last executing test programs:

26.264333782s ago: executing program 3 (id=2182):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc283586ed68c90b12e61f56b8fca5bea17ef38a60aa7b0efbf449c5f171c189c3f7c05aac28a8d0e4f3df3f7550692630902fb0bcb349276cdb2b08812cf979db4c3fbcfd5cd2d6e4342ab12bb32c869ebb4d35648bfc1b167e"], 0x11)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x4}}}}, 0xf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000000)='cgroup\x00'}, 0x21)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r7, 0xae80, 0x0)

25.772061251s ago: executing program 3 (id=2183):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, 0x0)
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r4 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x100)
mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x88)
chroot(&(0x7f0000000040)='./file0\x00')
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x1008001, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r5, 0x0, 0x0)
shutdown(r5, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100))
r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0)
r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x4141, 0x0)

24.846245932s ago: executing program 3 (id=2186):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x227e, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000200))
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e26, 0x7fff, @remote, 0x2100}, 0xffffffffffffff28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x400, 0xac)
r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f000000d380))
r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000c0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000100)=0x6)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040))
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00')
lseek(r6, 0x9, 0x0)
keyctl$clear(0x5, 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x20000800)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40002)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x8ef6, 0x200, "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", 0x40, 0x6, 0x58, 0xd8, 0xb, 0x2, 0x8, 0x1}}}, 0x120)

16.366508783s ago: executing program 1 (id=2208):
openat$nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1c8)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00222200000096231307f7940ef7070f00000016b8ef0a1a7083"], 0x0}, 0x0)
socket$inet6(0xa, 0x6, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
listen(r2, 0x0)

16.134387832s ago: executing program 1 (id=2210):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040007001a00", 0x22)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0000003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d805000600000000001300020062"], 0x270}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001a40)={'ip_vti0\x00', &(0x7f0000001b00)={'syztnl2\x00', 0x0, 0x40, 0xa0, 0x1, 0x7, {{0x2e, 0x4, 0x3, 0x2, 0xb8, 0x64, 0x0, 0xc, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0x9b, [@local, @empty, @rand_addr=0x8, @empty, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0xf, 0x77, [@empty, @empty, @empty]}, @cipso={0x86, 0x28, 0x3, [{0x5, 0x2}, {0x7, 0x12, "ab7182d5c4aef2fadfcf4f886c6ceefb"}, {0x1, 0xe, "3ea67f55e00719bd3ec61a3c"}]}, @timestamp_addr={0x44, 0x1c, 0x7e, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x8}, {@multicast2, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x6}]}, @rr={0x7, 0xb, 0x18, [@local, @empty]}, @lsrr={0x83, 0x17, 0x60, [@broadcast, @broadcast, @empty, @multicast1, @broadcast]}, @cipso={0x86, 0x14, 0x0, [{0x6, 0xe, "9646003a66d81c0caa0e3b9b"}]}, @ra={0x94, 0x4}]}}}}})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in=@loopback, {@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0x128}}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001c00)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x4)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/65}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f00000014c0)=""/105}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f0000001700)=""/94}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x4000000000001dc, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000218fce9700040010000800084004000000", 0x58}], 0x1)

6.515439254s ago: executing program 0 (id=2241):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r4 = openat$dir(0xffffff9c, 0x0, 0x1, 0x100)
mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x88)
chroot(&(0x7f0000000040)='./file0\x00')
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x1008001, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x4141, 0x0)

5.443958284s ago: executing program 0 (id=2243):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc283586ed68c90b12e61f56b8fca5bea17ef38a60aa7b0efbf449c5f171c189c3f7c05aac28a8d0e4f3df3f7550692630902fb0bcb349276cdb2b08812cf979db4c3fbcfd5cd2d6e4342ab12bb32c869ebb4d35648bfc1b167e"], 0x11)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x4}}}}, 0xf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000000)='cgroup\x00'}, 0x21)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4.635330892s ago: executing program 0 (id=2245):
syz_clone3(&(0x7f00000012c0)={0x48100100, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0xf}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58)

4.42429661s ago: executing program 2 (id=2246):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007b40)={0x14, 0x36, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r0 = io_uring_setup(0x66a, &(0x7f00000002c0)={0x0, 0xd333, 0x2, 0x0, 0x200003a6})
r1 = socket(0x10, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0xffffffffffffffe7, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000cc0)="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", 0x45f}], 0x2, 0x0, 0x0, 0x400c810}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYRES16=r7, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc00000008000300a90f0000080001001b00"], 0x2ac}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = memfd_create(&(0x7f00000000c0)='\x98-#\x00', 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r8, 0x80049370, &(0x7f0000000080))
r9 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
r10 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r10, 0x40046109, &(0x7f0000000100)=0x21)
dup2(r9, r10)
socket$alg(0x26, 0x5, 0x0)

4.239860659s ago: executing program 1 (id=2211):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xc5, 0x1, 0xde, 0x40, 0x4bb, 0x901, 0x55ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6b, 0x3f, 0x1d}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2b, 0x801, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x7)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14}}, 0x64}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000005"])
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000280)={0x80, 0x0, 0x1f, 0x80})
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040), 0x4)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x11}, @IFLA_LINK={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0x800}]}, 0x38}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.205481432s ago: executing program 2 (id=2247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc28"], 0x11)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x4}}}}, 0xf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000000)='cgroup\x00'}, 0x21)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x8ffffff8)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4.119586818s ago: executing program 0 (id=2248):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc283586ed68c90b12e61f56b8fca5bea17ef38a60aa7b0efbf449c5f171c189c3f7c05aac28a8d0e4f3df3f7550692630902fb0bcb349276cdb2b08812cf979db4c3fbcfd5cd2d6e4342ab12bb32c869ebb4d35648bfc1b167e"], 0x11)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x4}}}}, 0xf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000000)='cgroup\x00'}, 0x21)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r7, 0xae80, 0x0)

3.794371212s ago: executing program 4 (id=2249):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)=@newlink={0x238, 0x10, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10}, [@IFLA_AF_SPEC={0x100, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x3}, {0x8, 0x7, 0x0, 0x0, 0x1ff}, {0x8, 0xc, 0x0, 0x0, 0x7}, {0x8, 0xc, 0x0, 0x0, 0x100}, {0x8, 0x12, 0x0, 0x0, 0x1}]}}, @AF_MPLS={0x4}, @AF_INET6={0x78, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xff}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x19}]}}, @AF_BRIDGE={0x4}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3ae98}, @IFLA_VFINFO_LIST={0xfc, 0x16, 0x0, 0x1, [{0xf8, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x456, 0x9, 0x8100}}, {0x14, 0x1, {0x2, 0x7c4, 0x10000, 0x88a8}}, {0x14, 0x1, {0x8, 0xb2d, 0x2, 0x88a8}}, {0x14, 0x1, {0x4, 0x7f6, 0x800, 0x88a8}}, {0x14, 0x1, {0x3, 0xd3d, 0x7fff, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0xffff, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0xff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x81, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xcbe, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x40, @local}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x10000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x6}}]}]}]}, 0x238}}, 0x0)
socket$inet6(0xa, 0x80803, 0x88)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x0, 0xffffffff004, 0x0, 0x0, 0x1, [{}]})
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x7, 0x5000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x200, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r4, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0x2)
sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000440)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="30dff06e547e32491e1724d6b66a988b2fa642db677edd83084b18624f9cce7e4d3f8581198eed66d5d47bb5c15d6b9f8d75af787bc431222614867a5b93327d8fc585ea769e0db02c4e340954362e727726545ab7bd4c449418e03ef4d9ae82bcd1b01df2d931da0d7b732d8c3008d856241c226fa19798925fa0ebd41754139135712d10bd9d2094aaae730527bcdbfe4bd5587f3c9885bff1d48395d3ed44bac7cda973cdc5233d48c8b1f34cf039a8d2836f6343869240e72e2179", 0xbd}, {&(0x7f00000009c0)="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", 0xd90}, {&(0x7f00000019c0)="965a2826d74e77029ec90a162d59bf330490d1abd649d9001629dbe7abf30a43ddaedaaf92b77c8a3ab96eadb8794f6d6c21683e4ed937e96ded8d5d5928e4fb565c5ca79df780ec9d51951bc789b8c530df3b515e02c5468b6665c1f9a03cbd956dd7420cf5d57ceeec50b379c00b1b4f649418e1c38ff93095806018c0b522606a85f8d07452b5c2d6347fe94841fd1306d83467744b71a6d2e4f470b9e2297d9e0b565cc4e096192a949f9bb64c48cd2d8a76bcfe04215586830beec6873863", 0xc1}], 0x4, &(0x7f0000003300)=[{0x30, 0x111, 0x0, "9e67ec8be136a63e7f39b398c51824aa3fe3c2e192db94e48fe6b5d65c"}, {0xa0, 0xf9, 0x4, "c3dddf020045e4ff5a05e6b495ce68a872931fa094d4f91b13435fa88e675915eda461331dfd2b779ad8be44476eea6a08cceb4f85ff9ea5dc12884ce4984a4b0b999178e94959adf0d16604200862c23ff0a40eaff423b3dbcd8002b048ffdba6c98b85e4af07be590fcb116c4701a4eac2c01d6c5eb7b25be732e930953285c5376040ef368991c1bd0c73e88feb97"}, {0x80, 0x10a, 0x3, "a485f1e48675c40d05cee868ca05388e8ee3909ebb4c885f4f458243730c84c996306b78e5766eb2806fbf4f66c6e6f6d872cdb40287e13f76751d6b993c552661db6cfd162d9a93afbe44b43a2a9a8ae3a5d4044e9078e9f574e8eb6e2cfe6b05072f2f4f47ad3692870b5e88"}, {0x100, 0x84, 0x0, "d13c5d59707897bccb23d4c42581c3687f9f725295b969d431dfed1d65aa6b687c89e8f8b2216b05de14e4b42c0387b72a12db29ceff6e24255f730fd19ad8661ba938d912c9068e5ec37018e278f3fb72150cef13982f7471c6316befa9e61f69c45e16bf5fbe5f68ad432e5ac94fb76ebdff7e871f7826deb8c9a6e03f69b59b68ba0c88902b34343c5988e1c1053451a4ce3141804e9297eb4b3f9239c37135f416f3144b21857747d74d0351259deaf4894d1952b5ba6ac35cd76f3674397252692984661cae367061aff60ede8075a536212a1888e27ef67444003d1711bee9e7c8c17a36fca8"}, {0x68, 0x117, 0xc85f, "618a3b6ba35506bea49f36ba66b5cd34a4668dbd2b7806ccb353da0849a9f5783561a8365c10091a0db38a3903cb7f02c28121b1532185b2cd2bbb798c0761158eb9b9e264b6dc4b8793d1dc67afb2af75e37f"}, {0x1008, 0x0, 0x0, "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"}, {0xe8, 0x29, 0x51ee, "b96da1638e8b211f5644e90812c05bbaf0ca7d547389fa89b69cdcb0e0d24466dfe1593cc40dd738a6a8ce5b42bf71ed09c356f89cd03f071132d51379c210f2ab383c29469fb19ca2bb2d405445f4868b106b1a35683daf3ea981ce31f0f0b379c24ad33b25378239933d72355dc079dadc153e07970ffa02738fe916db2a194a4571ff3c469fed6168fd45077bc9f5c15975edf74c4fb1c2115c5e1effcd75e9b5874c445ecf86218e458789b3c61d179a76a739f97df7f40120a9970aecf94d954f5c2ca9629b3a116b112a87e6054cfe39673e0a3d"}, {0x1010, 0x113, 0x81, "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"}], 0x23b8}, 0x801)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f00000103c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffff85}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0xffffff85}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, 0xffffffffffffffff, 0x9, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a00000200000000ac39a2d0000000"], 0x10}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

3.252011737s ago: executing program 0 (id=2250):
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="310000000a0a000000000000000000000000000019000d402d9be380991181e7a6fa8f0d377fcc74a75b985b020000005d8f16df02d0dad99baf43493de00b51a59cfda2e94235df78becf14b5f86edfd3ce664b"], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00e2ffffffffffff13000300626174616c763000000000000000000008001f000002d000"], 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bond0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48082}, 0x4)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000940)={0xc6, 0x2ccc92f3, {}, {<r4=>0xee00}, 0xb, 0x4})
r5 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0xee01, r6, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x40000, &(0x7f0000000a80)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x10000}}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0x7fffffffffffffff}}, {@euid_gt={'euid>', r4}}, {@fowner_gt={'fowner>', r6}}, {@flag='dirsync'}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x35, 0x37, 0x36, 0x65, 0x39, 0x65, 0x31], 0x2d, [0x37, 0x34, 0x38, 0x63], 0x2d, [0x33, 0x0, 0x0, 0x36], 0x2d, [0x37, 0x35, 0x31, 0x33], 0x2d, [0x38, 0x0, 0x36, 0x0, 0x35, 0x63, 0x65, 0x66]}}}]}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04e04020"], 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f004010110905"], 0x0)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0)
write$binfmt_elf64(r9, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4605062046000000000000000003003e0002000000740300000000000040000000000000003c020000000000000100000001013800010002000000f9ff00000070790000000900000000000000fbffffffffffffff070000000000000003000000000000000400000000000000200000000000000000000070d00000000700000000000000000000000000000005"], 0x61c)
r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r10, 0x5111)
close_range(r8, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x2c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000000)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x25}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000540)=""/192, 0xfffffffffffffe14}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={r2, r3+10000000})

3.25177696s ago: executing program 2 (id=2251):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r4 = openat$dir(0xffffff9c, 0x0, 0x1, 0x100)
mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x88)
chroot(&(0x7f0000000040)='./file0\x00')
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x1008001, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x4141, 0x0)

2.731468086s ago: executing program 3 (id=2217):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000019c0)=0x40, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xe20, 0x0, @local}, 0x1c)

2.618072524s ago: executing program 3 (id=2252):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$kcm(0x2, 0x0, 0x73)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="85100004000000950000000020000018000000001000000000000000001b00950000000000000085100000fcffffff9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000080)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000), 0x8)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="8f6b3d6fb05cfac273b26cdfa1d4c1ed6cf2585364dabdd8e604957777a448e2fd46e1cc8af08e20e2c69a04a17312c4f6562951773fb778c5d84cfc7664e6584807cf670f94516429b7e8ce60015a50b0ac", 0x52}, {&(0x7f0000000300)="d39a63de02a191c3762dc39f0a3fec7bca8e1b38b85f3e9bbe954b072653dd8416a66910d02c610a0dd861bfc28978d74506cf6313b11d19ad48942c4c892dd10ed05535601bbcc9d23bb15a6aa38e0346baca029fe4766efe02b8d1df9d975b00abe28b", 0x64}], 0x2}, 0x4802)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r7, &(0x7f0000000000), 0xc)
bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
getdents64(r8, &(0x7f0000000200)=""/171, 0xab)

2.616471661s ago: executing program 4 (id=2253):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r4 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x100)
mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x88)
chroot(&(0x7f0000000040)='./file0\x00')
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x1008001, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r5, 0x0, 0x0)
shutdown(r5, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100))
r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0)
r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x4141, 0x0)

2.247271402s ago: executing program 2 (id=2254):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x690a, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000022c0)={{r0}, &(0x7f0000002240), &(0x7f0000002280)='%-5lx  \x00'}, 0x1c)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0)
r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x15a4016, 0x0, 0x0, 0x0, 0x9}}, 0x50)
read$FUSE(r3, &(0x7f0000012cc0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10)
syz_fuse_handle_req(r3, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x9, 0x0, 0xc, 0xfffffffffffffffd, 0x4, 0xe, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x0, 0x0, 0x0, 0x0})
open_by_handle_at(r4, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c00000081000000fe"], 0xfeffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x1}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x12, 0xa01}, 0x14}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c}, 0x38)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x10}, 0x9c)

1.863996183s ago: executing program 3 (id=2255):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0)
fchown(r1, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000080)='./file1\x00')
renameat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000140)='./file0\x00')
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020aed2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
unlinkat(r3, &(0x7f0000000000)='./file0\x00', 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020303000000000700"], 0x1c}}, 0x4044004)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9], 0x20}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000100), 0xfecc)
socket$inet_dccp(0x2, 0x6, 0x0)
r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000004100)={{0x12, 0x1, 0x0, 0x58, 0xfc, 0x14, 0x8, 0x17ef, 0x721e, 0x7360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io(r11, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x4, "20b70974"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.630000663s ago: executing program 1 (id=2256):
syz_usb_connect(0x6, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0)
r0 = socket(0x1d, 0x2, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x7ff, 0x8000000000003a1, 0x0, 0x0, [{{}, 0x7fffffff}, {{r1}, 0x8}, {{}, 0x401}]})
r2 = socket$inet6(0xa, 0x6, 0x0)
listen(r2, 0x200007)
socket$inet_dccp(0x2, 0x6, 0x0)
fchdir(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f00000000c0)=0x7f, 0x4)
sendmmsg$inet6(r5, &(0x7f0000004880)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, '\x00', 0xa}, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000003c0)="a4de72125546e5787c4a6b", 0xb}, {&(0x7f0000000000)="5ccacfca73232105a1cf544386166b794c8f07b35cec0fa0a2c6fa906ed54b26a5052dccf358ad7860470734b3861b34cea08382bea307b9efb230a0df32f567283f1e87acd322d56bd0a50126ddfc0c093c1979e0a6044e4a77485a34868fa44a3f792b90b2ec445e0df38f7cd8792b7ec4912999", 0x75}], 0x2}}], 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0)
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000020540)=""/102399, 0x18fff}], 0x1, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x103102)
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000003c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "b4bc323ef77d1f000071849800000000dfff00"}})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0)

1.288407629s ago: executing program 4 (id=2257):
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e4e22560c"], 0x7)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='xprtrdma_cb_setup\x00', r0}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000200)=[{0x6, 0x0, 0x5, 0x7fff0006}, {0x0, 0x9, 0x2, 0x8000}, {0x9, 0x0, 0x2, 0x5}, {0x9, 0xff, 0x6, 0xc}, {0x9, 0x7, 0xb, 0x600}, {0x1, 0x0, 0xe0, 0x8}, {0x6, 0xd, 0xfe}]})
sysfs$1(0x1, 0x0)
sysfs$1(0x1, &(0x7f0000000140)='\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0})
r1 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYBLOB="49dc996f49cc10349b87e0ebcc1e092834eb70eb72e5bf3d6e7b74bf9bf603b4e74d7b7df0a100b6bd4332c51c2337c308146cbc39927429628ac04f9debd9703bde847e79f759bc37c58a916518436e74c4fb3ca20ad2923c188d621f54c5b438223a9fd3199ba51b148817bf8669f0e94d99a75e61ec426933c07a52c0e762fe838013db49960337376270c35623586dc2819835d4e9093016040d454828a5e59a906b828e4ea76e3506d5c47323bcbe2b286ed03d9749fb8eb4a3d20fb963f5793c0dc529686df6633c2992364d", @ANYBLOB="040000a809aa522c00000007000000f0f45ea2175f23fbb15d52352bc3550b0d17fb71f7e75efcca84deef4ed61a80bca1bab5dee40e3ba5eb8709e65dade8f488405f2cce86392966e9c9220c9ccad9fafeeb93d38a501049f60535a7b64920bdf69cb4fa3cde962d32202ec1023a182a208c702d7d38065b3441b7e0fd8f34e57c8fa24c998927a044973c9f6221c7eb81449fb758edb45da1aac345c92af960af3d450a507a3b89e8d6eff026dc65428683455ddfbc1b1e0e60e7e387b1cd59d99b169e9792acadc2c7508507f0b0f77bae6172255141b7c6f586f900"/233, @ANYBLOB="04044895e56de3c4c25d3df331e22a61c8f22922e51ce4a19d112a6d14343e"], 0x54}, 0x1, 0x0, 0x0, 0x4000064}, 0x4004800)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4)
request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f00000012c0)='\xd9j\xff\xabk<f\a\x00\x00\x00\x00\x00\x00H\x00\x00\x00\xca8 \xed\xb9\xaf0\x02\'2O\xf0\xab\x95]\x9d\xa1}~\f\x8e\xccj\x83)!\x1d\xe9&A,\xc2\x94Nx\x9f\x1af\xa6\xedl\xcf\xff\xcd\x9d\xc5Y\x97A\x98\x18\a`<q:\t\xdaa~\xeb\b\xf7\x9a\xba\xc0\x93\xc3\xabMT\xfc\x8a\xbf\r\xc3&\xb2tb\xffy\xb2\xc0\xa8\xdc\xfeO\xaa\xbc\xb0\xf6\xba\xa6\x1a\xc5\xc9\xdf\x94\xfb\x98\xa9]\x17\x80%\x8aa\xcf\xc2\xff\x95\xd6\xaa\xa8u\xfb\xf1o\xef\xe3\xfa\xa6\x8asX\b\x11\xaa\xae\xad*r\x17\x10\xb1\xad}\x18\xfd\xde`D\x9c\x16m\f\x03\xf2#\xe1\xa9r\xca\xd1\xb2O\xff\x93\xae\x86\xc7\xb5\xa9\x90B\x1aK\xd5\x1c\x959\x7f\xb6K\x1a\xc8\xc6\x1f5( n\xbb\r\x170PB\xc6\x893\xf5\xf9\x12\x87J\xe4\xbbW`', 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x9)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000010c0))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
sync()
add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000002300), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000300)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, r4)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x40, 0xc8, 0x8}}}, 0x9)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000080)={0x98f907, 0x1, @name="1d9a1d6db10802ccdae75f4a7ecc77db6733c25f37aeaf5505071c108401fa7d"})

1.212495315s ago: executing program 2 (id=2258):
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x20, 0xc6, 0x96, 0x40, 0xdf6, 0x61c, 0xe4e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xa1, 0x8c}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0xac, {0xac, 0x21, "4b455c55e264a1fc483e209ed0c1da424a5dc1af40eb3d3724a4e3b4b64b9d864a1f41a44e7aedc5adafa4d791f4f0f52c60e1093348041a33d4b5f45a9181d45ea3c765ed7a41642f53f0468eb1e8f12e1c051cf5e315c33b57fb1d3dce2fa9bdd937beb492b2ab05396e304a77fd267b31ee39461de5a509ad9edaef213cf63d52f01011f0156b06ded377ce5400372f62f8a48bb6a86f0ccfb6bf4a1c018660836e60be07e60ec683"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x20, 0xf, 0x6c, "e0020aa9d4218fd72e0cb2192edafe81a2fc5b1c38c34d45501c516921e1ee2eb8f658f80f5bf4b3784fb7fec27e274657a31f78555c82bf7bf43bcc89cc68314c33b11aff4254108b47092350516632b55fad5ae22531e61505c2d2ac342b50102de990dd8b8005f7e0929d"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}})
sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)}], 0x1, &(0x7f0000000340)}, 0x4000)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a)

878.568397ms ago: executing program 2 (id=2259):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc28"], 0x11)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x4}}}}, 0xf)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000000)='cgroup\x00'}, 0x21)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x8ffffff8)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

712.858518ms ago: executing program 4 (id=2261):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x70}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0x69)
close(r1)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110b8000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
execve(&(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000280))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x74, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @random="e576359046a8"}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x74}}, 0x0)
futex(&(0x7f0000000740), 0xb, 0x2, &(0x7f0000000780), &(0x7f00000008c0)=0x1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x4c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x124}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8f5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x850)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012abd7020fcdbdf25590000000c00990007008651360000006025"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3f7, 0x102, 0x70bd27, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044094}, 0x40)

545.963102ms ago: executing program 4 (id=2262):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000019c0)=0x40, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xe20, 0x0, @local}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x5, 0x4, @private0, @private0, 0x7, 0x8000, 0x2, 0x40}})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="243bfb8c2ece86810000005d0000", @ANYRESOCT=r2, @ANYBLOB="040052000600050001"], 0x24}}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x80, 0x7fff, 0x4000, {{0x17, 0x4, 0x2, 0x0, 0x5c, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x1c, 0x60, 0x0, 0xf, [0x7ff, 0xff, 0x4, 0x7, 0xff, 0x4]}, @rr={0x7, 0x2b, 0xf9, [@rand_addr=0x64010102, @private=0xa010102, @loopback, @loopback, @local, @broadcast, @rand_addr=0x64010100, @multicast1, @private=0xa010100, @local]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59302"])
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

482.639145ms ago: executing program 1 (id=2263):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0xe20, 0x0, @local}, 0x1c)

437.526385ms ago: executing program 1 (id=2264):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r4 = openat$dir(0xffffff9c, 0x0, 0x1, 0x100)
mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x88)
chroot(&(0x7f0000000040)='./file0\x00')
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x1008001, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x4141, 0x0)

245.331253ms ago: executing program 4 (id=2265):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r2, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$kcm(0x2, 0x0, 0x73)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="85100004000000950000000020000018000000001000000000000000001b00950000000000000085100000fcffffff9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000080)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000), 0x8)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="8f6b3d6fb05cfac273b26cdfa1d4c1ed6cf2585364dabdd8e604957777a448e2fd46e1cc8af08e20e2c69a04a17312c4f6562951773fb778c5d84cfc7664e6584807cf670f94516429b7e8ce60015a50b0ac", 0x52}, {&(0x7f0000000300)="d39a63de02a191c3762dc39f0a3fec7bca8e1b38b85f3e9bbe954b072653dd8416a66910d02c610a0dd861bfc28978d74506cf6313b11d19ad48942c4c892dd10ed05535601bbcc9d23bb15a6aa38e0346baca029fe4766efe02b8d1df9d975b00abe28b", 0x64}], 0x2}, 0x4802)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r7, &(0x7f0000000000), 0xc)
bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
getdents64(r8, &(0x7f0000000200)=""/171, 0xab)

0s ago: executing program 0 (id=2266):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x21, 0x2, 0x2)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "040022ebffff0200"}}}}}, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x85)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x801)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x6, 0x1, 0x4, 0x0, 0xd})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x2a, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x184)
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000020000100001a00000000000002000000000000000000000005001300010000000c000c4000000000000000"], 0x30}}, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'})
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'})

kernel console output (not intermixed with test programs):

ce number 80 using dummy_hcd
[  638.147410][ T5286] usb 5-1: device descriptor read/8, error -71
[  638.253267][T14770] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.358077][T14770] 8021q: adding VLAN 0 to HW filter on device team0
[  638.383735][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.391074][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.407391][ T5286] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  638.467431][ T5286] usb 5-1: device descriptor read/8, error -71
[  638.509533][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.516704][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.587935][ T5286] usb usb5-port1: unable to enumerate USB device
[  638.598814][T14770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  638.611702][T14922] blktrace: Concurrent blktraces are not allowed on nbd3
[  638.643369][T14770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.680408][T14770] veth0_vlan: entered promiscuous mode
[  638.692046][T14770] veth1_vlan: entered promiscuous mode
[  638.719675][T14770] veth0_macvtap: entered promiscuous mode
[  638.729898][T14770] veth1_macvtap: entered promiscuous mode
[  638.750499][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.786339][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.806924][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.827949][ T5229] Bluetooth: hci1: command tx timeout
[  638.833425][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.843498][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.854092][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.865831][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.876678][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.887145][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.898436][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.908895][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.919536][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.930916][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.950361][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.974830][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  639.000305][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.023746][T14770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.064159][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.085607][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.108142][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.131847][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.155159][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.177041][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.197739][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.215309][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.238046][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.260620][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.281460][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.292456][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.304213][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.315518][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.326189][T14770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.344076][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.356301][T14770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.394855][T14770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.408615][T14770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.426861][T14770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.442989][T14770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.638002][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.666150][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.711912][ T3714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.726083][T14956] futex_wake_op: syz.2.1850 tries to shift op by -1; fix this program
[  639.735976][ T3714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.891062][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'.
[  640.016894][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'.
[  640.187141][ T5283] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  640.213933][T14967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.224355][T14967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.360309][ T5283] usb 2-1: Using ep0 maxpacket: 32
[  640.368168][ T5283] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  640.377922][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.389436][ T5283] usb 2-1: config 0 descriptor??
[  640.695375][ T5283] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  640.717743][ T5283] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  640.727894][ T5283] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  640.915612][T14975] hsr0: entered promiscuous mode
[  640.921962][T14975] macsec1: entered promiscuous mode
[  640.926110][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.930058][T14975] macsec1: entered allmulticast mode
[  640.941480][T14975] hsr0: entered allmulticast mode
[  640.946931][T14975] hsr_slave_0: entered allmulticast mode
[  640.947025][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.954256][T14975] hsr_slave_1: entered allmulticast mode
[  640.977788][T14975] hsr0: left allmulticast mode
[  640.982597][T14975] hsr_slave_0: left allmulticast mode
[  640.994614][T14975] hsr_slave_1: left allmulticast mode
[  641.003568][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.024169][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.306705][ T5331] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  641.349085][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.374686][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.476645][ T5331] usb 5-1: config 4 has too many interfaces: 196, using maximum allowed: 32
[  641.493583][ T5331] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 196
[  641.518177][ T5331] usb 5-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f
[  641.536715][ T5331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.548179][ T5331] usb 5-1: Product: syz
[  641.552637][ T5331] usb 5-1: Manufacturer: syz
[  641.563680][ T5331] usb 5-1: SerialNumber: syz
[  641.840291][ T5331] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  641.861124][ T5331] usb 5-1: USB disconnect, device number 82
[  641.906241][T15000] futex_wake_op: syz.1.1863 tries to shift op by -1; fix this program
[  642.053666][T15007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.079358][T15007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.897936][T15022] futex_wake_op: syz.4.1871 tries to shift op by -1; fix this program
[  643.162817][T15032] futex_wake_op: syz.1.1874 tries to shift op by -1; fix this program
[  643.320175][T15039] futex_wake_op: syz.2.1876 tries to shift op by -1; fix this program
[  643.617876][T15046] "syz.4.1875" (15046) uses obsolete ecb(arc4) skcipher
[  644.897825][T15071] futex_wake_op: syz.2.1886 tries to shift op by -1; fix this program
[  645.342554][T15086] futex_wake_op: syz.4.1891 tries to shift op by -1; fix this program
[  645.414166][T15092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  645.424788][T15092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  645.446719][T15091] dccp_close: ABORT with 120 bytes unread
[  647.433458][T15116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  647.475757][T15116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  647.992526][T15133] futex_wake_op: syz.1.1904 tries to shift op by -1; fix this program
[  648.474766][T15145] loop9: detected capacity change from 0 to 7
[  648.508968][T15145]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  648.514421][T15145] loop9: partition table partially beyond EOD, truncated
[  648.533626][T15145] loop9: p1 size 1139518251 extends beyond EOD, truncated
[  648.696792][ T5331] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  648.852998][ T5331] usb 5-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed
[  648.863367][ T5331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.872651][ T5331] usb 5-1: Product: syz
[  648.877390][ T5331] usb 5-1: Manufacturer: syz
[  648.882082][ T5331] usb 5-1: SerialNumber: syz
[  648.897813][ T5331] usb 5-1: config 0 descriptor??
[  648.921670][ T5331] r8712u: register rtl8712_netdev_ops to netdev_ops
[  648.930850][ T5331] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  649.296456][T15150] input: syz0 as /devices/virtual/input/input72
[  649.503116][T15152] program syz.4.1908 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  649.637787][ T5331] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed
[  649.644685][ T5331] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  649.654969][ T5331] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  649.698822][T15152] bond0: entered promiscuous mode
[  649.703911][T15152] bond_slave_0: entered promiscuous mode
[  649.711609][T15152] bond_slave_1: entered promiscuous mode
[  649.758152][T15152] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  649.976009][ T5331] usb 5-1: USB disconnect, device number 83
[  650.361193][T15181] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  650.486317][T15184] netlink: 'syz.0.1916': attribute type 6 has an invalid length.
[  650.510267][T15184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1916'.
[  651.019322][T15208] hsr_slave_0: left promiscuous mode
[  651.028666][T15208] hsr_slave_1: left promiscuous mode
[  651.526686][ T5286] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  651.558247][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'.
[  651.698158][ T5286] usb 5-1: Using ep0 maxpacket: 32
[  651.704878][ T5286] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  651.716381][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.720668][T15246] input: syz0 as /devices/virtual/input/input73
[  651.740809][T15247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  651.752822][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'.
[  651.763556][ T5286] usb 5-1: config 0 descriptor??
[  651.783440][T15247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  651.830584][T15247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  651.855599][T15247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  651.888893][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'.
[  651.935077][T15247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  651.988514][T15247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  652.084533][ T5286] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  652.256704][ T5233] Bluetooth: hci2: command 0x0406 tx timeout
[  652.834181][T15260] futex_wake_op: syz.3.1931 tries to shift op by -1; fix this program
[  652.863990][T15262] futex_wake_op: syz.4.1932 tries to shift op by -1; fix this program
[  653.044137][T15267] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1933'.
[  653.078680][   T29] kauditd_printk_skb: 20 callbacks suppressed
[  653.078697][   T29] audit: type=1326 audit(1728524785.067:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  653.164452][   T29] audit: type=1326 audit(1728524785.067:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  653.187064][   T29] audit: type=1326 audit(1728524785.067:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  653.224852][T15270] futex_wake_op: syz.4.1934 tries to shift op by -1; fix this program
[  653.229673][   T29] audit: type=1326 audit(1728524785.067:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  653.240376][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.299062][   T29] audit: type=1326 audit(1728524785.067:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  653.325830][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.343449][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.352331][   T29] audit: type=1326 audit(1728524785.067:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  653.386443][   T29] audit: type=1326 audit(1728524785.067:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  653.409183][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.422845][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.431790][   T29] audit: type=1326 audit(1728524785.067:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  653.450394][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.454687][   T29] audit: type=1326 audit(1728524785.067:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15269 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  653.513986][   T29] audit: type=1326 audit(1728524785.117:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.3.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  654.266823][ T5229] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  654.275620][ T5229] Bluetooth: hci4: Injecting HCI hardware error event
[  654.288144][ T5233] Bluetooth: hci4: hardware error 0x00
[  654.336773][ T5229] Bluetooth: hci2: command 0x0406 tx timeout
[  654.343289][ T5284] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  654.358416][ T5284] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  654.761749][T15300] futex_wake_op: syz.2.1943 tries to shift op by -1; fix this program
[  655.074959][ T8107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.168692][ T8107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.238798][ T8107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.331344][ T8107] bond0: (slave netdevsim0): Releasing backup interface
[  655.340589][ T8107] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  655.351856][ T8107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.505061][ T8107] bridge_slave_1: left allmulticast mode
[  655.516816][ T8107] bridge_slave_1: left promiscuous mode
[  655.537940][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.549027][ T8107] bridge_slave_0: left allmulticast mode
[  655.554687][ T8107] bridge_slave_0: left promiscuous mode
[  655.566782][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.171285][ T8107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  656.183067][ T8107] bond_slave_0: left promiscuous mode
[  656.192506][ T8107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  656.201799][ T8107] bond_slave_1: left promiscuous mode
[  656.209164][ T8107] bond0 (unregistering): Released all slaves
[  656.269339][ T8107] tipc: Disabling bearer <eth:macvlan1>
[  656.285599][ T8107] tipc: Left network mode
[  656.346684][ T5233] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  658.417299][ T5284] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  658.424472][ T5284] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  658.429134][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout
[  660.576797][ T5284] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  660.576837][ T5233] Bluetooth: hci1: command 0x0c1a tx timeout
[  660.582893][ T5284] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  660.875624][T15442] futex_wake_op: syz.0.1949 tries to shift op by -1; fix this program
[  661.037656][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  661.059423][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  661.088460][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  661.097199][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  661.106399][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  661.114102][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  661.122772][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  661.146064][ T8107] veth1_macvtap: left promiscuous mode
[  661.151769][ T8107] veth0_macvtap: left promiscuous mode
[  661.157588][ T8107] veth1_vlan: left promiscuous mode
[  661.163278][ T8107] veth0_vlan: left promiscuous mode
[  661.192984][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  661.201044][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  661.208442][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  661.240853][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  661.249114][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  661.256805][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  661.264932][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  661.272891][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  661.286867][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  662.466278][ T8107] team0 (unregistering): Port device team_slave_1 removed
[  662.524754][ T8107] team0 (unregistering): Port device team_slave_0 removed
[  663.063464][T15452] tipc: Started in network mode
[  663.070100][T15452] tipc: Node identity ac1414aa, cluster identity 4711
[  663.081976][T15452] tipc: Enabled bearer <udp:syz2>, priority 10
[  663.091085][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'.
[  663.369578][T15478] futex_wake_op: syz.2.1960 tries to shift op by -1; fix this program
[  663.393035][ T5229] Bluetooth: hci3: command tx timeout
[  663.470158][T15458] chnl_net:caif_netlink_parms(): no params data found
[  663.523504][ T8107] IPVS: stop unused estimator thread 0...
[  663.554192][T15458] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.567051][T15458] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.574368][T15458] bridge_slave_0: entered allmulticast mode
[  663.582029][T15458] bridge_slave_0: entered promiscuous mode
[  663.596061][T15458] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.606400][T15458] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.614513][T15458] bridge_slave_1: entered allmulticast mode
[  663.622248][T15458] bridge_slave_1: entered promiscuous mode
[  663.664570][T15458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  663.681918][T15458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  663.700742][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'.
[  663.772498][T15458] team0: Port device team_slave_0 added
[  663.816270][T15458] team0: Port device team_slave_1 added
[  663.908156][T15458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  663.915146][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  663.941639][T15458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  663.955168][T15458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  663.962205][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  663.988236][T15458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.069803][T15458] hsr_slave_0: entered promiscuous mode
[  664.098772][T15458] hsr_slave_1: entered promiscuous mode
[  664.101993][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1966'.
[  664.141996][T15498] futex_wake_op: syz.2.1965 tries to shift op by -1; fix this program
[  664.197866][ T5279] tipc: Node number set to 2886997162
[  664.550087][T15515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.587224][T15515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.829533][T15515] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1968'.
[  664.873894][T15515] netlink: 23304 bytes leftover after parsing attributes in process `syz.2.1968'.
[  665.458134][ T5229] Bluetooth: hci3: command tx timeout
[  665.473980][T15458] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  665.516363][T15458] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  665.533484][T15458] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  665.582598][T15458] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  665.840765][T15458] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.890441][T15458] 8021q: adding VLAN 0 to HW filter on device team0
[  665.922685][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.929822][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  665.952624][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.959747][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.105213][T15458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  666.211022][T15458] veth0_vlan: entered promiscuous mode
[  666.242865][T15458] veth1_vlan: entered promiscuous mode
[  666.317572][T15458] veth0_macvtap: entered promiscuous mode
[  666.362330][T15458] veth1_macvtap: entered promiscuous mode
[  666.450151][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.482879][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.508308][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.526145][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.545697][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.562943][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.573230][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.585072][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.603438][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.626100][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.648217][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.671871][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.689036][T15590] futex_wake_op: syz.1.1972 tries to shift op by -1; fix this program
[  666.701955][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.715137][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.725302][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  666.736038][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.750720][T15458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  666.824947][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.851043][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.870861][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.885909][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.903129][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.914641][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.929598][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.948368][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  666.969605][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  666.986741][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.008121][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  667.027863][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.048537][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  667.071005][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.090199][T15458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  667.104214][T15458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.123136][T15458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.172450][T15458] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.191421][T15458] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.211711][T15458] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.234064][T15458] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  667.536774][ T5229] Bluetooth: hci3: command tx timeout
[  667.562217][ T8107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.573124][ T8107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.583435][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.591497][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.791975][T15621] futex_wake_op: syz.2.1977 tries to shift op by -1; fix this program
[  667.857524][T15625] VFS: Lookup of 'file0' in fuse fuse would have caused loop
[  668.106046][T15642] input: syz0 as /devices/virtual/input/input74
[  668.137589][T15642] ALSA: mixer_oss: invalid OSS volume ''
[  668.939618][ T8107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.439589][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  669.476964][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  669.490668][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  669.576792][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  669.591645][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  669.604666][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  670.042893][T15696] chnl_net:caif_netlink_parms(): no params data found
[  670.322817][ T8107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.379285][T15719] misc userio: No port type given on /dev/userio
[  670.435850][T15719] misc userio: The device must be registered before sending interrupts
[  670.606623][ T8107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.825796][ T8107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.854887][T15727] futex_wake_op: syz.2.1991 tries to shift op by -1; fix this program
[  670.936024][T15696] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.968488][T15696] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.010141][T15696] bridge_slave_0: entered allmulticast mode
[  671.037984][T15696] bridge_slave_0: entered promiscuous mode
[  671.061195][T15696] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.086263][T15696] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.100678][T15696] bridge_slave_1: entered allmulticast mode
[  671.111378][T15696] bridge_slave_1: entered promiscuous mode
[  671.361171][T15696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  671.451292][T15696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  671.490337][ T8107] bridge_slave_1: left allmulticast mode
[  671.510092][ T8107] bridge_slave_1: left promiscuous mode
[  671.515760][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.532300][T15745] futex_wake_op: syz.0.1993 tries to shift op by -1; fix this program
[  671.558678][ T8107] bridge_slave_0: left allmulticast mode
[  671.625377][ T8107] bridge_slave_0: left promiscuous mode
[  671.632257][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.651620][T15753] futex_wake_op: syz.1.1995 tries to shift op by -1; fix this program
[  671.700180][ T5233] Bluetooth: hci3: command tx timeout
[  672.070773][T15764] netlink: 'syz.0.1997': attribute type 10 has an invalid length.
[  672.080609][T15764] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1997'.
[  672.111401][T15764] openvswitch: netlink: Flow key attr not present in new flow.
[  672.646620][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  672.646748][   T29] audit: type=1800 audit(1728524804.627:432): pid=15779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1999" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  672.731369][T15749] delete_channel: no stack
[  672.855469][T15787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.909018][T15787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.186086][T15797] futex_wake_op: syz.0.2004 tries to shift op by -1; fix this program
[  673.425501][ T8107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  673.479099][ T8107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  673.505828][T15803] blktrace: Concurrent blktraces are not allowed on nbd0
[  673.509513][ T8107] bond0 (unregistering): Released all slaves
[  673.794053][ T5233] Bluetooth: hci3: command tx timeout
[  674.124569][T15696] team0: Port device team_slave_0 added
[  674.301885][T15817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  674.428533][T15817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  674.479653][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  674.493061][T15817] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722
[  674.494710][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  674.510281][T15817] PKCS7: Only support pkcs7_signedData type
[  674.520671][T15696] team0: Port device team_slave_1 added
[  674.522992][T15822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  674.534273][T15806] netlink: 'syz.0.2006': attribute type 2 has an invalid length.
[  674.545781][T15822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  674.555653][T15822] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  674.568251][T15822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  674.761145][   T29] audit: type=1800 audit(1728524806.747:433): pid=15831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2011" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0
[  674.865434][T15832] input: syz0 as /devices/virtual/input/input75
[  674.904174][ T8107] hsr_slave_0: left promiscuous mode
[  675.001170][ T8107] hsr_slave_1: left promiscuous mode
[  675.079523][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  675.117472][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.136349][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  675.162336][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.195206][ T8107] veth1_macvtap: left promiscuous mode
[  675.201066][ T8107] veth0_macvtap: left promiscuous mode
[  675.207071][ T8107] veth1_vlan: left promiscuous mode
[  675.212398][ T8107] veth0_vlan: left promiscuous mode
[  675.498691][T15857] futex_wake_op: syz.2.2014 tries to shift op by -1; fix this program
[  675.870915][T15822] Bluetooth: hci3: command tx timeout
[  676.625556][ T8107] team0 (unregistering): Port device team_slave_1 removed
[  676.659505][T15822] Bluetooth: hci0: command tx timeout
[  676.765947][ T8107] team0 (unregistering): Port device team_slave_0 removed
[  677.576369][T15696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.584832][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.611869][T15696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  677.629555][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'.
[  677.687267][T15696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  677.726339][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.804653][T15696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  677.879340][T15696] hsr_slave_0: entered promiscuous mode
[  677.902003][T15696] hsr_slave_1: entered promiscuous mode
[  677.946750][T15822] Bluetooth: hci3: command tx timeout
[  678.181634][T15915] futex_wake_op: syz.0.2018 tries to shift op by -1; fix this program
[  678.621200][T15827] chnl_net:caif_netlink_parms(): no params data found
[  678.660844][T15935] futex_wake_op: syz.0.2023 tries to shift op by -1; fix this program
[  678.736667][T15822] Bluetooth: hci0: command tx timeout
[  679.227595][ T8107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.479560][ T8107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.535245][T15827] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.535324][T15827] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.535535][T15827] bridge_slave_0: entered allmulticast mode
[  679.536704][T15827] bridge_slave_0: entered promiscuous mode
[  679.538593][T15827] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.538657][T15827] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.538790][T15827] bridge_slave_1: entered allmulticast mode
[  679.540510][T15827] bridge_slave_1: entered promiscuous mode
[  679.597502][T15827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  679.600139][T15827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  679.672649][T15962] netlink: 420 bytes leftover after parsing attributes in process `syz.0.2026'.
[  679.719736][ T8107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.729923][T15827] team0: Port device team_slave_0 added
[  679.731306][T15827] team0: Port device team_slave_1 added
[  679.768818][T15827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  679.768838][T15827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  679.768863][T15827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  679.770797][T15827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  679.770813][T15827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  679.770837][T15827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  679.870819][ T8107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.937815][T15696] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  679.939548][T15696] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  679.947876][T15827] hsr_slave_0: entered promiscuous mode
[  679.948443][T15827] hsr_slave_1: entered promiscuous mode
[  679.948801][T15827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  679.948844][T15827] Cannot create hsr debugfs directory
[  679.949034][T15696] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  679.950565][T15696] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  680.435897][ T8107] bridge_slave_1: left allmulticast mode
[  680.441892][ T8107] bridge_slave_1: left promiscuous mode
[  680.450082][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.518916][ T8107] bridge_slave_0: left allmulticast mode
[  680.541869][ T8107] bridge_slave_0: left promiscuous mode
[  680.578855][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.828133][T15822] Bluetooth: hci0: command tx timeout
[  680.904051][   T29] audit: type=1800 audit(1728524812.887:434): pid=15983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2029" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0
[  681.452821][ T8107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  681.475519][ T8107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  681.507435][ T8107] bond0 (unregistering): Released all slaves
[  681.673133][T15696] 8021q: adding VLAN 0 to HW filter on device bond0
[  681.872264][T15696] 8021q: adding VLAN 0 to HW filter on device team0
[  681.899318][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.906545][ T3714] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.931472][   T29] audit: type=1326 audit(1728524813.917:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.2.2032" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0
[  681.982920][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.990058][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state
[  682.007278][ T8107] hsr_slave_0: left promiscuous mode
[  682.015376][ T8107] hsr_slave_1: left promiscuous mode
[  682.026459][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  682.040736][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  682.063080][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  682.070854][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  682.094670][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.107545][ T8107] veth1_macvtap: left promiscuous mode
[  682.113153][ T8107] veth0_macvtap: left promiscuous mode
[  682.119596][ T8107] veth1_vlan: left promiscuous mode
[  682.125115][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.135729][ T8107] veth0_vlan: left promiscuous mode
[  682.795487][T16003] xt_TPROXY: Can be used only with -p tcp or -p udp
[  682.897535][T15822] Bluetooth: hci0: command tx timeout
[  682.987500][ T8107] team0 (unregistering): Port device team_slave_1 removed
[  683.036240][ T8107] team0 (unregistering): Port device team_slave_0 removed
[  683.655904][T16007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2033'.
[  683.874339][T15827] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  683.960236][T15827] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  683.999123][T15827] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  684.015543][T16019] input: syz0 as /devices/virtual/input/input76
[  684.033863][T15827] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  684.085524][T15696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  684.150173][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'.
[  684.291781][T15696] veth0_vlan: entered promiscuous mode
[  684.309459][T15827] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.323636][T15696] veth1_vlan: entered promiscuous mode
[  684.389356][T15827] 8021q: adding VLAN 0 to HW filter on device team0
[  684.423147][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.430302][ T8107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  684.472832][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.479996][ T8107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  684.508838][T15696] veth0_macvtap: entered promiscuous mode
[  684.521703][T15696] veth1_macvtap: entered promiscuous mode
[  684.575658][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.594971][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.621282][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.641045][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.656038][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.673628][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.684547][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.701214][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.717980][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.769481][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.801768][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.816133][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.832981][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  684.863736][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.913986][T15696] batman_adv: batadv0: Interface activated: batadv_slave_0
[  685.002230][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.028118][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.044895][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.077087][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.116432][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.136994][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.190147][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.251083][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.304879][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.350295][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.383653][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.399955][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.423091][T15696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  685.446262][T15696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  685.465224][T15696] batman_adv: batadv0: Interface activated: batadv_slave_1
[  685.581963][T15696] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.614080][T15696] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.656762][T15696] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.708567][T15696] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.813714][T16057] tipc: Can't bind to reserved service type 0
[  685.852149][T15827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  685.941780][T16060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.997382][T16060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.019277][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  686.025711][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  686.054864][T15827] veth0_vlan: entered promiscuous mode
[  686.108043][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.123965][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.150282][T15827] veth1_vlan: entered promiscuous mode
[  686.197318][T15827] veth0_macvtap: entered promiscuous mode
[  686.244237][T15827] veth1_macvtap: entered promiscuous mode
[  686.262728][ T3714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.271885][ T3714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.316131][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.346823][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.357387][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.369239][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.380324][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.392300][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.402599][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.413597][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.425199][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.441399][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.452630][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.468756][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.481852][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.495434][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.506626][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.517737][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.532909][T15827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.563852][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.590675][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.601892][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.613132][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.623395][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.634296][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.644846][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.656278][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.666703][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.677801][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.688409][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.699389][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.710390][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.721298][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.731560][T15827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.743749][T15827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.796792][T15827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  686.826161][T15827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.835684][T15827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.861390][T15827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.876862][T15827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.054798][ T8107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.077956][ T8107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.134535][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.145447][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.197333][T16074] futex_wake_op: syz.4.2045 tries to shift op by -1; fix this program
[  687.362466][T16082] input: syz0 as /devices/virtual/input/input77
[  687.477745][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'.
[  687.964377][   T29] audit: type=1800 audit(1728524819.947:436): pid=16092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2049" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0
[  688.322753][T16099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.351564][T16099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.459665][T16102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.479220][T16102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.092886][T16120] futex_wake_op: syz.1.2059 tries to shift op by -1; fix this program
[  691.407540][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.416459][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.493339][T16132] program syz.2.2063 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  691.525833][T16131] bond0: entered promiscuous mode
[  691.531797][T16131] bond_slave_0: entered promiscuous mode
[  691.538156][T16131] bond_slave_1: entered promiscuous mode
[  691.680081][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'.
[  691.717159][T16134] fuse: Bad value for 'fd'
[  692.165328][T16151] futex_wake_op: syz.2.2071 tries to shift op by -1; fix this program
[  692.348957][T16155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.358001][T16155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.924100][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2074'.
[  694.955748][T16163] input: syz0 as /devices/virtual/input/input78
[  695.003859][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'.
[  695.847869][T16176] futex_wake_op: syz.3.2078 tries to shift op by -1; fix this program
[  696.060101][   T29] audit: type=1800 audit(1728524828.047:437): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2081" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  696.273646][T16187] fuse: Bad value for 'fd'
[  696.437085][T16195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2086'.
[  696.746088][T16199] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode
[  697.006235][T16210] netlink: 'syz.3.2089': attribute type 4 has an invalid length.
[  697.252348][T16215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.281958][T16215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.946731][T16219] futex_wake_op: syz.3.2093 tries to shift op by -1; fix this program
[  697.974834][   T29] audit: type=1800 audit(1728524829.957:438): pid=16223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2094" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  698.331949][T16231] input: syz0 as /devices/virtual/input/input79
[  698.399490][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2095'.
[  700.427113][T16255] futex_wake_op: syz.0.2105 tries to shift op by -1; fix this program
[  701.168029][T16267] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  701.357525][T16275] openvswitch: netlink: Flow actions attr not present in new flow.
[  701.397361][ T5286] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  701.401085][ T5283] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  701.448463][ T5286] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[  701.465064][ T5283] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  701.485857][T16280] netlink: 'syz.2.2112': attribute type 21 has an invalid length.
[  701.489857][ T5283] usb 2-1: USB disconnect, device number 78
[  701.525412][T16280] IPv6: NLM_F_CREATE should be specified when creating new route
[  701.594769][ T5286] usb 5-1: USB disconnect, device number 84
[  701.711338][   T29] audit: type=1326 audit(1728524833.697:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16283 comm="syz.3.2115" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x0
[  701.946835][ T5286] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  702.026807][ T5279] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  702.114019][ T5286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  702.124347][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  702.143635][ T5286] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  702.152821][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.167110][ T5286] usb 5-1: config 0 descriptor??
[  702.174910][ T5286] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  702.220708][ T5279] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  702.230511][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.238719][ T5279] usb 2-1: Product: syz
[  702.242979][ T5279] usb 2-1: Manufacturer: syz
[  702.247653][ T5279] usb 2-1: SerialNumber: syz
[  702.257477][ T5279] usb 2-1: config 0 descriptor??
[  702.265013][ T5279] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 079
[  702.471287][T16294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.501271][T16294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.524240][T16294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.540065][T16294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.610697][T16300] futex_wake_op: syz.3.2119 tries to shift op by -1; fix this program
[  702.851428][ T5279]  (null): failure setting delay to 10us
[  702.868223][ T5279] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  702.895699][ T5279] usb 2-1: USB disconnect, device number 79
[  703.003428][T16309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.012485][T16309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.029177][T16309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.039159][T16309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.048915][T16309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.060727][T16309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.117260][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  703.119645][T16310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  703.146534][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  703.868905][   T29] audit: type=1800 audit(1728524835.857:440): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2128" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0
[  703.950619][T16327] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  704.137278][T16331] futex_wake_op: syz.0.2131 tries to shift op by -1; fix this program
[  704.221742][T16335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.237006][T16335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.249297][T16335] netlink: 'syz.2.2132': attribute type 12 has an invalid length.
[  704.257720][T16335] netlink: 'syz.2.2132': attribute type 29 has an invalid length.
[  704.258261][ T5331] usb 5-1: USB disconnect, device number 85
[  704.265534][T16335] netlink: 'syz.2.2132': attribute type 2 has an invalid length.
[  704.265553][T16335] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2132'.
[  704.267865][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'.
[  704.445317][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'.
[  704.471218][T16341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  704.478534][T16341] IPv6: NLM_F_CREATE should be set when creating new route
[  704.921939][   T29] audit: type=1800 audit(1728524836.907:441): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2139" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  704.952976][T16359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.971773][T16359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.316736][ T5284] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  705.500403][ T5284] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  705.513977][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.524835][ T5284] usb 2-1: Product: syz
[  705.537036][ T5284] usb 2-1: Manufacturer: syz
[  705.541688][ T5284] usb 2-1: SerialNumber: syz
[  705.558765][ T5284] usb 2-1: config 0 descriptor??
[  705.570167][ T5284] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 080
[  705.770733][T16363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.782653][T16363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.793845][T16363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.805550][T16363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.443304][ T1062] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.607752][ T1062] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.836292][ T1062] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.880237][T16376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.911651][T16376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.995103][T16379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.048628][T16379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.081319][ T1062] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.112899][T16379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.126972][T16378] futex_wake_op: syz.3.2148 tries to shift op by -1; fix this program
[  707.149711][T16379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.231051][T16379] fuse: Unknown parameter 'use00000000000000000000'
[  707.241727][ T5284]  (null): failure setting delay to 10us
[  707.249510][ T5284] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  707.267625][ T5284] usb 2-1: USB disconnect, device number 80
[  707.415516][ T1062] bridge_slave_1: left allmulticast mode
[  707.428509][ T1062] bridge_slave_1: left promiscuous mode
[  707.447424][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.467927][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  707.472352][ T1062] bridge_slave_0: left allmulticast mode
[  707.482354][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  707.492130][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  707.502355][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  707.510033][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  707.516964][ T1062] bridge_slave_0: left promiscuous mode
[  707.517124][ T1062] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.532895][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  708.794432][ T1062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  708.814242][ T1062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  708.827656][ T1062] bond0 (unregistering): Released all slaves
[  709.371519][ T1062] hsr_slave_0: left promiscuous mode
[  709.418316][ T1062] hsr_slave_1: left promiscuous mode
[  709.427198][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  709.436184][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_0
[  709.468467][ T1062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  709.496684][ T1062] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.603955][ T1062] veth1_macvtap: left promiscuous mode
[  709.616907][ T5233] Bluetooth: hci3: command tx timeout
[  709.626689][ T1062] veth0_macvtap: left promiscuous mode
[  709.649857][ T1062] veth1_vlan: left promiscuous mode
[  709.675947][ T1062] veth0_vlan: left promiscuous mode
[  709.976954][ T5279] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  710.200477][ T5279] usb 2-1: not running at top speed; connect to a high speed hub
[  710.205416][T16444] trusted_key: encrypted_key: insufficient parameters specified
[  710.228687][T16444] trusted_key: encrypted_key: insufficient parameters specified
[  710.231168][ T5279] usb 2-1: config 5 has an invalid interface number: 239 but max is 2
[  710.244921][ T5279] usb 2-1: config 5 has an invalid interface number: 48 but max is 2
[  710.268536][ T5279] usb 2-1: config 5 has an invalid interface number: 15 but max is 2
[  710.276899][ T5279] usb 2-1: config 5 has no interface number 0
[  710.282994][ T5279] usb 2-1: config 5 has no interface number 1
[  710.289206][ T5279] usb 2-1: config 5 has no interface number 2
[  710.295347][ T5279] usb 2-1: config 5 interface 239 altsetting 9 endpoint 0x1 has an invalid bInterval 127, changing to 4
[  710.306822][ T5279] usb 2-1: config 5 interface 239 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  710.318256][ T5279] usb 2-1: config 5 interface 239 altsetting 9 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  710.329462][ T5279] usb 2-1: config 5 interface 239 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  710.341036][ T5279] usb 2-1: config 5 interface 48 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  710.352161][ T5279] usb 2-1: config 5 interface 15 altsetting 2 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  710.363655][ T5279] usb 2-1: config 5 interface 239 has no altsetting 0
[  710.370575][ T5279] usb 2-1: config 5 interface 48 has no altsetting 0
[  710.377343][ T5279] usb 2-1: config 5 interface 15 has no altsetting 0
[  710.387447][ T5279] usb 2-1: string descriptor 0 read error: -22
[  710.393901][ T5279] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  710.403406][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.416328][ T5279] usb-storage 2-1:5.239: USB Mass Storage device detected
[  710.452737][ T5279] usb-storage 2-1:5.239: Quirks match for vid 174c pid 55aa: 400000
[  710.507627][ T5279] usb-storage 2-1:5.48: USB Mass Storage device detected
[  710.560507][ T5279] usb-storage 2-1:5.48: Quirks match for vid 174c pid 55aa: 400000
[  710.650112][ T5279] usb-storage 2-1:5.15: USB Mass Storage device detected
[  710.686805][ T5279] usb-storage 2-1:5.15: Quirks match for vid 174c pid 55aa: 400000
[  710.892170][ T1062] team0 (unregistering): Port device team_slave_1 removed
[  711.034905][ T1062] team0 (unregistering): Port device team_slave_0 removed
[  711.111842][T16457] futex_wake_op: syz.0.2159 tries to shift op by -1; fix this program
[  711.682764][T16463] futex_wake_op: syz.0.2160 tries to shift op by -1; fix this program
[  711.701330][ T5233] Bluetooth: hci3: command tx timeout
[  711.986300][T16444] netlink: 'syz.3.2158': attribute type 9 has an invalid length.
[  712.008016][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'.
[  712.031579][T16385] chnl_net:caif_netlink_parms(): no params data found
[  712.160992][ T5279] usb 2-1: USB disconnect, device number 81
[  712.367115][T16385] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.374289][T16385] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.400270][T16385] bridge_slave_0: entered allmulticast mode
[  712.413556][T16385] bridge_slave_0: entered promiscuous mode
[  712.436292][T16385] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.443892][T16385] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.451909][T16385] bridge_slave_1: entered allmulticast mode
[  712.462923][T16385] bridge_slave_1: entered promiscuous mode
[  712.563900][T16385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  712.595566][T16385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  712.644355][T16385] team0: Port device team_slave_0 added
[  712.654721][T16385] team0: Port device team_slave_1 added
[  712.683534][T16385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  712.690849][T16385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.727121][T16385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  712.767690][T16385] batman_adv: batadv0: Adding interface: batadv_slave_1
[  712.785149][T16385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.786309][T16488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.812066][T16385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  712.850172][T16488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  712.864892][T16488] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2163'.
[  712.930574][T16385] hsr_slave_0: entered promiscuous mode
[  712.948978][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.950049][T16385] hsr_slave_1: entered promiscuous mode
[  712.965671][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.176714][   T25] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  713.337200][   T25] usb 2-1: Using ep0 maxpacket: 32
[  713.344313][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  713.357334][   T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13
[  713.366847][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.375692][   T25] usb 2-1: Product: syz
[  713.381058][   T25] usb 2-1: Manufacturer: syz
[  713.385777][   T25] usb 2-1: SerialNumber: syz
[  713.403216][   T25] usb 2-1: config 0 descriptor??
[  713.425904][   T25] pvrusb2: Hardware description: Terratec Grabster AV400
[  713.448106][   T25] pvrusb2: **********
[  713.452144][   T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  713.475737][   T25] pvrusb2: Important functionality might not be entirely working.
[  713.485904][   T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  713.510247][   T25] pvrusb2: **********
[  713.633661][ T2036] pvrusb2: Invalid write control endpoint
[  713.762296][ T2036] pvrusb2: Invalid write control endpoint
[  713.773329][ T2036] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  713.777327][ T5233] Bluetooth: hci3: command tx timeout
[  713.795775][T16385] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  713.803980][ T2036] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  713.811683][ T2036] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  713.824779][T16385] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  713.838867][ T2036] pvrusb2: Device being rendered inoperable
[  713.853383][T16385] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  713.869236][ T2036] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  713.892490][ T2036] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  713.909318][T16385] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  713.927382][ T2036] pvrusb2: Attached sub-driver cx25840
[  713.933139][ T2036] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  713.966060][ T2036] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  714.076448][T16385] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.139264][T16385] 8021q: adding VLAN 0 to HW filter on device team0
[  714.161652][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.168835][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  714.207751][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.214939][ T8107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.327783][T16385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  714.418382][T16385] veth0_vlan: entered promiscuous mode
[  714.454929][T16385] veth1_vlan: entered promiscuous mode
[  714.528786][T16385] veth0_macvtap: entered promiscuous mode
[  714.545944][T16385] veth1_macvtap: entered promiscuous mode
[  714.574136][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.586210][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.608606][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.624684][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.635102][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.645833][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.655744][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.666539][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.676377][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.687885][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.702408][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.714297][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.731924][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.742912][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.752955][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  714.763407][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.774640][T16385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  714.774905][ T5286] usb 2-1: USB disconnect, device number 82
[  714.801244][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.824529][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.849686][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.861742][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.883307][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.895807][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.913455][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.926320][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.938534][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.950040][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.960129][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  714.975020][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  714.991337][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  715.002100][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.012702][T16385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  715.025606][T16385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  715.039336][T16385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.077081][T16385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  715.086055][T16385] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  715.095859][T16385] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  715.118327][T16385] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.304529][ T8107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.349957][ T8107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.502197][ T8107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.535297][ T8107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.837419][ T5286] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  715.858143][ T5233] Bluetooth: hci3: command tx timeout
[  716.019444][ T5286] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  716.036286][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  716.053833][ T5286] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  716.063290][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.073200][ T5286] usb 2-1: config 0 descriptor??
[  716.096181][ T5286] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  716.420552][ T6111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.649591][T15822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  716.669712][T15822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  716.680259][T15822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  716.698729][T15822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  716.712990][T15822] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  716.722651][T15822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  716.726876][   T29] audit: type=1800 audit(1728524848.707:442): pid=16579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2173" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  716.931593][ T6111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.992541][T16589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.009307][T16589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.035075][T16589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.051415][T16589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.069852][T16589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.110481][T16589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.122937][ T6111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.179968][ T3714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.192073][T16593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  717.236661][ T3714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.248271][ T6111] bond0: (slave netdevsim0): Releasing backup interface
[  717.277147][ T6111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.499862][T16583] chnl_net:caif_netlink_parms(): no params data found
[  717.527997][ T5331] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  717.706730][ T5331] usb 5-1: Using ep0 maxpacket: 16
[  717.713364][ T5331] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  717.722787][ T5331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.740004][ T5331] usb 5-1: config 0 descriptor??
[  717.844046][ T5331] gspca_main: sonixj-2.14.0 probing 0471:0327
[  718.133401][T16583] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.173627][T16583] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.275731][T16583] bridge_slave_0: entered allmulticast mode
[  718.338712][T16583] bridge_slave_0: entered promiscuous mode
[  718.457266][ T6111] bridge_slave_1: left allmulticast mode
[  718.491413][ T6111] bridge_slave_1: left promiscuous mode
[  718.550253][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.628365][ T6111] bridge_slave_0: left allmulticast mode
[  718.642902][ T6111] bridge_slave_0: left promiscuous mode
[  718.690837][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.701540][ T5284] usb 2-1: USB disconnect, device number 83
[  718.899271][T15822] Bluetooth: hci2: command tx timeout
[  719.074463][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2176'.
[  719.170936][ T5331] gspca_sonixj: reg_w1 err -71
[  719.187060][ T5331] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  719.213216][ T5331] usb 5-1: USB disconnect, device number 86
[  719.267220][ T5279] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  719.436610][ T5279] usb 2-1: device descriptor read/64, error -71
[  719.623228][T16653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  719.632063][T16653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.676648][ T5279] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  719.826992][ T5279] usb 2-1: device descriptor read/64, error -71
[  719.938541][ T5279] usb usb2-port1: attempt power cycle
[  719.952219][ T6111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  719.979954][ T6111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  720.001849][ T6111] bond0 (unregistering): Released all slaves
[  720.039197][ T6111] bond1 (unregistering): Released all slaves
[  720.062662][T16583] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.077530][T16583] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.084796][T16583] bridge_slave_1: entered allmulticast mode
[  720.103397][T16583] bridge_slave_1: entered promiscuous mode
[  720.190459][T16653] tipc: Started in network mode
[  720.195366][T16653] tipc: Node identity ac1414aa, cluster identity 4711
[  720.280438][T16653] tipc: Enabled bearer <udp:s>, priority 10
[  720.297397][ T5279] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  720.348350][ T5279] usb 2-1: device descriptor read/8, error -71
[  720.366098][T16661] futex_wake_op: syz.3.2182 tries to shift op by -1; fix this program
[  720.437663][T16583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  720.472403][T16583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  720.636716][ T5279] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  720.707788][ T5279] usb 2-1: device descriptor read/8, error -71
[  720.723731][T16583] team0: Port device team_slave_0 added
[  720.761919][T16583] team0: Port device team_slave_1 added
[  720.827082][ T5279] usb usb2-port1: unable to enumerate USB device
[  720.911235][ T6111] hsr_slave_0: left promiscuous mode
[  720.967693][T16679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.978783][T15822] Bluetooth: hci2: command tx timeout
[  720.990206][ T6111] hsr_slave_1: left promiscuous mode
[  721.009950][T16679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.021930][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  721.043579][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_0
[  721.053269][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  721.107005][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_1
[  721.121485][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2184'.
[  721.188114][ T6111] veth1_macvtap: left promiscuous mode
[  721.224268][ T6111] veth0_macvtap: left promiscuous mode
[  721.252794][ T6111] veth1_vlan: left promiscuous mode
[  721.264688][ T6111] veth0_vlan: left promiscuous mode
[  721.396612][ T5331] tipc: Node number set to 2886997162
[  722.492759][ T6111] team0 (unregistering): Port device team_slave_1 removed
[  722.565536][ T6111] team0 (unregistering): Port device team_slave_0 removed
[  722.696695][ T5331] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  722.864566][ T5331] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  722.889162][ T5331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.906689][ T5331] usb 2-1: Product: syz
[  722.912581][ T5331] usb 2-1: Manufacturer: syz
[  722.917350][ T5331] usb 2-1: SerialNumber: syz
[  722.929504][ T5331] usb 2-1: config 0 descriptor??
[  722.941261][ T5331] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 088
[  723.056786][T15822] Bluetooth: hci2: command tx timeout
[  723.149904][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.172061][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.197602][T16702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.220352][T16702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.351309][T16583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  723.374369][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  723.454186][T16583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  723.497563][T16679] netlink: 'syz.2.2184': attribute type 12 has an invalid length.
[  723.528320][T16679] netlink: 'syz.2.2184': attribute type 29 has an invalid length.
[  723.546978][T16679] netlink: 'syz.2.2184': attribute type 2 has an invalid length.
[  723.555001][T16679] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2184'.
[  723.601152][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'.
[  723.642146][T16583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  723.672836][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  723.789466][T16583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  723.993353][T16583] hsr_slave_0: entered promiscuous mode
[  724.044508][T16583] hsr_slave_1: entered promiscuous mode
[  724.059680][T16583] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  724.114276][T16583] Cannot create hsr debugfs directory
[  724.903374][ T5331]  (null): failure setting delay to 10us
[  724.912123][ T5331] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  724.935477][ T5331] usb 2-1: USB disconnect, device number 88
[  725.104889][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'.
[  725.137513][T15822] Bluetooth: hci2: command tx timeout
[  725.144580][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'.
[  725.166396][T16733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  725.183609][T16733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  725.194504][T16733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  725.211277][T16733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  725.301190][T16583] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  725.318278][T16583] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  725.329625][T16583] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  725.358288][T16583] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  725.569811][T16583] 8021q: adding VLAN 0 to HW filter on device bond0
[  725.614388][T16583] 8021q: adding VLAN 0 to HW filter on device team0
[  725.673296][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.680474][ T3714] bridge0: port 1(bridge_slave_0) entered forwarding state
[  725.748327][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.755444][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  725.846442][T16583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  725.876720][ T5279] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  725.898009][T16583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  726.028089][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  726.039038][ T5279] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  726.059569][ T5279] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  726.085027][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.116622][ T5283] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  726.117324][ T5279] usb 2-1: config 0 descriptor??
[  726.151692][T16583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  726.210721][T16583] veth0_vlan: entered promiscuous mode
[  726.272352][T16583] veth1_vlan: entered promiscuous mode
[  726.306989][ T5283] usb 5-1: Using ep0 maxpacket: 32
[  726.320813][ T5283] usb 5-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config
[  726.384414][ T5283] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  726.400604][T16583] veth0_macvtap: entered promiscuous mode
[  726.441944][ T5283] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  726.469425][T16583] veth1_macvtap: entered promiscuous mode
[  726.520243][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.582199][ T5331] usb 2-1: USB disconnect, device number 89
[  726.611842][ T5283] usb 5-1: Product: syz
[  726.624283][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  726.663356][ T5283] usb 5-1: Manufacturer: syz
[  726.689727][ T5283] usb 5-1: SerialNumber: syz
[  726.704053][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.720440][ T5283] usb 5-1: config 0 descriptor??
[  726.724213][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  726.736157][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.751986][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  726.762932][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.773659][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  726.789427][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.802489][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  726.820353][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.833329][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  726.852892][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.866202][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  726.882134][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.904007][T16583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  726.929023][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  726.942111][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.958089][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  726.976100][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.999321][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  727.014709][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  727.027938][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  727.044420][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  727.057536][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  727.075844][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  727.087664][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  727.099374][ T5279] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  727.116771][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  727.137457][T16583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  727.157027][T16583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  727.181007][T16583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  727.233704][T16775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  727.257595][T16583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  727.266627][T16583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  727.275477][T16583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  727.284372][T16583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  727.299609][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  727.345004][T16775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  727.377037][ T5279] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  727.394158][T16775] netlink: 'syz.2.2198': attribute type 12 has an invalid length.
[  727.411879][T16775] netlink: 'syz.2.2198': attribute type 29 has an invalid length.
[  727.422258][T16775] netlink: 'syz.2.2198': attribute type 2 has an invalid length.
[  727.440168][ T5279] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  727.449589][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.462218][ T5279] usb 2-1: config 0 descriptor??
[  727.472864][T16775] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2198'.
[  727.501954][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2198'.
[  727.534890][ T8107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  727.564796][ T8107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  727.605871][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  727.629101][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  728.310029][ T5283] usb 5-1: USB disconnect, device number 87
[  728.416097][T16784] hub 9-0:1.0: USB hub found
[  728.430182][T16784] hub 9-0:1.0: 8 ports detected
[  728.698704][T16792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2203'.
[  728.942601][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2204'.
[  728.953549][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2204'.
[  728.974512][T16797] sch_tbf: burst 480 is lower than device veth1_to_bridge mtu (1514) !
[  729.534701][T16800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.544437][T16800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.560078][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.562259][T16800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.573253][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.056183][ T5283] usb 2-1: USB disconnect, device number 90
[  730.075481][ T5284] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  730.163021][T16807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.172625][T16807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.251159][ T5284] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  730.265310][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.286573][ T5284] usb 5-1: Product: syz
[  730.290840][ T5284] usb 5-1: Manufacturer: syz
[  730.295445][ T5284] usb 5-1: SerialNumber: syz
[  730.337601][ T5284] usb 5-1: config 0 descriptor??
[  730.368258][ T5284] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 088
[  730.416435][ T8107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.545137][ T8107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.580418][T16805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.591580][T16805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.604036][T16805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.639855][T16805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.655586][ T8107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.694543][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  730.706187][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  730.715085][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  730.730056][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  730.738312][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  730.745635][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  730.813173][ T5284]  (null): failure setting delay to 10us
[  730.819849][ T5284] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  730.830160][ T5284] usb 5-1: USB disconnect, device number 88
[  730.883807][ T8107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.043710][T16810] chnl_net:caif_netlink_parms(): no params data found
[  731.197174][ T8107] bridge_slave_1: left allmulticast mode
[  731.202861][ T8107] bridge_slave_1: left promiscuous mode
[  731.214542][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.238407][ T8107] bridge_slave_0: left allmulticast mode
[  731.244066][ T8107] bridge_slave_0: left promiscuous mode
[  731.259893][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.745132][T16830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2216'.
[  732.022376][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  732.054276][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  732.062810][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  732.092939][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  732.108357][ T8107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  732.126214][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  732.138038][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  732.147115][ T8107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  732.192377][ T8107] bond0 (unregistering): Released all slaves
[  732.316718][ T8107] tipc: Disabling bearer <udp:syz2>
[  732.322494][ T8107] tipc: Left network mode
[  732.383035][T16810] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.401245][T16810] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.421523][T16810] bridge_slave_0: entered allmulticast mode
[  732.438438][T16810] bridge_slave_0: entered promiscuous mode
[  732.453915][T16810] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.461278][T16810] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.470508][T16810] bridge_slave_1: entered allmulticast mode
[  732.487769][T16810] bridge_slave_1: entered promiscuous mode
[  732.599084][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'.
[  732.762783][T16848] netlink: 'syz.4.2219': attribute type 10 has an invalid length.
[  732.816834][T15822] Bluetooth: hci1: command tx timeout
[  732.833075][T16810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  732.879066][T16810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  732.996820][ T8107] hsr_slave_0: left promiscuous mode
[  733.004139][ T8107] hsr_slave_1: left promiscuous mode
[  733.012061][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  733.019937][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  733.020411][T16863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.036903][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  733.044439][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  733.052755][T16863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.082931][ T8107] veth1_macvtap: left promiscuous mode
[  733.094273][ T8107] veth0_macvtap: left promiscuous mode
[  733.099963][ T8107] veth1_vlan: left promiscuous mode
[  733.105337][ T8107] veth0_vlan: left promiscuous mode
[  733.741484][ T8107] team0 (unregistering): Port device team_slave_1 removed
[  733.788119][ T8107] team0 (unregistering): Port device team_slave_0 removed
[  734.180435][T15822] Bluetooth: hci5: command tx timeout
[  734.345970][T16810] team0: Port device team_slave_0 added
[  734.355837][T16810] team0: Port device team_slave_1 added
[  734.408070][T16810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  734.415045][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  734.441232][T16810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  734.490451][T16810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  734.498718][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  734.526432][T16810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  734.607625][T16810] hsr_slave_0: entered promiscuous mode
[  734.613809][T16810] hsr_slave_1: entered promiscuous mode
[  734.620276][T16810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  734.628768][T16810] Cannot create hsr debugfs directory
[  734.752343][T16833] chnl_net:caif_netlink_parms(): no params data found
[  734.908293][T15822] Bluetooth: hci1: command tx timeout
[  735.025087][T16877] netlink: 'syz.4.2223': attribute type 8 has an invalid length.
[  735.062296][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'.
[  735.355753][T16891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  735.417697][   T29] audit: type=1800 audit(1728524867.397:443): pid=16895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2225" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  735.453297][T16833] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.477864][T16833] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.485257][T16833] bridge_slave_0: entered allmulticast mode
[  735.527977][T16833] bridge_slave_0: entered promiscuous mode
[  735.641667][T16833] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.652950][T16833] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.668360][T16897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  735.668878][T16833] bridge_slave_1: entered allmulticast mode
[  735.695996][T16833] bridge_slave_1: entered promiscuous mode
[  735.708674][T16899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2224'.
[  735.994667][T16833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.046193][T16833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  736.221781][T16833] team0: Port device team_slave_0 added
[  736.256722][T15822] Bluetooth: hci5: command tx timeout
[  736.322333][T16833] team0: Port device team_slave_1 added
[  736.355038][T16810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  736.444665][T16810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  736.532408][T16833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  736.560144][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  736.630706][T16909] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2228'.
[  736.649076][T16833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  736.697609][T16810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  736.728670][T16810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  736.788235][T16833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  736.816302][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  736.849896][T16833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  736.957649][T16919] program syz.0.2230 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  736.980552][T15822] Bluetooth: hci1: command tx timeout
[  736.982242][T16833] hsr_slave_0: entered promiscuous mode
[  737.000056][T16833] hsr_slave_1: entered promiscuous mode
[  737.023752][T16833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  737.046763][T16833] Cannot create hsr debugfs directory
[  737.129025][T16919] bond0: entered promiscuous mode
[  737.140893][T16919] bond_slave_0: entered promiscuous mode
[  737.156048][T16919] bond_slave_1: entered promiscuous mode
[  737.490668][   T29] audit: type=1800 audit(1728524869.477:444): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2234" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  737.698019][T15822] Bluetooth: hci3: command tx timeout
[  737.828903][T16949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2235'.
[  737.933248][T16833] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.179564][T16833] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.259235][T16810] 8021q: adding VLAN 0 to HW filter on device bond0
[  738.336670][T15822] Bluetooth: hci5: command tx timeout
[  738.518554][T16833] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.570081][T16810] 8021q: adding VLAN 0 to HW filter on device team0
[  738.625218][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.632414][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  738.730740][T16833] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.829442][ T1062] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.836615][ T1062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  738.907402][T16810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  738.928642][T16810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  739.057130][T15822] Bluetooth: hci1: command tx timeout
[  739.098320][T16810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  739.513693][T16810] veth0_vlan: entered promiscuous mode
[  739.567114][T16833] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  739.640693][T16833] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  739.677964][T16810] veth1_vlan: entered promiscuous mode
[  739.722204][T16833] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  739.794367][T16833] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  739.897505][T16810] veth0_macvtap: entered promiscuous mode
[  739.926321][T16810] veth1_macvtap: entered promiscuous mode
[  739.966083][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  739.986807][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.054422][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  740.103908][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.138310][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  740.188246][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.200860][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  740.226737][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.316711][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  740.359591][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.414283][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  740.429172][T15822] Bluetooth: hci5: command tx timeout
[  740.476902][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.515221][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  740.575108][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.635739][T16810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  740.705367][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  740.791973][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  740.850583][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  740.931514][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.018175][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.047540][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.100931][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.151085][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.196605][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.208265][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.224621][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.242655][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.258984][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.276615][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.290759][T17029] futex_wake_op: syz.0.2243 tries to shift op by -1; fix this program
[  741.331490][T16810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  741.369836][T16833] 8021q: adding VLAN 0 to HW filter on device bond0
[  741.386681][ T5282] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  741.406833][T16810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  741.415791][T16810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  741.431517][T16810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  741.440954][T16810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  741.458662][T16833] 8021q: adding VLAN 0 to HW filter on device team0
[  741.557268][ T5282] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  741.568454][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.575520][ T3714] bridge0: port 1(bridge_slave_0) entered forwarding state
[  741.583148][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.591824][ T5282] usb 5-1: Product: syz
[  741.597545][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.604606][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state
[  741.612463][ T5282] usb 5-1: Manufacturer: syz
[  741.618285][ T5282] usb 5-1: SerialNumber: syz
[  741.626242][ T5282] usb 5-1: config 0 descriptor??
[  741.664384][ T5282] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 089
[  741.848471][T17025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.895203][T17025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.919977][T17025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.947810][T17025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.949473][ T1062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.983558][ T1062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  742.032216][ T5282]  (null): failure setting delay to 10us
[  742.041583][ T5282] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  742.064413][ T5282] usb 5-1: USB disconnect, device number 89
[  742.094365][ T3714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  742.110222][ T3714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  742.135702][T16833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  742.395354][T16833] veth0_vlan: entered promiscuous mode
[  742.406658][T16833] veth1_vlan: entered promiscuous mode
[  742.437769][T16833] veth0_macvtap: entered promiscuous mode
[  742.465867][T16833] veth1_macvtap: entered promiscuous mode
[  742.483042][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.493556][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.503726][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.514438][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.524537][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.535206][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.545108][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.555995][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.566309][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.577271][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.587261][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.593848][T17050] futex_wake_op: syz.0.2248 tries to shift op by -1; fix this program
[  742.597752][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.597775][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.597792][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.597810][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.647010][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.668692][T16833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  742.746895][   T51] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  742.747966][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.766196][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.777651][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.790323][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.807031][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.831858][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.851268][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.875592][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.885960][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.899240][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.918562][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.920026][   T51] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba
[  742.938430][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.951792][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.968656][   T51] usb 2-1: Product: syz
[  742.972985][   T51] usb 2-1: Manufacturer: syz
[  742.973002][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.993189][   T51] usb 2-1: SerialNumber: syz
[  743.014771][   T51] usb 2-1: config 0 descriptor??
[  743.019654][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  743.029912][T16833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  743.040587][T16833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  743.065455][T16833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  743.101984][T16833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  743.124800][T16833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.143407][T16833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.154214][T16833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.297947][   T51] kaweth 2-1:0.0: Firmware present in device.
[  743.491221][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.514378][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2211'.
[  743.526637][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.578725][   T51] kaweth 2-1:0.0: Statistics collection: 0
[  743.591054][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.603055][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.614263][   T51] kaweth 2-1:0.0: Multicast filter limit: 0
[  743.636685][   T51] kaweth 2-1:0.0: MTU: 0
[  743.645680][   T51] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00
[  743.854615][   T51] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[  743.869841][   T51] usb 2-1: USB disconnect, device number 91
[  745.030667][   T29] audit: type=1326 audit(1728524877.017:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.053108][   T29] audit: type=1326 audit(1728524877.017:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.079746][   T29] audit: type=1326 audit(1728524877.017:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.116561][   T29] audit: type=1326 audit(1728524877.037:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.206756][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'.
[  745.261255][   T29] audit: type=1326 audit(1728524877.037:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.368327][   T29] audit: type=1326 audit(1728524877.117:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.412811][   T29] audit: type=1326 audit(1728524877.117:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.438507][   T29] audit: type=1326 audit(1728524877.117:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.463004][   T29] audit: type=1326 audit(1728524877.117:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.496033][   T29] audit: type=1326 audit(1728524877.117:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17076 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=302 compat=1 ip=0xf7f14579 code=0x7ffc0000
[  745.642193][ T1062] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.799114][ T1062] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.951154][ T1062] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.047233][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  746.059578][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  746.068979][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  746.078926][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  746.088091][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  746.101796][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  746.158425][ T1062] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.507805][T17105] RDS: rds_bind could not find a transport for ::ffff:172.30.3.5, load rds_tcp or rds_rdma?
[  746.565863][T17097] chnl_net:caif_netlink_parms(): no params data found
[  746.731074][T17108] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  746.839129][   T30] INFO: task kworker/0:8:5288 blocked for more than 143 seconds.
[  746.847110][   T30]       Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0
[  746.855996][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  746.867104][   T30] task:kworker/0:8     state:D stack:19512 pid:5288  tgid:5288  ppid:2      flags:0x00004000
[  746.877443][   T30] Workqueue: usb_hub_wq hub_event
[  746.882502][   T30] Call Trace:
[  746.885792][   T30]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  746.888995][   T30]  __schedule+0x1895/0x4b30
[  746.893939][   T30]  ? __pfx___schedule+0x10/0x10
[  746.894855][ T1062] bridge_slave_1: left allmulticast mode
[  746.899082][   T30]  ? __pfx_lock_release+0x10/0x10
[  746.899128][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  746.926271][ T1062] bridge_slave_1: left promiscuous mode
[  746.931967][   T30]  ? schedule+0x90/0x320
[  746.941236][   T30]  schedule+0x14b/0x320
[  746.966318][ T1062] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.973872][   T30]  schedule_preempt_disabled+0x13/0x30
[  746.986698][   T30]  __mutex_lock+0x6a7/0xd70
[  746.991251][   T30]  ? __mutex_lock+0x52a/0xd70
[  746.995950][   T30]  ? adu_disconnect+0xca/0x2b0
[  747.000851][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  747.006342][   T30]  ? usb_hcd_flush_endpoint+0x3d1/0x3f0
[  747.016587][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  747.026556][   T30]  adu_disconnect+0xca/0x2b0
[  747.031188][   T30]  usb_unbind_interface+0x25e/0x940
[  747.036427][   T30]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  747.042849][   T30]  ? __pfx_usb_unbind_interface+0x10/0x10
[  747.048655][   T30]  device_release_driver_internal+0x503/0x7c0
[  747.054753][   T30]  bus_remove_device+0x34f/0x420
[  747.066321][   T30]  device_del+0x57a/0x9b0
[  747.070824][   T30]  ? kobject_put+0x272/0x480
[  747.075436][   T30]  ? __pfx_device_del+0x10/0x10
[  747.086519][   T30]  ? kobject_put+0x44d/0x480
[  747.091157][   T30]  usb_disable_device+0x3bf/0x850
[  747.116518][   T30]  usb_disconnect+0x340/0x950
[  747.121252][   T30]  hub_event+0x1ebc/0x5150
[  747.135457][   T30]  ? __pfx_hub_event+0x10/0x10
[  747.143808][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  747.149605][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  747.155631][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  747.166516][   T30]  ? process_scheduled_works+0x976/0x1850
[  747.172277][   T30]  process_scheduled_works+0xa63/0x1850
[  747.188367][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  747.194397][   T30]  ? assign_work+0x364/0x3d0
[  747.199111][   T30]  worker_thread+0x870/0xd30
[  747.203739][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  747.212809][   T30]  ? __kthread_parkme+0x169/0x1d0
[  747.220450][   T30]  ? __pfx_worker_thread+0x10/0x10
[  747.225600][   T30]  kthread+0x2f0/0x390
[  747.229783][   T30]  ? __pfx_worker_thread+0x10/0x10
[  747.234924][   T30]  ? __pfx_kthread+0x10/0x10
[  747.240125][   T30]  ret_from_fork+0x4b/0x80
[  747.244575][   T30]  ? __pfx_kthread+0x10/0x10
[  747.249235][   T30]  ret_from_fork_asm+0x1a/0x30
[  747.254042][   T30]  </TASK>
[  747.257879][   T30] 
[  747.257879][   T30] Showing all locks held in the system:
[  747.269785][   T30] 1 lock held by khungtaskd/30:
[  747.274664][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  747.284623][   T30] 3 locks held by kworker/u8:2/35:
[  747.302391][   T30] 3 locks held by kworker/1:1/51:
[  747.307861][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  747.319086][   T30]  #1: ffffc90000bb7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  747.330152][   T30]  #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  747.340657][   T30] 4 locks held by kworker/u8:6/1062:
[  747.345948][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  747.356935][   T30]  #1: ffffc90003b87d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  747.368033][   T30]  #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  747.378211][   T30]  #3: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0
[  747.387273][   T30] 2 locks held by kworker/u8:7/1085:
[  747.392577][   T30]  #0: ffff88801efc2148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  747.403900][   T30]  #1: ffffc90003bc7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  747.416142][   T30] 2 locks held by getty/4985:
[  747.420898][   T30]  #0: ffff88802e64f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  747.430767][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  747.440995][   T30] 6 locks held by kworker/0:8/5288:
[  747.446208][   T30]  #0: ffff888143eca548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  747.464409][   T30]  #1: ffffc90004407d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  747.477267][   T30]  #2: ffff888144792190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  747.486202][   T30]  #3: ffff888069bf6190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950
[  747.488201][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  747.495906][   T30]  #4: ffff888075614160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  747.506564][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  747.512325][   T30]  #5: ffffffff8f685388 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0
[  747.527889][   T30] 6 locks held by kworker/1:5/5292:
[  747.533093][   T30]  #0: ffff888143eca548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  747.545096][   T30]  #1: ffffc90004467d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  747.557234][   T30]  #2: ffff888028281190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  747.566168][   T30]  #3: ffff888057c38190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950
[  747.576019][   T30]  #4: ffff88805e6a2160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  747.587166][   T30]  #5: ffffffff8f685388 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0
[  747.596548][   T30] 1 lock held by syz.2.1539/13391:
[  747.601673][   T30]  #0: ffffffff8f685388 (adutux_mutex){+.+.}-{3:3}, at: adu_release+0xbf/0x870
[  747.610798][   T30] 1 lock held by syz.3.2186/16688:
[  747.615927][   T30]  #0: ffff888144792190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x770
[  747.625522][   T30] 1 lock held by syz-executor/16810:
[  747.631066][   T30]  #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  747.642086][   T30] 1 lock held by syz-executor/17097:
[  747.647424][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  747.656929][   T30] 1 lock held by syz.0.2266/17108:
[  747.662048][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340
[  747.670943][   T30] 1 lock held by syz.0.2266/17115:
[  747.676592][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0
[  747.685614][   T30] 1 lock held by syz.0.2266/17116:
[  747.691250][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340
[  747.700657][   T30] 4 locks held by sed/17125:
[  747.705315][   T30] 
[  747.707874][   T30] =============================================
[  747.707874][   T30] 
[  747.716300][   T30] NMI backtrace for cpu 1
[  747.717306][ T1062] bridge_slave_0: left allmulticast mode
[  747.720617][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0
[  747.726230][ T1062] bridge_slave_0: left promiscuous mode
[  747.736697][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  747.736713][   T30] Call Trace:
[  747.736722][   T30]  <TASK>
[  747.736730][   T30]  dump_stack_lvl+0x241/0x360
[  747.736758][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  747.736778][   T30]  ? __pfx__printk+0x10/0x10
[  747.736812][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  747.736839][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  747.736858][   T30]  ? _printk+0xd5/0x120
[  747.787777][   T30]  ? __pfx__printk+0x10/0x10
[  747.792381][   T30]  ? __wake_up_klogd+0xcc/0x110
[  747.797230][   T30]  ? __pfx__printk+0x10/0x10
[  747.801823][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  747.806847][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  747.812823][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  747.818803][   T30]  watchdog+0xff4/0x1040
[  747.823059][   T30]  ? watchdog+0x1ea/0x1040
[  747.827475][   T30]  ? __pfx_watchdog+0x10/0x10
[  747.832149][   T30]  kthread+0x2f0/0x390
[  747.836212][   T30]  ? __pfx_watchdog+0x10/0x10
[  747.840905][   T30]  ? __pfx_kthread+0x10/0x10
[  747.845494][   T30]  ret_from_fork+0x4b/0x80
[  747.849913][   T30]  ? __pfx_kthread+0x10/0x10
[  747.854493][   T30]  ret_from_fork_asm+0x1a/0x30
[  747.859273][   T30]  </TASK>
[  747.862477][   T30] Sending NMI from CPU 1 to CPUs 0:
[  747.869050][    C0] NMI backtrace for cpu 0
[  747.869064][    C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0
[  747.869085][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  747.869095][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  747.869119][    C0] RIP: 0010:arch_stack_walk+0x10e/0x150
[  747.869140][    C0] Code: 00 83 bd 70 ff ff ff 00 74 37 48 8d 9d 70 ff ff ff 48 89 df e8 03 9d 09 00 48 85 c0 74 23 4c 89 f7 48 89 c6 4d 89 eb 41 ff d3 <66> 90 84 c0 74 11 48 89 df e8 34 9e 09 00 83 bd 70 ff ff ff 00 75
[  747.869154][    C0] RSP: 0018:ffffc90000ab6b20 EFLAGS: 00000286
[  747.869168][    C0] RAX: 0000000000000001 RBX: ffffc90000ab6b20 RCX: ffffffff917b9000
[  747.869180][    C0] RDX: dffffc0000000000 RSI: ffffffff8b13386d RDI: ffffc90000ab6c0c
[  747.869193][    C0] RBP: ffffc90000ab6bb0 R08: 0000000000000003 R09: ffffc90000ab6c10
[  747.869205][    C0] R10: ffffc90000ab6b70 R11: ffffffff8180a060 R12: ffff888020685a00
[  747.869218][    C0] R13: ffffffff8180a060 R14: ffffc90000ab6c00 R15: 0000000000000000
[  747.869230][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  747.869245][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  747.869257][    C0] CR2: 00007f8b59819378 CR3: 0000000055de0000 CR4: 00000000003526f0
[  747.869272][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  747.869283][    C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  747.869293][    C0] Call Trace:
[  747.869300][    C0]  <NMI>
[  747.869307][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  747.869325][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  747.869348][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  747.869365][    C0]  ? nmi_handle+0x2a/0x5a0
[  747.869388][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  747.869407][    C0]  ? nmi_handle+0x14f/0x5a0
[  747.869423][    C0]  ? nmi_handle+0x2a/0x5a0
[  747.869440][    C0]  ? arch_stack_walk+0x10e/0x150
[  747.869456][    C0]  ? default_do_nmi+0x63/0x160
[  747.869474][    C0]  ? exc_nmi+0x123/0x1f0
[  747.869491][    C0]  ? end_repeat_nmi+0xf/0x53
[  747.869506][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  747.869525][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  747.869543][    C0]  ? __init_begin+0x41000/0x41000
[  747.869560][    C0]  ? cfg80211_inform_single_bss_data+0xb2d/0x2090
[  747.869582][    C0]  ? arch_stack_walk+0x10e/0x150
[  747.869598][    C0]  ? arch_stack_walk+0x10e/0x150
[  747.869616][    C0]  ? arch_stack_walk+0x10e/0x150
[  747.869632][    C0]  </NMI>
[  747.869637][    C0]  <TASK>
[  747.869647][    C0]  ? cfg80211_inform_single_bss_data+0xb2d/0x2090
[  747.869670][    C0]  stack_trace_save+0x118/0x1d0
[  747.869686][    C0]  ? process_scheduled_works+0xa63/0x1850
[  747.869706][    C0]  ? worker_thread+0x870/0xd30
[  747.869723][    C0]  ? kthread+0x2f0/0x390
[  747.869739][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  747.869760][    C0]  ? mark_lock+0x9a/0x360
[  747.869776][    C0]  kasan_save_track+0x3f/0x80
[  747.869792][    C0]  ? kasan_save_track+0x3f/0x80
[  747.869807][    C0]  ? __kasan_kmalloc+0x98/0xb0
[  747.869822][    C0]  ? __kmalloc_noprof+0x1fc/0x400
[  747.869840][    C0]  ? cfg80211_inform_single_bss_data+0xb2d/0x2090
[  747.869881][    C0]  ? __kmalloc_noprof+0x355/0x400
[  747.869905][    C0]  __kasan_kmalloc+0x98/0xb0
[  747.869920][    C0]  ? cfg80211_inform_single_bss_data+0xb2d/0x2090
[  747.869941][    C0]  ? cfg80211_inform_single_bss_data+0xb2d/0x2090
[  747.869961][    C0]  __kmalloc_noprof+0x1fc/0x400
[  747.869982][    C0]  cfg80211_inform_single_bss_data+0xb2d/0x2090
[  747.870007][    C0]  ? deref_stack_reg+0x17c/0x210
[  747.870022][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  747.870053][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  747.870074][    C0]  ? cfg80211_inform_bss_data+0x3b6/0x5e70
[  747.870097][    C0]  cfg80211_inform_bss_data+0x3ce/0x5e70
[  747.870129][    C0]  ? __pfx_validate_chain+0x10/0x10
[  747.870155][    C0]  ? __pfx_validate_chain+0x10/0x10
[  747.870173][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  747.870197][    C0]  ? mark_lock+0x9a/0x360
[  747.870214][    C0]  ? __lock_acquire+0x1384/0x2050
[  747.870246][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  747.870265][    C0]  ? ieee80211_bss_info_update+0x3d9/0xbc0
[  747.870287][    C0]  cfg80211_inform_bss_frame_data+0x3b8/0x720
[  747.870313][    C0]  ? ieee80211_bss_info_update+0x3d9/0xbc0
[  747.870332][    C0]  ieee80211_bss_info_update+0x8a7/0xbc0
[  747.870353][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  747.870372][    C0]  ? __pfx_lock_release+0x10/0x10
[  747.870399][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70
[  747.870425][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70
[  747.870444][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  747.870467][    C0]  ? mark_lock+0x9a/0x360
[  747.870483][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  747.870505][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  747.870526][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  747.870551][    C0]  ieee80211_iface_work+0x8a5/0xf20
[  747.870574][    C0]  cfg80211_wiphy_work+0x2db/0x490
[  747.870592][    C0]  ? process_scheduled_works+0x976/0x1850
[  747.870611][    C0]  process_scheduled_works+0xa63/0x1850
[  747.870642][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  747.870665][    C0]  ? assign_work+0x364/0x3d0
[  747.870686][    C0]  worker_thread+0x870/0xd30
[  747.870708][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  747.870730][    C0]  ? __kthread_parkme+0x169/0x1d0
[  747.870752][    C0]  ? __pfx_worker_thread+0x10/0x10
[  747.870770][    C0]  kthread+0x2f0/0x390
[  747.870785][    C0]  ? __pfx_worker_thread+0x10/0x10
[  747.870803][    C0]  ? __pfx_kthread+0x10/0x10
[  747.870819][    C0]  ret_from_fork+0x4b/0x80
[  747.870838][    C0]  ? __pfx_kthread+0x10/0x10
[  747.870853][    C0]  ret_from_fork_asm+0x1a/0x30
[  747.870878][    C0]  </TASK>
[  747.871723][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  748.434548][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0
[  748.445041][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  748.455087][   T30] Call Trace:
[  748.458361][   T30]  <TASK>
[  748.461285][   T30]  dump_stack_lvl+0x241/0x360
[  748.465958][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  748.471147][   T30]  ? __pfx__printk+0x10/0x10
[  748.475733][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  748.481714][   T30]  ? vscnprintf+0x5d/0x90
[  748.486037][   T30]  panic+0x349/0x880
[  748.489928][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  748.496077][   T30]  ? __pfx_panic+0x10/0x10
[  748.500502][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  748.505870][   T30]  ? __irq_work_queue_local+0x137/0x410
[  748.511410][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  748.516773][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  748.522928][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  748.529084][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  748.535244][   T30]  watchdog+0x1033/0x1040
[  748.539578][   T30]  ? watchdog+0x1ea/0x1040
[  748.544021][   T30]  ? __pfx_watchdog+0x10/0x10
[  748.548694][   T30]  kthread+0x2f0/0x390
[  748.552756][   T30]  ? __pfx_watchdog+0x10/0x10
[  748.557454][   T30]  ? __pfx_kthread+0x10/0x10
[  748.562037][   T30]  ret_from_fork+0x4b/0x80
[  748.566449][   T30]  ? __pfx_kthread+0x10/0x10
[  748.571039][   T30]  ret_from_fork_asm+0x1a/0x30
[  748.575803][   T30]  </TASK>
[  748.579076][   T30] Kernel Offset: disabled
[  748.583397][   T30] Rebooting in 86400 seconds..