last executing test programs:

7.718134305s ago: executing program 3 (id=1236):
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="73656375726974790400"/29], 0x74)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', 0x0})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x44804)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b48090987f70e06d038e7ff7fc6e5539b0d46078b089b37073b6d090890e0878f0e1ac6e7049b334d959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e809ea88008000000000000027b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1dbdb230ae1fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b3804000000bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f6e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f000800080000000000002420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b25361b665a8c97447a3c6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f304b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8cf7d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad15a3a504767b6b45a45957f24d758ed024b3849c1137e2a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb81f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39988b8658a20878b7c1dd7ba02fc42939dde7d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88d0466d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a028ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7bac7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068eb38067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3f0600faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = dup(r5)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x5c}}, 0x0)
unshare(0x20020600)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x3a, 0x2, 0x0, 0x52)

7.534191054s ago: executing program 3 (id=1237):
mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}]}}]}, 0x90}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f000021f000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x2, 0x9, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010800000000000000000000000020000000000a010800000000000000000a0000000900010073797a31000000003c000000000a030000000000000000000a0000000800024000000001090001"], 0x84}}, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000cc0000/0x4000)=nil, 0x4000, &(0x7f0000000040)='{(^&+,)\x06%[%^]%:\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000aba1de26cfc6ede6f000008002800000000abf30003006d616b76746170300000000000000000721fe0668217907a"], 0x44}}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dlm_plock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000000701020000000000000000000000000900010073797a31000000000c0003"], 0x38}}, 0x0)

7.24640625s ago: executing program 3 (id=1238):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_emit_ethernet(0x66, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, &(0x7f0000000180)=""/97, 0x61)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x0, "cccf6b3d79281e285e89024a2866ebaa10fe00c15dc352ec0f119204d2d2c0b8"})
syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003600)=""/120)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000200)={{0x0, 0x1}, {0x10, 0x9f}, 0xfffffffc})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0xac}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0x51}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

6.004680744s ago: executing program 2 (id=1246):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040))
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000800)=""/102385, 0x18ff1}, {0x0}], 0x2, 0x0, 0x0)
syz_io_uring_setup(0x117, 0x0, &(0x7f0000000240)=<r0=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2000, @fd, 0x727, 0x0, 0x0, 0x3, 0x1, {0x1}})
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4042881)
ioctl$TUNGETFILTER(r1, 0x801054db, 0x0)

5.015706578s ago: executing program 2 (id=1249):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
memfd_create(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
io_setup(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYRESDEC], 0x0)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8)
r4 = socket(0x2, 0x3, 0x6)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r4, &(0x7f00000003c0)='\x00\x00\b\x00'/13, 0xd, 0x0, &(0x7f0000002400)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

4.628573069s ago: executing program 0 (id=1251):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)

4.479798494s ago: executing program 0 (id=1252):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000001240)=[{0x0, 0x2198}, {0x0}], 0x2}, 0x0)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r5 = dup3(r4, 0xffffffffffffffff, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000680), 0x0, 0x0)
r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000280)=[@register_looper, @free_buffer={0x40086303, r7}, @release, @increfs_done={0x40106308, 0x3}], 0x3b, 0x100000000000000, 0x0})
set_robust_list(&(0x7f0000001480)={&(0x7f00000002c0)={&(0x7f0000000240)}, 0x5, &(0x7f0000001440)={&(0x7f0000000300)}}, 0xc)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8c)
recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f00000006c0)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]})

4.128358246s ago: executing program 3 (id=1255):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00'}, 0x18)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'lo\x00'})
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'ip6gretap0\x00'}, 0x18)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xcc8c03)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x5, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000690bb74108000300", @ANYRES32=r8], 0x24}}, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000200), 0x0, 0x0})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)

3.814140924s ago: executing program 4 (id=1257):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = dup(r0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000200", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x3d13, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vbi(0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800005, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f00005a2000/0x3000)=nil, 0x3000, 0x9)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x5, 0x1})
pipe2(&(0x7f0000000240), 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x4, 0x9, 0x0, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3)

3.70396808s ago: executing program 1 (id=1258):
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="73656375726974790400"/29], 0x74)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', 0x0})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x44804)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = dup(r5)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x5c}}, 0x0)
unshare(0x20020600)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x3a, 0x2, 0x0, 0x52)

3.507719538s ago: executing program 0 (id=1259):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000180), 0x0, 0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0xf0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x1a1200, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f000032f000/0x3000)=nil, 0x3000, 0xf)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000000)={0x0, [0x400c2, 0x40000000], [{}, {0x0, 0x6}, {}, {}, {}, {0x200}, {}, {}, {}, {0x0, 0xfffffffd}, {0x82f, 0x5}], 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000374000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x0, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0x980900})

3.440579298s ago: executing program 3 (id=1260):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = inotify_init()
r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x58, 0x0, @fd_index=0x4})
io_uring_enter(r2, 0x20007113, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009c02"])
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c)
madvise(&(0x7f0000306000/0x400000)=nil, 0x400000, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
readv(r1, &(0x7f0000000440)=[{&(0x7f0000000280)=""/174, 0xae}], 0x1)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e)
creat(&(0x7f00000001c0)='./file0\x00', 0xdc)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/12, 0xc)
r9 = accept4(r0, 0x0, 0x0, 0x0)
openat$full(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}}, 0x0)

3.268424413s ago: executing program 1 (id=1261):
socket(0x1, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = socket(0x0, 0x5, 0x1)
sendmsg$netlink(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80a1}, 0x20040000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000840)='z', 0x1, 0x0, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000400ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa0000000000000000050006"], 0xa0}}, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000082505a0a4400000000101090244"], 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

2.697902382s ago: executing program 4 (id=1262):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)

2.650039335s ago: executing program 3 (id=1263):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0)
listen(0xffffffffffffffff, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "02f332ac00"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x87, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xa}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x1200, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0x3e)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xc)

2.508562157s ago: executing program 4 (id=1264):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0)
bind$isdn(0xffffffffffffffff, &(0x7f0000000080), 0x6)
keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
syz_io_uring_submit(0x0, 0x0, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
timer_create(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000)
syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000800)
open(0x0, 0x0, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x2000, 0x0, 0x4000, 0x0, 0x0, {}, {}, {0x0, 0xffff0001}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xa})

2.499524021s ago: executing program 0 (id=1265):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x14}]}}}]}, 0x3c}}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r0}, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x101)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r2, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="7185ee512e71", 0x6}], 0x1}}], 0x4, 0x0)

2.421558308s ago: executing program 0 (id=1266):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000180), 0x0, 0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0xf0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x1a1200, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f000032f000/0x3000)=nil, 0x3000, 0xf)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000000)={0x0, [0x400c2, 0x40000000], [{}, {0x0, 0x6}, {}, {}, {}, {0x200}, {}, {}, {}, {0x0, 0xfffffffd}, {0x82f, 0x5}], 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000374000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x0, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0x980900})

1.889905707s ago: executing program 2 (id=1267):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x1ff)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='projid_map\x00')
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300))
ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 7\x00'})

1.889154172s ago: executing program 1 (id=1277):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09f50000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003400000000a"], 0x64}}, 0x0)

1.680243388s ago: executing program 1 (id=1268):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = io_uring_setup(0x497c, &(0x7f0000000380))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000280)=0x8)
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES16=r1, @ANYBLOB, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRES32, @ANYRES32, @ANYRES32=r3], 0xb8}, 0x20008000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.524592197s ago: executing program 4 (id=1269):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f000001b980)=""/102379, 0x18feb}], 0x1, 0x0, 0x40)
r1 = socket$inet6(0xa, 0x802, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
fcntl$addseals(r2, 0x409, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
socket$alg(0x26, 0x5, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r4)
close(r4)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'})
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)

1.495053407s ago: executing program 0 (id=1270):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x400, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000280)=@multiplanar_overlay={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c7d189e0"}, 0x0, 0x3, {0x0}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400635ebf07b55348ddc15c19", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100677265746170000010000280040012000600030011000000"], 0x40}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="04"], 0x24, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x10000, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x41ee}, 0x0, 0x0)
io_uring_setup(0x1de0, &(0x7f0000000440))
memfd_create(&(0x7f0000000000)='\xf3\xd9\b\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84\x9d\x14Q\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2, "d88fd8801ad6eeb75a9506e0213b2e1004f028f0030b2e0146bde6e66b8f37ff"})

1.284777382s ago: executing program 4 (id=1271):
r0 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="73656375726974790400"/31], 0x74)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', 0x0})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x44804)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = dup(r5)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x5c}}, 0x0)
unshare(0x20020600)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x3a, 0x2, 0x0, 0x52)

1.223993198s ago: executing program 2 (id=1272):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x40000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$sysfs(0xffffff9c, &(0x7f00000005c0)='/sys/module/asix', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$TUNSETOFFLOAD(r4, 0x4010744d, 0x20000000)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x26b, 0x0, 0xff600000}]})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@empty, 0x1, 0x0, 0x40, 0x0, [{@broadcast}, {@local}, {@initdev}, {@local}]}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000480))
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r8, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

1.033279318s ago: executing program 1 (id=1273):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = dup(r0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000200", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x3d13, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800005, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f00005a2000/0x3000)=nil, 0x3000, 0x9)
r3 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x5, 0x1})
pipe2(&(0x7f0000000240), 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x4, 0x9, 0x0, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3)

349.761439ms ago: executing program 4 (id=1274):
rseq(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x545c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dummy0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x68040200)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/slab', 0x0, 0x0)
getdents(r5, &(0x7f0000000400)=""/239, 0xe1)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x20)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0))
sendmsg$nl_route(r3, 0x0, 0x0)

348.577315ms ago: executing program 2 (id=1285):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x14}]}}}]}, 0x3c}}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r2}, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x101)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="7185ee512e71", 0x6}], 0x1}}], 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x0, 0x32314247}})

203.260504ms ago: executing program 2 (id=1275):
r0 = socket$packet(0x11, 0x0, 0x300)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1a, 0xa, 0x0, "001e2974ea7e3406e2d701be4a6886ce4fb12589bf80d73ae100867a392f08d8"})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, <r4=>0x0}, &(0x7f00000000c0)=0x5)
setuid(r4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00')
setns(r6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)

0s ago: executing program 1 (id=1276):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0))
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x8, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$KVM_NMI(r7, 0xae9a)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0)
fallocate(r2, 0x9, 0xfff, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "e0d6fbc377a68e173952409bb2e52042376500"}})

kernel console output (not intermixed with test programs):

man_adv: batadv0: Removing interface: geneve2
[  418.173544][ T2485] bond0 (unregistering): Released all slaves
[  418.183797][ T9869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  418.209233][ T9869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  418.219765][ T9869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  418.248454][ T9869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  418.487496][ T9821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.527608][ T2485] hsr_slave_0: left promiscuous mode
[  418.538168][ T2485] hsr_slave_1: left promiscuous mode
[  418.568737][ T2485] veth1_macvtap: left promiscuous mode
[  418.574893][ T2485] veth0_macvtap: left promiscuous mode
[  418.580539][ T2485] veth1_vlan: left promiscuous mode
[  418.586297][ T2485] veth0_vlan: left promiscuous mode
[  419.802940][ T9821] veth0_vlan: entered promiscuous mode
[  419.816526][ T9821] veth1_vlan: entered promiscuous mode
[  419.923719][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.953966][ T9821] veth0_macvtap: entered promiscuous mode
[  420.006268][ T9869] 8021q: adding VLAN 0 to HW filter on device team0
[  420.015892][ T9821] veth1_macvtap: entered promiscuous mode
[  420.035001][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.042213][ T5576] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.083296][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.090517][ T5576] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.167687][ T9821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.196045][ T9821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.213371][ T9821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.222695][ T9821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.232052][ T9821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.240837][ T9821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.320664][ T9869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.409096][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.429647][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.445378][ T9869] veth0_vlan: entered promiscuous mode
[  420.485845][ T9869] veth1_vlan: entered promiscuous mode
[  420.494316][ T5920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.520303][ T5920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.544434][ T9869] veth0_macvtap: entered promiscuous mode
[  420.564573][ T9869] veth1_macvtap: entered promiscuous mode
[  420.653760][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  420.676137][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.709130][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  420.761128][ T9869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  420.796789][ T9869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  420.843019][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  420.885138][ T9869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.907137][ T9869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.931416][ T9869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.940573][ T9869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.156611][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.165045][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.172785][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.180649][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.196442][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  421.232889][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  421.242511][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  421.255229][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  421.276627][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  421.291510][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  421.391944][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.415148][T10050] usb usb9: usbfs: process 10050 (syz.0.895) did not claim interface 0 before use
[  421.425332][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.829922][T10053] chnl_net:caif_netlink_parms(): no params data found
[  422.526913][T10053] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.538285][T10053] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.550758][T10053] bridge_slave_0: entered allmulticast mode
[  422.580796][T10053] bridge_slave_0: entered promiscuous mode
[  422.733050][T10053] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.748181][T10053] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.767450][T10053] bridge_slave_1: entered allmulticast mode
[  422.792569][T10053] bridge_slave_1: entered promiscuous mode
[  422.899375][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.915732][T10077] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  422.936442][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.022824][T10053] team0: Port device team_slave_0 added
[  423.075416][T10053] team0: Port device team_slave_1 added
[  423.191817][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.223801][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.249745][    C0] vkms_vblank_simulate: vblank timer overrun
[  423.349622][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.392112][ T5233] Bluetooth: hci0: command tx timeout
[  423.426427][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.478323][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.605535][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.836214][T10053] hsr_slave_0: entered promiscuous mode
[  423.837195][T10053] hsr_slave_1: entered promiscuous mode
[  425.136284][T10053] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  425.184390][T10053] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  425.284633][T10053] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  425.372410][T10053] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  425.453292][ T5233] Bluetooth: hci0: command tx timeout
[  425.547977][T10142] bridge0: port 3(team0) entered blocking state
[  425.567314][T10142] bridge0: port 3(team0) entered disabled state
[  425.646229][T10142] team0: entered allmulticast mode
[  425.730010][T10142] team_slave_0: entered allmulticast mode
[  425.765316][T10151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.826714][T10142] team_slave_1: entered allmulticast mode
[  425.880059][T10142] team0: entered promiscuous mode
[  425.920221][T10142] team_slave_0: entered promiscuous mode
[  425.920390][T10151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.936942][T10142] team_slave_1: entered promiscuous mode
[  425.946423][T10142] bridge0: port 3(team0) entered blocking state
[  425.953312][T10142] bridge0: port 3(team0) entered forwarding state
[  426.273017][T10053] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.518906][T10053] 8021q: adding VLAN 0 to HW filter on device team0
[  426.787470][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.794681][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.899886][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.907075][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.315284][T10053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  427.366588][T10053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  427.485380][T10053] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.521704][ T5233] Bluetooth: hci0: command tx timeout
[  427.677673][T10053] veth0_vlan: entered promiscuous mode
[  427.724147][T10053] veth1_vlan: entered promiscuous mode
[  427.797684][T10053] veth0_macvtap: entered promiscuous mode
[  427.870342][T10053] veth1_macvtap: entered promiscuous mode
[  427.901018][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.918533][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.930440][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.949556][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.988012][T10053] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.034042][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.044803][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.054948][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  428.065666][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.077080][T10053] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.089642][T10053] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.093672][T10168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.904'.
[  428.098581][T10053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.116248][T10053] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.125195][T10053] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.200105][T10172] netlink: 156 bytes leftover after parsing attributes in process `syz.3.905'.
[  428.356968][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.394491][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.476546][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.488087][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.163359][T10191] fuse: Bad value for 'fd'
[  429.619555][ T5233] Bluetooth: hci0: command tx timeout
[  429.783438][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.910'.
[  429.858015][T10196] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  429.872884][T10196] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  429.891714][T10196] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  429.900688][T10196] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  430.552100][T10203] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd
[  430.700760][T10205] netlink: 'syz.1.914': attribute type 9 has an invalid length.
[  430.720449][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'.
[  431.875320][ T5282] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  432.071560][ T5282] usb 4-1: Using ep0 maxpacket: 32
[  432.124554][T10222] fuse: Bad value for 'rootmode'
[  432.170360][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 158, changing to 7
[  432.184501][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 50086, setting to 1024
[  432.291376][ T5282] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  432.300547][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.331390][ T5282] usb 4-1: Product: syz
[  432.335618][ T5282] usb 4-1: Manufacturer: syz
[  432.340243][ T5282] usb 4-1: SerialNumber: syz
[  432.348148][ T5282] usb 4-1: config 0 descriptor??
[  432.393544][ T5282] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  433.319478][T10248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.349784][T10248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.442285][ T5576] usb 4-1: Failed to submit usb control message: -110
[  433.455304][ T5576] usb 4-1: unable to send the bmi data to the device: -110
[  433.469018][ T5576] usb 4-1: unable to get target info from device
[  433.478360][ T5576] usb 4-1: could not get target info (-110)
[  433.487760][ T5576] usb 4-1: could not probe fw (-110)
[  434.577361][    T8] usb 4-1: USB disconnect, device number 43
[  437.671825][T10281] delete_channel: no stack
[  437.857683][T10293] fuse: Unknown parameter 'grou00000000000000000000'
[  437.919601][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  437.933925][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  437.946500][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  437.967122][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  437.975019][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  437.982721][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  438.326669][T10297] chnl_net:caif_netlink_parms(): no params data found
[  438.489182][T10297] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.505671][T10297] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.517370][T10297] bridge_slave_0: entered allmulticast mode
[  438.529689][T10297] bridge_slave_0: entered promiscuous mode
[  438.549453][T10297] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.567078][T10297] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.579783][T10297] bridge_slave_1: entered allmulticast mode
[  438.590565][T10297] bridge_slave_1: entered promiscuous mode
[  438.654734][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.675100][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.758519][T10297] team0: Port device team_slave_0 added
[  438.769584][T10297] team0: Port device team_slave_1 added
[  438.823825][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.831097][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.857050][    C1] vkms_vblank_simulate: vblank timer overrun
[  438.867106][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.880549][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.888697][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.916061][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.114274][T10297] hsr_slave_0: entered promiscuous mode
[  439.120975][T10297] hsr_slave_1: entered promiscuous mode
[  439.128648][T10297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  439.138895][T10297] Cannot create hsr debugfs directory
[  439.424755][T10297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.521011][T10297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.672869][T10297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.965894][T10297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.082007][ T5233] Bluetooth: hci4: command tx timeout
[  440.245163][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  440.252536][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  440.303761][T10297] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  440.328619][T10297] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  440.492494][ T5919] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.640384][T10297] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  440.694616][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.954'.
[  440.800839][ T5919] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.840038][T10297] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  440.973890][ T5919] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.031516][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  441.050464][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  441.062460][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  441.072354][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  441.080101][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  441.090495][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  441.324174][ T5919] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.753285][ T5919] bridge_slave_1: left allmulticast mode
[  441.759065][ T5919] bridge_slave_1: left promiscuous mode
[  441.774287][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.788601][ T5919] bridge_slave_0: left allmulticast mode
[  441.797155][ T5919] bridge_slave_0: left promiscuous mode
[  441.810252][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.069055][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.080270][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.172909][ T5242] Bluetooth: hci4: command tx timeout
[  442.361823][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.375051][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  442.386983][ T5919] bond0 (unregistering): Released all slaves
[  442.577148][T10297] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.647264][T10297] 8021q: adding VLAN 0 to HW filter on device team0
[  442.707689][T10337] chnl_net:caif_netlink_parms(): no params data found
[  442.816881][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.824171][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.835896][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.843152][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.929259][   T29] kauditd_printk_skb: 29 callbacks suppressed
[  442.929280][   T29] audit: type=1326 audit(1729419434.382:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  442.957732][    C1] vkms_vblank_simulate: vblank timer overrun
[  443.016657][ T5919] hsr_slave_0: left promiscuous mode
[  443.029788][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.048745][   T29] audit: type=1326 audit(1729419434.442:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  443.048967][ T5919] hsr_slave_1: left promiscuous mode
[  443.070773][    C1] vkms_vblank_simulate: vblank timer overrun
[  443.083831][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.109983][   T29] audit: type=1326 audit(1729419434.442:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  443.134233][ T5242] Bluetooth: hci0: command tx timeout
[  443.165350][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.177128][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.185954][   T29] audit: type=1326 audit(1729419434.442:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  443.225155][   T29] audit: type=1326 audit(1729419434.442:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  443.266600][   T29] audit: type=1326 audit(1729419434.452:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  443.288567][    C1] vkms_vblank_simulate: vblank timer overrun
[  443.293344][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.303021][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.335123][ T5919] veth1_macvtap: left promiscuous mode
[  443.342329][ T5919] veth0_macvtap: left promiscuous mode
[  443.348290][ T5919] veth1_vlan: left promiscuous mode
[  443.359637][ T5919] veth0_vlan: left promiscuous mode
[  443.423959][   T29] audit: type=1326 audit(1729419434.452:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  443.454007][   T29] audit: type=1326 audit(1729419434.452:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  443.500873][   T29] audit: type=1326 audit(1729419434.482:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  443.522969][    C1] vkms_vblank_simulate: vblank timer overrun
[  443.543161][   T29] audit: type=1326 audit(1729419434.482:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10355 comm="syz.1.960" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f44579 code=0x7ffc0000
[  444.252084][ T5242] Bluetooth: hci4: command tx timeout
[  444.362456][ T5919] team0 (unregistering): Port device team_slave_1 removed
[  444.426767][ T5919] team0 (unregistering): Port device team_slave_0 removed
[  445.231646][ T5242] Bluetooth: hci0: command tx timeout
[  445.413578][T10368] delete_channel: no stack
[  445.971781][T10379] fuse: Unknown parameter 'grou00000000000000000000'
[  446.102927][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.125999][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.321765][ T5242] Bluetooth: hci4: command tx timeout
[  446.423600][T10337] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.441288][T10337] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.450264][T10337] bridge_slave_0: entered allmulticast mode
[  446.472578][T10337] bridge_slave_0: entered promiscuous mode
[  446.504911][T10337] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.516325][T10337] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.533170][T10337] bridge_slave_1: entered allmulticast mode
[  446.552136][T10337] bridge_slave_1: entered promiscuous mode
[  446.663197][T10297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.673870][T10337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.698520][T10337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.908731][T10337] team0: Port device team_slave_0 added
[  446.966218][T10337] team0: Port device team_slave_1 added
[  447.104423][T10337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.130428][T10337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.239218][T10337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.282284][ T5242] Bluetooth: hci0: command tx timeout
[  447.345025][T10406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.347046][T10406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.347994][T10337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.348015][T10337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.348046][T10337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.493161][T10297] veth0_vlan: entered promiscuous mode
[  447.510917][T10337] hsr_slave_0: entered promiscuous mode
[  447.541535][T10337] hsr_slave_1: entered promiscuous mode
[  447.705682][T10297] veth1_vlan: entered promiscuous mode
[  448.046748][T10394] delete_channel: no stack
[  448.227680][T10297] veth0_macvtap: entered promiscuous mode
[  448.327954][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  448.327975][   T29] audit: type=1326 audit(1729419439.782:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  448.356130][    C1] vkms_vblank_simulate: vblank timer overrun
[  448.417517][   T29] audit: type=1326 audit(1729419439.782:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  448.439458][    C1] vkms_vblank_simulate: vblank timer overrun
[  448.476095][   T29] audit: type=1326 audit(1729419439.832:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf747d579 code=0x7ffc0000
[  448.614713][T10297] veth1_macvtap: entered promiscuous mode
[  448.664001][   T29] audit: type=1326 audit(1729419439.832:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  448.696489][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.714697][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.726599][   T29] audit: type=1326 audit(1729419439.832:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  448.772248][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  448.806263][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.819491][   T29] audit: type=1326 audit(1729419439.842:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf747d579 code=0x7ffc0000
[  448.841400][    C1] vkms_vblank_simulate: vblank timer overrun
[  448.849298][T10297] batman_adv: batadv0: Interface activated: batadv_slave_0
[  448.866636][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.882296][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.894588][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  448.905781][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  448.915841][   T29] audit: type=1326 audit(1729419440.362:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  448.937749][    C1] vkms_vblank_simulate: vblank timer overrun
[  448.962881][T10297] batman_adv: batadv0: Interface activated: batadv_slave_1
[  448.970801][ T5242] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  448.980638][ T5242] Bluetooth: hci2: Injecting HCI hardware error event
[  448.992158][ T5242] Bluetooth: hci2: hardware error 0x00
[  449.019885][   T29] audit: type=1326 audit(1729419440.402:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.2.969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  449.170857][T10297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.203063][T10297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.235302][T10297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.263907][T10297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.361866][ T5233] Bluetooth: hci0: command tx timeout
[  449.604159][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.657194][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.725141][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.776984][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.024858][T10337] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  450.056996][T10337] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  450.078253][T10337] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  450.158785][T10337] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  450.240088][T10432] delete_channel: no stack
[  450.493858][T10337] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.588339][T10337] 8021q: adding VLAN 0 to HW filter on device team0
[  450.635852][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.643178][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.737940][  T954] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.745186][  T954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.124416][ T5242] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  451.160742][T10337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.315080][T10337] veth0_vlan: entered promiscuous mode
[  451.378199][T10337] veth1_vlan: entered promiscuous mode
[  451.480359][T10337] veth0_macvtap: entered promiscuous mode
[  451.560345][T10337] veth1_macvtap: entered promiscuous mode
[  451.636695][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.673639][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.699962][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.741653][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.781301][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.821792][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.873752][T10337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.919488][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.000108][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.043227][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.056138][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.068669][T10337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.092886][T10337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.112793][T10337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.143055][T10477] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[  452.156019][T10477] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[  452.157562][T10337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.181113][T10337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.202881][T10337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.215407][T10337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.456818][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.494078][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.641979][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.682114][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.836363][T10515] delete_channel: no stack
[  455.194068][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'.
[  455.255726][T10549] tipc: Started in network mode
[  455.271494][   T29] audit: type=1326 audit(1729419446.722:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.278077][T10549] tipc: Node identity ac14140f, cluster identity 4711
[  455.331378][T10549] tipc: New replicast peer: 255.255.255.255
[  455.357763][   T29] audit: type=1326 audit(1729419446.762:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.402281][T10549] tipc: Enabled bearer <udp:syz2>, priority 10
[  455.411518][   T29] audit: type=1326 audit(1729419446.762:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.433914][   T29] audit: type=1326 audit(1729419446.762:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.455801][    C1] vkms_vblank_simulate: vblank timer overrun
[  455.464276][   T29] audit: type=1326 audit(1729419446.762:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.486339][    C1] vkms_vblank_simulate: vblank timer overrun
[  455.492850][   T29] audit: type=1326 audit(1729419446.782:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.514911][   T29] audit: type=1326 audit(1729419446.782:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.536788][    C1] vkms_vblank_simulate: vblank timer overrun
[  455.543556][   T29] audit: type=1326 audit(1729419446.782:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.565584][   T29] audit: type=1326 audit(1729419446.782:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.587370][    C1] vkms_vblank_simulate: vblank timer overrun
[  455.593533][   T29] audit: type=1326 audit(1729419446.782:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf747d579 code=0x7ffc0000
[  455.781386][ T5282] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  455.882141][   T12] batman_adv: batadv0: Interface deactivated: geneve2
[  455.949576][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  455.996483][ T5282] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  456.025787][ T5282] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  456.069496][ T5282] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  456.081102][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.129702][T10552] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  456.160771][ T5282] hub 4-1:1.0: bad descriptor, ignoring hub
[  456.221496][ T5282] hub 4-1:1.0: probe with driver hub failed with error -5
[  456.237213][ T5282] cdc_wdm 4-1:1.0: skipping garbage
[  456.251889][ T5282] cdc_wdm 4-1:1.0: skipping garbage
[  456.263002][ T5282] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[  456.269079][ T5282] cdc_wdm 4-1:1.0: Unknown control protocol
[  456.543360][ T5231] tipc: Node number set to 2886997007
[  456.770310][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.814387][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.900599][   T12] batman_adv: batadv0: Removing interface: geneve2
[  457.461162][   T12] bond0 (unregistering): Released all slaves
[  458.472570][   T12] hsr_slave_0: left promiscuous mode
[  458.487590][   T12] hsr_slave_1: left promiscuous mode
[  458.534499][   T12] veth1_macvtap: left promiscuous mode
[  458.557310][   T12] veth0_macvtap: left promiscuous mode
[  458.567959][   T12] veth1_vlan: left promiscuous mode
[  458.601568][  T940] usb 4-1: USB disconnect, device number 44
[  458.634030][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.673026][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.591015][T10587] delete_channel: no stack
[  460.012138][T10084] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  460.171347][T10084] usb 4-1: Using ep0 maxpacket: 8
[  460.178258][T10084] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.189105][T10084] usb 4-1: config 0 has no interfaces?
[  460.201613][T10084] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  460.216465][T10084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  460.227196][T10084] usb 4-1: SerialNumber: syz
[  460.238647][T10084] usb 4-1: config 0 descriptor??
[  460.522176][ T5282] usb 4-1: USB disconnect, device number 45
[  461.111827][T10603] can: request_module (can-proto-0) failed.
[  461.591366][T10084] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  461.761657][T10084] usb 4-1: Using ep0 maxpacket: 16
[  461.780114][T10084] usb 4-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config
[  461.800716][T10084] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  461.839342][T10084] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  461.885321][T10084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.899477][T10084] usb 4-1: config 0 descriptor??
[  461.963468][T10084] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  463.747605][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.785647][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.354941][    T8] usb 4-1: USB disconnect, device number 46
[  465.412219][T10636] delete_channel: no stack
[  466.788788][T10663] netlink: 'syz.1.1016': attribute type 10 has an invalid length.
[  466.798218][T10663] macvlan0: entered promiscuous mode
[  466.804196][T10663] macvlan0: entered allmulticast mode
[  466.812016][T10663] veth1_vlan: entered allmulticast mode
[  466.820636][T10663] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  467.162593][T10670] hub 9-0:1.0: USB hub found
[  467.169064][T10670] hub 9-0:1.0: 8 ports detected
[  467.281811][ T5919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.378266][ T5919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.478552][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.603179][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.650526][ T5919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.784483][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  467.795860][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  467.804600][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  467.813617][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  467.823025][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  467.830399][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  467.869497][ T5919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.102388][ T5919] batman_adv: batadv0: Interface deactivated: geneve2
[  468.503868][ T5919] batman_adv: batadv0: Removing interface: geneve2
[  468.748330][ T5919] bond0 (unregistering): Released all slaves
[  468.778034][T10679] chnl_net:caif_netlink_parms(): no params data found
[  468.977602][ T5919] tipc: Disabling bearer <udp:syz2>
[  468.988749][ T5919] tipc: Left network mode
[  468.994107][T10679] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.011076][T10679] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.081509][T10679] bridge_slave_0: entered allmulticast mode
[  469.113867][T10679] bridge_slave_0: entered promiscuous mode
[  469.298685][T10679] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.306252][T10679] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.332417][T10679] bridge_slave_1: entered allmulticast mode
[  469.341665][T10679] bridge_slave_1: entered promiscuous mode
[  469.923825][T10679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.934490][ T5242] Bluetooth: hci1: command tx timeout
[  469.945426][T10679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.243401][ T5919] hsr_slave_0: left promiscuous mode
[  470.249772][ T5919] hsr_slave_1: left promiscuous mode
[  470.343884][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  470.359265][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  470.363120][ T5919] veth1_macvtap: left promiscuous mode
[  470.380174][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  470.388599][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  470.400005][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  470.408819][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  470.454954][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  470.454975][   T29] audit: type=1326 audit(1729419461.912:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  470.485124][ T5919] veth0_macvtap: left promiscuous mode
[  470.540991][ T5919] veth1_vlan: left promiscuous mode
[  470.574538][ T5919] veth0_vlan: left promiscuous mode
[  470.580370][   T29] audit: type=1326 audit(1729419461.912:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  470.698543][   T29] audit: type=1326 audit(1729419461.962:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7ffc0000
[  470.865821][   T29] audit: type=1326 audit(1729419461.962:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  470.935635][   T29] audit: type=1326 audit(1729419461.962:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  471.022669][   T29] audit: type=1326 audit(1729419461.972:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7ffc0000
[  471.051608][   T29] audit: type=1326 audit(1729419461.982:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  471.144283][   T29] audit: type=1326 audit(1729419461.982:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  471.222123][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  471.233458][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  471.243945][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  471.254821][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  471.296132][   T29] audit: type=1326 audit(1729419461.982:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7ffc0000
[  471.318654][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  471.349220][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  471.405643][   T29] audit: type=1326 audit(1729419461.982:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10701 comm="syz.2.1026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf747d579 code=0x7ffc0000
[  472.006710][ T5233] Bluetooth: hci1: command tx timeout
[  472.490211][ T5233] Bluetooth: hci4: command tx timeout
[  472.683788][T10679] team0: Port device team_slave_0 added
[  472.707075][T10679] team0: Port device team_slave_1 added
[  472.807995][T10679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.816782][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.851806][T10679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.885786][T10679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.908112][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.944622][T10679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  473.069778][T10679] hsr_slave_0: entered promiscuous mode
[  473.082621][T10679] hsr_slave_1: entered promiscuous mode
[  473.089132][T10679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  473.104456][T10679] Cannot create hsr debugfs directory
[  473.377963][T10709] chnl_net:caif_netlink_parms(): no params data found
[  473.441555][ T5233] Bluetooth: hci0: command tx timeout
[  473.470424][T10730] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1037'.
[  473.579272][T10706] chnl_net:caif_netlink_parms(): no params data found
[  473.845815][ T5919] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.065317][T10709] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.081657][ T5233] Bluetooth: hci1: command tx timeout
[  474.082101][T10709] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.111691][T10709] bridge_slave_0: entered allmulticast mode
[  474.131524][T10709] bridge_slave_0: entered promiscuous mode
[  474.233672][ T5919] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.293621][T10709] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.301540][T10709] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.313151][T10709] bridge_slave_1: entered allmulticast mode
[  474.320348][T10709] bridge_slave_1: entered promiscuous mode
[  474.437398][ T5919] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.561459][ T5233] Bluetooth: hci4: command tx timeout
[  474.594885][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.606032][T10706] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.613877][T10706] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.621139][T10706] bridge_slave_0: entered allmulticast mode
[  474.628836][T10706] bridge_slave_0: entered promiscuous mode
[  474.658025][ T5919] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.730987][T10762] netlink: 'syz.1.1031': attribute type 5 has an invalid length.
[  474.745295][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.800263][T10706] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.811532][T10706] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.818892][T10706] bridge_slave_1: entered allmulticast mode
[  474.830875][T10706] bridge_slave_1: entered promiscuous mode
[  474.844475][T10764] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1032'.
[  474.984793][T10709] team0: Port device team_slave_0 added
[  475.072881][T10709] team0: Port device team_slave_1 added
[  475.106932][T10770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.120204][T10770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.194712][T10706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.242992][T10706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.364157][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.384452][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.386504][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'.
[  475.422593][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.443294][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.450380][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.476417][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.522219][ T5233] Bluetooth: hci0: command tx timeout
[  475.524580][T10706] team0: Port device team_slave_0 added
[  475.606902][T10709] hsr_slave_0: entered promiscuous mode
[  475.617867][T10709] hsr_slave_1: entered promiscuous mode
[  475.644051][T10709] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  475.689455][T10709] Cannot create hsr debugfs directory
[  475.767438][ T5919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.796981][T10706] team0: Port device team_slave_1 added
[  475.913180][ T5919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.941506][T10706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.948614][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.974843][T10706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.989866][T10706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.997058][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.024248][T10706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.144936][ T5919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.166093][ T5233] Bluetooth: hci1: command tx timeout
[  476.262789][T10679] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  476.352970][ T5919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.397493][T10679] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  476.446981][T10706] hsr_slave_0: entered promiscuous mode
[  476.462708][T10706] hsr_slave_1: entered promiscuous mode
[  476.471518][T10706] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  476.479145][T10706] Cannot create hsr debugfs directory
[  476.489984][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  476.520240][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  476.531448][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  476.539680][T10679] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  476.552054][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  476.559796][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  476.560893][T10679] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  476.574740][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  476.641558][ T5233] Bluetooth: hci4: command tx timeout
[  476.994813][ T5919] bridge_slave_1: left allmulticast mode
[  477.017264][ T5919] bridge_slave_1: left promiscuous mode
[  477.031538][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.046047][ T5919] bridge_slave_0: left allmulticast mode
[  477.053241][ T5919] bridge_slave_0: left promiscuous mode
[  477.059000][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.074445][ T5919] bridge_slave_1: left allmulticast mode
[  477.080130][ T5919] bridge_slave_1: left promiscuous mode
[  477.086898][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.096098][ T5919] bridge_slave_0: left allmulticast mode
[  477.102297][ T5919] bridge_slave_0: left promiscuous mode
[  477.108038][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.116768][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.125598][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.605905][ T5233] Bluetooth: hci0: command tx timeout
[  477.939943][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.954045][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  477.965644][ T5919] bond0 (unregistering): Released all slaves
[  478.130922][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  478.144656][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  478.155909][ T5919] bond0 (unregistering): Released all slaves
[  478.436797][T10777] chnl_net:caif_netlink_parms(): no params data found
[  478.643607][ T5233] Bluetooth: hci2: command tx timeout
[  478.731562][ T5233] Bluetooth: hci4: command tx timeout
[  478.866341][T10777] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.874981][T10777] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.882508][T10777] bridge_slave_0: entered allmulticast mode
[  478.896190][T10777] bridge_slave_0: entered promiscuous mode
[  478.966502][T10777] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.985332][T10777] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.012277][T10777] bridge_slave_1: entered allmulticast mode
[  479.022889][T10777] bridge_slave_1: entered promiscuous mode
[  479.151749][T10679] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.192684][T10777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.243137][T10777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.315281][ T5919] hsr_slave_0: left promiscuous mode
[  479.322757][ T5919] hsr_slave_1: left promiscuous mode
[  479.329240][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.339254][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.359598][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.371463][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.406009][ T5919] hsr_slave_0: left promiscuous mode
[  479.419923][ T5919] hsr_slave_1: left promiscuous mode
[  479.430873][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.445602][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.460368][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.469044][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.524604][ T5919] veth1_macvtap: left promiscuous mode
[  479.530215][ T5919] veth0_macvtap: left promiscuous mode
[  479.536063][ T5919] veth1_vlan: left promiscuous mode
[  479.541659][ T5919] veth0_vlan: left promiscuous mode
[  479.548261][ T5919] veth1_macvtap: left promiscuous mode
[  479.554127][ T5919] veth0_macvtap: left promiscuous mode
[  479.559950][ T5919] veth1_vlan: left promiscuous mode
[  479.565532][ T5919] veth0_vlan: left promiscuous mode
[  479.681438][ T5242] Bluetooth: hci0: command tx timeout
[  480.730678][ T5242] Bluetooth: hci2: command tx timeout
[  480.970760][ T5242] Bluetooth: hci3: command 0x0406 tx timeout
[  481.014878][ T5919] team0 (unregistering): Port device team_slave_1 removed
[  481.091239][ T5919] team0 (unregistering): Port device team_slave_0 removed
[  481.214168][T10848] delete_channel: no stack
[  481.311685][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.322091][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.899060][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.923062][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.286152][ T5919] team0 (unregistering): Port device team_slave_1 removed
[  482.355417][ T5919] team0 (unregistering): Port device team_slave_0 removed
[  482.804907][ T5233] Bluetooth: hci2: command tx timeout
[  482.954945][T10777] team0: Port device team_slave_0 added
[  482.979865][T10777] team0: Port device team_slave_1 added
[  483.027913][T10777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.040939][T10777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.067581][T10777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.085045][T10777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.092321][T10777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.118224][    C1] vkms_vblank_simulate: vblank timer overrun
[  483.127485][T10777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.163482][T10679] 8021q: adding VLAN 0 to HW filter on device team0
[  483.248199][T10777] hsr_slave_0: entered promiscuous mode
[  483.265375][T10777] hsr_slave_1: entered promiscuous mode
[  483.304123][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.311358][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.327454][T10709] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  483.369939][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.377151][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.424224][T10709] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  483.448125][T10709] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  483.459319][T10709] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  483.612633][T10706] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  483.645476][T10706] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  483.717089][T10706] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  483.730258][T10706] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  483.887318][T10777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.964774][T10679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  484.047112][T10777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.126144][T10709] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.192947][T10777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.247128][T10709] 8021q: adding VLAN 0 to HW filter on device team0
[  484.326565][T10777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.367269][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  484.379028][ T2485] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.386220][ T2485] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.397522][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  484.412847][T10679] veth0_vlan: entered promiscuous mode
[  484.420594][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  484.430712][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.437898][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.460325][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  484.469714][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  484.478420][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  484.489545][T10679] veth1_vlan: entered promiscuous mode
[  484.670335][ T5919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.682020][ T5919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  484.780611][ T5919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.791873][ T5919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  484.824885][T10679] veth0_macvtap: entered promiscuous mode
[  484.844834][T10706] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.864217][T10777] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  484.876904][T10777] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  484.881497][ T5242] Bluetooth: hci2: command tx timeout
[  484.895037][T10679] veth1_macvtap: entered promiscuous mode
[  484.907352][T10777] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  484.943211][ T5919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.954501][ T5919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  484.985763][T10777] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  485.015515][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.033797][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.044237][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  485.055939][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.067519][T10679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.082938][T10706] 8021q: adding VLAN 0 to HW filter on device team0
[  485.109388][ T5919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.120468][ T5919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  485.153856][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.164704][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.175212][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  485.187405][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  485.199072][T10679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.211554][T10679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.220315][T10679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.230203][T10679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.239298][T10679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.260313][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.267484][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.293171][T10709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.319356][  T954] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.326566][  T954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.395826][T10709] veth0_vlan: entered promiscuous mode
[  485.459300][T10709] veth1_vlan: entered promiscuous mode
[  485.581092][T10861] chnl_net:caif_netlink_parms(): no params data found
[  485.594465][ T5919] team0: left allmulticast mode
[  485.599375][ T5919] team_slave_0: left allmulticast mode
[  485.606034][ T5919] team_slave_1: left allmulticast mode
[  485.611863][ T5919] team0: left promiscuous mode
[  485.616669][ T5919] team_slave_0: left promiscuous mode
[  485.622704][ T5919] team_slave_1: left promiscuous mode
[  485.628441][ T5919] bridge0: port 3(team0) entered disabled state
[  485.637482][ T5919] bridge_slave_1: left allmulticast mode
[  485.643497][ T5919] bridge_slave_1: left promiscuous mode
[  485.649188][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.660069][ T5919] bridge_slave_0: left allmulticast mode
[  485.666172][ T5919] bridge_slave_0: left promiscuous mode
[  485.672151][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.686363][ T5919] bridge_slave_1: left allmulticast mode
[  485.692288][ T5919] bridge_slave_1: left promiscuous mode
[  485.698009][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.707887][ T5919] bridge_slave_0: left allmulticast mode
[  485.714717][ T5919] bridge_slave_0: left promiscuous mode
[  485.720461][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.508083][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.519260][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.530635][ T5919] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  486.539794][ T5919] veth1_vlan: left allmulticast mode
[  486.547162][ T5919] bond0 (unregistering): Released all slaves
[  486.561748][ T5242] Bluetooth: hci3: command tx timeout
[  486.707022][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.718524][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.731068][ T5919] bond0 (unregistering): Released all slaves
[  486.920256][T10706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  486.931722][T10706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  487.024860][T10709] veth0_macvtap: entered promiscuous mode
[  487.044798][  T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.053688][  T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.230035][T10861] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.250812][T10861] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.267622][T10861] bridge_slave_0: entered allmulticast mode
[  487.278372][T10861] bridge_slave_0: entered promiscuous mode
[  487.318977][T10777] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.348705][T10706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.430024][T10709] veth1_macvtap: entered promiscuous mode
[  487.443918][T10861] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.451095][T10861] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.459245][T10861] bridge_slave_1: entered allmulticast mode
[  487.470641][T10861] bridge_slave_1: entered promiscuous mode
[  487.515049][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.524202][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.563717][T10861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.645281][T10861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.679059][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.697699][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.708948][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.720522][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.731129][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.743510][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.755658][T10709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  487.802045][ T5919] hsr_slave_0: left promiscuous mode
[  487.810910][ T5919] hsr_slave_1: left promiscuous mode
[  487.833777][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.850346][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.859803][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.873751][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.894613][ T5919] hsr_slave_0: left promiscuous mode
[  487.900994][ T5919] hsr_slave_1: left promiscuous mode
[  487.921160][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.941963][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.957331][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.968756][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.055022][ T5919] veth1_macvtap: left promiscuous mode
[  488.060657][ T5919] veth0_macvtap: left promiscuous mode
[  488.066445][ T5919] veth1_vlan: left promiscuous mode
[  488.071976][ T5919] veth0_vlan: left promiscuous mode
[  488.080976][ T5919] veth1_macvtap: left promiscuous mode
[  488.086971][ T5919] veth0_macvtap: left promiscuous mode
[  488.093177][ T5919] veth1_vlan: left promiscuous mode
[  488.098707][ T5919] veth0_vlan: left promiscuous mode
[  488.642053][ T5242] Bluetooth: hci3: command tx timeout
[  489.192499][ T5919] team0 (unregistering): Port device team_slave_1 removed
[  489.260953][ T5919] team0 (unregistering): Port device team_slave_0 removed
[  490.375214][ T5919] team0 (unregistering): Port device team_slave_1 removed
[  490.438211][ T5919] team0 (unregistering): Port device team_slave_0 removed
[  490.721629][ T5242] Bluetooth: hci3: command tx timeout
[  491.174982][T10861] team0: Port device team_slave_0 added
[  491.186065][T10861] team0: Port device team_slave_1 added
[  491.192739][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.203836][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.223801][T10709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.238303][T10777] 8021q: adding VLAN 0 to HW filter on device team0
[  491.313546][T10709] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.323478][T10709] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.333331][T10709] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.342358][T10709] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.378637][T10706] veth0_vlan: entered promiscuous mode
[  491.393878][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.401007][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  491.428020][T10706] veth1_vlan: entered promiscuous mode
[  491.435285][T10861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.442910][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.482286][T10861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.495460][T10861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.503398][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.550719][T10861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.595403][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.602653][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  491.735276][T10706] veth0_macvtap: entered promiscuous mode
[  491.882321][T10861] hsr_slave_0: entered promiscuous mode
[  491.899356][T10861] hsr_slave_1: entered promiscuous mode
[  491.918284][T10861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  491.935456][T10861] Cannot create hsr debugfs directory
[  492.026796][T10706] veth1_macvtap: entered promiscuous mode
[  492.150179][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.199583][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.258326][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  492.269373][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.279979][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  492.292863][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.304537][T10706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  492.348484][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  492.359934][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.370273][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  492.380861][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  492.393062][T10706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  492.439421][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.457358][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.489016][T10706] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.513022][T10706] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.527176][T10706] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.537212][T10706] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.575717][T10777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.801868][ T5242] Bluetooth: hci3: command tx timeout
[  492.936639][T10923] netlink: 'syz.0.1056': attribute type 25 has an invalid length.
[  492.948211][T10923] netlink: 'syz.0.1056': attribute type 7 has an invalid length.
[  493.087163][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.111905][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.149884][T10777] veth0_vlan: entered promiscuous mode
[  493.203790][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.225969][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.232708][T10777] veth1_vlan: entered promiscuous mode
[  493.296988][T10861] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  493.348145][T10861] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  493.419580][T10861] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  493.442618][T10861] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  493.589076][T10777] veth0_macvtap: entered promiscuous mode
[  493.639644][T10777] veth1_macvtap: entered promiscuous mode
[  493.666550][T10861] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.677594][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.698342][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.709931][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.726294][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.736289][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.752644][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.764521][T10777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  493.786068][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.797162][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.811460][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.822324][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.833493][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.845002][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.857060][T10777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  493.871056][T10861] 8021q: adding VLAN 0 to HW filter on device team0
[  493.882019][T10777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.890841][T10777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.900009][T10777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.909410][T10777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.929619][  T603] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.936927][  T603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.960236][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.967496][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.106971][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.138990][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.198894][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.227193][T10861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.235285][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.346960][T10861] veth0_vlan: entered promiscuous mode
[  494.408410][T10861] veth1_vlan: entered promiscuous mode
[  494.514134][T10861] veth0_macvtap: entered promiscuous mode
[  494.575168][T10861] veth1_macvtap: entered promiscuous mode
[  494.697161][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.735947][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.772942][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.842024][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.956322][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.975490][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.016277][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.048563][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.078760][T10861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.167521][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.283954][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.316528][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.354106][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.379315][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.418141][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.440451][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  495.464701][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.476276][T10861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.487315][T10861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.496258][T10861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.505073][T10861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.513938][T10861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.647576][  T603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.665464][  T603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.726371][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.754841][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.038423][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  496.038443][   T29] audit: type=1326 audit(1729419487.492:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  496.358793][   T29] audit: type=1326 audit(1729419487.492:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  496.525265][   T29] audit: type=1326 audit(1729419487.492:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  496.581198][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  496.643216][   T29] audit: type=1326 audit(1729419487.492:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  496.666352][   T29] audit: type=1326 audit(1729419487.492:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  496.688348][    C1] vkms_vblank_simulate: vblank timer overrun
[  496.711516][   T29] audit: type=1326 audit(1729419487.712:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  496.743704][T10980] delete_channel: no stack
[  496.759791][   T29] audit: type=1326 audit(1729419487.712:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.4.1050" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  497.121789][ T5282] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  497.272289][ T5282] usb 4-1: Using ep0 maxpacket: 32
[  497.278981][ T5282] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  497.295733][ T5282] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  497.329306][ T5282] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  497.356582][ T5282] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  497.402404][ T5282] usb 4-1: config 0 interface 0 has no altsetting 0
[  497.426862][ T5282] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  497.459859][ T5282] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  497.538878][ T5282] usb 4-1: Product: syz
[  497.558862][ T5282] usb 4-1: Manufacturer: syz
[  497.588189][ T5282] usb 4-1: SerialNumber: syz
[  497.608401][ T5282] usb 4-1: config 0 descriptor??
[  497.634696][ T5282] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  497.660377][ T5282] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  498.043356][    T9] IPVS: starting estimator thread 0...
[  498.141487][T11040] IPVS: using max 18 ests per chain, 43200 per kthread
[  498.179906][    T9] usb 4-1: USB disconnect, device number 47
[  498.536580][T11052] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  498.588306][T11051] IPVS: stopping backup sync thread 11052 ...
[  498.695281][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'.
[  499.184233][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  499.311580][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  499.884203][    T9] ldusb 4-1:0.0: LD USB Device #1 now disconnected
[  500.670364][T11072] can: request_module (can-proto-0) failed.
[  500.940845][T11079] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  501.682897][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  501.689286][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  502.281516][ T5231] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  502.296561][T11100] netlink: 'syz.4.1075': attribute type 3 has an invalid length.
[  502.306001][T11100] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1075'.
[  502.461476][ T5231] usb 4-1: Using ep0 maxpacket: 8
[  502.485041][ T5231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.509942][ T5231] usb 4-1: config 0 has no interfaces?
[  502.521253][ T5231] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  502.536311][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  502.545558][ T5231] usb 4-1: SerialNumber: syz
[  502.560563][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'.
[  502.576266][ T5231] usb 4-1: config 0 descriptor??
[  502.820120][ T5282] usb 4-1: USB disconnect, device number 48
[  503.307281][T11115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1078'.
[  503.339178][T11115] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.346739][T11115] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.545830][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1080'.
[  504.424300][T11132] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  504.424624][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.440754][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.351156][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'.
[  505.368599][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'.
[  505.382215][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'.
[  505.524757][ T5282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  505.861412][ T5231] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  505.905420][T11151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1092'.
[  506.031440][ T5231] usb 4-1: Using ep0 maxpacket: 8
[  506.037888][ T5231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  506.048328][ T5231] usb 4-1: config 0 has no interfaces?
[  506.055168][ T5231] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  506.064438][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  506.072626][ T5231] usb 4-1: SerialNumber: syz
[  506.081796][ T5231] usb 4-1: config 0 descriptor??
[  506.297589][    T9] usb 4-1: USB disconnect, device number 49
[  506.775738][T11162] can: request_module (can-proto-0) failed.
[  506.805842][ T5282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  506.821706][ T5282] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  508.267865][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1103'.
[  508.289651][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.336942][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.594245][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.621690][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.291744][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.322973][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.417412][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'.
[  509.438069][T11199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1107'.
[  509.461343][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'.
[  510.745219][T11210] can: request_module (can-proto-0) failed.
[  510.857698][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'.
[  510.942754][T11223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1114'.
[  511.209369][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.223601][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.609370][T11233] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1118'.
[  511.764888][T11238] netlink: 'syz.0.1117': attribute type 6 has an invalid length.
[  511.784964][T11238] netlink: 'syz.0.1117': attribute type 8 has an invalid length.
[  511.814249][T11238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'.
[  512.257336][ T5242] Bluetooth: hci1: unexpected event 0x04 length: 4 < 10
[  512.566555][ T2485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  513.324401][T11240] can: request_module (can-proto-0) failed.
[  514.523987][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1125'.
[  514.851347][T11260] can: request_module (can-proto-0) failed.
[  515.640886][T11277] netlink: 'syz.2.1129': attribute type 20 has an invalid length.
[  515.748646][T11267] delete_channel: no stack
[  515.841543][T10868] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  516.001537][T10868] usb 4-1: Using ep0 maxpacket: 32
[  516.008111][T10868] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  516.035877][T10868] usb 4-1: config 0 has no interface number 0
[  516.058511][T10868] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f
[  516.075957][T10868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.090640][T10868] usb 4-1: Product: syz
[  516.103591][T10868] usb 4-1: Manufacturer: syz
[  516.108475][T10868] usb 4-1: SerialNumber: syz
[  516.131854][T10868] usb 4-1: config 0 descriptor??
[  516.203223][T10868] net1080 4-1:0.113: probe with driver net1080 failed with error -22
[  516.415529][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.426404][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.440828][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.460058][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.508791][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.557069][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.675578][T11293] vxcan0: entered promiscuous mode
[  516.675714][T11293] vlan2: entered promiscuous mode
[  516.675797][T11293] vlan2: entered allmulticast mode
[  516.675813][T11293] vxcan0: entered allmulticast mode
[  516.677651][T11293] vxcan0: left allmulticast mode
[  516.731141][T11293] vxcan0: left promiscuous mode
[  516.855569][    T9] usb 4-1: USB disconnect, device number 50
[  517.258090][T11297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.267177][T11297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.329930][ T5919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  518.342595][T11302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1137'.
[  519.256534][T11303] delete_channel: no stack
[  519.520624][T11310] can: request_module (can-proto-0) failed.
[  519.886376][   T29] audit: type=1326 audit(1729419511.342:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000
[  519.966000][   T29] audit: type=1326 audit(1729419511.342:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000
[  520.069178][   T29] audit: type=1326 audit(1729419511.382:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000
[  520.127069][   T29] audit: type=1326 audit(1729419511.382:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000
[  520.149159][    C1] vkms_vblank_simulate: vblank timer overrun
[  520.179915][   T29] audit: type=1326 audit(1729419511.382:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000
[  520.330872][   T29] audit: type=1326 audit(1729419511.402:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000
[  520.446749][   T29] audit: type=1326 audit(1729419511.402:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000
[  520.470326][T11330] usb usb9: usbfs: process 11330 (syz.4.1145) did not claim interface 0 before use
[  520.500946][   T29] audit: type=1326 audit(1729419511.402:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000
[  520.564105][   T29] audit: type=1326 audit(1729419511.402:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000
[  520.678266][   T29] audit: type=1326 audit(1729419511.402:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11320 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7ffc0000
[  520.734417][T11332] netlink: 'syz.4.1147': attribute type 2 has an invalid length.
[  520.884136][  T603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  520.926926][T11334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1148'.
[  521.525161][   T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  521.715958][T11345] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(142895550747711) <= P.seqno(0) <= S.SWH(142895550747785)) and (P.ackno exists or LAWL(248094464116697) <= P.ackno(248094464116698) <= S.AWH(248094464116698), sending SYNC...
[  522.137346][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  522.167053][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  522.176238][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  522.184482][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  522.195376][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  522.202848][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  522.612244][T11355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1154'.
[  522.632661][T11350] chnl_net:caif_netlink_parms(): no params data found
[  522.827253][T11350] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.841561][T11350] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.848921][T11350] bridge_slave_0: entered allmulticast mode
[  522.863926][T11350] bridge_slave_0: entered promiscuous mode
[  522.886890][T11350] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.901505][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  522.929311][T11350] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.989920][T11350] bridge_slave_1: entered allmulticast mode
[  523.025949][T11350] bridge_slave_1: entered promiscuous mode
[  523.074361][    T9] usb 4-1: Using ep0 maxpacket: 16
[  523.099637][T11350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.118190][T11350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.156020][    T9] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.81
[  523.191376][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.222558][    T9] usb 4-1: config 0 descriptor??
[  523.252646][    T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  523.272201][T11350] team0: Port device team_slave_0 added
[  523.280766][    T9] usb 4-1: Detected SIO
[  523.316667][    T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  523.321995][T11350] team0: Port device team_slave_1 added
[  523.364182][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  523.453278][ T5285] usb 4-1: USB disconnect, device number 51
[  523.463805][ T5285] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  523.480042][ T5285] ftdi_sio 4-1:0.0: device disconnected
[  523.506212][T11350] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.544994][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.571376][    C1] vkms_vblank_simulate: vblank timer overrun
[  523.597313][T11350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.643742][T11350] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.657373][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.727507][T11350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.771984][T11350] hsr_slave_0: entered promiscuous mode
[  523.781841][T11350] hsr_slave_1: entered promiscuous mode
[  523.787695][T11361] can: request_module (can-proto-0) failed.
[  523.797401][T11350] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.805511][T11350] Cannot create hsr debugfs directory
[  524.086892][T11350] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.149409][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1159'.
[  524.234168][T11350] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.252042][ T5233] Bluetooth: hci3: command tx timeout
[  524.409522][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'.
[  524.436080][T11350] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.579052][T11350] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.793357][T11350] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  524.824129][T11350] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  524.878903][T11350] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  524.905157][T11350] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  525.010826][T11350] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.028527][T11350] 8021q: adding VLAN 0 to HW filter on device team0
[  525.056855][T11350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  525.067401][T11350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  525.081675][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.089026][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  525.121166][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.128394][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.193154][T11392] netlink: 'syz.2.1165': attribute type 29 has an invalid length.
[  525.224398][T11350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.257273][T11393] netlink: 'syz.2.1165': attribute type 29 has an invalid length.
[  525.372610][T11350] veth0_vlan: entered promiscuous mode
[  525.407279][T11350] veth1_vlan: entered promiscuous mode
[  525.470663][T11350] veth0_macvtap: entered promiscuous mode
[  525.484048][T11350] veth1_macvtap: entered promiscuous mode
[  525.530638][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.556840][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.591369][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.602084][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.612084][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.622859][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.632864][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.643488][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.653661][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.664300][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.676550][T11350] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.721996][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.733520][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.744024][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.754717][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.764789][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.775846][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.786184][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.796836][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.806919][T11350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.817473][T11350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.830445][T11350] batman_adv: batadv0: Interface activated: batadv_slave_1
[  525.840908][T11350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  525.849838][T11350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  525.858733][T11350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  525.867590][T11350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.013887][   T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  526.042264][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.050322][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.151579][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.164190][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.329177][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.338085][ T5233] Bluetooth: hci3: command tx timeout
[  526.382156][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.434582][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'.
[  526.459183][T11400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1153'.
[  526.491426][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'.
[  526.533478][T11403] usb usb9: usbfs: process 11403 (syz.1.1153) did not claim interface 0 before use
[  526.642541][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  526.815567][T11398] can: request_module (can-proto-0) failed.
[  527.095993][T11409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1170'.
[  527.720334][T11417] can: request_module (can-proto-0) failed.
[  528.401679][ T5233] Bluetooth: hci3: command tx timeout
[  528.440847][T11428] vivid-006: disconnect
[  528.447483][T11428] netlink: 'syz.3.1177': attribute type 9 has an invalid length.
[  528.456502][T11428] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1177'.
[  529.213067][   T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  529.321818][T11427] vivid-006: reconnect
[  529.464049][T11431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1178'.
[  529.486308][T11431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1178'.
[  529.506826][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'.
[  529.519251][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'.
[  529.532228][T11447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1183'.
[  529.731632][   T25] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  529.885678][   T25] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  529.885718][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.885745][   T25] usb 4-1: Product: syz
[  529.885764][   T25] usb 4-1: Manufacturer: syz
[  529.885784][   T25] usb 4-1: SerialNumber: syz
[  529.887957][   T25] usb 4-1: config 0 descriptor??
[  529.890117][   T25] ch341 4-1:0.0: ch341-uart converter detected
[  529.892401][T11453] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  530.320987][T11449] can: request_module (can-proto-0) failed.
[  530.492015][ T5233] Bluetooth: hci3: command tx timeout
[  530.513659][T11466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.528514][T11466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.555530][T11466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.568419][T11466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.834221][T11471] sg_read: process 25 (syz.1.1191) changed security contexts after opening file descriptor, this is not allowed.
[  530.841481][T11472] usb usb9: usbfs: process 11472 (syz.3.1182) did not claim interface 0 before use
[  530.961695][   T25] usb 4-1: failed to receive control message: -110
[  530.968459][   T25] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  531.537658][T11488] __nla_validate_parse: 3 callbacks suppressed
[  531.537677][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'.
[  531.569557][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1195'.
[  532.266183][   T29] kauditd_printk_skb: 45 callbacks suppressed
[  532.266205][   T29] audit: type=1326 audit(1729419523.722:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  532.307412][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.315854][   T29] audit: type=1326 audit(1729419523.732:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  532.315901][   T29] audit: type=1326 audit(1729419523.762:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  532.315940][   T29] audit: type=1326 audit(1729419523.762:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  532.315978][   T29] audit: type=1326 audit(1729419523.762:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  532.316016][   T29] audit: type=1326 audit(1729419523.762:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  532.316055][   T29] audit: type=1326 audit(1729419523.762:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  532.316095][   T29] audit: type=1326 audit(1729419523.762:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  532.403363][   T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  532.449534][    C1] vkms_vblank_simulate: vblank timer overrun
[  532.498063][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.541814][   T29] audit: type=1326 audit(1729419523.762:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  532.567110][    T9] usb 4-1: USB disconnect, device number 52
[  532.577605][    T9] ch341 4-1:0.0: device disconnected
[  532.611057][   T29] audit: type=1326 audit(1729419523.762:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.1.1197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ad579 code=0x7ffc0000
[  533.583017][T11499] can: request_module (can-proto-0) failed.
[  534.278596][T11510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1202'.
[  534.498594][T11513] netlink: 'syz.4.1203': attribute type 27 has an invalid length.
[  534.602196][   T25] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  534.761336][   T25] usb 4-1: Using ep0 maxpacket: 16
[  534.807305][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  534.866285][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  534.910699][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  534.950737][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  534.965714][ T5920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  535.048716][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  535.137467][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  535.188715][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  535.236127][   T25] usb 4-1: New USB device found, idVendor=1199, idProduct=6835, bcdDevice=95.23
[  535.268766][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.317940][   T25] usb 4-1: Product: syz
[  535.347408][   T25] usb 4-1: Manufacturer: syz
[  535.368520][   T25] usb 4-1: SerialNumber: syz
[  535.393026][   T25] usb 4-1: config 0 descriptor??
[  535.641606][T11528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1207'.
[  535.718729][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.763845][T11528] dccp_flush_write_queue: CCID did not manage to send all packets
[  535.809086][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.911853][   T25] sierra 4-1:0.0: Sierra USB modem converter detected
[  535.946447][   T25] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  535.961968][   T25] usb 4-1: Sierra USB modem converter now attached to ttyUSB1
[  536.001615][   T25] usb 4-1: Sierra USB modem converter now attached to ttyUSB2
[  536.031701][   T25] usb 4-1: USB disconnect, device number 53
[  536.046886][   T25] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  536.127717][   T25] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  536.159535][   T25] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[  536.543253][   T25] sierra 4-1:0.0: device disconnected
[  536.987775][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  537.006690][T11555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.038240][T11555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.642661][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  537.642684][   T29] audit: type=1326 audit(1729419529.102:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000
[  537.678124][   T29] audit: type=1326 audit(1729419529.102:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000
[  537.687086][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'.
[  537.727268][   T29] audit: type=1326 audit(1729419529.102:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf744d579 code=0x7ffc0000
[  537.800780][   T29] audit: type=1326 audit(1729419529.102:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000
[  537.840955][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.867424][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.875459][   T29] audit: type=1326 audit(1729419529.102:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf744d579 code=0x7ffc0000
[  537.933720][   T29] audit: type=1326 audit(1729419529.102:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000
[  538.015437][   T29] audit: type=1326 audit(1729419529.102:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf744d579 code=0x7ffc0000
[  538.068341][   T29] audit: type=1326 audit(1729419529.102:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000
[  538.094526][   T29] audit: type=1326 audit(1729419529.102:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf744d579 code=0x7ffc0000
[  538.141381][   T29] audit: type=1326 audit(1729419529.102:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11557 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000
[  538.170233][ T2485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  538.600455][T11581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.667901][T11581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.083886][ T5920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  540.243519][T11598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'.
[  540.277714][T11598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1225'.
[  541.843135][T11611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.875552][T11611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.102962][T11615] netlink: 'syz.0.1232': attribute type 1 has an invalid length.
[  542.163709][T11615] bridge0: port 3(team0) entered blocking state
[  542.170267][T11615] bridge0: port 3(team0) entered disabled state
[  542.180537][T11615] team0: entered allmulticast mode
[  542.190541][T11615] team_slave_0: entered allmulticast mode
[  542.200718][T11615] team_slave_1: entered allmulticast mode
[  542.213069][T11615] team0: entered promiscuous mode
[  542.229096][T11615] team_slave_0: entered promiscuous mode
[  542.254487][T11615] team_slave_1: entered promiscuous mode
[  542.277947][T11615] bridge0: port 3(team0) entered blocking state
[  542.284377][T11615] bridge0: port 3(team0) entered forwarding state
[  542.322495][T11615] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1232'.
[  542.347595][T11615] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1232'.
[  542.426722][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1233'.
[  542.468268][T11622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.480443][T11622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.527546][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'.
[  542.538949][T11622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'.
[  542.555862][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'.
[  542.859600][T11629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1237'.
[  542.871032][T11629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1237'.
[  542.884704][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'.
[  543.139175][T11634] netlink: 'syz.1.1239': attribute type 3 has an invalid length.
[  543.147825][T11634] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1239'.
[  543.221453][   T25] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  543.391416][   T25] usb 4-1: Using ep0 maxpacket: 8
[  543.398364][   T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  543.406743][   T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  543.418330][   T25] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  543.430097][   T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  543.441748][   T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  543.454389][   T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  543.461922][   T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  543.473376][   T25] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  543.485216][   T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  543.497470][   T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  543.514105][   T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  543.522248][   T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  543.543434][   T25] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  543.559249][   T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  543.571863][   T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  543.587236][   T25] usb 4-1: string descriptor 0 read error: -22
[  543.596486][   T25] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  543.606788][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.627646][   T25] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  543.725898][T11647] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  543.786432][T11646] IPVS: stopping backup sync thread 11647 ...
[  543.869693][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'.
[  543.922128][   T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  543.943319][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.956390][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.092961][T11654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.123712][T11654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.121758][ T5920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  546.051308][   T25] usb 4-1: USB disconnect, device number 54
[  546.167818][T11694] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  546.260093][T11693] IPVS: stopping backup sync thread 11694 ...
[  546.362046][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'.
[  547.275686][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.322683][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.380545][T11731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'.
[  548.563915][T11734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.597787][T11734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.079335][T11745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  550.322657][   T30] INFO: task kworker/1:4:5283 blocked for more than 143 seconds.
[  550.337359][   T30]       Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  550.357967][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  550.367269][   T30] task:kworker/1:4     state:D stack:19952 pid:5283  tgid:5283  ppid:2      flags:0x00004000
[  550.391146][   T30] Workqueue: usb_hub_wq hub_event
[  550.408057][   T30] Call Trace:
[  550.421038][   T30]  <TASK>
[  550.447918][   T30]  __schedule+0x1895/0x4b30
[  550.468161][   T30]  ? __pfx___schedule+0x10/0x10
[  550.473534][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  550.480694][   T30]  ? __pfx_lock_release+0x10/0x10
[  550.486848][   T30]  ? kick_pool+0x45c/0x620
[  550.492262][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  550.501366][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  550.506704][   T30]  ? schedule+0x90/0x320
[  550.511130][   T30]  schedule+0x14b/0x320
[  550.516939][   T30]  schedule_preempt_disabled+0x13/0x30
[  550.533789][   T30]  __mutex_lock+0x6a7/0xd70
[  550.544368][   T30]  ? __mutex_lock+0x52a/0xd70
[  550.577362][   T30]  ? adu_disconnect+0xca/0x2b0
[  550.598215][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  550.636567][   T30]  ? usb_hcd_flush_endpoint+0x3d1/0x3f0
[  550.665586][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  550.680225][   T30]  adu_disconnect+0xca/0x2b0
[  550.716163][   T30]  usb_unbind_interface+0x25e/0x940
[  550.741318][   T30]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  550.751748][   T30]  ? __pfx_usb_unbind_interface+0x10/0x10
[  550.765939][   T30]  device_release_driver_internal+0x503/0x7c0
[  550.780910][   T30]  bus_remove_device+0x34f/0x420
[  550.790189][   T30]  device_del+0x57a/0x9b0
[  550.799290][   T30]  ? kobject_put+0x272/0x480
[  550.805015][   T30]  ? __pfx_device_del+0x10/0x10
[  550.809911][   T30]  ? kobject_put+0x44d/0x480
[  550.820087][   T30]  usb_disable_device+0x3bf/0x850
[  550.825331][   T30]  usb_disconnect+0x340/0x950
[  550.830157][   T30]  hub_event+0x1ebc/0x5150
[  550.840555][   T30]  ? debug_object_deactivate+0x2d5/0x390
[  550.847227][   T30]  ? __pfx_hub_event+0x10/0x10
[  550.857186][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  550.864400][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  550.870694][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  550.883414][   T30]  ? process_scheduled_works+0x976/0x1850
[  550.889213][   T30]  process_scheduled_works+0xa63/0x1850
[  550.898668][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  550.906788][   T30]  ? assign_work+0x364/0x3d0
[  550.916569][   T30]  worker_thread+0x870/0xd30
[  550.925927][   T30]  ? __kthread_parkme+0x169/0x1d0
[  550.935959][   T30]  ? __pfx_worker_thread+0x10/0x10
[  550.944488][   T30]  kthread+0x2f0/0x390
[  550.948718][   T30]  ? __pfx_worker_thread+0x10/0x10
[  550.972386][   T30]  ? __pfx_kthread+0x10/0x10
[  550.981313][   T30]  ret_from_fork+0x4b/0x80
[  550.985815][   T30]  ? __pfx_kthread+0x10/0x10
[  550.993868][   T30]  ret_from_fork_asm+0x1a/0x30
[  550.998727][   T30]  </TASK>
[  551.018777][   T30] INFO: task kworker/1:5:5287 blocked for more than 144 seconds.
[  551.053177][   T30]       Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  551.074010][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  551.087388][   T30] task:kworker/1:5     state:D stack:19696 pid:5287  tgid:5287  ppid:2      flags:0x00004000
[  551.104193][   T30] Workqueue: usb_hub_wq hub_event
[  551.111030][   T30] Call Trace:
[  551.114702][   T30]  <TASK>
[  551.118107][   T30]  __schedule+0x1895/0x4b30
[  551.123043][   T30]  ? __pfx___schedule+0x10/0x10
[  551.127978][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  551.134294][   T30]  ? __pfx_lock_release+0x10/0x10
[  551.142025][   T30]  ? kick_pool+0x45c/0x620
[  551.150583][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  551.156057][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  551.162716][   T30]  ? schedule+0x90/0x320
[  551.167082][   T30]  schedule+0x14b/0x320
[  551.176465][   T30]  schedule_preempt_disabled+0x13/0x30
[  551.182173][   T30]  __mutex_lock+0x6a7/0xd70
[  551.186801][   T30]  ? __mutex_lock+0x52a/0xd70
[  551.198951][   T30]  ? adu_disconnect+0xca/0x2b0
[  551.204338][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  551.209507][   T30]  ? usb_hcd_flush_endpoint+0x3d1/0x3f0
[  551.215743][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  551.222796][   T30]  adu_disconnect+0xca/0x2b0
[  551.228301][   T30]  usb_unbind_interface+0x25e/0x940
[  551.234027][   T30]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  551.243206][   T30]  ? __pfx_usb_unbind_interface+0x10/0x10
[  551.249144][   T30]  device_release_driver_internal+0x503/0x7c0
[  551.255880][   T30]  bus_remove_device+0x34f/0x420
[  551.261002][   T30]  device_del+0x57a/0x9b0
[  551.266001][   T30]  ? kobject_put+0x272/0x480
[  551.272932][   T30]  ? __pfx_device_del+0x10/0x10
[  551.277870][   T30]  ? kobject_put+0x44d/0x480
[  551.293903][   T30]  usb_disable_device+0x3bf/0x850
[  551.300283][   T30]  usb_disconnect+0x340/0x950
[  551.306297][   T30]  hub_event+0x1ebc/0x5150
[  551.312347][   T30]  ? debug_object_deactivate+0x2d5/0x390
[  551.318165][   T30]  ? __pfx_hub_event+0x10/0x10
[  551.331650][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  551.337738][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  551.344876][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  551.353189][   T30]  ? process_scheduled_works+0x976/0x1850
[  551.358993][   T30]  process_scheduled_works+0xa63/0x1850
[  551.365093][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  551.371553][   T30]  ? assign_work+0x364/0x3d0
[  551.407933][   T30]  worker_thread+0x870/0xd30
[  551.443320][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  551.495824][   T30]  ? __kthread_parkme+0x169/0x1d0
[  551.543197][   T30]  ? __pfx_worker_thread+0x10/0x10
[  551.572587][   T30]  kthread+0x2f0/0x390
[  551.577694][   T30]  ? __pfx_worker_thread+0x10/0x10
[  551.583628][   T30]  ? __pfx_kthread+0x10/0x10
[  551.588388][   T30]  ret_from_fork+0x4b/0x80
[  551.593712][   T30]  ? __pfx_kthread+0x10/0x10
[  551.599525][   T30]  ret_from_fork_asm+0x1a/0x30
[  551.607043][   T30]  </TASK>
[  551.610345][   T30] 
[  551.610345][   T30] Showing all locks held in the system:
[  551.623554][   T30] 6 locks held by kworker/1:0/25:
[  551.628724][   T30]  #0: ffff88802169b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  551.640574][   T30]  #1: ffffc900001f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  551.664912][   T30]  #2: ffff888144bfe190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  551.684272][   T30]  #3: ffff88806bf6e190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950
[  551.706293][   T30]  #4: ffff88806ba35160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  551.718778][   T30]  #5: ffffffff8f686308 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0
[  551.745173][   T30] 1 lock held by khungtaskd/30:
[  551.767000][    C0] I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  551.781266][   T30]  #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  551.785851][    C0] I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  551.801153][    C0] Buffer I/O error on dev loop8, logical block 65535984, async page read
[  551.810997][   T30] 5 locks held by kworker/u8:4/68:
[  551.821890][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  551.838705][   T30]  #1: ffffc900020afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  551.888226][   T30]  #2: ffffffff8fcc6350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  551.907907][   T30]  #3: ffffffff8fcd2e48 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0
[  551.917082][   T30]  #4: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  551.936577][   T30] 2 locks held by kworker/u8:8/2485:
[  551.942075][   T30]  #0: ffff88801eb8a948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  551.953519][   T30]  #1: ffffc9000927fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  551.965861][   T30] 2 locks held by getty/4989:
[  551.970573][   T30]  #0: ffff88802f5700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  551.980505][   T30]  #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  551.996925][   T30] 6 locks held by kworker/1:4/5283:
[  552.003920][   T30]  #0: ffff88802169b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  552.015722][   T30]  #1: ffffc900042cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  552.027768][   T30]  #2: ffff888144f16190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  552.036911][   T30]  #3: ffff888063ac0190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950
[  552.048484][   T30]  #4: ffff888026115160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  552.059464][   T30]  #5: ffffffff8f686308 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0
[  552.068958][   T30] 6 locks held by kworker/0:7/5286:
[  552.074283][   T30]  #0: ffff88802169b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  552.085867][   T30]  #1: ffffc900043bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  552.098814][   T30]  #2: ffff8880285be190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  552.107902][   T30]  #3: ffff888067459190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950
[  552.117292][   T30]  #4: ffff88806b32e160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  552.127940][   T30]  #5: ffffffff8f686308 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0
[  552.137353][   T30] 6 locks held by kworker/1:5/5287:
[  552.142807][   T30]  #0: ffff88802169b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  552.154341][   T30]  #1: ffffc900043cfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  552.166562][   T30]  #2: ffff888144ba6190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  552.175675][   T30]  #3: ffff888028fe5190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950
[  552.185164][   T30]  #4: ffff88806d643160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  552.196596][   T30]  #5: ffffffff8f686308 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0
[  552.206086][   T30] 1 lock held by syz.1.665/9004:
[  552.211063][   T30]  #0: ffffffff8f686308 (adutux_mutex){+.+.}-{3:3}, at: adu_release+0xbf/0x870
[  552.220191][   T30] 1 lock held by syz.0.1270/11738:
[  552.225410][   T30]  #0: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  552.245035][   T30] 
[  552.247647][   T30] =============================================
[  552.247647][   T30] 
[  552.264113][   T30] NMI backtrace for cpu 1
[  552.268533][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  552.279091][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  552.289215][   T30] Call Trace:
[  552.292521][   T30]  <TASK>
[  552.295482][   T30]  dump_stack_lvl+0x241/0x360
[  552.300204][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.305441][   T30]  ? __pfx__printk+0x10/0x10
[  552.310189][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  552.315179][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  552.320684][   T30]  ? _printk+0xd5/0x120
[  552.324863][   T30]  ? __pfx__printk+0x10/0x10
[  552.329474][   T30]  ? __wake_up_klogd+0xcc/0x110
[  552.334357][   T30]  ? __pfx__printk+0x10/0x10
[  552.338971][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  552.344045][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  552.350078][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  552.356096][   T30]  watchdog+0xff4/0x1040
[  552.360370][   T30]  ? watchdog+0x1ea/0x1040
[  552.364819][   T30]  ? __pfx_watchdog+0x10/0x10
[  552.369523][   T30]  kthread+0x2f0/0x390
[  552.373611][   T30]  ? __pfx_watchdog+0x10/0x10
[  552.378315][   T30]  ? __pfx_kthread+0x10/0x10
[  552.382925][   T30]  ret_from_fork+0x4b/0x80
[  552.387373][   T30]  ? __pfx_kthread+0x10/0x10
[  552.391978][   T30]  ret_from_fork_asm+0x1a/0x30
[  552.396773][   T30]  </TASK>
[  552.399898][    C1] vkms_vblank_simulate: vblank timer overrun
[  552.406988][   T30] Sending NMI from CPU 1 to CPUs 0:
[  552.412871][    C0] NMI backtrace for cpu 0
[  552.412887][    C0] CPU: 0 UID: 0 PID: 2485 Comm: kworker/u8:8 Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  552.412910][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  552.412923][    C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  552.412957][    C0] RIP: 0010:validate_chain+0xe1/0x5920
[  552.412981][    C0] Code: 89 8c 24 c0 00 00 00 42 c6 44 21 33 f3 48 89 b4 24 b0 00 00 00 4c 8d 6e 20 4c 89 e8 48 c1 e8 03 48 89 44 24 60 42 0f b6 04 20 <84> c0 0f 85 ef 4c 00 00 41 8b 5d 00 89 d8 25 00 80 04 00 3d 00 00
[  552.412998][    C0] RSP: 0018:ffffc9000927f0c0 EFLAGS: 00000806
[  552.413014][    C0] RAX: 0000000000000000 RBX: ffffffff93c41700 RCX: 1ffff9200124fe38
[  552.413028][    C0] RDX: 0000000000000000 RSI: ffff88802d678b80 RDI: ffff88802d678000
[  552.413042][    C0] RBP: ffffc9000927f3c0 R08: ffffffff942c9807 R09: 1ffffffff2859300
[  552.413056][    C0] R10: dffffc0000000000 R11: fffffbfff2859301 R12: dffffc0000000000
[  552.413071][    C0] R13: ffff88802d678ba0 R14: 8334d02fd082e89c R15: ffff88802d678ba0
[  552.413086][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  552.413102][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  552.413115][    C0] CR2: 00000000581d899c CR3: 000000007ff50000 CR4: 00000000003526f0
[  552.413131][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  552.413143][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  552.413155][    C0] Call Trace:
[  552.413162][    C0]  <NMI>
[  552.413170][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  552.413195][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  552.413224][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  552.413253][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  552.413279][    C0]  ? nmi_handle+0x14f/0x5a0
[  552.413299][    C0]  ? nmi_handle+0x2a/0x5a0
[  552.413320][    C0]  ? validate_chain+0xe1/0x5920
[  552.413342][    C0]  ? default_do_nmi+0x63/0x160
[  552.413370][    C0]  ? exc_nmi+0x123/0x1f0
[  552.413396][    C0]  ? end_repeat_nmi+0xf/0x53
[  552.413424][    C0]  ? validate_chain+0xe1/0x5920
[  552.413448][    C0]  ? validate_chain+0xe1/0x5920
[  552.413472][    C0]  ? validate_chain+0xe1/0x5920
[  552.413495][    C0]  </NMI>
[  552.413501][    C0]  <TASK>
[  552.413508][    C0]  ? __pfx_validate_chain+0x10/0x10
[  552.413529][    C0]  ? __pfx_validate_chain+0x10/0x10
[  552.413549][    C0]  ? deref_stack_reg+0x17c/0x210
[  552.413568][    C0]  ? deref_stack_reg+0x17c/0x210
[  552.413587][    C0]  ? stack_trace_save+0x118/0x1d0
[  552.413616][    C0]  ? unwind_next_frame+0x18e6/0x22d0
[  552.413633][    C0]  ? deref_stack_reg+0x17c/0x210
[  552.413650][    C0]  ? __pfx_validate_chain+0x10/0x10
[  552.413670][    C0]  ? preempt_count_add+0x93/0x190
[  552.413695][    C0]  ? unwind_next_frame+0x193b/0x22d0
[  552.413715][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  552.413743][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  552.413765][    C0]  ? arch_stack_walk+0x11c/0x150
[  552.413786][    C0]  ? deref_stack_reg+0x17c/0x210
[  552.413804][    C0]  ? stack_trace_save+0x118/0x1d0
[  552.413826][    C0]  ? unwind_next_frame+0x18e6/0x22d0
[  552.413843][    C0]  ? deref_stack_reg+0x17c/0x210
[  552.413860][    C0]  ? mark_lock+0x9a/0x360
[  552.413880][    C0]  __lock_acquire+0x1384/0x2050
[  552.413913][    C0]  lock_acquire+0x1ed/0x550
[  552.413940][    C0]  ? debug_objects_fill_pool+0x80/0x9f0
[  552.413968][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  552.413996][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  552.414022][    C0]  ? stack_trace_save+0x118/0x1d0
[  552.414044][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  552.414067][    C0]  ? stack_depot_save_flags+0x29/0x830
[  552.414098][    C0]  ? debug_objects_fill_pool+0x80/0x9f0
[  552.414124][    C0]  debug_objects_fill_pool+0xa0/0x9f0
[  552.414150][    C0]  ? debug_objects_fill_pool+0x80/0x9f0
[  552.414175][    C0]  ? batadv_iv_ogm_queue_add+0x6f6/0xc10
[  552.414193][    C0]  ? batadv_iv_ogm_schedule+0xc53/0x10a0
[  552.414210][    C0]  ? batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810
[  552.414230][    C0]  ? process_scheduled_works+0xa63/0x1850
[  552.414255][    C0]  ? worker_thread+0x870/0xd30
[  552.414279][    C0]  ? kthread+0x2f0/0x390
[  552.414296][    C0]  ? ret_from_fork+0x4b/0x80
[  552.414322][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  552.414351][    C0]  ? __pfx_debug_objects_fill_pool+0x10/0x10
[  552.414388][    C0]  __debug_object_init+0xa4/0x400
[  552.414416][    C0]  ? __pfx___debug_object_init+0x10/0x10
[  552.414442][    C0]  ? __kasan_kmalloc+0x98/0xb0
[  552.414464][    C0]  ? __asan_memset+0x23/0x50
[  552.414491][    C0]  ? batadv_iv_ogm_queue_add+0x7cc/0xc10
[  552.414512][    C0]  batadv_iv_ogm_queue_add+0x89b/0xc10
[  552.414531][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  552.414560][    C0]  batadv_iv_ogm_schedule+0xc53/0x10a0
[  552.414581][    C0]  ? batadv_iv_ogm_schedule+0x8bb/0x10a0
[  552.414602][    C0]  ? __pfx_batadv_iv_ogm_schedule+0x10/0x10
[  552.414626][    C0]  ? batadv_send_skb_packet+0x41b/0x670
[  552.414651][    C0]  batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810
[  552.414676][    C0]  ? process_scheduled_works+0x976/0x1850
[  552.414701][    C0]  process_scheduled_works+0xa63/0x1850
[  552.414736][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  552.414764][    C0]  ? assign_work+0x364/0x3d0
[  552.414789][    C0]  worker_thread+0x870/0xd30
[  552.414817][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  552.414847][    C0]  ? __kthread_parkme+0x169/0x1d0
[  552.414875][    C0]  ? __pfx_worker_thread+0x10/0x10
[  552.414901][    C0]  kthread+0x2f0/0x390
[  552.414918][    C0]  ? __pfx_worker_thread+0x10/0x10
[  552.414943][    C0]  ? __pfx_kthread+0x10/0x10
[  552.414961][    C0]  ret_from_fork+0x4b/0x80
[  552.414986][    C0]  ? __pfx_kthread+0x10/0x10
[  552.415004][    C0]  ret_from_fork_asm+0x1a/0x30
[  552.415034][    C0]  </TASK>
[  552.422107][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  552.422127][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00420-g715ca9dd687f #0
[  552.422156][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  552.422173][   T30] Call Trace:
[  552.422184][   T30]  <TASK>
[  552.422196][   T30]  dump_stack_lvl+0x241/0x360
[  552.422240][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.422269][   T30]  ? __pfx__printk+0x10/0x10
[  552.422292][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  552.422338][   T30]  ? vscnprintf+0x5d/0x90
[  552.422380][   T30]  panic+0x349/0x880
[  552.422405][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  552.422440][   T30]  ? __pfx_panic+0x10/0x10
[  552.422461][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  552.422490][   T30]  ? __irq_work_queue_local+0x137/0x410
[  552.422526][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  552.422554][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  552.422586][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  552.422620][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  552.422657][   T30]  watchdog+0x1033/0x1040
[  552.422693][   T30]  ? watchdog+0x1ea/0x1040
[  552.422733][   T30]  ? __pfx_watchdog+0x10/0x10
[  552.422767][   T30]  kthread+0x2f0/0x390
[  552.422792][   T30]  ? __pfx_watchdog+0x10/0x10
[  552.422824][   T30]  ? __pfx_kthread+0x10/0x10
[  552.422851][   T30]  ret_from_fork+0x4b/0x80
[  552.422886][   T30]  ? __pfx_kthread+0x10/0x10
[  552.422913][   T30]  ret_from_fork_asm+0x1a/0x30
[  552.422960][   T30]  </TASK>
[  553.125708][   T30] Kernel Offset: disabled
[  553.130051][   T30] Rebooting in 86400 seconds..