000000f005ad2"}], 0xaaaaaaaaaaaaad7, 0x0, 0x0, 0x0) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000000000000002000000000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000400d000"], 0x2c}}, 0x0) (async)
syz_open_procfs(0x0, 0x0) (async)
r11 = fsopen(&(0x7f0000000080)='binder\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r11, 0x0, &(0x7f00000003c0)='dirsync\x00', 0x0, 0x0)

992.415562ms ago: executing program 2 (id=5428):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000540)={0x28})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000500)={0x45})
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
pipe(&(0x7f0000000580)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x7fff, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000080))
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, "874ffa4632e299668c5cbe6bdb8ecbf2f4a4774f8d43f53a41476e805561949b84b7b39f30af590c84288eba09090dbfea36f1aadbcb4e335c327e663d333e2033cd25cde14373dcb90bf221ecacd08a74f842284fb0c78c934f8e087ff0e5709a77755ee55dd9cd81aa878edc99dd30f14895a73fefcff260d19ca369c55e27e9682a3096f4154b952bfd33945db5bdf51b905c4d314c9b"}, 0xb1)

951.887925ms ago: executing program 1 (id=5429):
r0 = io_uring_setup(0x354a, &(0x7f0000000140))
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x10000000}}, 0x10)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000002b)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x1de)
close(0xffffffffffffffff)
syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009209c840fd0b150161cb0102030109023f00010000000009041d0002b3bccb001b021fdffdc58635172f62eaf63fda9d4b3a8f87cbfce6affaa37409050f02ff0300000009058202"], 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1a8aacd, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r3, 0x15, 0x0, 0x2970, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x1800000, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000540)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x300}, 0x90)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40}, 0x10)
syz_usb_connect(0x0, 0x57, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e3df3b40990435101256000000010902"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=5430):
r0 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000800000000000108000800d80600"], 0x34}, 0x1, 0x0, 0x4000}, 0x0)

kernel console output (not intermixed with test programs):

sim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1838.638640][  T940] snd_usb_pod 2-1:1.1: cannot start listening: -22
[ 1838.644733][T30629] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1838.662177][  T940] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[ 1838.669358][T30761] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1838.678849][  T940] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1838.712319][T29309] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1838.719474][T29309] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1839.104576][T30990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5233'.
[ 1839.143799][T30761] veth0_vlan: entered promiscuous mode
[ 1839.268642][T30818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1839.350751][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1839.373865][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1839.378217][T30761] veth1_vlan: entered promiscuous mode
[ 1839.595120][T30761] veth0_macvtap: entered promiscuous mode
[ 1839.617422][T29309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1839.641810][T29309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1839.668577][T30761] veth1_macvtap: entered promiscuous mode
[ 1839.735417][T30818] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1839.762786][T30904] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1839.783520][T30904] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1839.818856][T30761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1839.862718][T30761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1839.902831][T30761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1839.929170][T30761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1839.968988][T30761] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1839.998558][T30904] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1840.025336][T30761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1840.078720][T30761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1840.100823][T30761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1840.119498][T30761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1840.131667][T30761] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1840.163016][T30904] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1840.205301][T30761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1840.252810][T30761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1840.281644][T30761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1840.316168][T30761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1840.635703][T30818] veth0_vlan: entered promiscuous mode
[ 1840.728325][T29309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1840.775705][T29309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1840.870384][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1840.897259][ T5311] usb 2-1: USB disconnect, device number 33
[ 1840.901585][T30818] veth1_vlan: entered promiscuous mode
[ 1840.921236][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1841.150575][T30818] veth0_macvtap: entered promiscuous mode
[ 1841.261388][T30818] veth1_macvtap: entered promiscuous mode
[ 1841.279108][T31030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5236'.
[ 1841.412788][T30904] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1841.511648][T30818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1841.539679][T30818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1841.564024][T30818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1841.584355][T30818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1841.620386][T30818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1841.631326][T30818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1841.654652][T30818] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1841.729645][T30818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1841.778514][T30818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1841.796271][T30818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1841.818989][T30818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1841.830693][T30818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1841.841705][T30818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1841.853733][T30818] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1841.889452][T30904] 8021q: adding VLAN 0 to HW filter on device team0
[ 1841.925862][T30818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1841.956434][T30818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1842.001936][T30818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1842.010697][T30818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1842.070470][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1842.072149][ T5290] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1842.077723][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1842.278838][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1842.286075][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1842.293985][ T5290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1842.315060][ T5290] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1842.327826][ T5290] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1842.373781][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1842.402725][T24037] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1842.422396][ T5290] usb 3-1: config 0 descriptor??
[ 1842.528128][T29304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1842.572257][T29304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1842.602597][T24037] usb 2-1: Using ep0 maxpacket: 32
[ 1842.611441][T24037] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1842.650660][T24037] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1842.690990][T24037] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1842.725862][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1842.736425][T24037] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1842.745987][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1842.753449][T24037] usb 2-1: config 1 has no interface number 0
[ 1842.769368][T24037] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1842.786031][ T5293] usb 3-1: USB disconnect, device number 105
[ 1842.809121][T24037] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1842.864373][T24037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1842.874937][T30904] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1842.906543][T24037] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[ 1843.017188][T30904] veth0_vlan: entered promiscuous mode
[ 1843.037497][T30904] veth1_vlan: entered promiscuous mode
[ 1843.088705][T24037] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[ 1843.102269][T24037] snd_usb_pod 2-1:1.1: invalid control EP
[ 1843.118350][T24037] snd_usb_pod 2-1:1.1: cannot start listening: -22
[ 1843.128752][T24037] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[ 1843.143891][T24037] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1843.215256][T30904] veth0_macvtap: entered promiscuous mode
[ 1843.227350][T31074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5209'.
[ 1843.256888][T30904] veth1_macvtap: entered promiscuous mode
[ 1843.372575][T30904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1843.409204][T30904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1843.449754][T30904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1843.511588][T30904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1843.569651][T30904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1843.590598][T30904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1843.633654][T30904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1843.671183][T30904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1843.719773][T30904] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1843.779392][T31084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5242'.
[ 1843.870424][T30904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1843.893211][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5250'.
[ 1843.933516][T24037] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1843.952097][ T5292] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 1843.975178][T30904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1843.988718][T30904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1844.013823][T30904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1844.065660][T30904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1844.091619][T30904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1844.133344][T30904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1844.159417][T24037] usb 4-1: config index 0 descriptor too short (expected 30506, got 77)
[ 1844.172786][ T5292] usb 1-1: Using ep0 maxpacket: 16
[ 1844.192735][ T5292] usb 1-1: config 1 has an invalid descriptor of length 35, skipping remainder of the config
[ 1844.193195][T30904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1844.224034][T24037] usb 4-1: config 250 has too many interfaces: 186, using maximum allowed: 32
[ 1844.229884][ T5292] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[ 1844.260926][T24037] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[ 1844.300379][ T5292] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1844.326773][T24037] usb 4-1: config 250 has 0 interfaces, different from the descriptor's value: 186
[ 1844.331195][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1844.371323][T30904] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1844.378747][ T5292] usb 1-1: SerialNumber: syz
[ 1844.434892][T24037] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1844.458532][ T5292] cdc_acm 1-1:1.0: skipping garbage
[ 1844.461186][T24037] usb 4-1: New USB device strings: Mfr=230, Product=1, SerialNumber=3
[ 1844.481939][T24037] usb 4-1: Product: syz
[ 1844.486164][ T5292] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[ 1844.486218][T24037] usb 4-1: Manufacturer: syz
[ 1844.503716][ T5292] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[ 1844.530328][ T5292] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[ 1844.531234][T30904] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1844.538691][T30904] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1844.538727][T30904] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1844.538757][T30904] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1844.578891][T24037] usb 4-1: SerialNumber: syz
[ 1844.714956][   T29] audit: type=1326 audit(1725846159.216:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31080 comm="syz.0.5248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07ed77cef9 code=0x0
[ 1844.860426][T31095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1844.935969][T31095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1845.281543][   T46] usb 2-1: USB disconnect, device number 34
[ 1845.431698][T29309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1845.475536][T29309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1845.530429][T31114] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm
[ 1845.753780][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1845.854771][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1846.465832][ T5292] usb 1-1: USB disconnect, device number 124
[ 1846.742372][T24037] usb 4-1: USB disconnect, device number 122
[ 1847.442071][T24037] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1847.582119][T29301] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1847.622866][ T5280] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1847.665104][T24037] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1847.698390][T24037] usb 4-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config
[ 1847.746974][T24037] usb 4-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1847.796825][T24037] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1847.844125][T24037] usb 4-1: New USB device found, idVendor=0525, idProduct=fb40, bcdDevice= 0.40
[ 1847.875373][T29301] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1847.886884][ T5280] usb 3-1: Using ep0 maxpacket: 32
[ 1847.898680][T24037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1847.912920][ T5280] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1847.937516][T24037] usb 4-1: Product: syz
[ 1847.952074][ T5280] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1847.960824][T24037] usb 4-1: Manufacturer: syz
[ 1847.982384][T24037] usb 4-1: SerialNumber: syz
[ 1848.001234][ T5280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1848.064464][ T5280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1848.102627][ T5280] usb 3-1: config 1 has no interface number 0
[ 1848.108816][ T5280] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1848.169229][T29301] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1848.203818][ T5280] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1848.264686][T24037] cdc_ether 4-1:1.0: skipping garbage
[ 1848.271043][T24037] usb 4-1: bad CDC descriptors
[ 1848.292717][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1848.293194][T24037] usb 4-1: USB disconnect, device number 123
[ 1848.357034][ T5280] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[ 1848.488538][T29301] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1848.527771][ T5280] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values
[ 1848.585669][ T5280] snd_usb_pod 3-1:1.1: invalid control EP
[ 1848.593091][ T5280] snd_usb_pod 3-1:1.1: cannot start listening: -22
[ 1848.610117][ T5280] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[ 1848.640079][ T5280] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1848.732063][ T7218] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1848.846321][T31146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5254'.
[ 1848.860621][T31146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1848.869070][T31146] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1848.918357][T31146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1848.953088][T31146] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1848.981935][ T7218] usb 5-1: Using ep0 maxpacket: 32
[ 1848.994380][ T7218] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1849.014385][ T7218] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1849.042534][ T7218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1849.077923][ T7218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1849.124514][ T7218] usb 5-1: config 1 has no interface number 0
[ 1849.143643][T31179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5260'.
[ 1849.161933][ T7218] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1849.208760][T29301] bridge_slave_1: left allmulticast mode
[ 1849.217777][T29301] bridge_slave_1: left promiscuous mode
[ 1849.222070][ T5280] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 1849.236256][ T7218] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1849.241013][T29301] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1849.278515][T29301] bridge_slave_0: left allmulticast mode
[ 1849.287675][T29301] bridge_slave_0: left promiscuous mode
[ 1849.303860][ T7218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1849.315671][T29301] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1849.331252][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1849.346294][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1849.359746][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1849.370416][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1849.378432][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1849.387117][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1849.460428][ T7218] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[ 1849.478677][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1849.500206][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1849.531967][ T5280] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1849.552205][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1849.608897][ T5280] usb 1-1: config 0 descriptor??
[ 1849.667607][ T7218] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[ 1849.706357][ T7218] snd_usb_pod 5-1:1.1: invalid control EP
[ 1849.743241][ T7218] snd_usb_pod 5-1:1.1: cannot start listening: -22
[ 1849.750165][ T7218] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[ 1849.826146][ T7218] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1849.838302][T29301] ip6gretap0 (unregistering): left promiscuous mode
[ 1850.122624][ T5280] isku 0003:1E7D:319C.0067: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0
[ 1850.422098][ T5290] usb 3-1: USB disconnect, device number 106
[ 1850.529184][T31176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1850.577649][T31176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1850.593377][T31198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5268'.
[ 1850.673883][  T940] usb 1-1: USB disconnect, device number 125
[ 1851.260243][T29301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1851.294040][T29301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1851.328650][T29301] bond0 (unregistering): Released all slaves
[ 1851.418596][T31208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5269'.
[ 1851.436332][T31208] netlink: 'syz.3.5269': attribute type 6 has an invalid length.
[ 1851.482225][ T5242] Bluetooth: hci1: command tx timeout
[ 1851.484973][T31208] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1851.485085][T31208] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1851.485110][T31208] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1851.485132][T31208] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1851.485213][T31208] vxlan0: entered promiscuous mode
[ 1851.492578][T31215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5269'.
[ 1851.492613][T31215] netlink: 'syz.3.5269': attribute type 6 has an invalid length.
[ 1851.904957][  T940] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 1852.073618][T29301] batadv_slave_1: left promiscuous mode
[ 1852.079253][T29301] hsr_slave_0: left promiscuous mode
[ 1852.080644][T29301] hsr_slave_1: left promiscuous mode
[ 1852.081468][T29301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1852.081514][T29301] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1852.082564][  T940] usb 1-1: Using ep0 maxpacket: 32
[ 1852.083428][T29301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1852.083455][T29301] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1852.089203][  T940] usb 1-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1852.094480][  T940] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[ 1852.094503][  T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1852.094518][  T940] usb 1-1: Product: syz
[ 1852.094530][  T940] usb 1-1: Manufacturer: syz
[ 1852.094541][  T940] usb 1-1: SerialNumber: syz
[ 1852.113096][T31225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5273'.
[ 1852.116867][T29301] veth1_macvtap: left promiscuous mode
[ 1852.116955][T29301] veth0_macvtap: left promiscuous mode
[ 1852.117162][T29301] veth1_vlan: left promiscuous mode
[ 1852.117297][T29301] veth0_vlan: left promiscuous mode
[ 1852.302064][  T940] usb 5-1: USB disconnect, device number 112
[ 1852.317708][T24037] usb 1-1: USB disconnect, device number 126
[ 1852.465971][   T29] audit: type=1326 audit(1725846166.966:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1852.466041][   T29] audit: type=1326 audit(1725846166.966:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1852.466091][   T29] audit: type=1326 audit(1725846166.966:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1852.466139][   T29] audit: type=1326 audit(1725846166.966:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1852.466188][   T29] audit: type=1326 audit(1725846166.966:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1852.466234][   T29] audit: type=1326 audit(1725846166.966:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1852.466284][   T29] audit: type=1326 audit(1725846166.966:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1852.466437][   T29] audit: type=1326 audit(1725846166.966:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1852.467304][   T29] audit: type=1326 audit(1725846166.966:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1852.474612][   T29] audit: type=1326 audit(1725846166.976:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31231 comm="syz.4.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581677cef9 code=0x7ffc0000
[ 1853.187777][  T940] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1853.352391][  T940] usb 5-1: device descriptor read/64, error -71
[ 1853.516933][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.525812][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.569580][ T5242] Bluetooth: hci1: command tx timeout
[ 1853.582243][   T46] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1853.641991][  T940] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1853.778907][   T46] usb 4-1: Using ep0 maxpacket: 32
[ 1853.791452][   T46] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1853.809772][   T46] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1853.819231][  T940] usb 5-1: device descriptor read/64, error -71
[ 1853.829349][   T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1853.848165][   T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1853.861462][   T46] usb 4-1: config 1 has no interface number 0
[ 1853.871453][   T46] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1853.904199][   T46] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1853.913642][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1853.949110][   T46] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 1853.962823][  T940] usb usb5-port1: attempt power cycle
[ 1853.966704][T29301] team0 (unregistering): Port device team_slave_1 removed
[ 1854.098607][T29301] team0 (unregistering): Port device team_slave_0 removed
[ 1854.197745][   T46] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[ 1854.214998][   T46] snd_usb_pod 4-1:1.1: invalid control EP
[ 1854.220807][   T46] snd_usb_pod 4-1:1.1: cannot start listening: -22
[ 1854.231285][   T46] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 1854.240542][   T46] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1854.416695][  T940] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1854.508810][  T940] usb 5-1: device descriptor read/8, error -71
[ 1854.808156][  T940] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1854.852583][  T940] usb 5-1: device descriptor read/8, error -71
[ 1854.977448][  T940] usb usb5-port1: unable to enumerate USB device
[ 1855.187605][T31260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5277'.
[ 1855.536606][T31186] chnl_net:caif_netlink_parms(): no params data found
[ 1855.642032][ T5242] Bluetooth: hci1: command tx timeout
[ 1856.139297][T31186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1856.199092][T31186] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1856.216003][T31186] bridge_slave_0: entered allmulticast mode
[ 1856.243262][T31186] bridge_slave_0: entered promiscuous mode
[ 1856.252005][ T5280] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1856.265074][T31186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1856.293659][T31186] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1856.301652][T31186] bridge_slave_1: entered allmulticast mode
[ 1856.324195][T31186] bridge_slave_1: entered promiscuous mode
[ 1856.353440][  T940] usb 4-1: USB disconnect, device number 124
[ 1856.477244][T31186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1856.492391][ T5280] usb 1-1: Using ep0 maxpacket: 32
[ 1856.514375][ T5280] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1856.553198][ T5280] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1856.561345][T31186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1856.603962][ T5280] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1856.651606][ T5280] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1856.688395][ T5280] usb 1-1: config 1 has no interface number 0
[ 1856.706983][ T5280] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1856.823806][T31186] team0: Port device team_slave_0 added
[ 1856.853345][ T5280] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1856.892056][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1856.946190][T31186] team0: Port device team_slave_1 added
[ 1856.974610][ T5280] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[ 1857.143692][T31186] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1857.150732][T31186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1857.167374][ T5280] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values
[ 1857.222924][ T5280] snd_usb_pod 1-1:1.1: invalid control EP
[ 1857.248155][T31186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1857.251939][ T5280] snd_usb_pod 1-1:1.1: cannot start listening: -22
[ 1857.297526][ T5280] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[ 1857.310658][T31186] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1857.333270][T31186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1857.333793][ T5280] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1857.359286][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1857.402051][T31186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1857.573818][T31327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5291'.
[ 1857.721992][T26843] Bluetooth: hci1: command tx timeout
[ 1857.793470][T31186] hsr_slave_0: entered promiscuous mode
[ 1857.827468][T31186] hsr_slave_1: entered promiscuous mode
[ 1858.153321][   T46] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1858.352025][   T46] usb 3-1: Using ep0 maxpacket: 32
[ 1858.375530][   T46] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1858.404559][   T46] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1858.447321][   T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1858.487522][   T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1858.515111][   T46] usb 3-1: config 1 has no interface number 0
[ 1858.535119][   T46] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1858.622839][   T46] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1858.637819][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1858.690659][   T46] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[ 1858.882900][   T46] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values
[ 1858.906974][   T46] snd_usb_pod 3-1:1.1: invalid control EP
[ 1858.930077][   T46] snd_usb_pod 3-1:1.1: cannot start listening: -22
[ 1858.960876][   T46] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[ 1858.998775][   T46] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1859.233798][T31360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5294'.
[ 1859.658690][ T5280] usb 1-1: USB disconnect, device number 127
[ 1859.771028][T31372] ip6gretap0: entered promiscuous mode
[ 1859.850354][T31372] batadv_slave_1: entered promiscuous mode
[ 1860.228294][T31186] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1860.269806][T31186] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1860.320874][T31186] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1860.382396][T31186] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1860.670347][T31397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5301'.
[ 1860.785530][T31186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1860.848303][T31186] 8021q: adding VLAN 0 to HW filter on device team0
[ 1860.913639][T15432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1860.920904][T15432] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1860.951522][T15432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1860.958683][T15432] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1861.020746][  T940] usb 3-1: USB disconnect, device number 107
[ 1861.419055][T31186] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1861.560997][T31417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5307'.
[ 1861.862140][T14466] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1862.003127][ T5290] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1862.072456][T31186] veth0_vlan: entered promiscuous mode
[ 1862.185783][T31186] veth1_vlan: entered promiscuous mode
[ 1862.197387][T14466] usb 3-1: Using ep0 maxpacket: 32
[ 1862.234236][ T5290] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1862.247971][T14466] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1862.272305][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1862.283387][T14466] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1862.337249][T14466] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1862.379192][ T5290] usb 4-1: config 0 descriptor??
[ 1862.425446][ T5290] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1862.435903][T14466] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1862.477405][T14466] usb 3-1: config 1 has no interface number 0
[ 1862.485733][T14466] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1862.502572][T14466] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1862.551420][T14466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1862.615684][T14466] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[ 1862.727694][T31186] veth0_macvtap: entered promiscuous mode
[ 1862.757241][T31186] veth1_macvtap: entered promiscuous mode
[ 1862.807316][T14466] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values
[ 1862.829284][T31186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1862.846343][T14466] snd_usb_pod 3-1:1.1: invalid control EP
[ 1862.852764][T31186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1862.877179][T14466] snd_usb_pod 3-1:1.1: cannot start listening: -22
[ 1862.877333][T31186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1862.907085][T14466] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[ 1862.908026][T31186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1862.930811][T31186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1862.942155][T31186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1862.950299][T14466] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1862.988748][T31186] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1863.034733][T31186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.071962][T31186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.112227][T31186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.173871][T31186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.234658][T31186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1863.254670][T31453] Cannot find set identified by id 0 to match
[ 1863.284023][T31186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1863.328995][T31186] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1863.410059][T31186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1863.453644][T31186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1863.478511][T31186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1863.510967][T31186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1863.863897][T31463] ip6gretap0: entered promiscuous mode
[ 1863.911102][T31463] batadv_slave_1: entered promiscuous mode
[ 1863.962683][T31463] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 1864.014014][T31463] Cannot create hsr debugfs directory
[ 1864.142008][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1864.149890][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1864.291762][ T5290] usb 4-1: USB disconnect, device number 125
[ 1864.309136][T29301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1864.354157][T29301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1864.665644][T31479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1864.680341][T31479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1864.758079][T31479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1864.801978][T31480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1864.840127][T31480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1864.852958][T31479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1864.942062][  T940] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1864.991932][ T5290] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1865.132011][T14466] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 1865.167020][   T46] usb 3-1: USB disconnect, device number 108
[ 1865.184648][  T940] usb 2-1: device descriptor read/64, error -71
[ 1865.221962][ T5290] usb 4-1: Using ep0 maxpacket: 32
[ 1865.236020][ T5290] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1865.244873][ T5290] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1865.256782][ T5290] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1865.270846][ T5290] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1865.288803][ T5290] usb 4-1: config 1 has no interface number 0
[ 1865.297552][ T5290] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1865.320692][ T5290] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1865.335528][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1865.336547][T14466] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1865.370482][ T5290] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 1865.392283][T24037] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1865.401276][T14466] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1865.444241][T14466] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1865.489186][T14466] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1865.502109][  T940] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1865.510061][T14466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1865.528445][T14466] usb 1-1: Product: syz
[ 1865.547369][T14466] usb 1-1: Manufacturer: syz
[ 1865.570482][T14466] usb 1-1: SerialNumber: syz
[ 1865.570743][ T5290] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[ 1865.593808][T24037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1865.616199][ T5290] snd_usb_pod 4-1:1.1: invalid control EP
[ 1865.626335][T24037] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1865.637987][ T5290] snd_usb_pod 4-1:1.1: cannot start listening: -22
[ 1865.656354][T24037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1865.671956][ T5290] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 1865.682806][  T940] usb 2-1: device descriptor read/64, error -71
[ 1865.700246][ T5290] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1865.709728][T24037] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[ 1865.735060][T24037] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[ 1865.749023][T24037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1865.757715][T24037] usb 5-1: Product: syz
[ 1865.762269][T24037] usb 5-1: Manufacturer: syz
[ 1865.767099][T24037] usb 5-1: SerialNumber: syz
[ 1865.776785][T24037] usb 5-1: config 0 descriptor??
[ 1865.794905][T24037] usb 5-1: NFC: Unable to get FW version
[ 1865.804217][T24037] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90
[ 1865.832423][  T940] usb usb2-port1: attempt power cycle
[ 1865.958632][T31493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5315'.
[ 1866.241988][  T940] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1866.292779][  T940] usb 2-1: device descriptor read/8, error -71
[ 1866.572232][  T940] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1866.612863][  T940] usb 2-1: device descriptor read/8, error -71
[ 1866.669735][T31499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5320'.
[ 1866.732269][  T940] usb usb2-port1: unable to enumerate USB device
[ 1867.731019][  T940] usb 4-1: USB disconnect, device number 126
[ 1867.896832][  T943] usb 5-1: USB disconnect, device number 117
[ 1867.927751][T14466] usb 1-1: 0:2 : does not exist
[ 1868.029851][T14466] usb 1-1: USB disconnect, device number 2
[ 1868.151375][T31195] udevd[31195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1868.348188][T31517] ip6gretap0: entered promiscuous mode
[ 1868.357000][T31517] batadv_slave_1: entered promiscuous mode
[ 1868.365418][T31517] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 1868.374100][T31517] Cannot create hsr debugfs directory
[ 1868.458649][T31521] macvlan2: entered allmulticast mode
[ 1868.489494][T31521] team_slave_0: entered promiscuous mode
[ 1868.495350][T31521] team_slave_1: entered promiscuous mode
[ 1868.501647][T31521] team0: entered allmulticast mode
[ 1868.516299][T31521] team_slave_0: entered allmulticast mode
[ 1868.533405][T31521] team_slave_1: entered allmulticast mode
[ 1868.549247][T31521] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1868.570809][T31521] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[ 1868.781495][T31530] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5330'.
[ 1869.162234][  T940] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1869.229755][T31541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5331'.
[ 1869.364647][  T940] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1869.382246][ T5290] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1869.408877][  T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1869.452374][  T940] usb 1-1: config 0 descriptor??
[ 1869.479241][  T940] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1869.624012][ T5290] usb 5-1: Using ep0 maxpacket: 32
[ 1869.663164][ T5290] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1869.712182][ T5290] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1869.751463][ T5290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1869.818203][ T5290] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1869.831990][ T5290] usb 5-1: config 1 has no interface number 0
[ 1869.842412][ T5290] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1869.878526][ T5290] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1869.927104][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1870.034888][ T5290] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[ 1870.233286][ T5290] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[ 1870.247676][ T5290] snd_usb_pod 5-1:1.1: invalid control EP
[ 1870.260050][ T5290] snd_usb_pod 5-1:1.1: cannot start listening: -22
[ 1870.271967][ T5290] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[ 1870.279775][ T5290] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1870.336266][T31555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5337'.
[ 1870.592739][T31561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5332'.
[ 1870.624673][ T5280] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1870.802021][ T5280] usb 3-1: device descriptor read/64, error -71
[ 1871.091922][ T5280] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 1871.151961][ T5290] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1871.261970][ T5280] usb 3-1: device descriptor read/64, error -71
[ 1871.373733][ T5290] usb 4-1: Using ep0 maxpacket: 8
[ 1871.389468][ T5290] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17
[ 1871.399062][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1871.405711][ T5280] usb usb3-port1: attempt power cycle
[ 1871.414016][ T5290] usb 4-1: Product: syz
[ 1871.418549][ T5290] usb 4-1: Manufacturer: syz
[ 1871.425428][ T5290] usb 4-1: SerialNumber: syz
[ 1871.448351][ T5290] usb 4-1: config 0 descriptor??
[ 1871.468847][ T5290] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1871.487974][ T5290] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1871.524858][ T5290] gspca_main: jeilinj-2.14.0 probing 0979:0270
[ 1871.575164][  T940] usb 1-1: USB disconnect, device number 3
[ 1871.715279][   T29] kauditd_printk_skb: 41 callbacks suppressed
[ 1871.715300][   T29] audit: type=1326 audit(1725846186.216:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1871.817267][   T25] usb 4-1: USB disconnect, device number 127
[ 1871.817609][   T29] audit: type=1326 audit(1725846186.256:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1871.851652][ T5280] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1871.903819][ T5280] usb 3-1: device descriptor read/8, error -71
[ 1871.944560][   T29] audit: type=1326 audit(1725846186.256:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1872.050181][   T29] audit: type=1326 audit(1725846186.256:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1872.097110][   T29] audit: type=1326 audit(1725846186.256:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1872.125594][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1872.144720][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1872.146537][ T5290] usb 5-1: USB disconnect, device number 118
[ 1872.158780][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1872.173891][   T29] audit: type=1326 audit(1725846186.256:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1872.191953][ T5280] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1872.205343][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1872.214899][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1872.225996][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1872.263058][ T5280] usb 3-1: device descriptor read/8, error -71
[ 1872.285555][   T29] audit: type=1326 audit(1725846186.266:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1872.313304][   T29] audit: type=1326 audit(1725846186.266:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1872.338433][   T29] audit: type=1326 audit(1725846186.266:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1872.386042][   T29] audit: type=1326 audit(1725846186.266:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31565 comm="syz.0.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f07ed77cef9 code=0x7ffc0000
[ 1872.392293][ T5280] usb usb3-port1: unable to enumerate USB device
[ 1872.876678][   T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1872.929846][T31575] chnl_net:caif_netlink_parms(): no params data found
[ 1873.037645][T31594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5347'.
[ 1873.094748][   T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1873.391466][   T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1873.745886][   T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1873.867151][T31575] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1873.877741][T31575] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1873.885614][T31575] bridge_slave_0: entered allmulticast mode
[ 1873.893195][T31575] bridge_slave_0: entered promiscuous mode
[ 1873.901689][T31575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1873.909080][T31575] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1873.917039][T31575] bridge_slave_1: entered allmulticast mode
[ 1873.925039][T31575] bridge_slave_1: entered promiscuous mode
[ 1873.938318][T31612] netlink: 'syz.3.5354': attribute type 10 has an invalid length.
[ 1873.960782][T31612] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1874.054884][T31575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1874.064473][ T5290] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1874.072167][ T5280] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1874.093323][T31575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1874.195255][T31575] team0: Port device team_slave_0 added
[ 1874.207648][T31575] team0: Port device team_slave_1 added
[ 1874.238355][   T62] bridge_slave_1: left allmulticast mode
[ 1874.253147][   T62] bridge_slave_1: left promiscuous mode
[ 1874.266415][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1874.279571][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1874.282294][ T5242] Bluetooth: hci1: command tx timeout
[ 1874.296639][   T62] bridge_slave_0: left allmulticast mode
[ 1874.302348][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1874.302379][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1874.302428][ T5280] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[ 1874.302455][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1874.345669][ T5280] usb 3-1: config 0 descriptor??
[ 1874.357244][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1874.377177][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1874.389355][ T5290] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1874.392222][   T62] bridge_slave_0: left promiscuous mode
[ 1874.408684][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1874.409379][ T5290] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[ 1874.431161][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1874.453152][ T5290] usb 5-1: config 0 descriptor??
[ 1874.601055][   T62] ip6gretap0 (unregistering): left promiscuous mode
[ 1874.878796][ T5280] logitech-hidpp-device 0003:046D:C262.0068: collection stack underflow
[ 1874.904103][ T5280] logitech-hidpp-device 0003:046D:C262.0068: item 0 2 0 12 parsing failed
[ 1874.928124][ T5280] logitech-hidpp-device 0003:046D:C262.0068: hidpp_probe:parse failed
[ 1874.949846][ T5280] logitech-hidpp-device 0003:046D:C262.0068: probe with driver logitech-hidpp-device failed with error -22
[ 1875.181952][  T943] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1875.371474][  T943] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[ 1875.387206][  T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1875.387967][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1875.396044][  T943] usb 4-1: Product: syz
[ 1875.410765][  T943] usb 4-1: Manufacturer: syz
[ 1875.415826][  T943] usb 4-1: SerialNumber: syz
[ 1875.425347][  T943] usb 4-1: config 0 descriptor??
[ 1875.436856][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1875.438071][  T943] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[ 1875.457104][  T943] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5
[ 1875.460080][   T62] bond0 (unregistering): Released all slaves
[ 1875.477654][  T943] usb-storage 4-1:0.0: USB Mass Storage device detected
[ 1875.492991][  T943] usb-storage 4-1:0.0: device ignored
[ 1875.565249][T31575] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1875.575143][T31575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1875.617738][T31575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1875.661359][ T5280] usb 4-1: USB disconnect, device number 2
[ 1875.710928][ T5290] usbhid 5-1:0.0: can't add hid device: -71
[ 1875.724773][ T5290] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1875.771983][ T5290] usb 5-1: USB disconnect, device number 119
[ 1875.798187][T31575] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1875.822017][T31575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1875.856363][T31575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1875.931100][T31624] sctp: [Deprecated]: syz.0.5357 (pid 31624) Use of int in max_burst socket option deprecated.
[ 1875.931100][T31624] Use struct sctp_assoc_value instead
[ 1876.093961][   T62] batadv_slave_1: left promiscuous mode
[ 1876.114597][   T62] hsr_slave_0: left promiscuous mode
[ 1876.125628][   T62] hsr_slave_1: left promiscuous mode
[ 1876.135957][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1876.144245][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1876.153411][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1876.161087][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1876.209245][   T62] veth1_macvtap: left promiscuous mode
[ 1876.221017][   T62] veth0_macvtap: left promiscuous mode
[ 1876.242074][   T62] veth1_vlan: left promiscuous mode
[ 1876.248583][   T62] veth0_vlan: left promiscuous mode
[ 1876.312040][ T5280] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1876.362100][ T5242] Bluetooth: hci1: command tx timeout
[ 1876.482146][ T5280] usb 1-1: device descriptor read/64, error -71
[ 1876.496612][T31639] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5359'.
[ 1876.762046][ T5280] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1876.829646][  T943] usb 3-1: USB disconnect, device number 113
[ 1876.933539][ T5280] usb 1-1: device descriptor read/64, error -71
[ 1877.074626][ T5280] usb usb1-port1: attempt power cycle
[ 1877.511955][ T5290] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1877.551963][ T5280] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1877.603255][ T5280] usb 1-1: device descriptor read/8, error -71
[ 1877.692036][ T5290] usb 3-1: device descriptor read/64, error -71
[ 1877.885315][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 1877.892224][ T5280] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1877.925356][ T5280] usb 1-1: device descriptor read/8, error -71
[ 1877.959449][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 1877.993899][ T5290] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1878.054324][ T5280] usb usb1-port1: unable to enumerate USB device
[ 1878.151998][ T5290] usb 3-1: device descriptor read/64, error -71
[ 1878.287794][ T5290] usb usb3-port1: attempt power cycle
[ 1878.442076][ T5242] Bluetooth: hci1: command tx timeout
[ 1878.723003][ T5290] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1878.776117][ T5290] usb 3-1: device descriptor read/8, error -71
[ 1878.945447][T31575] hsr_slave_0: entered promiscuous mode
[ 1878.974031][T31575] hsr_slave_1: entered promiscuous mode
[ 1879.019651][T31668] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1©üU–¿Çxƒì'
[ 1879.044436][T31655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5364'.
[ 1879.056503][ T5290] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1879.114850][ T5290] usb 3-1: device descriptor read/8, error -71
[ 1879.273340][ T5290] usb usb3-port1: unable to enumerate USB device
[ 1879.463023][T31676] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1©üU–¿Çxƒì'
[ 1879.533193][ T5280] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1879.832591][ T5280] usb 4-1: Using ep0 maxpacket: 32
[ 1879.850170][ T5280] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1879.894930][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1879.911988][T14466] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1879.929100][ T5280] usb 4-1: config 0 descriptor??
[ 1879.975500][ T5280] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1880.027298][ T5280] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1880.092489][ T5280] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1880.128183][ T5280] usb 4-1: media controller created
[ 1880.142300][T14466] usb 1-1: Using ep0 maxpacket: 32
[ 1880.158344][T14466] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1880.202023][T14466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1880.287488][T14466] usb 1-1: config 0 descriptor??
[ 1880.297361][ T5280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1880.373984][T14466] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1880.421794][ T5280] usb 4-1: selecting invalid altsetting 1
[ 1880.450813][T14466] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1880.463284][ T5280] set interface failed
[ 1880.463319][ T5280] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1880.506967][T14466] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1880.519052][ T5280] error writing reg: 0xff, val: 0x00
[ 1880.522256][ T5242] Bluetooth: hci1: command tx timeout
[ 1880.572332][T14466] usb 1-1: media controller created
[ 1880.753640][T14466] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1880.848346][T14466] usb 1-1: selecting invalid altsetting 1
[ 1880.882109][ T5292] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1880.937992][ T5280] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1880.948215][T14466] set interface failed
[ 1880.948249][T14466] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1880.982224][T14466] error writing reg: 0xff, val: 0x00
[ 1881.007272][T31575] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1881.106241][T31575] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1881.126321][T14466] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1881.150445][T31575] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1881.159665][ T5292] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1881.190210][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1881.210274][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1881.228794][ T5292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1881.257358][ T5292] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1881.289392][T31575] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1881.307967][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1881.364057][ T5292] usb 3-1: config 0 descriptor??
[ 1881.797570][T31575] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1881.849103][ T5292] usbhid 3-1:0.0: can't add hid device: -71
[ 1881.869511][T31575] 8021q: adding VLAN 0 to HW filter on device team0
[ 1881.889160][T29309] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1881.896361][T29309] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1881.923386][ T5292] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1881.959229][T29309] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1881.966443][T29309] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1882.021983][ T5292] usb 3-1: USB disconnect, device number 118
[ 1882.052308][ T5290] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1882.129533][  T943] usb 4-1: USB disconnect, device number 3
[ 1882.264789][ T5290] usb 5-1: config 36 has an invalid descriptor of length 121, skipping remainder of the config
[ 1882.293450][ T7218] usb 1-1: USB disconnect, device number 8
[ 1882.311781][ T5290] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1882.354716][ T5290] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 1882.368754][ T5290] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 1882.386319][ T5290] usb 5-1: Manufacturer: syz
[ 1882.391219][ T5290] usb 5-1: SerialNumber: syz
[ 1882.790406][T31575] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1882.836640][T31704] binder: 31701:31704 unknown command 1953002597
[ 1882.845510][T31704] binder: 31701:31704 ioctl c0306201 20000080 returned -22
[ 1883.160399][   T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1883.241311][   T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1883.619525][   T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1883.711656][   T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1884.064330][   T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1884.089559][   T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1884.210422][T31575] veth0_vlan: entered promiscuous mode
[ 1884.296256][ T5290] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[ 1884.344545][ T5290] usb 5-1: USB disconnect, device number 120
[ 1884.363316][T26843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1884.386173][T26843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1884.394406][T26843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1884.403583][T26843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1884.413330][T26843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1884.438347][T26843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1884.450188][   T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1884.463009][   T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1884.527823][T31741] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5379'.
[ 1884.569241][T31741] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1884.603216][T31575] veth1_vlan: entered promiscuous mode
[ 1884.755048][T31749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5380'.
[ 1884.772688][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1884.785794][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1884.794768][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1884.804817][T31749] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1884.814324][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1884.818272][T31575] veth0_macvtap: entered promiscuous mode
[ 1884.832191][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1884.839560][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1884.968185][T31575] veth1_macvtap: entered promiscuous mode
[ 1885.114550][  T943] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1885.143861][   T62] bridge_slave_1: left allmulticast mode
[ 1885.150393][   T62] bridge_slave_1: left promiscuous mode
[ 1885.181299][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1885.204004][   T62] bridge_slave_0: left allmulticast mode
[ 1885.209682][   T62] bridge_slave_0: left promiscuous mode
[ 1885.221148][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1885.290474][T31761] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1©üU–¿Çxƒì'
[ 1885.376273][  T943] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1885.393890][  T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1885.417470][  T943] usb 5-1: Product: syz
[ 1885.429550][  T943] usb 5-1: Manufacturer: syz
[ 1885.451387][  T943] usb 5-1: SerialNumber: syz
[ 1885.508766][  T943] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1885.542346][ T5292] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1885.694420][   T46] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1885.892077][   T46] usb 3-1: Using ep0 maxpacket: 32
[ 1885.910990][   T46] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1885.951355][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1886.061010][   T46] usb 3-1: config 0 descriptor??
[ 1886.094941][   T46] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1886.133302][   T46] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1886.197978][   T46] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1886.227004][   T46] usb 3-1: media controller created
[ 1886.373900][   T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1886.443915][   T46] usb 3-1: selecting invalid altsetting 1
[ 1886.467003][   T46] set interface failed
[ 1886.467035][   T46] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1886.512518][   T46] error writing reg: 0xff, val: 0x00
[ 1886.522689][T26843] Bluetooth: hci0: command tx timeout
[ 1886.682189][ T5292] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1886.708233][ T5292] ath9k_htc: Failed to initialize the device
[ 1886.750577][ T5292] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1886.779288][   T46] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1886.922132][T26843] Bluetooth: hci3: command tx timeout
[ 1887.184464][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1887.219434][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1887.260296][   T62] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[ 1887.289426][   T62] bond0 (unregistering): Released all slaves
[ 1887.418509][T31575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1887.444043][T31575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1887.472804][T31575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1887.508646][T31575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1887.529966][T31575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1887.545515][T31575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1887.593896][T31575] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1887.618157][T31745] chnl_net:caif_netlink_parms(): no params data found
[ 1887.828895][T31575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1887.841127][T31575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1887.852008][T31575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1887.864746][T31575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1887.876080][T31575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1887.890755][T31575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1887.912494][T31575] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1888.244790][   T46] usb 3-1: USB disconnect, device number 119
[ 1888.378272][T31575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1888.424011][T31575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1888.452343][T31575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1888.471961][T31575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1888.529242][   T46] usb 5-1: USB disconnect, device number 121
[ 1888.582659][   T62] hsr_slave_0: left promiscuous mode
[ 1888.592327][   T62] hsr_slave_1: left promiscuous mode
[ 1888.602738][T26843] Bluetooth: hci0: command tx timeout
[ 1888.630202][   T62] veth1_macvtap: left promiscuous mode
[ 1888.636041][   T62] veth0_macvtap: left promiscuous mode
[ 1888.641713][   T62] veth1_vlan: left promiscuous mode
[ 1888.648729][   T62] veth0_vlan: left promiscuous mode
[ 1888.741367][T31788] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1©üU–¿Çxƒì'
[ 1889.010020][T26843] Bluetooth: hci3: command tx timeout
[ 1889.162324][   T46] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1889.372026][   T46] usb 5-1: Using ep0 maxpacket: 32
[ 1889.384485][   T46] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1889.394771][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1889.425498][   T46] usb 5-1: config 0 descriptor??
[ 1889.461211][   T46] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1889.495706][   T46] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1889.523601][   T46] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1889.532155][   T46] usb 5-1: media controller created
[ 1889.603059][   T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1889.671605][   T46] usb 5-1: selecting invalid altsetting 1
[ 1889.695015][   T46] set interface failed
[ 1889.695053][   T46] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1889.710638][   T46] error writing reg: 0xff, val: 0x00
[ 1889.799754][   T46] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1890.088676][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 1890.180645][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 1890.682004][T26843] Bluetooth: hci0: command tx timeout
[ 1891.082068][T26843] Bluetooth: hci3: command tx timeout
[ 1891.247140][T31745] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1891.268692][T31745] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1891.278107][T31745] bridge_slave_0: entered allmulticast mode
[ 1891.288999][T31745] bridge_slave_0: entered promiscuous mode
[ 1891.365769][T31745] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1891.397491][T31745] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1891.405469][T31745] bridge_slave_1: entered allmulticast mode
[ 1891.417447][T31745] bridge_slave_1: entered promiscuous mode
[ 1891.557504][T31745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1891.682620][T31745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1891.706120][ T5290] usb 5-1: USB disconnect, device number 122
[ 1891.950789][T31745] team0: Port device team_slave_0 added
[ 1892.073607][T31745] team0: Port device team_slave_1 added
[ 1892.230218][T31755] chnl_net:caif_netlink_parms(): no params data found
[ 1892.277843][T31745] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1892.301793][T31745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1892.343845][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1892.345338][T31745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1892.366295][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1892.375093][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1892.391767][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1892.403109][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1892.411312][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1892.419217][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1892.427022][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1892.549395][T31745] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1892.585346][T31745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1892.649919][T31745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1892.762333][T26843] Bluetooth: hci0: command tx timeout
[ 1892.901113][T31745] hsr_slave_0: entered promiscuous mode
[ 1892.912497][T31745] hsr_slave_1: entered promiscuous mode
[ 1892.922662][T31745] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1892.930326][T31745] Cannot create hsr debugfs directory
[ 1892.975255][T15432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1893.032055][T15432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1893.101186][   T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1893.163664][T26843] Bluetooth: hci3: command tx timeout
[ 1893.193704][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1893.209600][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1893.219705][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1893.228602][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1893.237406][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1893.245133][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1893.405039][   T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1893.470006][T31755] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1893.492230][T31755] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1893.541499][T31755] bridge_slave_0: entered allmulticast mode
[ 1893.549527][T31755] bridge_slave_0: entered promiscuous mode
[ 1893.566089][T31755] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1893.578379][T31755] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1893.588379][T31755] bridge_slave_1: entered allmulticast mode
[ 1893.597587][T31821] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1©üU–¿Çxƒì'
[ 1893.608606][T31755] bridge_slave_1: entered promiscuous mode
[ 1893.721162][   T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1893.959270][   T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1894.001952][T24037] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1894.100097][T31755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1894.212283][T24037] usb 2-1: Using ep0 maxpacket: 32
[ 1894.225659][T31755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1894.271956][T24037] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1894.291599][T24037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1894.331408][T24037] usb 2-1: config 0 descriptor??
[ 1894.390863][T24037] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1894.440046][T24037] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1894.476694][T24037] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1894.501957][T24037] usb 2-1: media controller created
[ 1894.537706][ T5242] Bluetooth: hci2: command tx timeout
[ 1894.654438][T24037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1894.746627][T24037] usb 2-1: selecting invalid altsetting 1
[ 1894.761893][T24037] set interface failed
[ 1894.761929][T24037] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1894.769465][T31755] team0: Port device team_slave_0 added
[ 1894.801115][T31755] team0: Port device team_slave_1 added
[ 1894.830949][T24037] error writing reg: 0xff, val: 0x00
[ 1895.004939][T31803] chnl_net:caif_netlink_parms(): no params data found
[ 1895.026314][T24037] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1895.196269][T31755] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1895.222105][T31755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1895.261693][T31755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1895.322079][ T5242] Bluetooth: hci4: command tx timeout
[ 1895.379350][T31755] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1895.389198][T31755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1895.441696][T31755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1895.909325][   T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1895.974302][T31755] hsr_slave_0: entered promiscuous mode
[ 1895.991536][T31755] hsr_slave_1: entered promiscuous mode
[ 1896.005785][T31755] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1896.021298][T31755] Cannot create hsr debugfs directory
[ 1896.088159][   T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1896.226341][   T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1896.528087][   T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1896.542060][T24037] usb 2-1: USB disconnect, device number 39
[ 1896.602145][ T5242] Bluetooth: hci2: command tx timeout
[ 1896.616695][T31803] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1896.636780][T31803] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1896.667198][T31803] bridge_slave_0: entered allmulticast mode
[ 1896.683917][T31803] bridge_slave_0: entered promiscuous mode
[ 1896.703967][T31803] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1896.711148][T31803] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1896.729319][T31803] bridge_slave_1: entered allmulticast mode
[ 1896.739583][T31803] bridge_slave_1: entered promiscuous mode
[ 1896.789387][T31816] chnl_net:caif_netlink_parms(): no params data found
[ 1897.018913][T31803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1897.039926][T31803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1897.053093][T31745] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1897.079724][T31745] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1897.250849][T31745] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1897.333411][T31803] team0: Port device team_slave_0 added
[ 1897.348160][T31803] team0: Port device team_slave_1 added
[ 1897.359792][T31745] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1897.402100][ T5242] Bluetooth: hci4: command tx timeout
[ 1897.621302][T31755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1897.765249][T31816] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1897.777502][T26843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1897.790431][T31816] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1897.798026][T26843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1897.808970][T31816] bridge_slave_0: entered allmulticast mode
[ 1897.822210][T26843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1897.824012][T31816] bridge_slave_0: entered promiscuous mode
[ 1897.848837][T26843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1897.858041][T31816] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1897.872361][T31816] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1897.879745][T31816] bridge_slave_1: entered allmulticast mode
[ 1897.887333][T26843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1897.902058][T26843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1897.936138][T31816] bridge_slave_1: entered promiscuous mode
[ 1898.026442][T31755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1898.079500][T31803] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1898.101264][T31803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1898.148373][T31803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1898.268471][T31755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1898.289476][T31803] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1898.297070][T31803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1898.326233][T31803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1898.388056][T31816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1898.400962][T31816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1898.459061][T31755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1898.557254][T31816] team0: Port device team_slave_0 added
[ 1898.569515][T31816] team0: Port device team_slave_1 added
[ 1898.671313][T31803] hsr_slave_0: entered promiscuous mode
[ 1898.678173][T31803] hsr_slave_1: entered promiscuous mode
[ 1898.685011][T31803] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1898.692869][ T5242] Bluetooth: hci2: command tx timeout
[ 1898.699653][T31803] Cannot create hsr debugfs directory
[ 1898.708480][   T62] bridge_slave_1: left allmulticast mode
[ 1898.721989][   T62] bridge_slave_1: left promiscuous mode
[ 1898.727753][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1898.743480][   T62] bridge_slave_0: left allmulticast mode
[ 1898.749140][   T62] bridge_slave_0: left promiscuous mode
[ 1898.755072][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1898.775646][   T62] bridge_slave_1: left allmulticast mode
[ 1898.781310][   T62] bridge_slave_1: left promiscuous mode
[ 1898.787873][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1898.801726][   T62] bridge_slave_0: left allmulticast mode
[ 1898.807713][   T62] bridge_slave_0: left promiscuous mode
[ 1898.822154][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1898.833407][   T62] bridge_slave_1: left allmulticast mode
[ 1898.839083][   T62] bridge_slave_1: left promiscuous mode
[ 1898.851752][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1898.862099][   T62] bridge_slave_0: left allmulticast mode
[ 1898.867774][   T62] bridge_slave_0: left promiscuous mode
[ 1898.874312][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1899.109067][   T62] ip6gretap0 (unregistering): left promiscuous mode
[ 1899.200179][   T62] ip6gretap0 (unregistering): left promiscuous mode
[ 1899.491924][ T5242] Bluetooth: hci4: command tx timeout
[ 1899.976091][ T5242] Bluetooth: hci1: command tx timeout
[ 1900.260253][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1900.276770][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1900.291491][   T62] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[ 1900.308381][   T62] team0: left allmulticast mode
[ 1900.313567][   T62] team_slave_0: left allmulticast mode
[ 1900.319044][   T62] team_slave_1: left allmulticast mode
[ 1900.325294][   T62] team_slave_0: left promiscuous mode
[ 1900.330749][   T62] team_slave_1: left promiscuous mode
[ 1900.338253][   T62] bond0 (unregistering): Released all slaves
[ 1900.540976][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1900.555981][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1900.568013][   T62] bond0 (unregistering): Released all slaves
[ 1900.764637][ T5242] Bluetooth: hci2: command tx timeout
[ 1900.771240][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1900.783724][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1900.795958][   T62] bond0 (unregistering): Released all slaves
[ 1900.834187][T31816] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1900.841257][T31816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1900.870566][T31816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1901.078381][T31816] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1901.087790][T31816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1901.115875][T31816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1901.304844][T31816] hsr_slave_0: entered promiscuous mode
[ 1901.311372][T31816] hsr_slave_1: entered promiscuous mode
[ 1901.322445][T31816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1901.330058][T31816] Cannot create hsr debugfs directory
[ 1901.387816][T31755] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1901.400407][T31755] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1901.550945][T31755] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1901.562022][ T5242] Bluetooth: hci4: command tx timeout
[ 1901.577172][T31755] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1902.010261][T31745] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1902.042002][ T5242] Bluetooth: hci1: command tx timeout
[ 1902.257427][T31745] 8021q: adding VLAN 0 to HW filter on device team0
[ 1902.278947][T31877] chnl_net:caif_netlink_parms(): no params data found
[ 1902.517878][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1902.525232][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1902.539542][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1902.546776][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1902.891038][T31877] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1902.899380][T31877] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1902.907970][T31877] bridge_slave_0: entered allmulticast mode
[ 1902.916933][T31877] bridge_slave_0: entered promiscuous mode
[ 1902.925997][   T62] batadv_slave_1: left promiscuous mode
[ 1902.938894][   T62] hsr_slave_0: left promiscuous mode
[ 1902.945290][   T62] hsr_slave_1: left promiscuous mode
[ 1902.951364][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1902.960141][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1902.974086][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1902.981528][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1902.994823][   T62] hsr_slave_0: left promiscuous mode
[ 1903.001049][   T62] hsr_slave_1: left promiscuous mode
[ 1903.011701][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1903.020709][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1903.031168][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1903.038925][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1903.049452][   T62] batadv_slave_1: left promiscuous mode
[ 1903.059763][   T62] hsr_slave_0: left promiscuous mode
[ 1903.068895][   T62] hsr_slave_1: left promiscuous mode
[ 1903.075719][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1903.083676][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1903.091787][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1903.099555][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1903.169157][   T62] veth1_macvtap: left promiscuous mode
[ 1903.175875][   T62] veth0_macvtap: left promiscuous mode
[ 1903.181476][   T62] veth1_vlan: left promiscuous mode
[ 1903.187281][   T62] veth0_vlan: left promiscuous mode
[ 1903.196585][   T62] veth1_macvtap: left promiscuous mode
[ 1903.202232][   T62] veth0_macvtap: left promiscuous mode
[ 1903.207902][   T62] veth1_vlan: left promiscuous mode
[ 1903.213601][   T62] veth0_vlan: left promiscuous mode
[ 1903.220844][   T62] veth1_macvtap: left promiscuous mode
[ 1903.226796][   T62] veth0_macvtap: left promiscuous mode
[ 1903.233611][   T62] veth1_vlan: left promiscuous mode
[ 1903.238949][   T62] veth0_vlan: left promiscuous mode
[ 1904.132037][ T5242] Bluetooth: hci1: command tx timeout
[ 1904.279328][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 1904.349844][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 1905.737309][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 1905.809240][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 1906.203902][ T5242] Bluetooth: hci1: command tx timeout
[ 1907.129749][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 1907.217538][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 1907.911355][T31877] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1907.919119][T31877] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1907.927607][T31877] bridge_slave_1: entered allmulticast mode
[ 1907.935849][T31877] bridge_slave_1: entered promiscuous mode
[ 1908.083589][T31877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1908.119497][T31803] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1908.157225][T31877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1908.252526][T31803] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1908.277247][T31755] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1908.330304][T31877] team0: Port device team_slave_0 added
[ 1908.459425][T31803] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1908.514063][T31803] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1908.545359][T31877] team0: Port device team_slave_1 added
[ 1908.727831][T31755] 8021q: adding VLAN 0 to HW filter on device team0
[ 1908.756301][T31877] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1908.764936][T31877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1908.807400][T31877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1908.844976][T31877] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1908.887364][T31877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1908.932318][T31877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1908.951656][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1908.958839][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1909.010633][T31745] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1909.075812][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1909.083060][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1909.318103][T31877] hsr_slave_0: entered promiscuous mode
[ 1909.336787][T31877] hsr_slave_1: entered promiscuous mode
[ 1909.343326][T31877] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1909.350919][T31877] Cannot create hsr debugfs directory
[ 1909.430222][T31745] veth0_vlan: entered promiscuous mode
[ 1909.508634][T31745] veth1_vlan: entered promiscuous mode
[ 1909.608401][T31755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1909.640198][T31816] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1909.661675][T31816] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1909.679846][T31816] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1909.703910][T31816] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1909.927754][T31755] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1910.020192][T31877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1910.134919][T31877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1910.271448][T31877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1910.327788][T31745] veth0_macvtap: entered promiscuous mode
[ 1910.393810][T31877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1910.416784][T31803] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1910.482936][T31745] veth1_macvtap: entered promiscuous mode
[ 1910.500607][T31755] veth0_vlan: entered promiscuous mode
[ 1910.633982][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1910.661898][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1910.680622][T31745] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1910.710797][   T62] bridge_slave_1: left allmulticast mode
[ 1910.727388][   T62] bridge_slave_1: left promiscuous mode
[ 1910.737512][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1910.757636][   T62] bridge_slave_0: left allmulticast mode
[ 1910.769020][   T62] bridge_slave_0: left promiscuous mode
[ 1910.782680][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1911.371383][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1911.390482][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1911.401558][   T62] bond0 (unregistering): Released all slaves
[ 1911.425395][T31803] 8021q: adding VLAN 0 to HW filter on device team0
[ 1911.450676][T31755] veth1_vlan: entered promiscuous mode
[ 1911.495629][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1911.518056][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1911.531730][T31745] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1911.545387][T31745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.563248][T31745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.580767][T31745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.589947][T31745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1911.640647][T31816] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1911.678988][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1911.686229][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1911.706065][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1911.713322][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1912.004504][T31816] 8021q: adding VLAN 0 to HW filter on device team0
[ 1912.027449][T31755] veth0_macvtap: entered promiscuous mode
[ 1912.119578][T31877] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1912.145638][T31803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1912.166693][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1912.173919][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1912.189862][T31755] veth1_macvtap: entered promiscuous mode
[ 1912.234467][T31877] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1912.278234][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1912.285459][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1912.321617][T31877] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1912.344984][T31877] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1912.382151][   T62] hsr_slave_0: left promiscuous mode
[ 1912.388350][   T62] hsr_slave_1: left promiscuous mode
[ 1912.403870][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1912.411611][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1912.424947][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1912.439800][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1912.478475][   T62] veth1_macvtap: left promiscuous mode
[ 1912.492103][   T62] veth0_macvtap: left promiscuous mode
[ 1912.497854][   T62] veth1_vlan: left promiscuous mode
[ 1912.503494][   T62] veth0_vlan: left promiscuous mode
[ 1913.556710][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 1913.627441][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 1914.321276][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1914.343458][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1914.390183][T31755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1914.417030][T31755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.439219][T31755] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1914.517769][T31755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1914.530556][T31755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.554471][T31755] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1914.563316][T29304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1914.572162][T29304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1914.625428][T31803] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1914.662750][T31755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1914.671586][T31755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1914.684676][T31755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1914.693757][T31755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1914.923922][T31816] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1914.936649][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.944055][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.081201][T29309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1915.108702][T31803] veth0_vlan: entered promiscuous mode
[ 1915.121012][T29309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1915.174241][T31816] veth0_vlan: entered promiscuous mode
[ 1915.246661][T31816] veth1_vlan: entered promiscuous mode
[ 1915.284584][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1915.287470][T31803] veth1_vlan: entered promiscuous mode
[ 1915.306617][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1915.378113][T31877] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1915.509425][T31877] 8021q: adding VLAN 0 to HW filter on device team0
[ 1915.539274][T31816] veth0_macvtap: entered promiscuous mode
[ 1915.588417][T31803] veth0_macvtap: entered promiscuous mode
[ 1915.634887][T31816] veth1_macvtap: entered promiscuous mode
[ 1915.675593][T31803] veth1_macvtap: entered promiscuous mode
[ 1915.712688][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1915.719961][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1915.757337][T15432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1915.764562][T15432] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1915.838970][T31816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1915.871138][T31816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1915.899441][T31816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1915.955316][T31816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1915.983895][T31816] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1916.027969][T32028] libceph: resolve '0' (ret=-3): failed
[ 1916.064477][T31816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1916.090795][T31816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1916.100829][T31816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1916.119193][T31816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1916.148137][T31816] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1916.189559][T31816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1916.210773][T31816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1916.235950][T31816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1916.253162][T31816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1916.300898][T31803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1916.313794][   T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1916.341937][T31803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1916.378450][T31803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1916.396060][T31803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1916.415334][T31803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1916.441212][T31803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1916.458437][T31803] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1916.481292][T31803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1916.499040][T31803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1916.517148][T31803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1916.529233][T31803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1916.541189][T31803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1916.553317][T31803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1916.564819][   T46] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1916.570589][T31803] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1916.574436][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1916.601004][T31803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1916.612575][T31803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1916.613235][   T46] usb 4-1: Product: syz
[ 1916.621290][T31803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1916.636857][T31803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1916.647552][   T46] usb 4-1: Manufacturer: syz
[ 1916.676759][   T46] usb 4-1: SerialNumber: syz
[ 1916.697642][   T46] usb 4-1: config 0 descriptor??
[ 1916.734118][   T29] kauditd_printk_skb: 43 callbacks suppressed
[ 1916.734135][   T29] audit: type=1326 audit(1725846231.236:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32036 comm="syz.0.5396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b3257cef9 code=0x0
[ 1916.918135][T31877] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1916.933790][   T46] hso 4-1:0.0: Failed to find BULK IN ep
[ 1916.940977][T29304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1916.949749][T29304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1916.975131][   T46] usb-storage 4-1:0.0: USB Mass Storage device detected
[ 1917.061682][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1917.114502][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1917.169691][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1917.183604][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1917.290208][T29304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1917.295069][T31877] veth0_vlan: entered promiscuous mode
[ 1917.300832][T29304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1917.369814][T31877] veth1_vlan: entered promiscuous mode
[ 1917.434845][ T5311] usb 4-1: USB disconnect, device number 4
[ 1917.484490][T31877] veth0_macvtap: entered promiscuous mode
[ 1917.513719][T31877] veth1_macvtap: entered promiscuous mode
[ 1917.559642][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1917.591391][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.617195][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1917.646398][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.668418][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1917.679400][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.690562][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1917.728264][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.770188][T31877] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1917.817634][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1917.855286][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.867145][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1917.880766][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.898967][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1917.910911][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1917.916895][T32057] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1©üU–¿Çxƒì'
[ 1917.929533][T31877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1917.989398][T31877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1918.016638][T31877] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1918.079179][T31877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1918.129071][T31877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1918.168696][T31877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1918.191591][T31877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1918.262774][T32060] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5399'.
[ 1918.281144][T32060] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1918.341945][ T5311] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1918.572071][ T5311] usb 1-1: Using ep0 maxpacket: 32
[ 1918.596885][T29296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1918.621561][ T5311] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1918.645369][T29296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1918.662182][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1918.707670][ T5311] usb 1-1: config 0 descriptor??
[ 1918.734979][ T5311] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1918.767655][ T5311] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1918.804610][ T5311] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1918.831151][ T5311] usb 1-1: media controller created
[ 1918.900199][ T5311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1918.902004][  T943] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[ 1918.971624][ T5311] usb 1-1: selecting invalid altsetting 1
[ 1919.013013][ T5311] set interface failed
[ 1919.013054][ T5311] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1919.045846][ T5311] error writing reg: 0xff, val: 0x00
[ 1919.105551][ T5311] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1919.147004][  T943] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1919.185091][  T943] usb 3-1: not running at top speed; connect to a high speed hub
[ 1919.219450][  T943] usb 3-1: config 4 has an invalid interface number: 235 but max is 0
[ 1919.244996][  T943] usb 3-1: config 4 has no interface number 0
[ 1919.273055][  T943] usb 3-1: config 4 interface 235 has no altsetting 0
[ 1919.298811][  T943] usb 3-1: New USB device found, idVendor=0846, idProduct=4251, bcdDevice=49.d3
[ 1919.310876][  T943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1919.354741][  T943] usb 3-1: Product: syz
[ 1919.377695][  T943] usb 3-1: Manufacturer: syz
[ 1919.388907][  T943] usb 3-1: SerialNumber: syz
[ 1919.642491][T32066] x_tables: duplicate underflow at hook 1
[ 1919.716814][T32066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1919.762463][T32066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1919.887687][  T943] usb 3-1: Could not find all expected endpoints
[ 1919.957925][  T943] usb 3-1: USB disconnect, device number 120
[ 1920.061233][T32078] Cannot find set identified by id 0 to match
[ 1920.630865][T15432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1920.678851][T15432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1920.769158][   T46] usb 1-1: USB disconnect, device number 9
[ 1920.988969][T32088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5405'.
[ 1921.001670][T32088] bridge0: entered allmulticast mode
[ 1921.016249][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies.
[ 1921.542045][ T5290] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1921.640323][   T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1921.772102][ T5290] usb 2-1: Using ep0 maxpacket: 32
[ 1921.781300][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1921.803786][ T5290] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48
[ 1921.839271][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1921.874780][ T5290] usb 2-1: Product: syz
[ 1921.879008][ T5290] usb 2-1: Manufacturer: syz
[ 1921.925810][ T5290] usb 2-1: SerialNumber: syz
[ 1921.941056][ T5290] usb 2-1: config 0 descriptor??
[ 1922.034074][   T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1922.089797][T32115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5416'.
[ 1922.184907][T32114] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1©üU–¿Çxƒì'
[ 1922.226588][ T5290] usb 2-1: USB disconnect, device number 40
[ 1922.311600][   T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1922.484337][   T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1922.497932][T26843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1922.510378][T26843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1922.524643][T26843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1922.548050][T26843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1922.556129][T26843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1922.564351][T26843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1922.604189][T32039] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1922.792156][T32039] usb 4-1: Using ep0 maxpacket: 32
[ 1922.828132][T32039] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1922.880997][T32039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1922.965174][T32039] usb 4-1: config 0 descriptor??
[ 1923.011701][T32039] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1923.042058][ T5290] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1923.069608][T32039] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1923.110007][T32039] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1923.194625][T32039] usb 4-1: media controller created
[ 1923.207636][   T52] bridge_slave_1: left allmulticast mode
[ 1923.229230][   T52] bridge_slave_1: left promiscuous mode
[ 1923.271979][   T46] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1923.282033][ T5290] usb 3-1: Using ep0 maxpacket: 16
[ 1923.305719][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1923.314713][T32039] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1923.336650][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1923.383609][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1923.404959][   T52] bridge_slave_0: left allmulticast mode
[ 1923.426725][T32039] usb 4-1: selecting invalid altsetting 1
[ 1923.436618][   T52] bridge_slave_0: left promiscuous mode
[ 1923.450194][ T5290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1923.464735][T32039] set interface failed
[ 1923.464768][T32039] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1923.472476][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1923.476008][T32039] error writing reg: 0xff, val: 0x00
[ 1923.489477][ T5290] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1923.532032][   T46] usb 2-1: Using ep0 maxpacket: 16
[ 1923.556096][   T46] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1923.575962][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1923.597650][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1923.625682][ T5290] usb 3-1: config 0 descriptor??
[ 1923.653474][   T46] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1923.667442][T32039] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1923.679023][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1923.703285][   T46] usb 2-1: Product: syz
[ 1923.707637][   T46] usb 2-1: Manufacturer: syz
[ 1923.712619][   T46] usb 2-1: SerialNumber: syz
[ 1923.729112][   T46] usb 2-1: config 0 descriptor??
[ 1923.739339][   T46] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1923.757612][   T46] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 1924.343813][   T46] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1924.353055][   T46] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[ 1924.561739][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1924.604273][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1924.604489][T26843] Bluetooth: hci3: command tx timeout
[ 1924.646185][   T52] bond0 (unregistering): Released all slaves
[ 1924.981340][   T46] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[ 1924.993762][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 2
[ 1925.009613][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 4
[ 1925.029472][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 6
[ 1925.043693][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 54
[ 1925.289183][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 56
[ 1925.326846][ T5280] usb 4-1: USB disconnect, device number 5
[ 1925.453737][ T5290] usbhid 3-1:0.0: can't add hid device: -71
[ 1925.466949][ T5290] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1925.509259][ T5290] usb 3-1: USB disconnect, device number 121
[ 1925.575368][T32125] chnl_net:caif_netlink_parms(): no params data found
[ 1925.882617][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 2
[ 1925.889097][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 4
[ 1925.917901][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 6
[ 1925.940988][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 54
[ 1925.997057][   T46] em28xx 2-1:0.0: couldn't setup AC97 register 56
[ 1926.041385][   T46] usb 2-1: USB disconnect, device number 41
[ 1926.095728][T32131] netlink: 'syz.1.5419': attribute type 29 has an invalid length.
[ 1926.115042][T32146] netlink: 'syz.1.5419': attribute type 29 has an invalid length.
[ 1926.334168][T32149] netlink: 'syz.1.5419': attribute type 29 has an invalid length.
[ 1926.524854][   T52] hsr_slave_0: left promiscuous mode
[ 1926.532448][   T52] hsr_slave_1: left promiscuous mode
[ 1926.647904][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1926.657546][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1926.676944][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1926.685748][ T5242] Bluetooth: hci3: command tx timeout
[ 1926.702477][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1926.710042][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1926.719448][T32163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1926.728599][T32163] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1926.744878][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1926.752858][T32163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1926.760703][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1926.914082][   T52] veth1_macvtap: left promiscuous mode
[ 1926.919798][   T52] veth0_macvtap: left promiscuous mode
[ 1926.959636][   T52] veth1_vlan: left promiscuous mode
[ 1926.973837][   T52] veth0_vlan: left promiscuous mode
[ 1927.328033][T32163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1927.339239][T32163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1927.346662][   T46] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1927.372244][T32163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1927.391353][T32163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1927.417821][T32163] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1927.430999][T32163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1927.565236][   T46] usb 2-1: config 0 has an invalid interface number: 29 but max is 0
[ 1927.573733][   T46] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 1927.582868][   T46] usb 2-1: config 0 has no interface number 0
[ 1927.590367][   T46] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023
[ 1927.600746][   T46] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1927.610900][   T46] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1927.624249][   T46] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61
[ 1927.633633][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1927.641666][   T46] usb 2-1: Product: syz
[ 1927.646641][   T46] usb 2-1: Manufacturer: syz
[ 1927.651290][   T46] usb 2-1: SerialNumber: syz
[ 1927.673289][   T46] usb 2-1: config 0 descriptor??
[ 1927.684562][T32169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1927.696723][   T46] kvaser_usb 2-1:0.29: Cannot get usb endpoint(s)
[ 1927.990597][T32169] =======================================================
[ 1927.990597][T32169] WARNING: The mand mount option has been deprecated and
[ 1927.990597][T32169]          and is ignored by this kernel. Remove the mand
[ 1927.990597][T32169]          option from the mount to silence this warning.
[ 1927.990597][T32169] =======================================================
[ 1928.041768][T32169] 
[ 1928.044152][T32169] =====================================================
[ 1928.051101][T32169] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1928.058570][T32169] 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 Not tainted
[ 1928.065692][T32169] -----------------------------------------------------
[ 1928.072644][T32169] syz.1.5429/32169 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1928.080364][T32169] ffffffff8e60a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xfc/0x360
[ 1928.088916][T32169] 
[ 1928.088916][T32169] and this task is already holding:
[ 1928.096302][T32169] ffff888011983518 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x33/0x360
[ 1928.105120][T32169] which would create a new lock dependency:
[ 1928.111021][T32169]  (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2}
[ 1928.118877][T32169] 
[ 1928.118877][T32169] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1928.128329][T32169]  (&dev->event_lock#2){..-.}-{2:2}
[ 1928.128365][T32169] 
[ 1928.128365][T32169] ... which became SOFTIRQ-irq-safe at:
[ 1928.141277][T32169]   lock_acquire+0x1ed/0x550
[ 1928.145884][T32169]   _raw_spin_lock_irqsave+0xd5/0x120
[ 1928.151265][T32169]   input_inject_event+0xc5/0x340
[ 1928.156296][T32169]   led_trigger_event+0x138/0x210
[ 1928.161328][T32169]   kbd_bh+0x1b5/0x290
[ 1928.165396][T32169]   tasklet_action_common+0x321/0x4d0
[ 1928.170774][T32169]   handle_softirqs+0x2c4/0x970
[ 1928.175627][T32169]   run_ksoftirqd+0xca/0x130
[ 1928.180224][T32169]   smpboot_thread_fn+0x544/0xa30
[ 1928.185251][T32169]   kthread+0x2f0/0x390
[ 1928.189416][T32169]   ret_from_fork+0x4b/0x80
[ 1928.193924][T32169]   ret_from_fork_asm+0x1a/0x30
[ 1928.198793][T32169] 
[ 1928.198793][T32169] to a SOFTIRQ-irq-unsafe lock:
[ 1928.205811][T32169]  (tasklist_lock){.+.+}-{2:2}
[ 1928.205841][T32169] 
[ 1928.205841][T32169] ... which became SOFTIRQ-irq-unsafe at:
[ 1928.218466][T32169] ...
[ 1928.218473][T32169]   lock_acquire+0x1ed/0x550
[ 1928.225637][T32169]   _raw_read_lock+0x36/0x50
[ 1928.230237][T32169]   __do_wait+0x12d/0x850
[ 1928.234562][T32169]   do_wait+0x1e9/0x560
[ 1928.238726][T32169]   kernel_wait+0xe9/0x240
[ 1928.243157][T32169]   call_usermodehelper_exec_work+0xbd/0x230
[ 1928.249146][T32169]   process_scheduled_works+0xa2c/0x1830
[ 1928.254789][T32169]   worker_thread+0x86d/0xd10
[ 1928.259471][T32169]   kthread+0x2f0/0x390
[ 1928.263625][T32169]   ret_from_fork+0x4b/0x80
[ 1928.268136][T32169]   ret_from_fork_asm+0x1a/0x30
[ 1928.272998][T32169] 
[ 1928.272998][T32169] other info that might help us debug this:
[ 1928.272998][T32169] 
[ 1928.283224][T32169] Chain exists of:
[ 1928.283224][T32169]   &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock
[ 1928.283224][T32169] 
[ 1928.296446][T32169]  Possible interrupt unsafe locking scenario:
[ 1928.296446][T32169] 
[ 1928.304767][T32169]        CPU0                    CPU1
[ 1928.310127][T32169]        ----                    ----
[ 1928.315489][T32169]   lock(tasklist_lock);
[ 1928.319735][T32169]                                local_irq_disable();
[ 1928.326483][T32169]                                lock(&dev->event_lock#2);
[ 1928.333691][T32169]                                lock(&f->f_owner.lock);
[ 1928.340715][T32169]   <Interrupt>
[ 1928.344165][T32169]     lock(&dev->event_lock#2);
[ 1928.349023][T32169] 
[ 1928.349023][T32169]  *** DEADLOCK ***
[ 1928.349023][T32169] 
[ 1928.357182][T32169] 3 locks held by syz.1.5429/32169:
[ 1928.362374][T32169]  #0: ffffffff9a3acab0 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: fsnotify+0x53d/0x1f70
[ 1928.371884][T32169]  #1: ffff888026840100 (&mark->lock){+.+.}-{2:2}, at: dnotify_handle_event+0x61/0x440
[ 1928.381554][T32169]  #2: ffff888011983518 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x33/0x360
[ 1928.390793][T32169] 
[ 1928.390793][T32169] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1928.401199][T32169]    -> (&dev->event_lock#2){..-.}-{2:2} {
[ 1928.407041][T32169]       IN-SOFTIRQ-W at:
[ 1928.411283][T32169]                           lock_acquire+0x1ed/0x550
[ 1928.417972][T32169]                           _raw_spin_lock_irqsave+0xd5/0x120
[ 1928.425445][T32169]                           input_inject_event+0xc5/0x340
[ 1928.432566][T32169]                           led_trigger_event+0x138/0x210
[ 1928.439673][T32169]                           kbd_bh+0x1b5/0x290
[ 1928.445825][T32169]                           tasklet_action_common+0x321/0x4d0
[ 1928.453289][T32169]                           handle_softirqs+0x2c4/0x970
[ 1928.460224][T32169]                           run_ksoftirqd+0xca/0x130
[ 1928.466899][T32169]                           smpboot_thread_fn+0x544/0xa30
[ 1928.474014][T32169]                           kthread+0x2f0/0x390
[ 1928.480252][T32169]                           ret_from_fork+0x4b/0x80
[ 1928.486864][T32169]                           ret_from_fork_asm+0x1a/0x30
[ 1928.493801][T32169]       INITIAL USE at:
[ 1928.497952][T32169]                          lock_acquire+0x1ed/0x550
[ 1928.504541][T32169]                          _raw_spin_lock_irqsave+0xd5/0x120
[ 1928.511924][T32169]                          input_inject_event+0xc5/0x340
[ 1928.518967][T32169]                          kbd_led_trigger_activate+0xb8/0x100
[ 1928.526510][T32169]                          led_trigger_set+0x582/0x9c0
[ 1928.533357][T32169]                          led_trigger_set_default+0x229/0x260
[ 1928.540892][T32169]                          led_classdev_register_ext+0x6e6/0x8a0
[ 1928.548614][T32169]                          input_leds_connect+0x489/0x630
[ 1928.555721][T32169]                          input_register_device+0xd3b/0x1110
[ 1928.563179][T32169]                          atkbd_connect+0x752/0xa00
[ 1928.569855][T32169]                          serio_driver_probe+0x7f/0xa0
[ 1928.576795][T32169]                          really_probe+0x2b8/0xad0
[ 1928.583383][T32169]                          __driver_probe_device+0x1a2/0x390
[ 1928.590754][T32169]                          driver_probe_device+0x50/0x430
[ 1928.597873][T32169]                          __driver_attach+0x45f/0x710
[ 1928.604718][T32169]                          bus_for_each_dev+0x239/0x2b0
[ 1928.611661][T32169]                          serio_handle_event+0x1c7/0x920
[ 1928.618793][T32169]                          process_scheduled_works+0xa2c/0x1830
[ 1928.626428][T32169]                          worker_thread+0x86d/0xd10
[ 1928.633114][T32169]                          kthread+0x2f0/0x390
[ 1928.639260][T32169]                          ret_from_fork+0x4b/0x80
[ 1928.645771][T32169]                          ret_from_fork_asm+0x1a/0x30
[ 1928.652629][T32169]     }
[ 1928.655382][T32169]     ... key      at: [<ffffffff9a6a4760>] input_allocate_device.__key.5+0x0/0x20
[ 1928.664678][T32169]   -> (&client->buffer_lock){....}-{2:2} {
[ 1928.670592][T32169]      INITIAL USE at:
[ 1928.674656][T32169]                        lock_acquire+0x1ed/0x550
[ 1928.681076][T32169]                        _raw_spin_lock+0x2e/0x40
[ 1928.687493][T32169]                        evdev_pass_values+0xf2/0xad0
[ 1928.694343][T32169]                        evdev_events+0x1c2/0x300
[ 1928.700760][T32169]                        input_pass_values+0x286/0x860
[ 1928.707697][T32169]                        input_event_dispose+0x30f/0x600
[ 1928.714729][T32169]                        input_handle_event+0xa71/0xbe0
[ 1928.721668][T32169]                        input_inject_event+0x22f/0x340
[ 1928.728624][T32169]                        evdev_write+0x672/0x7c0
[ 1928.734952][T32169]                        vfs_write+0x2a2/0xc90
[ 1928.741191][T32169]                        ksys_write+0x1a0/0x2c0
[ 1928.747428][T32169]                        do_syscall_64+0xf3/0x230
[ 1928.753842][T32169]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1928.761662][T32169]    }
[ 1928.764336][T32169]    ... key      at: [<ffffffff9a6a4a00>] evdev_open.__key.24+0x0/0x20
[ 1928.772670][T32169]    ... acquired at:
[ 1928.776643][T32169]    lock_acquire+0x1ed/0x550
[ 1928.781324][T32169]    _raw_spin_lock+0x2e/0x40
[ 1928.786010][T32169]    evdev_pass_values+0xf2/0xad0
[ 1928.791040][T32169]    evdev_events+0x1c2/0x300
[ 1928.795726][T32169]    input_pass_values+0x286/0x860
[ 1928.800843][T32169]    input_event_dispose+0x30f/0x600
[ 1928.806136][T32169]    input_handle_event+0xa71/0xbe0
[ 1928.811342][T32169]    input_inject_event+0x22f/0x340
[ 1928.816551][T32169]    evdev_write+0x672/0x7c0
[ 1928.821151][T32169]    vfs_write+0x2a2/0xc90
[ 1928.825571][T32169]    ksys_write+0x1a0/0x2c0
[ 1928.830074][T32169]    do_syscall_64+0xf3/0x230
[ 1928.834745][T32169]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1928.840812][T32169] 
[ 1928.843135][T32169]  -> (&new->fa_lock){...-}-{2:2} {
[ 1928.848353][T32169]     IN-SOFTIRQ-R at:
[ 1928.852436][T32169]                       lock_acquire+0x1ed/0x550
[ 1928.858769][T32169]                       _raw_read_lock_irqsave+0xdd/0x130
[ 1928.865888][T32169]                       kill_fasync+0x19e/0x4d0
[ 1928.872127][T32169]                       sock_wake_async+0x147/0x170
[ 1928.878798][T32169]                       sock_def_readable+0x3df/0x5b0
[ 1928.885567][T32169]                       dccp_child_process+0x339/0x7d0
[ 1928.892420][T32169]                       dccp_v6_rcv+0xfc3/0x1640
[ 1928.898763][T32169]                       ip6_protocol_deliver_rcu+0x105b/0x1580
[ 1928.906307][T32169]                       ip6_input_finish+0x187/0x2d0
[ 1928.912982][T32169]                       NF_HOOK+0x3a4/0x450
[ 1928.918879][T32169]                       NF_HOOK+0x3a4/0x450
[ 1928.924773][T32169]                       __netif_receive_skb+0x1ea/0x650
[ 1928.931807][T32169]                       process_backlog+0x662/0x15b0
[ 1928.938495][T32169]                       __napi_poll+0xcb/0x490
[ 1928.944655][T32169]                       net_rx_action+0x89b/0x1240
[ 1928.951164][T32169]                       handle_softirqs+0x2c4/0x970
[ 1928.957752][T32169]                       do_softirq+0x11b/0x1e0
[ 1928.963906][T32169]                       __local_bh_enable_ip+0x1bb/0x200
[ 1928.970928][T32169]                       __dev_queue_xmit+0x1763/0x3e90
[ 1928.977774][T32169]                       ip6_finish_output2+0xfc9/0x1730
[ 1928.984705][T32169]                       ip6_finish_output+0x41e/0x810
[ 1928.991556][T32169]                       ip6_xmit+0xef8/0x18b0
[ 1928.997626][T32169]                       inet6_csk_xmit+0x468/0x710
[ 1929.004122][T32169]                       dccp_transmit_skb+0xf41/0x16a0
[ 1929.010969][T32169]                       dccp_rcv_request_sent_state_process+0x571/0x7a0
[ 1929.019305][T32169]                       dccp_rcv_state_process+0x649/0x910
[ 1929.026508][T32169]                       dccp_v6_do_rcv+0x337/0xb10
[ 1929.033020][T32169]                       __release_sock+0x243/0x350
[ 1929.039527][T32169]                       release_sock+0x61/0x1f0
[ 1929.045779][T32169]                       __inet_stream_connect+0x8bd/0xf30
[ 1929.052898][T32169]                       inet_stream_connect+0x65/0xa0
[ 1929.059685][T32169]                       __sys_connect+0x2df/0x310
[ 1929.066099][T32169]                       __x64_sys_connect+0x7a/0x90
[ 1929.072710][T32169]                       do_syscall_64+0xf3/0x230
[ 1929.079039][T32169]                       entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1929.086762][T32169]     INITIAL USE at:
[ 1929.090746][T32169]                      lock_acquire+0x1ed/0x550
[ 1929.097010][T32169]                      _raw_write_lock_irq+0xd3/0x120
[ 1929.103777][T32169]                      fasync_remove_entry+0xff/0x1d0
[ 1929.110539][T32169]                      sock_fasync+0x8a/0x100
[ 1929.116613][T32169]                      __fput+0x73e/0x8a0
[ 1929.122340][T32169]                      task_work_run+0x24f/0x310
[ 1929.128669][T32169]                      do_exit+0xa2f/0x27f0
[ 1929.134569][T32169]                      do_group_exit+0x207/0x2c0
[ 1929.140898][T32169]                      get_signal+0x16a1/0x1740
[ 1929.147141][T32169]                      arch_do_signal_or_restart+0x96/0x860
[ 1929.154439][T32169]                      syscall_exit_to_user_mode+0xc9/0x370
[ 1929.161827][T32169]                      do_syscall_64+0x100/0x230
[ 1929.168154][T32169]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1929.175801][T32169]     INITIAL READ USE at:
[ 1929.180227][T32169]                           lock_acquire+0x1ed/0x550
[ 1929.186914][T32169]                           _raw_read_lock_irqsave+0xdd/0x130
[ 1929.194401][T32169]                           kill_fasync+0x19e/0x4d0
[ 1929.200995][T32169]                           evdev_pass_values+0x58a/0xad0
[ 1929.208118][T32169]                           evdev_events+0x1c2/0x300
[ 1929.214802][T32169]                           input_pass_values+0x286/0x860
[ 1929.221918][T32169]                           input_event_dispose+0x30f/0x600
[ 1929.229222][T32169]                           input_handle_event+0xa71/0xbe0
[ 1929.236437][T32169]                           input_inject_event+0x22f/0x340
[ 1929.243647][T32169]                           evdev_write+0x672/0x7c0
[ 1929.250239][T32169]                           vfs_write+0x2a2/0xc90
[ 1929.256653][T32169]                           ksys_write+0x1a0/0x2c0
[ 1929.263183][T32169]                           do_syscall_64+0xf3/0x230
[ 1929.269875][T32169]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1929.277979][T32169]   }
[ 1929.280564][T32169]   ... key      at: [<ffffffff9a3a9c00>] fasync_insert_entry.__key+0x0/0x20
[ 1929.289339][T32169]   ... acquired at:
[ 1929.293226][T32169]    lock_acquire+0x1ed/0x550
[ 1929.297914][T32169]    _raw_read_lock_irqsave+0xdd/0x130
[ 1929.303383][T32169]    kill_fasync+0x19e/0x4d0
[ 1929.307969][T32169]    evdev_pass_values+0x58a/0xad0
[ 1929.313090][T32169]    evdev_events+0x1c2/0x300
[ 1929.317775][T32169]    input_pass_values+0x286/0x860
[ 1929.322897][T32169]    input_event_dispose+0x30f/0x600
[ 1929.328200][T32169]    input_handle_event+0xa71/0xbe0
[ 1929.333410][T32169]    input_inject_event+0x22f/0x340
[ 1929.338616][T32169]    evdev_write+0x672/0x7c0
[ 1929.343211][T32169]    vfs_write+0x2a2/0xc90
[ 1929.347633][T32169]    ksys_write+0x1a0/0x2c0
[ 1929.352141][T32169]    do_syscall_64+0xf3/0x230
[ 1929.356814][T32169]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1929.362909][T32169] 
[ 1929.365228][T32169] -> (&f->f_owner.lock){...-}-{2:2} {
[ 1929.370620][T32169]    IN-SOFTIRQ-R at:
[ 1929.374602][T32169]                     lock_acquire+0x1ed/0x550
[ 1929.380763][T32169]                     _raw_read_lock_irqsave+0xdd/0x130
[ 1929.387704][T32169]                     send_sigurg+0x29/0x3c0
[ 1929.393678][T32169]                     sk_send_sigurg+0x75/0x2f0
[ 1929.399921][T32169]                     tcp_check_urg+0x207/0x740
[ 1929.406161][T32169]                     tcp_urg+0x15c/0x450
[ 1929.411877][T32169]                     tcp_rcv_established+0xfaf/0x2020
[ 1929.418733][T32169]                     tcp_v4_do_rcv+0x96d/0xc70
[ 1929.424973][T32169]                     tcp_v4_rcv+0x2dc0/0x37f0
[ 1929.431146][T32169]                     ip_protocol_deliver_rcu+0x22e/0x440
[ 1929.438259][T32169]                     ip_local_deliver_finish+0x341/0x5f0
[ 1929.445374][T32169]                     NF_HOOK+0x3a4/0x450
[ 1929.451098][T32169]                     NF_HOOK+0x3a4/0x450
[ 1929.456813][T32169]                     __netif_receive_skb+0x2bf/0x650
[ 1929.463581][T32169]                     process_backlog+0x662/0x15b0
[ 1929.470087][T32169]                     __napi_poll+0xcb/0x490
[ 1929.476071][T32169]                     net_rx_action+0x89b/0x1240
[ 1929.482407][T32169]                     handle_softirqs+0x2c4/0x970
[ 1929.488817][T32169]                     run_ksoftirqd+0xca/0x130
[ 1929.494970][T32169]                     smpboot_thread_fn+0x544/0xa30
[ 1929.501556][T32169]                     kthread+0x2f0/0x390
[ 1929.507266][T32169]                     ret_from_fork+0x4b/0x80
[ 1929.513344][T32169]                     ret_from_fork_asm+0x1a/0x30
[ 1929.519765][T32169]    INITIAL USE at:
[ 1929.523660][T32169]                    lock_acquire+0x1ed/0x550
[ 1929.529726][T32169]                    _raw_write_lock_irq+0xd3/0x120
[ 1929.536311][T32169]                    f_modown+0x38/0x340
[ 1929.541967][T32169]                    f_setown+0x14f/0x200
[ 1929.547707][T32169]                    sock_ioctl+0x6c2/0x8e0
[ 1929.553606][T32169]                    __se_sys_ioctl+0xfc/0x170
[ 1929.559758][T32169]                    do_syscall_64+0xf3/0x230
[ 1929.565912][T32169]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1929.573373][T32169]    INITIAL READ USE at:
[ 1929.577700][T32169]                         lock_acquire+0x1ed/0x550
[ 1929.584211][T32169]                         _raw_read_lock_irqsave+0xdd/0x130
[ 1929.591506][T32169]                         send_sigurg+0x29/0x3c0
[ 1929.597831][T32169]                         sk_send_sigurg+0x75/0x2f0
[ 1929.604460][T32169]                         tcp_check_urg+0x207/0x740
[ 1929.611137][T32169]                         tcp_urg+0x15c/0x450
[ 1929.617212][T32169]                         tcp_rcv_established+0xfaf/0x2020
[ 1929.624421][T32169]                         tcp_v4_do_rcv+0x96d/0xc70
[ 1929.631013][T32169]                         __release_sock+0x214/0x350
[ 1929.637693][T32169]                         release_sock+0x61/0x1f0
[ 1929.644113][T32169]                         tcp_sendmsg+0x3a/0x50
[ 1929.650370][T32169]                         __sock_sendmsg+0x1a6/0x270
[ 1929.657057][T32169]                         __sys_sendto+0x3a4/0x4f0
[ 1929.663555][T32169]                         __x64_sys_sendto+0xde/0x100
[ 1929.670332][T32169]                         do_syscall_64+0xf3/0x230
[ 1929.676878][T32169]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1929.684775][T32169]  }
[ 1929.687274][T32169]  ... key      at: [<ffffffff9a3a8fa0>] init_file.__key+0x0/0x20
[ 1929.695084][T32169]  ... acquired at:
[ 1929.698880][T32169]    lock_acquire+0x1ed/0x550
[ 1929.703564][T32169]    _raw_read_lock_irqsave+0xdd/0x130
[ 1929.709030][T32169]    send_sigio+0x33/0x360
[ 1929.713456][T32169]    kill_fasync+0x23a/0x4d0
[ 1929.718044][T32169]    evdev_pass_values+0x58a/0xad0
[ 1929.723158][T32169]    evdev_events+0x1c2/0x300
[ 1929.727832][T32169]    input_pass_values+0x286/0x860
[ 1929.732941][T32169]    input_event_dispose+0x30f/0x600
[ 1929.738230][T32169]    input_handle_event+0xa71/0xbe0
[ 1929.743439][T32169]    input_inject_event+0x22f/0x340
[ 1929.748648][T32169]    evdev_write+0x672/0x7c0
[ 1929.753238][T32169]    vfs_write+0x2a2/0xc90
[ 1929.757655][T32169]    ksys_write+0x1a0/0x2c0
[ 1929.762169][T32169]    do_syscall_64+0xf3/0x230
[ 1929.766845][T32169]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1929.772912][T32169] 
[ 1929.775231][T32169] 
[ 1929.775231][T32169] the dependencies between the lock to be acquired
[ 1929.775242][T32169]  and SOFTIRQ-irq-unsafe lock:
[ 1929.788914][T32169] -> (tasklist_lock){.+.+}-{2:2} {
[ 1929.794042][T32169]    HARDIRQ-ON-R at:
[ 1929.798020][T32169]                     lock_acquire+0x1ed/0x550
[ 1929.804179][T32169]                     _raw_read_lock+0x36/0x50
[ 1929.810341][T32169]                     __do_wait+0x12d/0x850
[ 1929.816236][T32169]                     do_wait+0x1e9/0x560
[ 1929.821957][T32169]                     kernel_wait+0xe9/0x240
[ 1929.827936][T32169]                     call_usermodehelper_exec_work+0xbd/0x230
[ 1929.835539][T32169]                     process_scheduled_works+0xa2c/0x1830
[ 1929.842740][T32169]                     worker_thread+0x86d/0xd10
[ 1929.848986][T32169]                     kthread+0x2f0/0x390
[ 1929.854703][T32169]                     ret_from_fork+0x4b/0x80
[ 1929.860777][T32169]                     ret_from_fork_asm+0x1a/0x30
[ 1929.867199][T32169]    SOFTIRQ-ON-R at:
[ 1929.871178][T32169]                     lock_acquire+0x1ed/0x550
[ 1929.877337][T32169]                     _raw_read_lock+0x36/0x50
[ 1929.883511][T32169]                     __do_wait+0x12d/0x850
[ 1929.889395][T32169]                     do_wait+0x1e9/0x560
[ 1929.895118][T32169]                     kernel_wait+0xe9/0x240
[ 1929.901095][T32169]                     call_usermodehelper_exec_work+0xbd/0x230
[ 1929.908634][T32169]                     process_scheduled_works+0xa2c/0x1830
[ 1929.915829][T32169]                     worker_thread+0x86d/0xd10
[ 1929.922090][T32169]                     kthread+0x2f0/0x390
[ 1929.927803][T32169]                     ret_from_fork+0x4b/0x80
[ 1929.933868][T32169]                     ret_from_fork_asm+0x1a/0x30
[ 1929.940280][T32169]    INITIAL USE at:
[ 1929.944177][T32169]                    lock_acquire+0x1ed/0x550
[ 1929.950249][T32169]                    _raw_write_lock_irq+0xd3/0x120
[ 1929.956840][T32169]                    copy_process+0x228b/0x3dc0
[ 1929.963085][T32169]                    kernel_clone+0x226/0x8f0
[ 1929.969157][T32169]                    user_mode_thread+0x132/0x1a0
[ 1929.975578][T32169]                    rest_init+0x23/0x300
[ 1929.981298][T32169]                    start_kernel+0x47a/0x500
[ 1929.987361][T32169]                    x86_64_start_reservations+0x2a/0x30
[ 1929.994388][T32169]                    x86_64_start_kernel+0x9f/0xa0
[ 1930.000891][T32169]                    common_startup_64+0x13e/0x147
[ 1930.007385][T32169]    INITIAL READ USE at:
[ 1930.011709][T32169]                         lock_acquire+0x1ed/0x550
[ 1930.018220][T32169]                         _raw_read_lock+0x36/0x50
[ 1930.024727][T32169]                         __do_wait+0x12d/0x850
[ 1930.030986][T32169]                         do_wait+0x1e9/0x560
[ 1930.037071][T32169]                         kernel_wait+0xe9/0x240
[ 1930.043412][T32169]                         call_usermodehelper_exec_work+0xbd/0x230
[ 1930.051317][T32169]                         process_scheduled_works+0xa2c/0x1830
[ 1930.058867][T32169]                         worker_thread+0x86d/0xd10
[ 1930.065458][T32169]                         kthread+0x2f0/0x390
[ 1930.071521][T32169]                         ret_from_fork+0x4b/0x80
[ 1930.077957][T32169]                         ret_from_fork_asm+0x1a/0x30
[ 1930.084737][T32169]  }
[ 1930.087236][T32169]  ... key      at: [<ffffffff8e60a058>] tasklist_lock+0x18/0x40
[ 1930.094994][T32169]  ... acquired at:
[ 1930.098805][T32169]    lock_acquire+0x1ed/0x550
[ 1930.103491][T32169]    _raw_read_lock+0x36/0x50
[ 1930.108178][T32169]    send_sigio+0xfc/0x360
[ 1930.112606][T32169]    dnotify_handle_event+0x13c/0x440
[ 1930.118074][T32169]    fsnotify+0x18ab/0x1f70
[ 1930.122585][T32169]    vfs_readv+0x927/0xa90
[ 1930.127005][T32169]    __x64_sys_preadv+0x1c7/0x2d0
[ 1930.132052][T32169]    do_syscall_64+0xf3/0x230
[ 1930.136757][T32169]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1930.142870][T32169] 
[ 1930.145198][T32169] 
[ 1930.145198][T32169] stack backtrace:
[ 1930.151085][T32169] CPU: 1 UID: 0 PID: 32169 Comm: syz.1.5429 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0
[ 1930.161846][T32169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 1930.171905][T32169] Call Trace:
[ 1930.175185][T32169]  <TASK>
[ 1930.178114][T32169]  dump_stack_lvl+0x241/0x360
[ 1930.182805][T32169]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1930.188090][T32169]  ? __pfx__printk+0x10/0x10
[ 1930.192677][T32169]  ? print_shortest_lock_dependencies+0xf2/0x160
[ 1930.199008][T32169]  validate_chain+0x4de0/0x5900
[ 1930.203867][T32169]  ? __pfx_validate_chain+0x10/0x10
[ 1930.209063][T32169]  ? __pfx_validate_chain+0x10/0x10
[ 1930.214271][T32169]  ? __lock_acquire+0x137a/0x2040
[ 1930.219301][T32169]  ? mark_lock+0x9a/0x350
[ 1930.223638][T32169]  __lock_acquire+0x137a/0x2040
[ 1930.228506][T32169]  lock_acquire+0x1ed/0x550
[ 1930.233012][T32169]  ? send_sigio+0xfc/0x360
[ 1930.237437][T32169]  ? __pfx_lock_acquire+0x10/0x10
[ 1930.242477][T32169]  ? do_raw_read_lock+0x3c/0x90
[ 1930.247332][T32169]  ? _raw_read_lock_irqsave+0xe9/0x130
[ 1930.252801][T32169]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[ 1930.258707][T32169]  _raw_read_lock+0x36/0x50
[ 1930.263212][T32169]  ? send_sigio+0xfc/0x360
[ 1930.267635][T32169]  send_sigio+0xfc/0x360
[ 1930.271887][T32169]  dnotify_handle_event+0x13c/0x440
[ 1930.277098][T32169]  fsnotify+0x18ab/0x1f70
[ 1930.281534][T32169]  ? fsnotify+0x53d/0x1f70
[ 1930.285980][T32169]  ? __pfx_fsnotify+0x10/0x10
[ 1930.290690][T32169]  vfs_readv+0x927/0xa90
[ 1930.295081][T32169]  ? __pfx_lock_acquire+0x10/0x10
[ 1930.300130][T32169]  ? __pfx_vfs_readv+0x10/0x10
[ 1930.304922][T32169]  ? __fget_files+0x29/0x470
[ 1930.309530][T32169]  __x64_sys_preadv+0x1c7/0x2d0
[ 1930.314395][T32169]  ? __pfx___x64_sys_preadv+0x10/0x10
[ 1930.319778][T32169]  ? do_syscall_64+0x100/0x230
[ 1930.324548][T32169]  ? do_syscall_64+0xb6/0x230
[ 1930.329232][T32169]  do_syscall_64+0xf3/0x230
[ 1930.333735][T32169]  ? clear_bhb_loop+0x35/0x90
[ 1930.338420][T32169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1930.344325][T32169] RIP: 0033:0x7fe62df7cef9
[ 1930.348737][T32169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1930.368353][T32169] RSP: 002b:00007fe62eda3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1930.376772][T32169] RAX: ffffffffffffffda RBX: 00007fe62e135f80 RCX: 00007fe62df7cef9
[ 1930.384745][T32169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[ 1930.392713][T32169] RBP: 00007fe62dfef046 R08: 0000000000000000 R09: 0000000000000000
[ 1930.400685][T32169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1930.408652][T32169] R13: 0000000000000000 R14: 00007fe62e135f80 R15: 00007fe62e25fa28
[ 1930.416630][T32169]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1930.451065][T32163] Bluetooth: hci4: command tx timeout
[ 1930.457569][T32163] Bluetooth: hci3: command tx timeout
[ 1930.463115][T32163] Bluetooth: hci0: command tx timeout
[ 1930.743782][   T52] team0 (unregistering): Port device team_slave_1 removed
[ 1931.020675][   T52] team0 (unregistering): Port device team_slave_0 removed
[ 1932.004566][T32039] usb 2-1: USB disconnect, device number 42
[ 1932.383463][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.469592][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.523590][T26843] Bluetooth: hci0: command tx timeout
[ 1932.523634][T32163] Bluetooth: hci4: command tx timeout
[ 1932.606379][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.679339][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.856451][   T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1932.959001][   T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.058402][   T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.140508][   T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.247368][   T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.318549][   T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.379051][   T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.438177][   T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.580707][   T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.640632][   T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.721428][   T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.767914][   T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1933.898588][   T52] bridge_slave_1: left allmulticast mode
[ 1933.907092][   T52] bridge_slave_1: left promiscuous mode
[ 1933.913331][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1933.922381][   T52] bridge_slave_0: left allmulticast mode
[ 1933.928038][   T52] bridge_slave_0: left promiscuous mode
[ 1933.934691][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1933.945753][   T52] bridge_slave_1: left allmulticast mode
[ 1933.951393][   T52] bridge_slave_1: left promiscuous mode
[ 1933.957781][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1933.966735][   T52] bridge_slave_0: left allmulticast mode
[ 1933.973408][   T52] bridge_slave_0: left promiscuous mode
[ 1933.979078][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1933.989148][   T52] bridge_slave_1: left allmulticast mode
[ 1933.995013][   T52] bridge_slave_1: left promiscuous mode
[ 1934.000686][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1934.010156][   T52] bridge_slave_0: left allmulticast mode
[ 1934.016065][   T52] bridge_slave_0: left promiscuous mode
[ 1934.021720][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1934.186332][   T52] bridge_slave_1: left allmulticast mode
[ 1934.196979][   T52] bridge_slave_1: left promiscuous mode
[ 1934.208354][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1934.217615][   T52] bridge_slave_0: left allmulticast mode
[ 1934.223548][   T52] bridge_slave_0: left promiscuous mode
[ 1934.229236][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1934.847374][   T52] bond0 (unregistering): Released all slaves
[ 1934.864269][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1934.875041][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1934.885352][   T52] bond0 (unregistering): Released all slaves
[ 1934.903878][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1934.914608][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1934.929829][   T52] bond0 (unregistering): Released all slaves
[ 1934.945277][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1934.960638][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1934.971203][   T52] bond0 (unregistering): Released all slaves
[ 1934.987408][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1934.997811][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1935.007880][   T52] bond0 (unregistering): Released all slaves
[ 1935.965076][   T52] hsr_slave_0: left promiscuous mode
[ 1935.971077][   T52] hsr_slave_1: left promiscuous mode
[ 1935.980172][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1935.989768][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1935.999880][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1936.007988][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1936.019173][   T52] hsr_slave_0: left promiscuous mode
[ 1936.025435][   T52] hsr_slave_1: left promiscuous mode
[ 1936.031486][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1936.039341][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1936.061285][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1936.069979][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1936.081190][   T52] hsr_slave_0: left promiscuous mode
[ 1936.087770][   T52] hsr_slave_1: left promiscuous mode
[ 1936.095389][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1936.102858][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1936.110607][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1936.118164][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1936.128451][   T52] hsr_slave_0: left promiscuous mode
[ 1936.134649][   T52] hsr_slave_1: left promiscuous mode
[ 1936.140472][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1936.148105][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1936.156010][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1936.164005][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1936.177684][   T52] veth1_macvtap: left promiscuous mode
[ 1936.183383][   T52] veth0_macvtap: left promiscuous mode
[ 1936.189022][   T52] veth1_vlan: left promiscuous mode
[ 1936.194382][   T52] veth0_vlan: left promiscuous mode
[ 1936.200556][   T52] veth1_macvtap: left promiscuous mode
[ 1936.206205][   T52] veth0_macvtap: left promiscuous mode
[ 1936.212040][   T52] veth1_vlan: left promiscuous mode
[ 1936.217327][   T52] veth0_vlan: left promiscuous mode
[ 1936.223577][   T52] veth1_macvtap: left promiscuous mode
[ 1936.229062][   T52] veth0_macvtap: left promiscuous mode
[ 1936.234838][   T52] veth1_vlan: left promiscuous mode
[ 1936.240142][   T52] veth0_vlan: left promiscuous mode
[ 1936.246804][   T52] veth1_macvtap: left promiscuous mode
[ 1936.252391][   T52] veth0_macvtap: left promiscuous mode
[ 1936.257975][   T52] veth1_vlan: left promiscuous mode
[ 1936.263514][   T52] veth0_vlan: left promiscuous mode
[ 1936.762760][   T52] team0 (unregistering): Port device team_slave_1 removed
[ 1936.806219][   T52] team0 (unregistering): Port device team_slave_0 removed
[ 1937.076511][   T52] team0 (unregistering): Port device team_slave_1 removed
[ 1937.091623][   T52] team0 (unregistering): Port device team_slave_0 removed
[ 1937.408428][   T52] team0 (unregistering): Port device team_slave_1 removed
[ 1937.440920][   T52] team0 (unregistering): Port device team_slave_0 removed
[ 1937.759278][   T52] team0 (unregistering): Port device team_slave_1 removed
[ 1937.795769][   T52] team0 (unregistering): Port device team_slave_0 removed