last executing test programs:

8.234673607s ago: executing program 2 (id=5684):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0', [{0x20, '}.e-{*D'}, {0x20, '\xc2n\xcf\x03SI'}, {0x20, '@'}, {0x20, '@'}], 0xa, "70869e19fcc73d48605f3855a2490e79b9c20c243e82183c57fac5779a7c535bf192b5d26581a400254a8169626614cc47f4d9a286621fd76fbf6e5e09ce188f70d35d46193e865969af21b4c2d978691d15"}, 0x70)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r2, 0x10d, 0x9b, 0x0, &(0x7f00000000c0))

8.087358372s ago: executing program 2 (id=5686):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6001070000301100fc010000000000000000000000000000ff02000000000000000000000000000100000e220030907801000000d9005f7550d4846f67f1f450b6d6df0e300f56ecfdfd6f8cf37955108f31c71e082b4ff3c67e767eecde18b0ccdb1006f322d8b2417dd934c12e1b903432ad4932a4ef09328ab0381a5c3da15e21d945b6e3f567b37d7f356509099811450e476e77ac30aebc97fcfc0e6b1f85c8734cd4988ed0ea5627ef6082a34d5f9aa7b93f2cb40976313db963f5a306d533f91c7c48ecefabeeb69b2acd3af2f5c61f9d4e30c739885a9d5a5b90093c4aa65ecb340e"], 0x0)
r7 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061116b12bba6e6fa2d5d91dfacc15c600000000006000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1400000035000b63d25a80643d66b7d806f2e2ff", 0x14}], 0x1}, 0x0)
pipe(&(0x7f0000000180))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0220000000000000140003"], 0x3c}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}})
close(r8)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000030000000000000000000000ffff002117"])

7.673059859s ago: executing program 2 (id=5691):
mknod(0x0, 0x8000, 0xfffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x82)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000012)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00')
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000005c0)="8ab6a1a3d9397116c2485dd1a366cd6571a551cf06329df827e60f11f1f7cef32034a69b60add1376d93fe6890e681463944a96a524609fe5d6ae5517e09f20bc6c7928b25f724f6cbaa9e9971453b74752998416bae4dab27b838242c06dcd03a7baa5a48bc9726bcbfaeb743a0afe5a9504a54b1f5492d3ee153ff87ea44cce35929c5ac965debe7cbdfd46b0057392f1f98f8ce6bdfdf3ab6dc024d7489ad23999617c87b615ae0", 0xa9)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x51, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000004c0)={0xc5})
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4018aee3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

6.849603481s ago: executing program 1 (id=5698):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x14}}, 0x20000080)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
preadv(r3, &(0x7f0000000240), 0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaad2ffffffffff88a80e00810007000800450000440000000000019078ac1e0101ac1414aa05009078000000004a00000000000800008200000002dc0bb0cfb25a9e9d8aca2b1781991a000000ac1414bb9404000044109b7000000200000007ff0000000c"], 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0xa6)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000200)=0x1, 0x4)
recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000400)}, 0x2}], 0x1, 0x40002101, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r6, &(0x7f0000000080), 0x1c)
r7 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38)
shutdown(r6, 0x1)

6.491695543s ago: executing program 2 (id=5699):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000580)={0x8f, 0x0, 0x8})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00')
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000280), &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_setup(0x5e6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r5, r4, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r6 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000380)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r6, 0x6ed3, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x6000)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r9, &(0x7f0000000040))

5.816052723s ago: executing program 1 (id=5704):
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/234)
ioctl$PPPIOCGFLAGS1(r0, 0x40047435, 0x0)

5.718388672s ago: executing program 1 (id=5706):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000f00)}, {&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff71", 0xd7}, {&(0x7f00000004c0)="6ce5070bae6200fd4100c4a005a2ceed33437b10ea11eb65531099945a2e98bc09390339e9f77257c71365545628f07cac779704192d812cd1e9bfe3d67dfbd6f39557fa0e3ebc384ecb9f26629bf503a6c456e756908163f3292b865d805e264c33d59592d1914094cdf1f3b53503abcdc7feb7091085f00ff149ed84f2a680516def0572cb7c1a", 0x88}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf", 0x2c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542", 0x36}], 0x2}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

5.375790517s ago: executing program 4 (id=5709):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x5, 0x4)
r1 = inotify_init1(0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x7, 0x2)
vmsplice(r2, &(0x7f0000001780)=[{&(0x7f0000001040)="19148547a7ce4fe19b91159cd50d1852e355e7f36d0fa479814e1f546db6434bb29cd569be8152ef477e9b0e15e67b73b67c40b1aa879ddd523d5804903f67398cfa6b0c6bd1f2970c44f3632f2104f334b7c95f04b1", 0x56}, {&(0x7f00000010c0)="d24182fa0a99c6f36c2c243b7aae2ff622f8df9ff71aa42cd92986ecb7d0f0520f2561e1b8fa692f37a2f2c173dfbf8a201176233f1fc046d8bcb88525fc72ce637d48cb00a4a83d983f0381314b2c27dfc073a0c227190d3e0cdb103443c72617957e7ce07e2b30099f", 0x6a}, {&(0x7f0000001240)="fa88b20557411a1f956c44a33be193edc9f2703f1194530aaa1adfb5f32eaace53fa5d15c1d1ce6190863792", 0x2c}, {&(0x7f0000001340)="25088050c9f724ea29031a7ed3fb71f21a6119e2e749daab77d6133069eebc906518007f460bc9ff5d7d0fa20b08e60d2cc6d54c002234de4bd914028c11311f1c4a0a53ebb145922a86f9f54ecb2cf90e5ade589e6c14db9b7cd726017223458e2398958c4828ee49bdadcdfd58fbc968be52178aa593e3b52e76ac6e7497e5ce08d7211f9f045116a6a3f41d8d5306941119a792923006243c5590be76423639a39faa0437182215066553e448ef27a79a2ce67c31d3166cae8ca0f80afd8d", 0xc0}, {&(0x7f0000001540)="b6d8876499d8896d2e87e988884f8431a6be5f66454537cca653dee0d8e0a79286c33135d51246dab52d4981d87c302587ba88548f1ae8e83eb404b8a3b1b4949d6d023801c779e0cb63d32b5c2c07c6571abdd321e9710a365a98661762db395fdfa24ba4b6bcc095bbd66dd51c29baebc8bf54272b0355cefca8c5b392f0a9db80c93516bf8daa64853f22099c5169430aea6bc4d58868f0b244ca83d85ec933959c9410d0f196ecab491af2956fbf2aaa281d35079ca103b5f1c50b6ee240a036df134a2701e11281d8321937be4f56bc2db5ebcc895d2035ce38", 0xdc}, {&(0x7f0000001280)="6356ff97236f6d5ec84ffccbe21328d0afe49d68663926083a1c1d444ca19a1005ff28fe2cdeb033a2f8cd1d46783c5fb4feaeb8265cb47cb546580ed53f5840d741cc20411f40ae660348459f54b8a032b3983a5575f5d28db372e5cfa6d4efff890402535534c226817eb786eaeedddb", 0x71}, {&(0x7f0000001680)="a3fb28e1871fd83fe35fa0f42ddded993ab3a015a213d575829212eb8e3eb721bd6a3a230163d19c695a9f0f99fafd5d135ed246e30ac12a5393068d4ebf9c519896a646c43c18a8ff47121da1333a2fd495c8ef063ceb2436e5e5f141b07d6f480be7e321ffda67da7f0b95ee053674287bb3163eac0b9cfef2d1442f40c36bbd5f243b036d24b2f74e6341123a0802bfdf71c57fabeb61c8473482c901c31472beec4584cac220117036c1663c2cc657b0f6d4d63774180db560ed2790a5bbe2e20d26df106c640214801380d39eb3093d025870d2d4ab14695071e76ad4fc", 0xe0}, {&(0x7f0000001400)="953f257a8a7bd8f7574a37eab05c6a7b5a2672fb620d764101d67bbbd819c003c0631f8b7c44b5a8ca94b4fcc27a7b8496100f0860c732e4d29aec3d53df7feb6cbbf5f1b54e633aa472526fecf6cfb114d92eac5275e68bc49653", 0x5b}], 0x8, 0x7)
r3 = syz_io_uring_setup(0xed0, &(0x7f0000000080)={0x0, 0x0, 0x10300}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
readv(r1, &(0x7f0000001300)=[{&(0x7f0000000180)=""/32, 0x20}], 0x1)
inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x40000582)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "f9709fa65f08da93", "4b57fcf854731ac0a202a24e53114bb9", "98f53df3", "89ffb963d0776b10"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
writev(r0, &(0x7f0000004ac0)=[{&(0x7f00000001c0)="ac", 0x1}, {&(0x7f0000001500)="e7", 0x1}, {&(0x7f0000000480)="253e07456a0838bb21934cfa7787b606ec13afda9289ebce6354ac6be88b11af2740f2cb15245a30e4025eb9b8acdacc02363690bdbea6b0e15e3594dcf6752685cc4ccc8452de1dac3bcab338d8943ddda83add1d5b82f26e39523cc874a39a3655617c763f2bece56bcb2ce8ec65f85a45ffad0fa9753619b3111f187244fc7552dc84cf31da26ba508cbbebced122d2fc175c8c9034116cc0b0f7a263530ba8df349668ed8bcb5479350ea71eb7c71ce24d3eb54cceb9715405c16cf22cc40e37eb9de6712990fe0702bea9dab3090c43eeeebce7d5ce42acefca2f5a0dcee4e64e8b2a822d2d2cb431067e8006f812801ec85cd60e8b37774ca122763f9abdc81661ec7053bde6d2691a7f87cc75e84b6b646d0b6e1ab52734cb74dd2eecf5a7043f0083d3708c85666f140fcdc4bdbbe3a68cfe6e3e0f01cd8633f33daa8c8c09dc4db78b252e53f4373bf0d8c1f47068b4f480b6bdbfa8e0c45b8474d55a3a200f248d33f2fcd832d96df2ab0cd94ba40fce8760dcf57d6c72a401356531f6321287d972b16e823a82f55d63153ea673e0353b7da1217ded6c25fbc3853f1ba1b37eb09758c820daf023c7c9da5cd6a66df05fb476c0453cc31e6b582997ebbef3b63f581eedb22e86f1452fbd2efe132d8377e4b3aa9ac3de5c793ab9ffe650ec5672ded94aac2d459e4c86e47894e2137a8c1bc87e224559570a53024b0bd08f2d232d0dbd9572d0d125c6c2f0f24fdc4e9ee9f3bce44d935d1dc3485395dea8e48e9116ec0d3b2b34beb832f4b6c3096978faf6a5efce8b8678b9087e7d45ec5adfee1cda911cffe95d50bc17a1ebe2e870a39146b9735bae6e09fefffbb6d3bd2d3bd8500ca2584c128b60e80914b299105b9746a9431a657ea1d24ccc17ba3429b844de5436241f7ece379b6786f0d02e895410a41716796a84e8e18b73f833135929dceb312644ba39a12d7af8bf0e00a305911b5da264c7620030bd521dac1b4b9ae18b7125af8363b26e9698cd9d2b7571d1fed246f93541a5100b82e25e5e9e9f033755afad2e9c0cb51742dc7d8a844b9afaa4cfa8f1572fc3ad2b4a0005587041b431ec770fd170e4994a86dcfcdd9e61c257dec3fdead5fadb90354d782fe8fabea3f66e1026cf8b41849b8fba5cd4c3dcd86b85428d9c184241ed8c97a626aad7f64c0b8c71cb889c46a1c3696a269427323e7628f70d852d02d8523b2e8964afd4f2e37be3f1496a6023de2c47f00085d717357aff8008ed4915366c80e71cad19582a33435f8d3072a3b8a367c846abda6a185c295ac4a544d3a75c54b7a704db5207522c78594a3f6878e9d018d1bdb08daab88f93db4d891d4c42f2a0ddc3f5ca950fd33c4bd4cd21a40df741174efe1626e5e995a9a1a920a70fdde4f40b81c7a45c4a7f4b84ebb71edbffbf1cf0a37aaa70b3db2857cbc18d14e24d6c74eac79771ccb4056a1a1ba9b57c18b67d774f57cf39685ba38d00c5351aca518f494923f3bb18d30e0813ad322bda82be9dff70a8c926b5db2edb0d6e93a781f02176b70c260530fa55bc7aa85f2449f0304e565f8ebcd7592c73c5f07627bc06f703643cebe700d40a51773c2fea6eb1433110a6c33787281344b2704234fe3cb00cd6edadf337cbf6b38d306326d7ea389fd0e33cc1dcd31dcc82a6c0425962aac3c7681941fbaf872d444aee9a711b608ac010502b740f1dfd95b4c221257415fca03619789cf000222da8da394921de5a4936e22008628f024a5d52d5964e731d95f51c84fd3091794f3063ed880b22fb3229452c0abf7c1ecb7705dbaa4e16e734e411e1562116d9c1301a7468c9164f8ff971fd715787c636f54f5ea427a327d2bb82a8fff4712a2c3ba7ecc923d6427e6498cc2356f167724bd22e11d86d4a2d0cb57e3df8b8ab6692ba2da225c0ca680f3ceab25b4556c1d218a1d87adca75d27cf735621e00970a28fd7ea13e5bb014e12e6c2900a58c9a62529a911a8b14137754f780cc3a3ff0f440511d6a7364e6389c63679b9834a33560efdcd37442c41afc55e2375e135eccc54698ba120ebbe759e6efe88da6973d45249450e4305a4029a96d433fc2adda5c2a6fc8b4b779fb72165e605378fae8ff6e66279098e8c9670507a0547a5b225988170b88b7abe4fe129410439d6a3e80bf1645e294d5fa19f774a27f5089c90d7995bdbc19fc477ed2ee03e631cb4d0f8385e93ab5f6236bdd23f782cd42e3767aca33ec90cbb512b49a815183a0a1f9bf74beb7a9fc9e4e3500f0e0f42710aef1fb55318bbe1e8ddd608b945c049df26a18ded573c34c34154cd76ee0b3debce1f50c9347797902b17e322a53e8a6ce066335c09aebc67e6f4caa4b78bf581a7e74611185a0a5d2b2ba7e7d11292b7c5f6324c5f437569bac18c35332ba9589ffe2e1b8da3bbfe861f8a973ad2ab14895b618f065dd6a575737950ff16985d42048d761ee9c9db8ac2aa19e56c6c12a3fe570962382593eeec5c999368f2d467e11f024aedca4e73436e4788ee66f57efb2c337ff393ff4b91b06f4884c43e592651ef1e3a9d8b16af9448bda9cabdb54bae587bf8b83c14dd2f036c0bf6ed191a16b9dce241823e1f6141c3892604cdb520c0d3be29404f5bdb2265499ef7a8a71a461ea3e5f6efa3cd2ed986484db53d369c88fccdc23efeede27a75dabd48efb7dc7c51ae313599dc93ade45b9c90f6c2779cf0f93f9020890e4ee0e57636043c76db6d46898b3ce53116035d23937f55913f2510899b23e4524d63ccbf59eab6fdb56e7f5f1b1606e2f706444a311adad679b5732f54a7ff9307dd6183fe9c411d905470bc67067ed11aa63bc10654ac3eb8555e195497864e18f5b0722379a68e58c5c2ebca67a6e0e3c7be00d23419632e8c9c8fac96b94f7d75babb5e0a9d4d1f3d69316e4a198ad8bc5816889f3595f5c33d3721eae290729b4e8d63b2d7f9cf1bafdaa2fae366921a9bedd47c9420476978b1d3b825a8e775afbf853d6dab3b920e0a6a905f14f80931a9e90d0544937d45856d39cac23775171fe61019f83c4c73baf11e3d50ff2f45d3f5a683633bde876b0375120968db1bc24833358c84584225893936a1485800816e81efb716a5522ada9b4bf574880d4c4348d26d4d200ded60a4dc29129643f260e7d80e3ae932c0b4e88df4ee34f2126a81e30f4d10469f4638c9a4d2914a42ea32f94acc4dbc57b132ab365c1027e3a94d65c599c2b38944fb7f5860aaac766956c605d1cd2e7cac579dda0b8d205efe0050a607e98b22ae362ef42228894416c099a3abf6e3dfa5e89b18a170199b1b1516537ebe9ec8facc04c8fddfadf18cbbbc3932f4af9dc6ff9476ce84ef02cff37ede0d11b8ebf54100ad964d6a2dbab271ec9fce925a9b1b00a899bc478ad03afc247f30085c340282886c0233cc6a956894f0f58987982021a95cf61c5fed0c6060467d61c58b64b7d5938ee0e97768f4084bad999180645b9beae750a92888c70d5bfc9b41cea7c9247cbcd5c28979e55b691be24cec4d87579fed548ce118c35460e91b685a917c3ad949d182092cf980004750d6c0cf461885b808804626a9d5b712d647939764c139ba33bb63fedfa4eaa94c4ead284eccbc2c6a06601f537b74502d4a93b23a94e050d85179d9d7ca5b7b18dfc9adca36d184ac88e057de29f81bb34be523bab6bfdd3120efc754cea9ddd7f35f801a1cbdad51d06b324914fff4e07a056ddf783e8d85c237e857ac6ba9a06482ae917d225108c93757ff902a080001a5b5a6d864f1d3cf2a06cff1e7bc682a471792f423bb8f967f428f38b09fcf2c827b87b4c4f7e3f0db812ca7c9be2e347eb00d9e4a424d6627e4142f9b59b80322e07954a41c9139b62ecd5b8ba181087b986a009a93dcbcd3a27121a7ddd6d36b299e8686e5c04a33657cff33e7551fdd6c9be516f50c19b53eb87dd9426cd90ff6718e708539760136dec07a0a3db0e2df8cd94a46067703366b2dc5f897acf28a526163ff1ecbed382e8e65a611e23320a728c9d26342d25de924daa11b5f1893529cc81bc696bbdaa1aa76b472647d905917c6e7c0db6e548ded915c671cefded97ac76a23ba2732371ae22e718cd1a347eb055eec84c3878f5e96f6cb4f9bb0", 0xb81}, {&(0x7f0000004c00)="f2", 0x1}, {&(0x7f0000000040)="0e", 0x1}, {&(0x7f0000001480)="fb", 0x1}, {&(0x7f0000000140)='5', 0x1}, {&(0x7f0000000380)="9c", 0x1}, {&(0x7f0000001640)='e', 0x1}, {&(0x7f0000000240)="fb", 0x1}, {&(0x7f0000001800)="f5", 0x1}, {&(0x7f0000001900)="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", 0x701}, {&(0x7f0000002900)='B', 0x1}, {&(0x7f0000000080)='\r', 0x1}, {&(0x7f0000002980)="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", 0x681}], 0xf)

5.343940349s ago: executing program 2 (id=5710):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800)
accept4$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x9}, 0x8)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080028bd3abeee5acbbe978cf1fb36e545000028000000000002907800000000e00000021100907800"/68], 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_NAT={0x4}]}, 0x18}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000)
migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000218000/0x2000)=nil, &(0x7f000055e000/0x3000)=nil, 0x2000})

5.100782455s ago: executing program 4 (id=5712):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6001070000301100fc010000000000000000000000000000ff02000000000000000000000000000100000e220030907801000000d9005f7550d4846f67f1f450b6d6df0e300f56ecfdfd6f8cf37955108f31c71e082b4ff3c67e767eecde18b0ccdb1006f322d8b2417dd934c12e1b903432ad4932a4ef09328ab0381a5c3da15e21d945b6e3f567b37d7f356509099811450e476e77ac30aebc97fcfc0e6b1f85c8734cd4988ed0ea5627ef6082a34d5f9aa7b93f2cb40976313db963f5a306d533f91c7c48ecefabeeb69b2acd3af2f5c61f9d4e30c739885a9d5a5b90093c4aa65ecb340e"], 0x0)
r7 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061116b12bba6e6fa2d5d91dfacc15c600000000006000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1400000035000b63d25a80643d66b7d806f2e2ff", 0x14}], 0x1}, 0x0)
pipe(&(0x7f0000000180))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0220000000000000140003"], 0x3c}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}})
close(r8)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000030000000000000000000000ffff002117"])

5.016037323s ago: executing program 2 (id=5713):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000f00)}, {&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e02", 0xf5}, {&(0x7f00000004c0)="6ce5070bae6200fd4100c4a005a2ceed33437b10ea11eb65531099945a2e98bc09390339e9f77257c71365545628f07cac779704192d812cd1e9bfe3d67dfbd6f39557fa0e3ebc384ecb9f26629bf503a6c456e756908163f3292b865d805e264c33d59592d1914094cdf1f3b53503abcdc7feb7091085f00ff149ed84f2a680516def0572cb7c1a22264c03ae9b46d40e3a", 0x92}, {&(0x7f00000003c0)="a45830038827e45403f9a052c8d6f261e16a6158d783100b15782c2b3cd4272da8d2c12f947c6f96effd35a5c94f2d62e0b99e007c65fef9836fbab10707c8194fea6805bd84adf03645783f186c9130d0e52c556f336a4474cceb7703eb0fdbe4b27e70e10db4eed9abb3cdf8aa7dbf7e47de3bad4775954ff7fc68598f028ee5196144b3a3f3aeed0d121fbcbe33626f381c165ae9a6dd7d90ca5a2fbc2e57e32eac8c137a4bd09af3356a889466e61a", 0xb1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf", 0x2c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd5", 0x35}], 0x2}}], 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

4.554995408s ago: executing program 1 (id=5715):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
unshare(0x62040200)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
setreuid(0x0, 0x0)
writev(r4, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2)
accept4$unix(r2, 0x0, 0x0, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000780)='personality\x00')
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="01000080008a484077b889774e000000850000000e0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0xff)
r8 = dup3(r0, r1, 0x0)
setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)="3a8b27745da5943d3741ebe9f24243b19a41a6e0dd81fedd6b8486138a5c62bdc85e1e12369f4c22e440add7da8371bc87d9005ec81d1c0feca1af59813164ec2a2570aa5d749ed1dd07a91a95e17946fbfc1db6ef34964c34d22c58e8267ebb52f10f315b4a8a655af98344d91fb743c771fa3ffe34e7ad89999e9835576df1581f919dde1893d4d93351e0184ad45465f31491016bc31617e26df69ab05beec540c3362410c1925f8cc63d0468", 0xae, 0x3)
setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000180)={0x0, 0x4, [0x515, 0x1, 0x5, 0x2, 0xffffffff7fffffff, 0x8]})

4.550036815s ago: executing program 4 (id=5716):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000002240)={{0x14}, [@NFT_MSG_NEWSETELEM={0xc5c, 0xc, 0xa, 0x500, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x474, 0x3, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, '-&(\']\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xd14}, @NFTA_LOG_PREFIX={0x11, 0x2, 0x1, 0x0, 'net/udplite6\x00'}]}}}, {0x6c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x44, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf, 0x1, "a741c55c7fc0bdd2c2883d"}]}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xfd, 0x6, 0x1, 0x0, "fcbb68a128cf04519a1cfe7566564c94f408648cca9e4b69959a89f66b96f3bf01bc1d3cbfce98fee59b0148e5cdaf19b9392c1de2b112b484b4d4c0ca83bff43d087fc0557b6a907ee74a8bcdcbbc51d23bd0f1e35d44765efb5511076a9cf65f0389874274a3dfc235d5dfd8bc701a35e0b5233490b70b41439c90b6e098aecb2a956ffc64367ae84d4759d71150ceaa01adbf95ead03bad065568749c98792742ff48b15258387392bd9fff771d987f575541bd373c0b87fc7f6f05fe5d35e6d9308d279f9a67c0115da27ff3587c796e5b33e5a98f67b82d213c52b498f870afba271eb896770dfdd80f0ea916db73c17c2479c83cf1b1"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5d}]}, {0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0xf4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf0, 0x1, "e4a7881586d5f82fcbcc05b254695e6c6b0b9663043718acfc0fa35a86015901d12b5dbe3d6c3177fdaba69acd7bdcf130f1fa38374a9801b7f9587b1a14206a0f36fa411c3bf0622531a6873d1a64fdf7404cb367f728cce934bd8f0052c067332c9d7027d4074a30d6e8337e2fb154441b50ee219e2e32797f8d3a85f5f368d0c879f1bd5c7595438bf6c3d2de4a6349adb67ee0994f5de50ebb4f7d53cb49eb482ca1fe9afc2ccd26968a701349d716481df829d82001bce1a6007009b9d182f7af152879217d534044526041f3336bb12a2f22b3e2178fbfa7accaba2381c9dbe85689408baf0f6ce308"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_USERDATA={0x2e, 0x6, 0x1, 0x0, "1fe757bb66fe79b895a756c5939043ce9b5866dddea97e1ac5095f72e06548aca97b4b737d61e096a584"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c0, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x27c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x58, 0x1, "90d89c50a644799ced4378f1a19401258b2556ee875ce5cfa8d26d80983e57a87861aad0095bfe1dba4c314b32e1b8bbd90ba78612183ae9e8df590070f2b9d99fdef3ad0b2e4aa26872ab5aeade9e7c266ae0e1"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VALUE={0x58, 0x1, "4cfd3f1337b83fa5709f88e65c0232f3f0e94f0a64b36c85645370638949682a22ebbe8bcbf347d99be38b7d92dd4448ea70926167ef2b3c0e7154b5ef8e2ae0c159809fad90c632380e27b802f9367c88877fdf"}, @NFTA_DATA_VALUE={0xf0, 0x1, "6b06f8b49ed97bb1daf185d4131457545c73dbc1c5e2b1d1d8f3ba2e647be1d7b7e07b0e00cce71fce4996e0ec1fd8e9c8c6daa2c8b7865ab74673027491199285de518d92cdf6bfde35b41bfb78d1c64fafd9b223fcbc10d9aff1dfc28b359d00afe54fae15a717f887604c2b97b37dbdbb1dfe2bc91ee974570d7b97746eafe60ad8b23baa6b92d2e51e66dfaa24f25db7659c3cc69555027307616e9298666bb9d60440bfccd7d84242a914401d556d66aa1726b4c401d24f67ba5e70e5a7722122e1694698367f621f1786cb53d5595dc08db01339b8855c5d76a57a72ab636f17c05a2cf801bb916c2d"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "3487543095e98358249c0fba47f77d09be7960e9322d2871e1353bd54d1bb1dc6ac39d1984a659e001b295f3bb4e9b7ff7bb69104deb756a62d86ce4b7e2a6420f02d901ee4aae39dba3e41ed69b9218441292c5799296cfaf21b9176ca8668b24226f41a322da2115a1c50f5d5f81fc971eaea1985e0c43"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffb52}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "b509d5b2c13a8415b8a604bf7a83c0beae13445aeed927f5fa0ed08fdc76b514cf3b2c87829b495c122d6c5b0ee86d3f6185"}, @NFTA_DATA_VALUE={0xdf, 0x1, "b6b5328f41be9a8875839e1926a71cceef09ab70e69bc83e8059465387ea227ad9bb9c23a291f67c2eca92780ace798226d21e5bd742dbffd5f535131d46d9a3963944ec8e473cfdae2b6c44cf1f948cc97c9e7d5cfa97a448bda78d079cf10aaf0398edb31f8e10722d43ccf4ec74cce7c152c692e428c903bbed4094e85758f957f2cfb7b82b9a96a4bfc723cb5943ea20619c4d20d2d92f0dabb531fc5febf1b40b3d9b631d4d56be7439a35e9ecdce838617cc2c90b3a67de69835b9b2b17e71b8e40437f396212919f46fbf2c6a43b7a76f1e197394b81166"}]}, @NFTA_SET_ELEM_DATA={0x4}]}, {0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_DATA={0x268, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "acbaf4936b7b5981dfccffcb9cedc6a50cfab337816e3a29c04b956643c802ab"}, @NFTA_DATA_VALUE={0xd8, 0x1, "d112dcc1a765b18262168f24f7f40acf9df3924a7781c2384a14a787929e98c58e212afab28e0546dc2e2c682857957f015b4431a2ff1549587c25bb6b2168e7bd38886e8dec4390ba6906f2658d5f460bbe94008b8a2b6b4aa8cc72b0cd29ad0897d2b4cb1c59e4b972adce86076e64a96daae7463d10001fe7a5ee5851b40c64a62616a23507e984f35d07245676c06701f0259888c8e847eff38dadda9e8356c0e81071542ffaa81ff736d7ccc02881e8d9488fed9145e2b453f2374dbf0447851f750ea2a732b45a0f84d89e3769595964a9"}, @NFTA_DATA_VALUE={0x38, 0x1, "b2a451f074a37bb670be6f65555b7d864976beb081ac0f41d937c556be6ba47ed0a79157f6489105830336b6c8df15227e7b751a"}, @NFTA_DATA_VALUE={0xcc, 0x1, "b35c70ee1ec533dd7ab5684472fc926018fa08d90476a45b2d108430fb47d3dc792447e94a1322c28952708aeec087ae7459a7856771f0ba747c87b33ff9e5b8e7b4aa08aa61e6c86ca60dd15ff51839c21e5e7360fd0ceb2c9e127dcff7facbb676082cb081d30a861d14f014f1b6c21a218f524aa89cbd808c4eb310bc7a6c567475ed2fb8aad7220f735a2d73926d8074f6fafea4cf858ad3609a0dae79d7fcfbffba3a37447978bcc3cf3c8d78622500caba50479621082a8bbe0e8f384ad18740ffc77dfd0d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x114, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x62, 0xc, "fd80f6203af7f90fec2770846fb24054d0827c026c15a6744930e063b69b6524ebd519e8f00d15a02b61beb8a98ec50cf175e180070644a3637eb930368f34f181d99ee3f4981d62e2c55f3dae54a5a5849b43d3d23da52a592c2f9bb82f"}, @NFTA_CHAIN_USERDATA={0x79, 0xc, "6607e1bf8cf355beb486fda907279ca13ef6892ce681ea131b910784478760304d2f54333cbc87c012d41790c89b08c94be219026fb4d4105383a5303f37d3993b846613a445961315b2d25ece7106ed5c0366aa0f95999dd2aab132981080e39a2d7de7b0174bff0bc6cfd0446f5a440f88d7ab0d"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0xdc4}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0)
socket$igmp(0x2, 0x3, 0x2)
r7 = fanotify_init(0x0, 0x0)
fanotify_mark(r7, 0x1, 0x40001019, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300))

4.098249127s ago: executing program 0 (id=5718):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0', [{0x20, '}.e-{*D'}, {0x20, '\xc2n\xcf\x03SI'}, {0x20, '@'}, {0x20, '@'}], 0xa, "70869e19fcc73d48605f3855a2490e79b9c20c243e82183c57fac5779a7c535bf192b5d26581a400254a8169626614cc47f4d9a286621fd76fbf6e5e09ce188f70d35d46193e865969af21b4c2d978691d15005d0100e2eb8b8b1ba75d14300aea53c8bfd41015c0aad90700000000000000463b6ecfc28b0e1ac4"}, 0x99)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r2, 0x10d, 0x9b, 0x0, &(0x7f00000000c0))

3.891919982s ago: executing program 1 (id=5720):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000001880), 0x0, 0xfffffffd, 0x5)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), r2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.853667847s ago: executing program 0 (id=5721):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x20)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8f15fff2559eb545e", 0x48}], 0x1}}], 0x1, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711096000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r6 = socket$inet6(0xa, 0x5, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x1}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x1}})

2.809588704s ago: executing program 0 (id=5723):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x15})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001200000008000300", @ANYRES32, @ANYBLOB="0c02101a0001000004000000005800000000000000009128"], 0x34}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a5ff0000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRESHEX, @ANYBLOB="4b00330802110000005050505050500000000000000000000000000000030100050300000025030000073c040000000072060303030303037e0600"/76], 0x68}}, 0x10000004)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x100000530)
recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xf07, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0xf800}], 0x1, 0x0, 0xf, 0x7000000}}], 0x1, 0x0, 0x0)

2.808264102s ago: executing program 1 (id=5724):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x5c1041, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000000)=""/119, &(0x7f0000000080)=0x77)
r3 = socket(0x840000000002, 0x3, 0x100)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8)
r5 = gettid()
tkill(r5, 0x12)
io_setup(0x401, &(0x7f00000001c0)=<r6=>0x0)
io_pgetevents(r6, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf251d00000008000300", @ANYRES32=r4, @ANYBLOB="020000e15100685186c4510a36ec0e2025e41d4f13449e36e0ef80162910f5418402cda9c33f7dc521e2d7487839296cc21febdc3300ab5b03cf629f9d78647938d8b94330106c15dbfa637e9b8124a357bc761a66582ea11834", @ANYRES32=r7, @ANYBLOB="0c00990001000000470000000c009900040000007c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24040840)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x27, 0x0, 0x0)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0)
syz_usb_connect(0x5, 0x504, &(0x7f0000001080)={{0x12, 0x1, 0x110, 0xe6, 0x74, 0xa4, 0x10, 0xeb0, 0x9020, 0x1ae9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f2, 0x1, 0xb2, 0x5, 0x80, 0x1, [{{0x9, 0x4, 0x9, 0x1, 0x10, 0x66, 0x88, 0x7, 0x6, [], [{{0x9, 0x5, 0xd, 0x3, 0x8, 0x7f, 0x0, 0x0, [@generic={0x66, 0x30, "59ccb4342dfb2fde601c7c7351ad276d3d94eee803284a70fd696e9a6b6691cc9180ed85eb363670a0cc558afe7bac939cebbb1755fa744ec31845505054a9bd4525825eaef6f17f2f63f5d943a1cc01bafb559dd5b100cf9fa83384a7468087d0b48c1f"}, @generic={0x1f, 0x21, "cca511daadb4bf52defe6656ce809d345b39958b2251b08bd7f5c226b8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x0, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0xd, 0xa8, 0x6}}, {{0x9, 0x5, 0x0, 0x12, 0x3ff, 0x9, 0x77, 0x3, [@generic={0xf2, 0x11, "8a5ce6bfdf2eedd035f069152984f94bfb72c76d23a29e0250c4b70475a928c417ab181c6c22fe76374a9f5014b8d0ed1e4af8e9919804b81684e90a6167d578b7434bb84a9c696c7b8280a32038cc1887a2c45c6884e18883595cd286d5638f260dd7cb8bf1eb68a75b1d990832cee0c493af14ed69b1d92979bb7e9d9d52154950bf3b82d3de1076844b5a9f1191e973ac1aa5beac5cb3e9d38365a3cd6bf76d70d65348c6cb5f8ac2a905173f5fe7c6d594dae279cf552bedb17b7b75a9e94659818b8000b235f2ea7d7e6408bba3b94933eff6630d9c0a3394dee950a68139a13fd499cb4b5ce3412779590bf08b"}, @generic={0xfe, 0x3, "1c4c3222dbc954fb9a2717ba3ec56c4877608fe23e338a0a5e7fafba4e46422a7833839014cde02c3b4530f40dd46019306553139a408bffea2457ab090e2d64ec47d365f819c4a41862e17ffe01dd98fd5d7e394348f7f6c198c360cfa6466cafe53dc41a57cf40357f37d79734d78de0dd261006b4d1936e862a543fdd9e12d6e4f00b810b5a1951c2fd1eaf58cf43a5baf9a90389d48886ea1d14c5814e8ba312700771f50b063737c560f60e0106712ff806c452c35c769cd3cb2d8b68986145bdffa3edf05fb7667dc85e8abf4fdcfca23d9b8f05b77285e14a534ca5c40fa09f3dd1420722f987cad123519ca3272c84456ac14668a8f2bcff"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0xa1, 0x5, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x6, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x6, 0x9, 0xd3}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x64, 0x1f, 0x40}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x8, 0x40, 0xff}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x4, 0x20, 0xab}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0x5, 0x4}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x3, 0x1c, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xa1e46b4e50496a5d, 0x10, 0x3}, @generic={0xda, 0x5, "2e01b5098c897a8d63166763c14bab52be5961faa6d95cafaba4167a06c9ff37a80789df31a5799adb41d7393b33b4abdedd90de7dff1a76a154758925057f5aac5956144c36217ad0ac7c01c2dae252a8ea782101c2da6bee0023ed86391ab3b3cf91dcc3fb0a4e5bef274b1f359a6002e4d4fca043a35ed1587f4aa481746f52900b94273608f9687a1cf7e12108ce9fb43eede264d9aa974a4fb6849dfe80dca61ded395148313bf22c428e0a6001d67de0e81f4ee47680af264e8c58ed837bc57ae710baecbe1ff5ac0eed731fbcd8f42656ce7da71f"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x0, 0x80, 0x1}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x81, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x20, 0x8001}, @generic={0x83, 0x2, "64f4935ec208c00415b6d458961160af6c0679bcbfef301992078374772b06615d3deca84ebf7b7bfcadc8fd433244eaf637ec56e679a1b9e2961df42a3c9d788b49ead699ca57d167362119b21fe82cd6cc9534632ceb8c4078b589ca2093a65acc7fc7a8c818aa1f6e311d6a594a925e63da15965924c37a42a68bf814a44cf0"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x2, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8000}, @generic={0x5b, 0x9, "1e5156ca3b41fcdc8df7b4d236cb25e549a2ab42ee115f46c35bfb2e04e744b6ee8f7e5bbe9d7eb90b088c843dd7315c2822adb78fe1ee15ac14de7745769b893f79e700bc275b15ae8df00688ad508e9d106beb7fe4ca01e1"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0xff, 0xf5, 0x54}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x47, 0x1, 0xc0, 0x40, 0x2}, 0x1bf, &(0x7f0000000e40)=ANY=[@ANYRESHEX=r0], 0x7, [{0x102, &(0x7f00000006c0)=@string={0x102, 0x3, "19bd8e5d180f44bc9c09a8944523b795de0d88d0ca62e7b022135021e1eaafdd2d63a1c6d2d6eedfb2cfebc2fea93ba2c0c4ead938364b5ec0089433892f2fee8f9704919a5cbdbe4117909bec25cec59bb65fbd7f9f7c33fcde3f269f97c7342f6b0e6af20619aebf5ea6b66a9e003cec1b0f70138d99b2107c1973dc53ee54ebbbba12e53ce5b4ee4127d0cca46c0387d50d21bd9ed0352296ad0b5d317b27284ffbbcf25997794034000043585465e92b5c8093c71577ee88b536be080939b7ca6e8e3838138308cf67a64cdfab1cd796390ee0da0900ce085d952461fcc7440465889600"/256}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x410}}, {0x72, &(0x7f0000000480)=ANY=[]}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x415}}]})
setuid(0xee01)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00002800000061752b496c088bfa3ab146172ea135d9eb2804e1c77d9a2afb2ccf56645ad9a4d2d7a884e117b513cfce74428f8a85a3ac3277cebd5c88ed939008604f46186455a858402579c3049a3d51de1d1196c2753e1209a5fab024b7d2d176e11e0000000000000000000000000000d55ba0bdcb9d850517d9d9df457c27e392382ea730a750470a6dd1c4573d6efe0b953819da1836f0c3f96833d233a3b3dadec3a214b5cb44cf0e3f6f24a00ce25c", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r8, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\bV'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
pread64(r9, 0x0, 0x3, 0x0)

2.609272659s ago: executing program 3 (id=5725):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6001070000301100fc010000000000000000000000000000ff02000000000000000000000000000100000e220030907801000000d9005f7550d4846f67f1f450b6d6df0e300f56ecfdfd6f8cf37955108f31c71e082b4ff3c67e767eecde18b0ccdb1006f322d8b2417dd934c12e1b903432ad4932a4ef09328ab0381a5c3da15e21d945b6e3f567b37d7f356509099811450e476e77ac30aebc97fcfc0e6b1f85c8734cd4988ed0ea5627ef6082a34d5f9aa7b93f2cb40976313db963f5a306d533f91c7c48ecefabeeb69b2acd3af2f5c61f9d4e30c739885a9d5a5b90093c4aa65ecb340e"], 0x0)
r7 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061116b12bba6e6fa2d5d91dfacc15c600000000006000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1400000035000b63d25a80643d66b7d806f2e2ff", 0x14}], 0x1}, 0x0)
pipe(&(0x7f0000000180))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0220000000000000140003"], 0x3c}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}})
close(r8)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000030000000000000000000000ffff002117"])

2.543741545s ago: executing program 4 (id=5726):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x0)
r2 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f0000000440)='/dev/nullb0\x00'}, 0x30)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r4, 0x0)
accept4$unix(r4, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000), 0x8)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x2, 0x6, 0xc735, 0x5, 0x9ccb, 0x8b}, {0x8001, 0x6, 0x6, 0x7000, 0x1, 0xffff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x4, 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], <r5=>0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x1003, <r6=>0x0}, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r0, r1, 0x29, 0x2010, 0x0, @link_id=r6, r5}, 0x20)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20200, 0x0)
ioctl$KDGKBMODE(r8, 0x4b44, &(0x7f0000000480))

2.094921812s ago: executing program 3 (id=5727):
r0 = socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20000000000001ee, &(0x7f00000000c0)})
sysfs$1(0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x78})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r4 = userfaultfd(0x80001)
sendmsg$nl_route(r2, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f00001e9000/0x1000)=nil, 0x1000)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000984000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00001fa000/0x4000)=nil)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, {}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@multicast1}, 0x0, @in=@multicast2, 0x0, 0x1, 0x0, 0x1}}, 0xe8)
r5 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[<r7=>0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000240)=[0x0, r7], 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x7, 0x0, 0x1, 0x5a}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7a5e}, 0x90)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x23, 0x0, 0x40000)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1.815735192s ago: executing program 0 (id=5728):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000006c0))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000200)={{@my=0x1, 0x704}, {@local}, 0x400, "d487485e0e7e0e634578633e67876490a1b799e15ccdb49e2978b44b86c42979cf4e56a52d05b8b71f2065b6a4871bab9d2a418bef6ef53873e992870bdb17e9275d6c6ecc24309fbbf4b1a95b995697ef7bcd70365cdbef614369999ac591ea595327473072ca051eb93f9ecbb83a7d7e7d73e6ec01b816cac6b190f6dd45163e8d6f7e77cd93c241cad12edf74a86cb7d81c2e4159039dc15104273fb04fce8910df6365959ee822bf402af1e4011b19dc5a488827ff4bf1423316085460d97e92dd0dfc925a88622efe816058f2ffbb38bf854e932b3d7acd5b3fd3971e0399f36b445672b3023aa4f92aa640d932cd10b06a9d6bdf6db31d4aa5cae521d0dfdf2190cd38b90d63f80fd67b143867d696993412aecf39b446eeecd0f2b2094c3f8bd956a0694cf69555ffa22296cd4821e25b031f3b7dccf1ed433f2d0d7e8be37dbc205a2566844c846a84630e5c8d90db3e496c34e44051f8d6169696867898a71f4bd9cf38736b8f877a3721651b6cdcdf2c59da2fec642111896187f9c236fd064d167c60eb75dc9b5a6d5522ac00b3c324a0057895b0c45536656fc7f3096afa7210e0a347612c9f416139afa7e262e28c21b9bb7378beefb3449270fcbbf457e65109024a2d6e8874d5f9c7cf85a3c1694980008266d38922353e53b919816b998b02573deda4dd822ec02eaf1e1629df992c400c795ad802c8fa2e1aca7fd6962d6e1f4b1b043ff386794974aabe8c2cbc5a4cd81bd76b28fbcb81437f8c64d38d0d102d8f7f98cacf44a6052ce5820e261b494978526b76d3fd56e04d3e56c7223db29c4230f377d627479174c7622fc3b66c1e8dad37e071f1e2e4d5efe9bd57d0795ca38f605e7b26373d127904edff77f8b027b6154ba3b1f1b4721109e4e410fa50511bc698a50c242403c2ed75424ff04a7dfce87772567d80196e7fe85440c06d465a1fef8cfc5f42c079a1574eff41e7b0fbc665d24b9202ce2a92555726d774b31689a8edc211ed70a1e1599f67d4c9fbbd6466baeb37543e031a8ffd0cc1cb5394b2fecaa1f62bd647c3c49c28c3a84115e48dd2fc4a3e8f817cbf7d814f004ca44bbc04e4130a741207fe96785f617f320c945460f7db52b7ba1f8744bc7bd79c38c31afa87b90305dbf8feca88dd88ce532fe9d3de9a71713bf5c12855ee43a2f9ac4f06ca6690b7dcc1a690f0d0e6e7fad899a60726b305949ae9d019642d63284c18d8c7797d0a01978c9085c04a905f5211857276c9ecd0a5574c6e8e05265838e171fa1396ce14292062ddeb3e945af3a6249808a1c0e2489ba9d33dcfe8814c85cfe30d5b57b7eb1c388012651d70b5851275f7eae0c47a278772ac773775fd863867ffdead56ec2f87133c96c4a0eb2fe78548eb77eff8d6005349a69718d2bbdd9837070128ba9576a1728fa8ca186e9295"}, 0x418, 0x8})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001800800010002000000050002000000000900000080090002007369743000000000180001801400020073697430"], 0x58}}, 0x0)

1.643583616s ago: executing program 0 (id=5729):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_io_uring_setup(0x668f, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "5c32f3e00d37af13a33cb0f03519d60900000000000000"}, 0xffffff02)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20)

1.628358208s ago: executing program 3 (id=5730):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0', [{0x20, '}.e-{*D'}, {0x20, '\xc2n\xcf\x03SI'}, {0x20, '@'}, {0x20, '@'}], 0xa, "70869e19fcc73d48605f3855a2490e79b9c20c243e82183c57fac5779a7c535bf192b5d26581a400254a8169626614cc47f4d9a286621fd76fbf6e5e09ce188f70d35d46193e865969af21b4c2d978691d15005d0100e2eb8b8b1ba75d14300aea53c8bfd41015c0aad90700000000000000463b6ecfc28b0e1ac421dcc80f1464390c427420903f6ffcc4acea937e"}, 0xad)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r2, 0x10d, 0x9b, 0x0, &(0x7f00000000c0))

1.379166164s ago: executing program 3 (id=5731):
socket(0x1d, 0x2, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
socket$inet6(0xa, 0x6, 0x0)
listen(0xffffffffffffffff, 0x200007)
socket$inet_dccp(0x2, 0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000020540)=""/102399, 0x18fff}], 0x1, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x5, 0x32315258, 0x0, 0x0, [{0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x2}], 0x0, 0x0, 0x0, 0x1, 0x2}})
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x144000, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000180), 0x20000000}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000000180), 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_create1(0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080))
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f00000002c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}})
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)=@keyring)

1.229164073s ago: executing program 4 (id=5732):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x20)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8f15fff2559eb545e", 0x48}], 0x1}}], 0x1, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711096000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r6 = socket$inet6(0xa, 0x5, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x1}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x1}})

522.015125ms ago: executing program 3 (id=5733):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0xa, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x400, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x33524742}})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000440)={0x18, 0x7000000, 0x30, 0x7, 0x0, r5, 0x0}])
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000018c0)={0xffffffffffffffff, &(0x7f0000001700), 0x0}, 0x20)
r6 = syz_io_uring_setup(0xb7f, &(0x7f0000001500), &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
set_mempolicy(0x4005, &(0x7f0000000000)=0x80000084, 0x6)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x54, 0x0, @fd, 0x0, 0x0})
io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)}, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00')
read$FUSE(r9, &(0x7f0000002400)={0x2020}, 0x2020)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r10, 0x0)
read$FUSE(r9, &(0x7f0000004440)={0x2020}, 0x2020)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0xba01}, 0x0)

204.038223ms ago: executing program 0 (id=5734):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="140100000000001081179808000400000001090224000100000000090407000203000000092100000001220000090581", @ANYRESHEX=0x0], 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

121.8884ms ago: executing program 4 (id=5735):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000002240)={{0x14}, [@NFT_MSG_NEWSETELEM={0xc5c, 0xc, 0xa, 0x500, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x474, 0x3, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, '-&(\']\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xd14}, @NFTA_LOG_PREFIX={0x11, 0x2, 0x1, 0x0, 'net/udplite6\x00'}]}}}, {0x6c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x44, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf, 0x1, "a741c55c7fc0bdd2c2883d"}]}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xfd, 0x6, 0x1, 0x0, "fcbb68a128cf04519a1cfe7566564c94f408648cca9e4b69959a89f66b96f3bf01bc1d3cbfce98fee59b0148e5cdaf19b9392c1de2b112b484b4d4c0ca83bff43d087fc0557b6a907ee74a8bcdcbbc51d23bd0f1e35d44765efb5511076a9cf65f0389874274a3dfc235d5dfd8bc701a35e0b5233490b70b41439c90b6e098aecb2a956ffc64367ae84d4759d71150ceaa01adbf95ead03bad065568749c98792742ff48b15258387392bd9fff771d987f575541bd373c0b87fc7f6f05fe5d35e6d9308d279f9a67c0115da27ff3587c796e5b33e5a98f67b82d213c52b498f870afba271eb896770dfdd80f0ea916db73c17c2479c83cf1b1"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5d}]}, {0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0xf4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf0, 0x1, "e4a7881586d5f82fcbcc05b254695e6c6b0b9663043718acfc0fa35a86015901d12b5dbe3d6c3177fdaba69acd7bdcf130f1fa38374a9801b7f9587b1a14206a0f36fa411c3bf0622531a6873d1a64fdf7404cb367f728cce934bd8f0052c067332c9d7027d4074a30d6e8337e2fb154441b50ee219e2e32797f8d3a85f5f368d0c879f1bd5c7595438bf6c3d2de4a6349adb67ee0994f5de50ebb4f7d53cb49eb482ca1fe9afc2ccd26968a701349d716481df829d82001bce1a6007009b9d182f7af152879217d534044526041f3336bb12a2f22b3e2178fbfa7accaba2381c9dbe85689408baf0f6ce308"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_USERDATA={0x2e, 0x6, 0x1, 0x0, "1fe757bb66fe79b895a756c5939043ce9b5866dddea97e1ac5095f72e06548aca97b4b737d61e096a584"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c0, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x27c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x58, 0x1, "90d89c50a644799ced4378f1a19401258b2556ee875ce5cfa8d26d80983e57a87861aad0095bfe1dba4c314b32e1b8bbd90ba78612183ae9e8df590070f2b9d99fdef3ad0b2e4aa26872ab5aeade9e7c266ae0e1"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VALUE={0x58, 0x1, "4cfd3f1337b83fa5709f88e65c0232f3f0e94f0a64b36c85645370638949682a22ebbe8bcbf347d99be38b7d92dd4448ea70926167ef2b3c0e7154b5ef8e2ae0c159809fad90c632380e27b802f9367c88877fdf"}, @NFTA_DATA_VALUE={0xf0, 0x1, "6b06f8b49ed97bb1daf185d4131457545c73dbc1c5e2b1d1d8f3ba2e647be1d7b7e07b0e00cce71fce4996e0ec1fd8e9c8c6daa2c8b7865ab74673027491199285de518d92cdf6bfde35b41bfb78d1c64fafd9b223fcbc10d9aff1dfc28b359d00afe54fae15a717f887604c2b97b37dbdbb1dfe2bc91ee974570d7b97746eafe60ad8b23baa6b92d2e51e66dfaa24f25db7659c3cc69555027307616e9298666bb9d60440bfccd7d84242a914401d556d66aa1726b4c401d24f67ba5e70e5a7722122e1694698367f621f1786cb53d5595dc08db01339b8855c5d76a57a72ab636f17c05a2cf801bb916c2d"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "3487543095e98358249c0fba47f77d09be7960e9322d2871e1353bd54d1bb1dc6ac39d1984a659e001b295f3bb4e9b7ff7bb69104deb756a62d86ce4b7e2a6420f02d901ee4aae39dba3e41ed69b9218441292c5799296cfaf21b9176ca8668b24226f41a322da2115a1c50f5d5f81fc971eaea1985e0c43"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffb52}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "b509d5b2c13a8415b8a604bf7a83c0beae13445aeed927f5fa0ed08fdc76b514cf3b2c87829b495c122d6c5b0ee86d3f6185"}, @NFTA_DATA_VALUE={0xdf, 0x1, "b6b5328f41be9a8875839e1926a71cceef09ab70e69bc83e8059465387ea227ad9bb9c23a291f67c2eca92780ace798226d21e5bd742dbffd5f535131d46d9a3963944ec8e473cfdae2b6c44cf1f948cc97c9e7d5cfa97a448bda78d079cf10aaf0398edb31f8e10722d43ccf4ec74cce7c152c692e428c903bbed4094e85758f957f2cfb7b82b9a96a4bfc723cb5943ea20619c4d20d2d92f0dabb531fc5febf1b40b3d9b631d4d56be7439a35e9ecdce838617cc2c90b3a67de69835b9b2b17e71b8e40437f396212919f46fbf2c6a43b7a76f1e197394b81166"}]}, @NFTA_SET_ELEM_DATA={0x4}]}, {0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_DATA={0x268, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "acbaf4936b7b5981dfccffcb9cedc6a50cfab337816e3a29c04b956643c802ab"}, @NFTA_DATA_VALUE={0xd8, 0x1, "d112dcc1a765b18262168f24f7f40acf9df3924a7781c2384a14a787929e98c58e212afab28e0546dc2e2c682857957f015b4431a2ff1549587c25bb6b2168e7bd38886e8dec4390ba6906f2658d5f460bbe94008b8a2b6b4aa8cc72b0cd29ad0897d2b4cb1c59e4b972adce86076e64a96daae7463d10001fe7a5ee5851b40c64a62616a23507e984f35d07245676c06701f0259888c8e847eff38dadda9e8356c0e81071542ffaa81ff736d7ccc02881e8d9488fed9145e2b453f2374dbf0447851f750ea2a732b45a0f84d89e3769595964a9"}, @NFTA_DATA_VALUE={0x38, 0x1, "b2a451f074a37bb670be6f65555b7d864976beb081ac0f41d937c556be6ba47ed0a79157f6489105830336b6c8df15227e7b751a"}, @NFTA_DATA_VALUE={0xcc, 0x1, "b35c70ee1ec533dd7ab5684472fc926018fa08d90476a45b2d108430fb47d3dc792447e94a1322c28952708aeec087ae7459a7856771f0ba747c87b33ff9e5b8e7b4aa08aa61e6c86ca60dd15ff51839c21e5e7360fd0ceb2c9e127dcff7facbb676082cb081d30a861d14f014f1b6c21a218f524aa89cbd808c4eb310bc7a6c567475ed2fb8aad7220f735a2d73926d8074f6fafea4cf858ad3609a0dae79d7fcfbffba3a37447978bcc3cf3c8d78622500caba50479621082a8bbe0e8f384ad18740ffc77dfd0d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x114, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x62, 0xc, "fd80f6203af7f90fec2770846fb24054d0827c026c15a6744930e063b69b6524ebd519e8f00d15a02b61beb8a98ec50cf175e180070644a3637eb930368f34f181d99ee3f4981d62e2c55f3dae54a5a5849b43d3d23da52a592c2f9bb82f"}, @NFTA_CHAIN_USERDATA={0x79, 0xc, "6607e1bf8cf355beb486fda907279ca13ef6892ce681ea131b910784478760304d2f54333cbc87c012d41790c89b08c94be219026fb4d4105383a5303f37d3993b846613a445961315b2d25ece7106ed5c0366aa0f95999dd2aab132981080e39a2d7de7b0174bff0bc6cfd0446f5a440f88d7ab0d"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0xdc4}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0)
socket$igmp(0x2, 0x3, 0x2)
r7 = fanotify_init(0x0, 0x0)
fanotify_mark(r7, 0x1, 0x40001019, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300))

0s ago: executing program 3 (id=5736):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6001070000301100fc010000000000000000000000000000ff02000000000000000000000000000100000e220030907801000000d9005f7550d4846f67f1f450b6d6df0e300f56ecfdfd6f8cf37955108f31c71e082b4ff3c67e767eecde18b0ccdb1006f322d8b2417dd934c12e1b903432ad4932a4ef09328ab0381a5c3da15e21d945b6e3f567b37d7f356509099811450e476e77ac30aebc97fcfc0e6b1f85c8734cd4988ed0ea5627ef6082a34d5f9aa7b93f2cb40976313db963f5a306d533f91c7c48ecefabeeb69b2acd3af2f5c61f9d4e30c739885a9d5a5b90093c4aa65ecb340e"], 0x0)
r8 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061116b12bba6e6fa2d5d91dfacc15c600000000006000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1400000035000b63d25a80643d66b7d806f2e2ff", 0x14}], 0x1}, 0x0)
pipe(&(0x7f0000000180))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000012000100"/20, @ANYRES32=0x0, @ANYBLOB="0220000000000000140003"], 0x3c}}, 0x0)
r9 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}})
close(r9)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000030000000000000000000000ffff002117"])

kernel console output (not intermixed with test programs):

sing attributes in process `syz.3.5438'.
[ 1595.958216][T30387] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1596.261441][T30399] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1596.718271][T30412] fuse: Bad value for 'fd'
[ 1596.896981][T30415] hub 6-0:1.0: USB hub found
[ 1596.937107][T30415] hub 6-0:1.0: 1 port detected
[ 1597.189681][T30232] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1597.228188][T30232] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1597.259316][T30232] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1597.289671][T30232] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1597.590119][T30232] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1597.649257][T30232] 8021q: adding VLAN 0 to HW filter on device team0
[ 1597.680503][T23716] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1597.687795][T23716] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1597.725888][T29028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1597.733065][T29028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1597.898381][T30232] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1597.964943][T30435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5451'.
[ 1598.067496][T30232] veth0_vlan: entered promiscuous mode
[ 1598.103553][T30232] veth1_vlan: entered promiscuous mode
[ 1598.231764][T30232] veth0_macvtap: entered promiscuous mode
[ 1598.264191][T30232] veth1_macvtap: entered promiscuous mode
[ 1598.336026][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1598.383949][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1598.431642][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1598.450854][T30443] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5452'.
[ 1598.460091][T30443] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5452'.
[ 1598.489796][T15247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1598.529182][T15247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1598.531244][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1598.550607][T15247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1598.561867][T15247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1598.570013][T15247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1598.578545][T15247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1598.641379][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1598.688884][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1598.735471][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1598.761749][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1598.785054][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1598.806567][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1598.846142][T30232] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1598.969978][T30452] fuse: Bad value for 'fd'
[ 1598.986474][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1599.000826][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1599.017892][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1599.031192][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1599.047396][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1599.062237][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1599.079223][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1599.091175][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1599.104250][T30232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1599.118449][T30232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1599.137256][T30232] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1599.352756][T30232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1599.364588][T30232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1599.375202][T30232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1599.384163][T30232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1599.866164][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1599.894117][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1600.038781][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1600.078637][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1600.120130][T30446] chnl_net:caif_netlink_parms(): no params data found
[ 1600.471476][T30483] fuse: Bad value for 'group_id'
[ 1600.494294][T30446] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1600.508440][T30483] fuse: Bad value for 'group_id'
[ 1600.543190][T30446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1600.571982][T30446] bridge_slave_0: entered allmulticast mode
[ 1600.608274][T30446] bridge_slave_0: entered promiscuous mode
[ 1600.646087][T30446] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1600.661708][T30446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1600.669041][T15247] Bluetooth: hci2: command tx timeout
[ 1600.696652][T30446] bridge_slave_1: entered allmulticast mode
[ 1600.712853][T30446] bridge_slave_1: entered promiscuous mode
[ 1600.991855][T30446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1601.039119][T30446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1601.125640][T22075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1601.136255][T22075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1601.145169][T22075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1601.157287][T22075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1601.181880][T22075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1601.191871][T22075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1601.256467][ T2893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1601.521520][T30517] fuse: Bad value for 'fd'
[ 1601.572350][ T2893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1601.574607][T23735] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1601.702840][T30446] team0: Port device team_slave_0 added
[ 1601.715890][T18670] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1601.719937][T30446] team0: Port device team_slave_1 added
[ 1601.784567][T23735] usb 1-1: Using ep0 maxpacket: 16
[ 1601.794067][T23735] usb 1-1: config 0 has an invalid interface number: 7 but max is 0
[ 1601.807812][ T2893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1601.812795][T23735] usb 1-1: config 0 has no interface number 0
[ 1601.841758][T23735] usb 1-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1601.856718][T23735] usb 1-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1601.867082][T23735] usb 1-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1601.896326][T23735] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00
[ 1601.907976][T30446] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1601.915796][T23735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1601.935018][T30446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1601.935662][T18670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1601.937157][T23735] usb 1-1: config 0 descriptor??
[ 1601.961574][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1601.961832][T30446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1602.024087][T18670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1602.029705][T23735] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.7/input/input83
[ 1602.047120][ T4665] pxrc 1-1:0.7: pxrc_open - usb_submit_urb failed, error: -90
[ 1602.072537][T18670] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1602.105281][T18670] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=e4.16
[ 1602.125811][T18670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1602.148656][ T2893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1602.160353][ T4665] pxrc 1-1:0.7: pxrc_open - usb_submit_urb failed, error: -90
[ 1602.169088][T18670] usb 2-1: config 0 descriptor??
[ 1602.177222][T18670] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s)
[ 1602.206046][ T4665] pxrc 1-1:0.7: pxrc_open - usb_submit_urb failed, error: -90
[ 1602.225171][ T4665] pxrc 1-1:0.7: pxrc_open - usb_submit_urb failed, error: -90
[ 1602.249835][T23735] usb 1-1: USB disconnect, device number 29
[ 1602.256806][T19100] pxrc 1-1:0.7: pxrc_open - usb_submit_urb failed, error: -19
[ 1602.285708][T30446] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1602.293402][T30446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1602.360444][T30446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1602.520924][T29028] usb 2-1: USB disconnect, device number 39
[ 1602.662990][T30446] hsr_slave_0: entered promiscuous mode
[ 1602.689803][T30446] hsr_slave_1: entered promiscuous mode
[ 1602.715632][T30446] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1602.730444][T30446] Cannot create hsr debugfs directory
[ 1602.746706][T30504] Bluetooth: hci2: command tx timeout
[ 1602.908208][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1602.924937][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1602.944781][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1602.955280][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1602.978724][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1603.004440][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1603.154063][T30552] fuse: Bad value for 'group_id'
[ 1603.184488][T30552] fuse: Bad value for 'group_id'
[ 1603.306458][ T5236] Bluetooth: hci3: command tx timeout
[ 1603.306482][ T2893] bridge_slave_1: left allmulticast mode
[ 1603.311939][ T2893] bridge_slave_1: left promiscuous mode
[ 1603.312123][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1603.403270][ T2893] bridge_slave_0: left allmulticast mode
[ 1603.446346][ T2893] bridge_slave_0: left promiscuous mode
[ 1603.464967][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1603.517973][T30565] FAULT_INJECTION: forcing a failure.
[ 1603.517973][T30565] name failslab, interval 1, probability 0, space 0, times 0
[ 1603.548505][T30565] CPU: 1 UID: 0 PID: 30565 Comm: syz.1.5471 Not tainted 6.11.0-rc2-syzkaller #0
[ 1603.557570][T30565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1603.567609][T30565] Call Trace:
[ 1603.570871][T30565]  <TASK>
[ 1603.573806][T30565]  dump_stack_lvl+0x241/0x360
[ 1603.578476][T30565]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1603.583655][T30565]  ? __pfx__printk+0x10/0x10
[ 1603.588230][T30565]  ? ref_tracker_alloc+0x332/0x490
[ 1603.593352][T30565]  should_fail_ex+0x3b0/0x4e0
[ 1603.598055][T30565]  ? skb_clone+0x20c/0x390
[ 1603.602507][T30565]  should_failslab+0xac/0x100
[ 1603.607181][T30565]  ? skb_clone+0x20c/0x390
[ 1603.611588][T30565]  kmem_cache_alloc_noprof+0x6c/0x2a0
[ 1603.616969][T30565]  skb_clone+0x20c/0x390
[ 1603.621254][T30565]  __netlink_deliver_tap+0x3cc/0x7c0
[ 1603.626589][T30565]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1603.631783][T30565]  netlink_deliver_tap+0x19d/0x1b0
[ 1603.636891][T30565]  netlink_unicast+0x7be/0x990
[ 1603.641660][T30565]  ? __pfx_netlink_unicast+0x10/0x10
[ 1603.646943][T30565]  ? __virt_addr_valid+0x183/0x530
[ 1603.652062][T30565]  ? __check_object_size+0x49c/0x900
[ 1603.657341][T30565]  ? bpf_lsm_netlink_send+0x9/0x10
[ 1603.662473][T30565]  netlink_sendmsg+0x8e4/0xcb0
[ 1603.667270][T30565]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1603.672563][T30565]  ? __import_iovec+0x536/0x820
[ 1603.677410][T30565]  ? aa_sock_msg_perm+0x91/0x160
[ 1603.682341][T30565]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1603.687621][T30565]  ? security_socket_sendmsg+0x87/0xb0
[ 1603.693072][T30565]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1603.698355][T30565]  __sock_sendmsg+0x221/0x270
[ 1603.703029][T30565]  ____sys_sendmsg+0x525/0x7d0
[ 1603.707790][T30565]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1603.713077][T30565]  __sys_sendmsg+0x2b0/0x3a0
[ 1603.717667][T30565]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1603.722769][T30565]  ? vfs_write+0x7c4/0xc90
[ 1603.727218][T30565]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1603.733552][T30565]  ? do_syscall_64+0x100/0x230
[ 1603.738340][T30565]  ? do_syscall_64+0xb6/0x230
[ 1603.743024][T30565]  do_syscall_64+0xf3/0x230
[ 1603.747530][T30565]  ? clear_bhb_loop+0x35/0x90
[ 1603.752330][T30565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1603.758238][T30565] RIP: 0033:0x7f39f29779f9
[ 1603.762657][T30565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1603.782278][T30565] RSP: 002b:00007f39f373d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1603.790701][T30565] RAX: ffffffffffffffda RBX: 00007f39f2b05f80 RCX: 00007f39f29779f9
[ 1603.798674][T30565] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000003
[ 1603.806756][T30565] RBP: 00007f39f373d0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1603.814726][T30565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1603.822692][T30565] R13: 000000000000000b R14: 00007f39f2b05f80 R15: 00007f39f2c2fa38
[ 1603.830776][T30565]  </TASK>
[ 1603.833909][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1604.343952][T30576] fuse: Bad value for 'fd'
[ 1604.590654][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1604.601648][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1604.612957][ T2893] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[ 1604.629594][ T2893] bond0 (unregistering): Released all slaves
[ 1604.820437][T30505] chnl_net:caif_netlink_parms(): no params data found
[ 1604.827731][ T5236] Bluetooth: hci2: command tx timeout
[ 1605.070348][ T5236] Bluetooth: hci0: command tx timeout
[ 1605.128516][T30446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1605.334484][T18670] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1605.384683][ T5236] Bluetooth: hci3: command tx timeout
[ 1605.738701][T18670] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[ 1605.764629][T18670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1605.790191][T18670] usb 2-1: config 0 descriptor??
[ 1605.870215][T30446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1606.085844][T30580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1606.094897][T30580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1606.151090][ T2893] hsr_slave_0: left promiscuous mode
[ 1606.168166][ T2893] hsr_slave_1: left promiscuous mode
[ 1606.186214][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1606.193677][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1606.245297][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1606.263008][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1606.336291][ T2893] veth1_macvtap: left promiscuous mode
[ 1606.342050][ T2893] veth0_macvtap: left promiscuous mode
[ 1606.354637][ T2893] veth1_vlan: left promiscuous mode
[ 1606.374552][ T2893] veth0_vlan: left promiscuous mode
[ 1606.385385][T18670] gs_usb 2-1:0.0: Couldn't get device config: (err=-121)
[ 1606.392464][T18670] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121
[ 1606.686097][T30504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1606.697985][T30504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1606.715013][T30504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1606.723233][T30504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1606.731278][T30504] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1606.751268][T30504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1606.911015][T30504] Bluetooth: hci2: command tx timeout
[ 1607.147464][T30504] Bluetooth: hci0: command tx timeout
[ 1607.468585][T30504] Bluetooth: hci3: command tx timeout
[ 1607.508545][ T2893] team0 (unregistering): Port device team_slave_1 removed
[ 1607.570512][ T2893] team0 (unregistering): Port device team_slave_0 removed
[ 1607.641097][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.651578][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.451696][T18670] usb 2-1: USB disconnect, device number 40
[ 1608.461365][T30446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1608.621508][T30446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1608.688754][T30505] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1608.734600][T30505] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1608.741907][T30505] bridge_slave_0: entered allmulticast mode
[ 1608.763029][T30505] bridge_slave_0: entered promiscuous mode
[ 1608.803058][T30505] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1608.811614][T30505] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1608.819763][T30505] bridge_slave_1: entered allmulticast mode
[ 1608.828417][T30505] bridge_slave_1: entered promiscuous mode
[ 1608.835955][T30504] Bluetooth: hci1: command tx timeout
[ 1608.941769][T30505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1608.965519][T30505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1609.015192][T30505] team0: Port device team_slave_0 added
[ 1609.034880][   T29] audit: type=1326 audit(1722847746.452:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.048214][T30505] team0: Port device team_slave_1 added
[ 1609.132368][T30505] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1609.140185][T30505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1609.168805][T30505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1609.186448][T30505] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1609.193615][T30505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1609.220261][T30505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1609.233269][T30550] chnl_net:caif_netlink_parms(): no params data found
[ 1609.234743][T30504] Bluetooth: hci0: command tx timeout
[ 1609.415225][T30446] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1609.440592][T30446] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1609.478411][T30505] hsr_slave_0: entered promiscuous mode
[ 1609.494224][T30505] hsr_slave_1: entered promiscuous mode
[ 1609.502339][T30505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1609.511831][T30505] Cannot create hsr debugfs directory
[ 1609.544740][T30504] Bluetooth: hci3: command tx timeout
[ 1609.573280][T30446] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1609.603377][   T29] audit: type=1326 audit(1722847747.012:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.629484][   T29] audit: type=1326 audit(1722847747.012:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.652216][   T29] audit: type=1326 audit(1722847747.012:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.701869][   T29] audit: type=1326 audit(1722847747.012:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.744643][   T29] audit: type=1326 audit(1722847747.012:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.770013][   T29] audit: type=1326 audit(1722847747.012:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.793471][   T29] audit: type=1326 audit(1722847747.012:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.821120][   T29] audit: type=1326 audit(1722847747.012:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.843611][   T29] audit: type=1326 audit(1722847747.012:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30609 comm="syz.1.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f29779f9 code=0x7fc00000
[ 1609.877146][T30446] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1610.036799][ T2893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1610.071907][T30550] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1610.079709][T30550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1610.093822][T30550] bridge_slave_0: entered allmulticast mode
[ 1610.122129][T30550] bridge_slave_0: entered promiscuous mode
[ 1610.138100][T30550] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1610.154502][T30550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1610.161778][T30550] bridge_slave_1: entered allmulticast mode
[ 1610.181995][T30550] bridge_slave_1: entered promiscuous mode
[ 1610.279780][ T2893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1610.402744][ T2893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1610.426760][T30601] chnl_net:caif_netlink_parms(): no params data found
[ 1610.489673][T30550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1610.623765][ T2893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1610.767601][T30550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1610.800646][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1610.815226][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1610.836240][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1610.846246][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1610.853951][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1610.861654][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1610.909626][T30504] Bluetooth: hci1: command tx timeout
[ 1610.978105][T30550] team0: Port device team_slave_0 added
[ 1611.063353][T30550] team0: Port device team_slave_1 added
[ 1611.095575][T30550] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1611.102548][T30550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1611.129842][T30550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1611.189010][T30601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1611.197406][T30601] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1611.204769][T30601] bridge_slave_0: entered allmulticast mode
[ 1611.211567][T30601] bridge_slave_0: entered promiscuous mode
[ 1611.232825][T30550] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1611.240084][T30550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1611.268650][T30550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1611.290368][T30601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1611.298518][T30601] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1611.305905][T30601] bridge_slave_1: entered allmulticast mode
[ 1611.312676][T30601] bridge_slave_1: entered promiscuous mode
[ 1611.314986][T30504] Bluetooth: hci0: command tx timeout
[ 1611.453795][T30601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1611.536062][T30550] hsr_slave_0: entered promiscuous mode
[ 1611.542477][T30550] hsr_slave_1: entered promiscuous mode
[ 1611.551912][T30550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1611.559635][T30550] Cannot create hsr debugfs directory
[ 1611.568328][T30601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1611.790326][ T2893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.847227][T30601] team0: Port device team_slave_0 added
[ 1611.867736][T30601] team0: Port device team_slave_1 added
[ 1611.949366][ T2893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.969779][T30601] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1611.977561][T30601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1612.004756][T30601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1612.018726][T30601] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1612.027934][T30601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1612.055239][T30601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1612.128618][ T2893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1612.227188][T30601] hsr_slave_0: entered promiscuous mode
[ 1612.233545][T30601] hsr_slave_1: entered promiscuous mode
[ 1612.243789][T30601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1612.251705][T30601] Cannot create hsr debugfs directory
[ 1612.292241][ T2893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1612.380254][T30446] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1612.611307][T30505] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1612.676447][ T2893] bridge_slave_1: left allmulticast mode
[ 1612.682129][ T2893] bridge_slave_1: left promiscuous mode
[ 1612.694905][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1612.717543][ T2893] bridge_slave_0: left allmulticast mode
[ 1612.723244][ T2893] bridge_slave_0: left promiscuous mode
[ 1612.741325][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1612.817961][ T2893] bridge_slave_1: left allmulticast mode
[ 1612.823649][ T2893] bridge_slave_1: left promiscuous mode
[ 1612.860599][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1612.876415][ T2893] bridge_slave_0: left allmulticast mode
[ 1612.882104][ T2893] bridge_slave_0: left promiscuous mode
[ 1612.904982][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1612.985074][ T5236] Bluetooth: hci1: command tx timeout
[ 1612.985132][T30504] Bluetooth: hci4: command tx timeout
[ 1613.915673][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1613.931605][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1613.942577][ T2893] bond0 (unregistering): Released all slaves
[ 1614.092526][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1614.103592][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1614.119288][ T2893] bond0 (unregistering): Released all slaves
[ 1614.132333][T30505] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1614.229554][T30654] chnl_net:caif_netlink_parms(): no params data found
[ 1614.250936][T30505] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1614.276559][T30505] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1614.290937][ T2893] ɶƣ0GC¦: left promiscuous mode
[ 1614.333987][T30446] 8021q: adding VLAN 0 to HW filter on device team0
[ 1614.484235][T23716] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1614.491439][T23716] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1614.516223][T23716] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1614.523347][T23716] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1614.681274][T30654] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1614.693429][T30654] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1614.700909][T30654] bridge_slave_0: entered allmulticast mode
[ 1614.708752][T30654] bridge_slave_0: entered promiscuous mode
[ 1614.717536][T30654] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1614.726571][T30654] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1614.733810][T30654] bridge_slave_1: entered allmulticast mode
[ 1614.742311][T30654] bridge_slave_1: entered promiscuous mode
[ 1614.809022][T30654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1614.900451][T30654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1615.065357][T30504] Bluetooth: hci1: command tx timeout
[ 1615.072921][T30654] team0: Port device team_slave_0 added
[ 1615.075950][T30504] Bluetooth: hci4: command tx timeout
[ 1615.127576][T30446] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1615.162788][T30654] team0: Port device team_slave_1 added
[ 1615.301365][T30550] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1615.339702][T30550] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1615.359375][T30550] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1615.383295][T30654] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1615.397037][T30654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1615.430165][T30654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1615.537490][T30550] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1615.559006][T30654] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1615.574439][T30654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1615.607021][T30654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1615.633061][ T2893] hsr_slave_0: left promiscuous mode
[ 1615.641133][ T2893] hsr_slave_1: left promiscuous mode
[ 1615.650202][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1615.658003][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1615.666550][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1615.673976][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1615.691417][ T2893] hsr_slave_0: left promiscuous mode
[ 1615.697670][ T2893] hsr_slave_1: left promiscuous mode
[ 1615.703565][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1615.712178][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1615.720397][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1615.728008][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1615.766174][ T2893] veth1_macvtap: left promiscuous mode
[ 1615.772186][ T2893] veth0_macvtap: left promiscuous mode
[ 1615.778132][ T2893] veth1_vlan: left promiscuous mode
[ 1615.783396][ T2893] veth0_vlan: left promiscuous mode
[ 1615.792188][ T2893] veth1_macvtap: left promiscuous mode
[ 1615.799353][ T2893] veth0_macvtap: left promiscuous mode
[ 1615.805060][ T2893] veth1_vlan: left promiscuous mode
[ 1615.810406][ T2893] veth0_vlan: left promiscuous mode
[ 1616.481667][ T2893] team0 (unregistering): Port device team_slave_1 removed
[ 1616.555962][ T2893] team0 (unregistering): Port device team_slave_0 removed
[ 1617.150575][T30504] Bluetooth: hci4: command tx timeout
[ 1617.564216][ T2893] team0 (unregistering): Port device team_slave_1 removed
[ 1617.624756][ T2893] team0 (unregistering): Port device team_slave_0 removed
[ 1618.313575][T30654] hsr_slave_0: entered promiscuous mode
[ 1618.325744][T30654] hsr_slave_1: entered promiscuous mode
[ 1618.619718][T30505] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1618.664155][T30446] veth0_vlan: entered promiscuous mode
[ 1618.758735][T30446] veth1_vlan: entered promiscuous mode
[ 1618.872601][T30505] 8021q: adding VLAN 0 to HW filter on device team0
[ 1618.992330][T30654] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1619.059502][T30601] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1619.085825][T30601] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1619.117027][T18670] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1619.124220][T18670] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1619.166044][T30654] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1619.184140][T30601] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1619.215544][T30601] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1619.227369][T30504] Bluetooth: hci4: command tx timeout
[ 1619.256223][T23715] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1619.263354][T23715] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1619.362951][T30654] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1619.398809][T30446] veth0_macvtap: entered promiscuous mode
[ 1619.444024][T30446] veth1_macvtap: entered promiscuous mode
[ 1619.487980][T30654] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1619.528628][T30550] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1619.599327][T30446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1619.620661][T30446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1619.635819][T30446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1619.648207][T30446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1619.664411][T30446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1619.679207][T30446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1619.692381][T30446] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1619.709274][T30446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1619.745266][T30446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1619.760790][T30446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1619.772146][T30446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1619.782595][T30446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1619.797145][T30446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1619.809147][T30446] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1619.847966][T30550] 8021q: adding VLAN 0 to HW filter on device team0
[ 1619.891581][T30446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1619.914600][T30446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1619.923352][T30446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1619.946264][T30446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1620.008131][ T2893] bridge_slave_1: left allmulticast mode
[ 1620.013807][ T2893] bridge_slave_1: left promiscuous mode
[ 1620.019997][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1620.029779][ T2893] bridge_slave_0: left allmulticast mode
[ 1620.038014][ T2893] bridge_slave_0: left promiscuous mode
[ 1620.043900][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1620.452387][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1620.463162][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1620.474304][ T2893] bond0 (unregistering): Released all slaves
[ 1620.492433][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1620.499628][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1620.519231][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1620.526354][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1620.656138][T30505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1620.823468][T30654] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1620.834283][T30654] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1620.846716][T30654] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1620.881709][T30654] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1620.915102][ T2893] hsr_slave_0: left promiscuous mode
[ 1620.921225][ T2893] hsr_slave_1: left promiscuous mode
[ 1620.931524][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1620.939922][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1620.948566][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1620.956303][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1620.980758][ T2893] dummy0: left promiscuous mode
[ 1620.986396][ T2893] veth1_macvtap: left promiscuous mode
[ 1620.991936][ T2893] veth0_macvtap: left promiscuous mode
[ 1620.998357][ T2893] veth1_vlan: left promiscuous mode
[ 1621.003619][ T2893] veth0_vlan: left promiscuous mode
[ 1621.570614][ T2893] team0 (unregistering): Port device team_slave_1 removed
[ 1621.632217][ T2893] team0 (unregistering): Port device team_slave_0 removed
[ 1622.156864][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1622.174055][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1622.189889][T30505] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1622.280756][T30505] veth0_vlan: entered promiscuous mode
[ 1622.303659][T30601] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1622.363000][T30505] veth1_vlan: entered promiscuous mode
[ 1622.383464][T24890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1622.394163][T24890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1622.448889][T30601] 8021q: adding VLAN 0 to HW filter on device team0
[ 1622.515301][T30550] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1622.594526][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1622.601749][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1622.613220][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1622.620435][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1622.771913][ T2893] IPVS: stop unused estimator thread 0...
[ 1622.870906][T30550] veth0_vlan: entered promiscuous mode
[ 1622.912391][T30505] veth0_macvtap: entered promiscuous mode
[ 1622.976931][T30505] veth1_macvtap: entered promiscuous mode
[ 1622.987878][T30550] veth1_vlan: entered promiscuous mode
[ 1623.113029][T30654] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1623.150606][T30505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1623.184575][T30505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.197917][T30505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1623.211027][T30505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.221359][T30505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1623.232076][T30505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.257360][T30505] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1623.278497][T30505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1623.300900][T30505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.313035][T30505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1623.325152][T30505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.335397][T30505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1623.347654][T30505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.361111][T30505] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1623.373743][T30505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1623.383511][T30505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1623.393442][T30505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1623.408756][T30505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1623.469768][T30550] veth0_macvtap: entered promiscuous mode
[ 1623.482310][T30654] 8021q: adding VLAN 0 to HW filter on device team0
[ 1623.495923][T30550] veth1_macvtap: entered promiscuous mode
[ 1623.531803][T30601] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1623.590417][T23716] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1623.597560][T23716] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1623.607891][T23716] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1623.615060][T23716] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1623.625518][ T8623] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1623.647056][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1623.667035][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1623.670837][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1623.688354][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.698419][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1623.710045][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.720063][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1623.731797][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.742302][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1623.757211][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.769576][T30550] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1623.802241][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1623.813796][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.826959][ T8623] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1623.831155][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1623.844391][ T8623] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1623.855522][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.869139][ T8623] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1623.880957][ T8623] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9
[ 1623.884400][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1623.893684][ T8623] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8447, setting to 1024
[ 1623.916969][ T8623] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1623.922698][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.937427][ T8623] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1623.941761][T30550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1623.953915][ T8623] usb 4-1: Product: syz
[ 1623.960707][ T8623] usb 4-1: Manufacturer: syz
[ 1623.974397][T30550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1623.978634][ T8623] cdc_wdm 4-1:1.0: skipping garbage
[ 1623.996394][T30550] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1623.999131][ T8623] cdc_wdm 4-1:1.0: skipping garbage
[ 1624.020980][ T8623] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1624.030451][ T8623] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1624.129909][T30550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1624.143572][T30550] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1624.155486][T30550] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1624.167997][T30550] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1624.210051][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1624.224998][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1624.281440][T30601] veth0_vlan: entered promiscuous mode
[ 1624.322272][   T29] kauditd_printk_skb: 58 callbacks suppressed
[ 1624.322292][   T29] audit: type=1326 audit(1722847761.732:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30741 comm="syz.3.5486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f176b9779f9 code=0x0
[ 1624.363080][T30601] veth1_vlan: entered promiscuous mode
[ 1624.382638][T23714] usb 4-1: USB disconnect, device number 23
[ 1624.450887][T30654] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1624.590528][T30757] vhci_hcd: invalid port number 0
[ 1624.621353][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1624.633951][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1624.698072][T30654] veth0_vlan: entered promiscuous mode
[ 1624.715493][T30601] veth0_macvtap: entered promiscuous mode
[ 1624.725641][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1624.743283][T30601] veth1_macvtap: entered promiscuous mode
[ 1624.749650][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1624.795526][T30654] veth1_vlan: entered promiscuous mode
[ 1624.864708][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1624.884419][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1624.894274][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1624.914488][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1624.924713][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1624.945313][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1624.964400][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1624.984961][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.003736][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1625.016889][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.036212][T30601] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1625.072532][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.083448][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.104415][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.125400][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.144391][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.173227][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.194430][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.209577][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.235415][T30601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.254394][T30601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.255125][ T5276] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1625.285751][T30601] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1625.313906][T30654] veth0_macvtap: entered promiscuous mode
[ 1625.339869][T30601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.358311][T30601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.386976][T30601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.409842][T30601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.445220][ T5276] usb 5-1: device descriptor read/64, error -71
[ 1625.477237][T30654] veth1_macvtap: entered promiscuous mode
[ 1625.597148][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1625.621265][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.646052][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1625.658645][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.669655][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1625.681591][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.691968][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1625.709341][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.720027][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1625.731611][ T5276] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1625.755021][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.782819][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1625.805346][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.826922][T30654] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1625.882669][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.905336][ T5276] usb 5-1: device descriptor read/64, error -71
[ 1625.924794][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.943152][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.956803][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.974359][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.995664][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1626.010732][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1626.022236][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1626.033522][ T5276] usb usb5-port1: attempt power cycle
[ 1626.051823][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1626.062519][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1626.084630][T30654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1626.096468][T30654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1626.113123][T30654] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1626.159416][T30654] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1626.178873][T30654] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1626.187785][T30654] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1626.196648][T30654] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1626.237454][T30799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5492'.
[ 1626.302240][T16904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1626.318812][T16904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1626.428235][T16904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1626.459238][T16904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1626.467122][ T5276] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1626.485865][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1626.495385][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1626.540396][ T5276] usb 5-1: device descriptor read/8, error -71
[ 1626.593029][T16904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1626.644935][T16904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1626.767946][T30811] sg_write: data in/out 43603/42 bytes for SCSI command 0x0-- guessing data in;
[ 1626.767946][T30811]    program syz.3.5495 not setting count and/or reply_len properly
[ 1626.836550][ T5276] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1626.889191][ T5276] usb 5-1: device descriptor read/8, error -71
[ 1627.046429][ T5276] usb usb5-port1: unable to enumerate USB device
[ 1627.214635][T23714] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[ 1627.249029][T30815] netlink: 'syz.1.5482': attribute type 4 has an invalid length.
[ 1627.377134][T23714] usb 4-1: device descriptor read/64, error -71
[ 1627.654571][T23714] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[ 1627.826871][T23714] usb 4-1: device descriptor read/64, error -71
[ 1627.964695][T23714] usb usb4-port1: attempt power cycle
[ 1628.404837][T23714] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[ 1628.445770][T23714] usb 4-1: device descriptor read/8, error -71
[ 1628.734509][T23714] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[ 1628.775724][T23714] usb 4-1: device descriptor read/8, error -71
[ 1628.914796][T23714] usb usb4-port1: unable to enumerate USB device
[ 1629.209933][   T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1629.317880][T23714] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1629.399802][T30833] delete_channel: no stack
[ 1629.502343][   T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1629.556523][T23714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1629.610956][T23714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1629.645306][T23714] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[ 1629.668078][T30850] FAULT_INJECTION: forcing a failure.
[ 1629.668078][T30850] name failslab, interval 1, probability 0, space 0, times 0
[ 1629.680601][T23714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1629.681304][T30850] CPU: 0 UID: 0 PID: 30850 Comm: syz.2.5508 Not tainted 6.11.0-rc2-syzkaller #0
[ 1629.698231][T30850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1629.708283][T30850] Call Trace:
[ 1629.711589][T30850]  <TASK>
[ 1629.714513][T30850]  dump_stack_lvl+0x241/0x360
[ 1629.719192][T30850]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1629.724396][T30850]  ? __pfx__printk+0x10/0x10
[ 1629.729007][T30850]  should_fail_ex+0x3b0/0x4e0
[ 1629.733680][T30850]  ? skb_clone+0x20c/0x390
[ 1629.738101][T30850]  should_failslab+0xac/0x100
[ 1629.742780][T30850]  ? skb_clone+0x20c/0x390
[ 1629.747192][T30850]  kmem_cache_alloc_noprof+0x6c/0x2a0
[ 1629.752560][T30850]  skb_clone+0x20c/0x390
[ 1629.756805][T30850]  ? dev_queue_xmit_nit+0x220/0xc10
[ 1629.762001][T30850]  dev_queue_xmit_nit+0x419/0xc10
[ 1629.767024][T30850]  ? dev_queue_xmit_nit+0x2b/0xc10
[ 1629.772134][T30850]  ? validate_xmit_skb+0x9f9/0x1120
[ 1629.777336][T30850]  dev_hard_start_xmit+0x15f/0x7e0
[ 1629.782441][T30850]  ? __pfx_validate_xmit_skb+0x10/0x10
[ 1629.787907][T30850]  __dev_queue_xmit+0x1b63/0x3e90
[ 1629.792935][T30850]  ? kasan_save_track+0x51/0x80
[ 1629.797788][T30850]  ? do_syscall_64+0xf3/0x230
[ 1629.802467][T30850]  ? __dev_queue_xmit+0x2da/0x3e90
[ 1629.807573][T30850]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1629.812949][T30850]  ? __copy_skb_header+0x437/0x5b0
[ 1629.818052][T30850]  ? __asan_memcpy+0x40/0x70
[ 1629.822633][T30850]  ? __copy_skb_header+0x437/0x5b0
[ 1629.827741][T30850]  ? __skb_clone+0x454/0x6c0
[ 1629.832329][T30850]  ? skb_clone+0x240/0x390
[ 1629.836743][T30850]  __netlink_deliver_tap+0x54d/0x7c0
[ 1629.842031][T30850]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1629.847222][T30850]  netlink_deliver_tap+0x19d/0x1b0
[ 1629.852327][T30850]  netlink_unicast+0x7be/0x990
[ 1629.857093][T30850]  ? __pfx_netlink_unicast+0x10/0x10
[ 1629.862368][T30850]  ? __virt_addr_valid+0x183/0x530
[ 1629.867476][T30850]  ? __check_object_size+0x49c/0x900
[ 1629.872755][T30850]  ? bpf_lsm_netlink_send+0x9/0x10
[ 1629.877865][T30850]  netlink_sendmsg+0x8e4/0xcb0
[ 1629.882633][T30850]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1629.887917][T30850]  ? __import_iovec+0x536/0x820
[ 1629.892759][T30850]  ? aa_sock_msg_perm+0x91/0x160
[ 1629.897689][T30850]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1629.902968][T30850]  ? security_socket_sendmsg+0x87/0xb0
[ 1629.908423][T30850]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1629.913700][T30850]  __sock_sendmsg+0x221/0x270
[ 1629.918378][T30850]  ____sys_sendmsg+0x525/0x7d0
[ 1629.923138][T30850]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1629.928426][T30850]  __sys_sendmsg+0x2b0/0x3a0
[ 1629.933012][T30850]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1629.938117][T30850]  ? vfs_write+0x7c4/0xc90
[ 1629.942559][T30850]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1629.948882][T30850]  ? do_syscall_64+0x100/0x230
[ 1629.953650][T30850]  ? do_syscall_64+0xb6/0x230
[ 1629.958324][T30850]  do_syscall_64+0xf3/0x230
[ 1629.962822][T30850]  ? clear_bhb_loop+0x35/0x90
[ 1629.967490][T30850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1629.973374][T30850] RIP: 0033:0x7fe1dbf779f9
[ 1629.977781][T30850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1629.997376][T30850] RSP: 002b:00007fe1dcc90048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1630.005783][T30850] RAX: ffffffffffffffda RBX: 00007fe1dc105f80 RCX: 00007fe1dbf779f9
[ 1630.013762][T30850] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[ 1630.021737][T30850] RBP: 00007fe1dcc900a0 R08: 0000000000000000 R09: 0000000000000000
[ 1630.029714][T30850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1630.037694][T30850] R13: 000000000000000b R14: 00007fe1dc105f80 R15: 00007fe1dc22fa38
[ 1630.045678][T30850]  </TASK>
[ 1630.065697][T23714] usb 2-1: config 0 descriptor??
[ 1630.122046][   T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1630.183435][T30850] netlink: 'syz.2.5508': attribute type 9 has an invalid length.
[ 1630.208896][T30850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5508'.
[ 1630.390045][T30852] fuse: Bad value for 'fd'
[ 1630.400221][   T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1630.427430][T30853] fuse: Bad value for 'fd'
[ 1630.489922][T30847] vhci_hcd: invalid port number 0
[ 1630.631312][T30847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5505'.
[ 1630.794963][   T63] bridge_slave_1: left allmulticast mode
[ 1630.814216][   T63] bridge_slave_1: left promiscuous mode
[ 1630.836941][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1630.848529][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1630.858164][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1630.867165][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1630.876575][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1630.884083][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1630.914959][T23714] hid-led 0003:1D34:000A.0037: unknown main item tag 0x0
[ 1630.922056][T23714] hid-led 0003:1D34:000A.0037: unknown main item tag 0x0
[ 1630.929430][T23714] hid-led 0003:1D34:000A.0037: item fetching failed at offset 3/5
[ 1630.940480][T23714] hid-led 0003:1D34:000A.0037: probe with driver hid-led failed with error -22
[ 1630.970740][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1631.035859][   T63] bridge_slave_0: left allmulticast mode
[ 1631.041549][   T63] bridge_slave_0: left promiscuous mode
[ 1631.153990][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1631.705472][T23716] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1631.926648][T23716] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1631.969767][T23716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1631.999522][T23716] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1632.011166][T23716] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1632.032224][T23716] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1632.061070][T23716] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1632.091480][T23716] usb 5-1: Product: syz
[ 1632.098113][T23716] usb 5-1: Manufacturer: syz
[ 1632.143491][T23716] cdc_wdm 5-1:1.0: skipping garbage
[ 1632.180608][T23716] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1632.394951][T23716] usb 5-1: USB disconnect, device number 50
[ 1632.554002][ T5277] usb 2-1: USB disconnect, device number 41
[ 1632.812918][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1632.843306][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1632.860573][   T63] bond0 (unregistering): Released all slaves
[ 1632.893291][T30899] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1632.916294][T30902] tipc: Started in network mode
[ 1632.924998][T30902] tipc: Node identity 5, cluster identity 4711
[ 1632.931610][T30902] tipc: Node number set to 5
[ 1632.986928][ T5236] Bluetooth: hci1: command tx timeout
[ 1633.074525][T30909] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.5520'.
[ 1633.084812][T30909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5520'.
[ 1633.497917][T30921] dccp_close: ABORT with 190 bytes unread
[ 1633.896303][   T63] hsr_slave_0: left promiscuous mode
[ 1633.909601][   T63] hsr_slave_1: left promiscuous mode
[ 1633.989933][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1634.021778][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1634.096386][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1634.135938][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1634.263392][   T63] veth1_macvtap: left promiscuous mode
[ 1634.304579][   T63] veth0_macvtap: left promiscuous mode
[ 1634.323439][   T63] veth1_vlan: left promiscuous mode
[ 1634.353643][   T63] veth0_vlan: left promiscuous mode
[ 1634.364961][T23716] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1634.570680][T23716] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[ 1634.607180][T23716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1634.672343][T23716] usb 2-1: config 0 descriptor??
[ 1635.074430][ T5236] Bluetooth: hci1: command tx timeout
[ 1635.088522][T30944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1635.100022][T30944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1635.373931][T23716] gs_usb 2-1:0.0: Couldn't get device config: (err=-121)
[ 1635.413575][T23716] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121
[ 1636.141890][   T63] team0 (unregistering): Port device team_slave_1 removed
[ 1636.304985][   T63] team0 (unregistering): Port device team_slave_0 removed
[ 1636.914696][   T59] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1637.114583][   T59] usb 3-1: Using ep0 maxpacket: 32
[ 1637.144872][   T59] usb 3-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01
[ 1637.154754][ T5236] Bluetooth: hci1: command tx timeout
[ 1637.190479][   T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.208775][   T59] usb 3-1: Product: syz
[ 1637.213283][   T59] usb 3-1: Manufacturer: syz
[ 1637.220315][   T59] usb 3-1: SerialNumber: syz
[ 1637.251476][   T59] usb 3-1: config 0 descriptor??
[ 1637.286600][   T59] usb-storage 3-1:0.0: USB Mass Storage device detected
[ 1637.400719][   T59] usb-storage 3-1:0.0: device ignored
[ 1637.492777][T30868] chnl_net:caif_netlink_parms(): no params data found
[ 1637.739790][T30868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1637.749235][T30868] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1637.759036][T30868] bridge_slave_0: entered allmulticast mode
[ 1637.807204][T30868] bridge_slave_0: entered promiscuous mode
[ 1637.835712][T30868] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1637.884659][T30868] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1637.906137][T30868] bridge_slave_1: entered allmulticast mode
[ 1637.926093][T30868] bridge_slave_1: entered promiscuous mode
[ 1637.996521][T30991] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5536'.
[ 1638.014989][T30991] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5536'.
[ 1638.089987][T30868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1638.138337][T30868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1638.303881][T30868] team0: Port device team_slave_0 added
[ 1638.388681][T30868] team0: Port device team_slave_1 added
[ 1638.394701][T23716] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1638.441465][T23735] usb 2-1: USB disconnect, device number 42
[ 1638.574782][T23716] usb 5-1: device descriptor read/64, error -71
[ 1638.630806][T30868] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1638.643028][T30868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1638.698531][T30868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1638.772956][T30868] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1638.790239][T30868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1638.831889][T30868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1638.894711][T23716] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1639.064626][T23716] usb 5-1: device descriptor read/64, error -71
[ 1639.119166][T30868] hsr_slave_0: entered promiscuous mode
[ 1639.147977][T30868] hsr_slave_1: entered promiscuous mode
[ 1639.163136][T30868] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1639.175538][T30868] Cannot create hsr debugfs directory
[ 1639.209801][T23716] usb usb5-port1: attempt power cycle
[ 1639.224987][ T5236] Bluetooth: hci1: command tx timeout
[ 1639.645100][T23716] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1639.699613][T23716] usb 5-1: device descriptor read/8, error -71
[ 1639.785317][T31034] FAULT_INJECTION: forcing a failure.
[ 1639.785317][T31034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1639.817487][T31034] CPU: 0 UID: 0 PID: 31034 Comm: syz.1.5545 Not tainted 6.11.0-rc2-syzkaller #0
[ 1639.826559][T31034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1639.836612][T31034] Call Trace:
[ 1639.839883][T31034]  <TASK>
[ 1639.842802][T31034]  dump_stack_lvl+0x241/0x360
[ 1639.847482][T31034]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1639.852673][T31034]  ? __pfx__printk+0x10/0x10
[ 1639.857259][T31034]  ? __pfx_lock_release+0x10/0x10
[ 1639.862293][T31034]  should_fail_ex+0x3b0/0x4e0
[ 1639.866979][T31034]  _copy_from_user+0x2f/0xe0
[ 1639.871566][T31034]  get_user_ifreq+0xc3/0x200
[ 1639.876149][T31034]  sock_ioctl+0x796/0x8e0
[ 1639.880472][T31034]  ? __pfx_sock_ioctl+0x10/0x10
[ 1639.885318][T31034]  ? __fget_files+0x3f6/0x470
[ 1639.889987][T31034]  ? __fget_files+0x29/0x470
[ 1639.894608][T31034]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1639.899558][T31034]  ? security_file_ioctl+0x87/0xb0
[ 1639.904676][T31034]  ? __pfx_sock_ioctl+0x10/0x10
[ 1639.909529][T31034]  __se_sys_ioctl+0xfc/0x170
[ 1639.914127][T31034]  do_syscall_64+0xf3/0x230
[ 1639.918627][T31034]  ? clear_bhb_loop+0x35/0x90
[ 1639.923301][T31034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1639.929184][T31034] RIP: 0033:0x7f6d087779f9
[ 1639.933590][T31034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1639.953192][T31034] RSP: 002b:00007f6d09595048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1639.961622][T31034] RAX: ffffffffffffffda RBX: 00007f6d08905f80 RCX: 00007f6d087779f9
[ 1639.969593][T31034] RDX: 0000000020000000 RSI: 00000000000089f1 RDI: 0000000000000003
[ 1639.977567][T31034] RBP: 00007f6d095950a0 R08: 0000000000000000 R09: 0000000000000000
[ 1639.985706][T31034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1639.993667][T31034] R13: 000000000000000b R14: 00007f6d08905f80 R15: 00007f6d08a2fa38
[ 1640.001642][T31034]  </TASK>
[ 1640.053080][T23735] usb 3-1: USB disconnect, device number 24
[ 1640.164514][T23716] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1640.216312][T23716] usb 5-1: device descriptor read/8, error -71
[ 1640.338179][T23716] usb usb5-port1: unable to enumerate USB device
[ 1640.631080][T23716] IPVS: starting estimator thread 0...
[ 1640.735550][T31057] IPVS: using max 16 ests per chain, 38400 per kthread
[ 1641.070346][T30868] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1641.134703][T30868] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1641.149056][T31071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5554'.
[ 1641.199211][T30868] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1641.227845][T31071] fuse: Bad value for 'fd'
[ 1641.272619][T30868] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1641.525877][   T59] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1641.559495][T30868] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1641.613983][T30868] 8021q: adding VLAN 0 to HW filter on device team0
[ 1641.665186][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1641.672420][ T8623] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1641.724688][   T59] usb 2-1: Using ep0 maxpacket: 32
[ 1641.745653][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1641.752896][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1641.760707][   T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1641.792231][   T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1641.833705][   T59] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1641.869040][   T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1641.920075][   T59] usb 2-1: config 0 descriptor??
[ 1641.950383][   T59] hub 2-1:0.0: USB hub found
[ 1642.009941][T30868] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1642.173063][   T59] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1642.209004][T30868] veth0_vlan: entered promiscuous mode
[ 1642.232811][   T59] usbhid 2-1:0.0: can't add hid device: -71
[ 1642.251213][   T59] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1642.263451][T30868] veth1_vlan: entered promiscuous mode
[ 1642.321147][   T59] usb 2-1: USB disconnect, device number 43
[ 1642.380666][T30868] veth0_macvtap: entered promiscuous mode
[ 1642.393227][T30868] veth1_macvtap: entered promiscuous mode
[ 1642.413404][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1642.426151][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.427389][T23714] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1642.436526][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1642.456517][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.468993][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1642.481117][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.491057][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1642.508725][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.523922][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1642.545683][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.556102][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1642.567416][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.588063][T30868] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1642.604549][ T8623] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1642.633779][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1642.641927][T23714] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1642.646461][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.669744][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1642.673746][T23714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1642.682849][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.720724][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1642.722567][T23714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1642.742396][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.764494][ T8623] usb 5-1: device descriptor read/64, error -71
[ 1642.774768][T23714] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1642.784658][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1642.804486][T23714] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1642.807143][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.827329][T23714] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1642.829287][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1642.846872][T23714] usb 4-1: Product: syz
[ 1642.851695][T23714] usb 4-1: Manufacturer: syz
[ 1642.876416][T23714] cdc_wdm 4-1:1.0: skipping garbage
[ 1642.891967][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.901953][T23714] cdc_wdm 4-1:1.0: skipping garbage
[ 1642.910456][T23714] cdc_wdm 4-1:1.0: skipping garbage
[ 1642.915937][T30868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1642.935126][T23714] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1642.944477][T30868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1642.959858][T30868] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1642.982581][T30868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1642.994280][T30868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1643.003549][T30868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1643.012589][T30868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1643.045442][ T8623] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1643.103872][T23714] usb 4-1: USB disconnect, device number 28
[ 1643.134937][T23716] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1643.215263][ T8623] usb 5-1: device descriptor read/64, error -71
[ 1643.231290][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1643.252744][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1643.303534][T16904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1643.333441][T16904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1643.355892][ T8623] usb usb5-port1: attempt power cycle
[ 1643.361929][T31120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5568'.
[ 1643.361959][T23716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1643.385756][T31120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5568'.
[ 1643.409115][T23716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1643.432044][T23716] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1643.471485][T23716] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=e4.16
[ 1643.481163][T31120] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1643.493907][T23716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1643.526139][T23716] usb 2-1: config 0 descriptor??
[ 1643.552254][T23716] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s)
[ 1643.776621][ T8623] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1643.825622][ T8623] usb 5-1: device descriptor read/8, error -71
[ 1643.883213][T23716] usb 2-1: USB disconnect, device number 44
[ 1644.056924][ T5277] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1644.094612][ T8623] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1644.145531][ T8623] usb 5-1: device descriptor read/8, error -71
[ 1644.264863][ T5277] usb 4-1: Using ep0 maxpacket: 16
[ 1644.286282][ T5277] usb 4-1: config 0 has an invalid interface number: 7 but max is 0
[ 1644.300562][ T8623] usb usb5-port1: unable to enumerate USB device
[ 1644.313725][ T5277] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1644.341863][ T5277] usb 4-1: config 0 has no interface number 0
[ 1644.348809][ T5277] usb 4-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1644.376061][ T5277] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00
[ 1644.391029][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1644.403629][ T5277] usb 4-1: config 0 descriptor??
[ 1644.417292][ T5277] pxrc 4-1:0.7: Could not find endpoint
[ 1644.432141][ T5277] usbhid 4-1:0.7: couldn't find an input interrupt endpoint
[ 1644.625142][ T5276] usb 4-1: USB disconnect, device number 29
[ 1645.504591][T29028] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1645.744489][T29028] usb 2-1: Using ep0 maxpacket: 8
[ 1645.760887][T29028] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[ 1645.780465][T29028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1645.814933][T29028] usb 2-1: config 0 descriptor??
[ 1645.830428][T29028] ums-alauda 2-1:0.0: USB Mass Storage device detected
[ 1646.044618][T29028] usb 2-1: USB disconnect, device number 45
[ 1646.520762][T31233] ip6t_rpfilter: unknown options
[ 1646.946942][T11917] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1647.037214][T31241] bridge0: port 3(vlan2) entered blocking state
[ 1647.054052][T31241] bridge0: port 3(vlan2) entered disabled state
[ 1647.084892][T31241] vlan2: entered allmulticast mode
[ 1647.105413][T31241] vlan2: entered promiscuous mode
[ 1647.220060][T11917] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1647.416827][T11917] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1647.717173][T11917] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1647.986636][T30504] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1647.998425][T30504] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1648.007539][T30504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1648.021104][T30504] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1648.031852][T30504] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1648.043757][T30504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1648.295401][T11917] bridge_slave_1: left allmulticast mode
[ 1648.314571][T11917] bridge_slave_1: left promiscuous mode
[ 1648.320366][T11917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1648.437209][T11917] bridge_slave_0: left allmulticast mode
[ 1648.442887][T11917] bridge_slave_0: left promiscuous mode
[ 1648.492157][T11917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1648.775170][T29028] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1648.839199][ T8623] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1649.008449][T29028] usb 3-1: Using ep0 maxpacket: 16
[ 1649.036785][ T8623] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1649.055861][T29028] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1649.064378][ T8623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[ 1649.108113][T29028] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1649.114386][ T8623] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1649.155102][T29028] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00
[ 1649.187289][T29028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1649.190071][ T8623] usb 2-1: string descriptor 0 read error: -22
[ 1649.204460][ T8623] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[ 1649.239548][ T8623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1649.252917][T29028] usb 3-1: config 0 descriptor??
[ 1649.266685][ T8623] usb 2-1: config 0 descriptor??
[ 1649.298242][ T8623] em28xx 2-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[ 1649.324443][ T8623] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 1649.507598][ T5276] usb 3-1: USB disconnect, device number 25
[ 1649.855146][T11917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1649.881835][T11917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1649.932560][T11917] bond0 (unregistering): Released all slaves
[ 1650.021315][T31290] bridge0: port 4(vlan3) entered blocking state
[ 1650.034704][T31290] bridge0: port 4(vlan3) entered disabled state
[ 1650.041288][T31290] vlan3: entered allmulticast mode
[ 1650.061677][T31290] vlan3: left allmulticast mode
[ 1650.115391][ T5236] Bluetooth: hci3: command tx timeout
[ 1650.268086][ T8623] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1650.280474][ T8623] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[ 1650.304476][ T8623] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[ 1650.315642][ T8623] em28xx 2-1:0.0: No AC97 audio processor
[ 1650.342026][ T8623] usb 2-1: USB disconnect, device number 46
[ 1650.366394][ T8623] em28xx 2-1:0.0: Disconnecting em28xx
[ 1650.412305][ T8623] em28xx 2-1:0.0: Freeing device
[ 1650.729629][T11917] hsr_slave_0: left promiscuous mode
[ 1650.740666][T11917] hsr_slave_1: left promiscuous mode
[ 1650.757063][T11917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1650.773236][T11917] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1650.825313][T11917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1650.874431][T11917] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1651.027477][T11917] veth1_macvtap: left promiscuous mode
[ 1651.051581][T11917] veth0_macvtap: left promiscuous mode
[ 1651.077863][T11917] veth1_vlan: left promiscuous mode
[ 1651.097055][T11917] veth0_vlan: left promiscuous mode
[ 1652.028179][   T29] audit: type=1326 audit(1722847789.442:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31365 comm="syz.3.5620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f176b9779f9 code=0x0
[ 1652.185287][ T5236] Bluetooth: hci3: command tx timeout
[ 1652.234457][ T5276] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1652.465016][ T5276] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[ 1652.507533][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1652.529399][ T5276] usb 3-1: config 0 descriptor??
[ 1652.716745][T23735] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1652.818658][T11917] team0 (unregistering): Port device team_slave_1 removed
[ 1652.833471][T31366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1652.862366][T31366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1652.924607][T23735] usb 2-1: Using ep0 maxpacket: 16
[ 1652.996786][T11917] team0 (unregistering): Port device team_slave_0 removed
[ 1653.022032][T31377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1653.038791][T31377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1653.082518][ T5276] gs_usb 3-1:0.0: Couldn't get device config: (err=-121)
[ 1653.093119][ T5276] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121
[ 1653.204523][ T5286] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1653.419825][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1653.458647][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[ 1653.471345][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1653.495919][ T5286] usb 4-1: string descriptor 0 read error: -22
[ 1653.502235][ T5286] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[ 1653.513778][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1653.543313][ T5286] usb 4-1: config 0 descriptor??
[ 1653.561910][ T5286] em28xx 4-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[ 1653.594091][ T5286] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 1653.633330][T23735] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1653.686766][T23735] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1653.714167][T23735] usb 2-1: can't read configurations, error -71
[ 1654.274744][ T5236] Bluetooth: hci3: command tx timeout
[ 1654.529525][T31381] bridge0: port 3(vlan2) entered blocking state
[ 1654.554701][T31381] bridge0: port 3(vlan2) entered disabled state
[ 1654.572604][T31381] vlan2: entered allmulticast mode
[ 1654.613913][T31381] vlan2: left allmulticast mode
[ 1654.754807][ T5286] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1654.803980][ T5286] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[ 1654.828043][ T5286] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[ 1654.856371][T31277] chnl_net:caif_netlink_parms(): no params data found
[ 1654.870885][ T5286] em28xx 4-1:0.0: No AC97 audio processor
[ 1654.918693][ T5286] usb 4-1: USB disconnect, device number 30
[ 1654.937135][ T5286] em28xx 4-1:0.0: Disconnecting em28xx
[ 1654.975619][ T5286] em28xx 4-1:0.0: Freeing device
[ 1654.998625][T31396] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1655.554934][T31277] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1655.564462][T23735] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1655.578926][T31277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1655.609622][T31277] bridge_slave_0: entered allmulticast mode
[ 1655.654052][T31277] bridge_slave_0: entered promiscuous mode
[ 1655.667130][T23715] usb 3-1: USB disconnect, device number 26
[ 1655.695452][T31277] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1655.729352][T31277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1655.748942][T31277] bridge_slave_1: entered allmulticast mode
[ 1655.762069][T31277] bridge_slave_1: entered promiscuous mode
[ 1655.843950][T23735] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[ 1655.858344][T23735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1655.898559][T23735] usb 1-1: config 0 descriptor??
[ 1656.082681][T31277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1656.106438][T31424] netlink: 'syz.1.5630': attribute type 4 has an invalid length.
[ 1656.118244][T31277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1656.184862][T31402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1656.201695][T31402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1656.345474][ T5236] Bluetooth: hci3: command tx timeout
[ 1656.427711][ T8623] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1656.479061][T23735] gs_usb 1-1:0.0: Couldn't get device config: (err=-121)
[ 1656.498654][T23735] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121
[ 1656.518541][T31277] team0: Port device team_slave_0 added
[ 1656.566872][T31277] team0: Port device team_slave_1 added
[ 1656.648426][ T8623] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1656.703615][ T8623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1656.715774][ T8623] usb 2-1: Product: syz
[ 1656.734156][ T8623] usb 2-1: Manufacturer: syz
[ 1656.772495][ T8623] usb 2-1: SerialNumber: syz
[ 1656.794135][ T8623] usb 2-1: config 0 descriptor??
[ 1656.814129][T31277] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1656.825253][ T8623] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1656.841671][T31277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1656.886060][ T8623] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-22)
[ 1656.936559][ T8623] dvb_usb_digitv 2-1:0.0: probe with driver dvb_usb_digitv failed with error -22
[ 1656.956575][T31277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1657.002837][T31277] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1657.064478][T31277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1657.143465][T31277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1657.177377][T31424] netlink: 'syz.1.5630': attribute type 4 has an invalid length.
[ 1657.306154][T31277] hsr_slave_0: entered promiscuous mode
[ 1657.314124][T31277] hsr_slave_1: entered promiscuous mode
[ 1657.326351][T31277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1657.343275][T31277] Cannot create hsr debugfs directory
[ 1658.441666][T23715] usb 1-1: USB disconnect, device number 30
[ 1658.951319][T31477] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000'
[ 1658.985478][T31277] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1659.008206][T31477] delete_channel: no stack
[ 1659.032849][T31277] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1659.062112][T31277] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1659.133161][T31277] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1659.178195][   T59] usb 2-1: USB disconnect, device number 49
[ 1659.433922][T31495] netlink: 580 bytes leftover after parsing attributes in process `syz.2.5643'.
[ 1659.476987][T31498] xt_HMARK: proto mask must be zero with L3 mode
[ 1659.535737][T31277] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1659.610126][T31277] 8021q: adding VLAN 0 to HW filter on device team0
[ 1659.666031][T23716] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1659.673194][T23716] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1659.714475][T23715] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1659.724147][T23716] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1659.731397][T23716] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1659.872981][T31277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1659.924560][T31277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1659.946875][T23715] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1659.981676][T23715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1660.035552][T23715] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1660.123608][T23715] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1660.141978][T31277] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1660.209704][T23715] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1660.256030][T23715] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1660.278313][T23715] usb 4-1: Product: syz
[ 1660.300923][T23715] usb 4-1: Manufacturer: syz
[ 1660.322311][T31277] veth0_vlan: entered promiscuous mode
[ 1660.339058][T23715] cdc_wdm 4-1:1.0: skipping garbage
[ 1660.376421][T23715] cdc_wdm 4-1:1.0: skipping garbage
[ 1660.395858][T23715] cdc_wdm 4-1:1.0: skipping garbage
[ 1660.407365][T31277] veth1_vlan: entered promiscuous mode
[ 1660.415775][T23715] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1660.544168][T31277] veth0_macvtap: entered promiscuous mode
[ 1660.583917][T31277] veth1_macvtap: entered promiscuous mode
[ 1660.659336][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1660.710811][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1660.742873][T23715] usb 4-1: USB disconnect, device number 31
[ 1660.771302][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1660.822478][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1660.855952][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1660.882700][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1660.914457][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1660.964383][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1660.979398][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1660.998253][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.008647][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1661.048390][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.068578][T31277] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1661.095459][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.118466][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.129015][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.140162][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.152495][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.188718][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.215637][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.233272][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.278692][T31534] FAULT_INJECTION: forcing a failure.
[ 1661.278692][T31534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1661.309312][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.318685][T31534] CPU: 0 UID: 0 PID: 31534 Comm: syz.0.5649 Not tainted 6.11.0-rc2-syzkaller #0
[ 1661.328898][T31534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1661.339034][T31534] Call Trace:
[ 1661.342305][T31534]  <TASK>
[ 1661.345226][T31534]  dump_stack_lvl+0x241/0x360
[ 1661.349899][T31534]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1661.355087][T31534]  ? __pfx__printk+0x10/0x10
[ 1661.359667][T31534]  ? __pfx_lock_release+0x10/0x10
[ 1661.364687][T31534]  should_fail_ex+0x3b0/0x4e0
[ 1661.369361][T31534]  _copy_from_user+0x2f/0xe0
[ 1661.373948][T31534]  copy_msghdr_from_user+0xae/0x680
[ 1661.379142][T31534]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1661.384948][T31534]  __sys_recvmsg+0x252/0x3e0
[ 1661.389528][T31534]  ? __pfx___sys_recvmsg+0x10/0x10
[ 1661.394648][T31534]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1661.400982][T31534]  ? do_syscall_64+0x100/0x230
[ 1661.405745][T31534]  ? do_syscall_64+0xb6/0x230
[ 1661.410413][T31534]  do_syscall_64+0xf3/0x230
[ 1661.414905][T31534]  ? clear_bhb_loop+0x35/0x90
[ 1661.419568][T31534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.425446][T31534] RIP: 0033:0x7f70d05779f9
[ 1661.429843][T31534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1661.449524][T31534] RSP: 002b:00007f70d1359048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1661.457925][T31534] RAX: ffffffffffffffda RBX: 00007f70d0705f80 RCX: 00007f70d05779f9
[ 1661.465885][T31534] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004
[ 1661.473939][T31534] RBP: 00007f70d13590a0 R08: 0000000000000000 R09: 0000000000000000
[ 1661.481901][T31534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1661.489864][T31534] R13: 000000000000000b R14: 00007f70d0705f80 R15: 00007f70d082fa38
[ 1661.497834][T31534]  </TASK>
[ 1661.543589][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.572559][T31277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.594697][T31277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.628416][T31277] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1661.668900][T31277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1661.713324][T31277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1661.762218][T31277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1661.804418][T31277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1662.039512][T31551] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000'
[ 1662.070151][T31551] delete_channel: no stack
[ 1662.177396][T11917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1662.216037][T11917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1662.333611][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1662.362418][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1662.874825][T23715] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1662.965170][ T8623] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1663.034439][   T59] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1663.064813][T23715] usb 3-1: Using ep0 maxpacket: 32
[ 1663.076746][T23715] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1663.089392][T23715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1663.099852][T23715] usb 3-1: Product: syz
[ 1663.104181][T23715] usb 3-1: Manufacturer: syz
[ 1663.110541][T23715] usb 3-1: SerialNumber: syz
[ 1663.122358][T23715] usb 3-1: config 0 descriptor??
[ 1663.135082][ T8623] usb 2-1: device descriptor read/64, error -71
[ 1663.204414][   T59] usb 5-1: device descriptor read/64, error -71
[ 1663.434464][ T8623] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1663.474489][   T59] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1663.537541][T23715] airspy 3-1:0.0: Board ID: 00
[ 1663.542356][T23715] airspy 3-1:0.0: Firmware version: 
[ 1663.594548][ T8623] usb 2-1: device descriptor read/64, error -71
[ 1663.625747][   T59] usb 5-1: device descriptor read/64, error -71
[ 1663.725695][T31583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5660'.
[ 1663.725842][ T8623] usb usb2-port1: attempt power cycle
[ 1663.752397][   T59] usb usb5-port1: attempt power cycle
[ 1663.911282][T23715] airspy 3-1:0.0: usb_control_msg() failed -71 request 11
[ 1663.961077][T23715] airspy 3-1:0.0: Registered as swradio16
[ 1663.989212][T23715] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 1664.025796][T23715] usb 3-1: USB disconnect, device number 27
[ 1664.147893][T31597] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000'
[ 1664.172078][T31597] delete_channel: no stack
[ 1664.174439][ T8623] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1664.184220][   T59] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1664.224980][   T59] usb 5-1: device descriptor read/8, error -71
[ 1664.236139][ T8623] usb 2-1: device descriptor read/8, error -71
[ 1664.364924][T23716] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1664.494647][   T59] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1664.514816][ T8623] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1664.536903][   T59] usb 5-1: device descriptor read/8, error -71
[ 1664.545680][ T8623] usb 2-1: device descriptor read/8, error -71
[ 1664.552883][T23716] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[ 1664.566605][T23716] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.578400][T23716] usb 1-1: config 0 has no interface number 0
[ 1664.585808][T23716] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1664.598102][T23716] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1664.616898][T23716] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1664.631587][T23716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1664.644034][T23716] usb 1-1: Product: syz
[ 1664.649100][T23716] usb 1-1: Manufacturer: syz
[ 1664.654554][T23716] usb 1-1: SerialNumber: syz
[ 1664.666083][ T8623] usb usb2-port1: unable to enumerate USB device
[ 1664.672588][   T59] usb usb5-port1: unable to enumerate USB device
[ 1664.672765][T23716] usb 1-1: config 0 descriptor??
[ 1664.694629][T23715] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1664.877745][T23715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1664.888122][T23715] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1664.900903][T23715] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1664.910286][T23715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1664.918861][T23715] usb 3-1: Product: syz
[ 1664.923259][T23715] usb 3-1: Manufacturer: syz
[ 1664.929078][T23715] usb 3-1: SerialNumber: syz
[ 1664.994464][T23714] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1665.100787][T23716] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1665.132242][T23716] usb 1-1: USB disconnect, device number 31
[ 1665.162991][T31599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1665.176109][T23714] usb 4-1: Using ep0 maxpacket: 16
[ 1665.185907][T31599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1665.187667][T23714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1665.213989][T23714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1665.232618][T23714] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[ 1665.245164][T23715] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1665.252380][T23714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1665.271462][T23714] usb 4-1: config 0 descriptor??
[ 1665.294818][T23715] usb 3-1: USB disconnect, device number 28
[ 1665.570984][T16491] udevd[16491]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1665.691376][T23714] waterforce 0003:1044:7A4D.0038: unknown main item tag 0x0
[ 1665.699042][T23714] waterforce 0003:1044:7A4D.0038: unknown main item tag 0x0
[ 1665.720497][T23714] waterforce 0003:1044:7A4D.0038: unknown main item tag 0x0
[ 1665.729937][T23714] waterforce 0003:1044:7A4D.0038: unknown main item tag 0x0
[ 1665.743311][T23714] waterforce 0003:1044:7A4D.0038: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0
[ 1665.825065][T23714] waterforce 0003:1044:7A4D.0038: fw version request failed with -38
[ 1666.020160][T23715] usb 4-1: USB disconnect, device number 32
[ 1666.071616][   T29] audit: type=1326 audit(1722847803.482:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1666.094020][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1666.129786][   T29] audit: type=1326 audit(1722847803.522:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1666.161456][   T29] audit: type=1326 audit(1722847803.542:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1666.199980][   T29] audit: type=1326 audit(1722847803.542:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1666.231114][   T29] audit: type=1326 audit(1722847803.542:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1666.302308][   T29] audit: type=1326 audit(1722847803.542:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1666.369317][   T29] audit: type=1326 audit(1722847803.542:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1666.430978][   T29] audit: type=1326 audit(1722847803.542:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1666.484571][ T8623] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1666.490134][T31619] FAULT_INJECTION: forcing a failure.
[ 1666.490134][T31619] name failslab, interval 1, probability 0, space 0, times 0
[ 1666.504836][T31619] CPU: 1 UID: 0 PID: 31619 Comm: syz.1.5671 Not tainted 6.11.0-rc2-syzkaller #0
[ 1666.513882][T31619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1666.523945][T31619] Call Trace:
[ 1666.527219][T31619]  <TASK>
[ 1666.530147][T31619]  dump_stack_lvl+0x241/0x360
[ 1666.534823][T31619]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1666.540012][T31619]  ? __pfx__printk+0x10/0x10
[ 1666.544598][T31619]  should_fail_ex+0x3b0/0x4e0
[ 1666.549266][T31619]  ? skb_clone+0x20c/0x390
[ 1666.553666][T31619]  should_failslab+0xac/0x100
[ 1666.558339][T31619]  ? skb_clone+0x20c/0x390
[ 1666.562740][T31619]  kmem_cache_alloc_noprof+0x6c/0x2a0
[ 1666.568124][T31619]  skb_clone+0x20c/0x390
[ 1666.572382][T31619]  ? dev_queue_xmit_nit+0x220/0xc10
[ 1666.577595][T31619]  dev_queue_xmit_nit+0x419/0xc10
[ 1666.582610][T31619]  ? dev_queue_xmit_nit+0x2b/0xc10
[ 1666.587711][T31619]  ? validate_xmit_skb+0x9f9/0x1120
[ 1666.592904][T31619]  dev_hard_start_xmit+0x15f/0x7e0
[ 1666.598013][T31619]  ? __pfx_validate_xmit_skb+0x10/0x10
[ 1666.603467][T31619]  __dev_queue_xmit+0x1b63/0x3e90
[ 1666.608478][T31619]  ? kasan_save_track+0x51/0x80
[ 1666.613321][T31619]  ? do_syscall_64+0xf3/0x230
[ 1666.618013][T31619]  ? __dev_queue_xmit+0x2da/0x3e90
[ 1666.623150][T31619]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1666.628542][T31619]  ? __copy_skb_header+0x437/0x5b0
[ 1666.633643][T31619]  ? __asan_memcpy+0x40/0x70
[ 1666.638221][T31619]  ? __copy_skb_header+0x437/0x5b0
[ 1666.643321][T31619]  ? __skb_clone+0x454/0x6c0
[ 1666.647900][T31619]  ? skb_clone+0x240/0x390
[ 1666.652300][T31619]  __netlink_deliver_tap+0x54d/0x7c0
[ 1666.657581][T31619]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1666.662761][T31619]  netlink_deliver_tap+0x19d/0x1b0
[ 1666.667862][T31619]  netlink_unicast+0x7be/0x990
[ 1666.672616][T31619]  ? __pfx_netlink_unicast+0x10/0x10
[ 1666.677886][T31619]  ? __virt_addr_valid+0x183/0x530
[ 1666.683008][T31619]  ? __check_object_size+0x49c/0x900
[ 1666.688276][T31619]  ? bpf_lsm_netlink_send+0x9/0x10
[ 1666.693391][T31619]  netlink_sendmsg+0x8e4/0xcb0
[ 1666.698163][T31619]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1666.703450][T31619]  ? __import_iovec+0x536/0x820
[ 1666.708306][T31619]  ? aa_sock_msg_perm+0x91/0x160
[ 1666.713234][T31619]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1666.718522][T31619]  ? security_socket_sendmsg+0x87/0xb0
[ 1666.723999][T31619]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1666.729282][T31619]  __sock_sendmsg+0x221/0x270
[ 1666.733953][T31619]  ____sys_sendmsg+0x525/0x7d0
[ 1666.738741][T31619]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1666.744048][T31619]  __sys_sendmsg+0x2b0/0x3a0
[ 1666.748629][T31619]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1666.753723][T31619]  ? vfs_write+0x7c4/0xc90
[ 1666.758151][T31619]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1666.764476][T31619]  ? do_syscall_64+0x100/0x230
[ 1666.766730][ T8623] usb 1-1: Using ep0 maxpacket: 16
[ 1666.769245][T31619]  ? do_syscall_64+0xb6/0x230
[ 1666.769279][T31619]  do_syscall_64+0xf3/0x230
[ 1666.783877][T31619]  ? clear_bhb_loop+0x35/0x90
[ 1666.788548][T31619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1666.794442][T31619] RIP: 0033:0x7f6d087779f9
[ 1666.798845][T31619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1666.818453][T31619] RSP: 002b:00007f6d09595048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1666.826856][T31619] RAX: ffffffffffffffda RBX: 00007f6d08905f80 RCX: 00007f6d087779f9
[ 1666.834813][T31619] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[ 1666.842809][T31619] RBP: 00007f6d095950a0 R08: 0000000000000000 R09: 0000000000000000
[ 1666.850766][T31619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1666.858721][T31619] R13: 000000000000000b R14: 00007f6d08905f80 R15: 00007f6d08a2fa38
[ 1666.866692][T31619]  </TASK>
[ 1666.869706][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1666.884622][   T29] audit: type=1326 audit(1722847803.542:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1666.926431][ T8623] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 1666.939207][ T8623] usb 1-1: config 0 has no interface number 0
[ 1666.953584][ T8623] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1666.969672][   T29] audit: type=1326 audit(1722847803.542:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31613 comm="syz.0.5670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d05779f9 code=0x7ffc0000
[ 1667.000298][ T8623] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1667.017618][ T8623] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1667.034669][ T8623] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1667.059875][ T8623] usb 1-1: Product: syz
[ 1667.075647][ T8623] usb 1-1: SerialNumber: syz
[ 1667.105256][ T8623] usb 1-1: config 0 descriptor??
[ 1667.139276][ T8623] cm109 1-1:0.8: invalid payload size 0, expected 4
[ 1667.163678][ T8623] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input87
[ 1667.269684][T31624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5672'.
[ 1667.724267][T31636] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000'
[ 1667.752758][T31636] delete_channel: no stack
[ 1667.992034][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1667.999432][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1668.006591][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1668.013736][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1668.021903][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1668.029067][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1668.036194][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1668.043321][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1668.050468][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1668.057578][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1668.065848][ T5286] usb 1-1: USB disconnect, device number 32
[ 1668.071752][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1668.098830][ T5286] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1668.361677][T31650] xt_TCPMSS: Only works on TCP SYN packets
[ 1668.785203][T31662] delete_channel: no stack
[ 1668.983404][T31671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5686'.
[ 1669.071268][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.077802][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.197575][T31681] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000'
[ 1669.220594][T31681] delete_channel: no stack
[ 1669.946208][ T8623] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1670.146503][ T8623] usb 4-1: Using ep0 maxpacket: 16
[ 1670.168858][ T8623] usb 4-1: config 0 has an invalid interface number: 7 but max is 0
[ 1670.195925][ T8623] usb 4-1: config 0 has no interface number 0
[ 1670.213684][ T8623] usb 4-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1670.265607][ T8623] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00
[ 1670.307165][ T8623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1670.365109][ T8623] usb 4-1: config 0 descriptor??
[ 1670.374275][ T8623] pxrc 4-1:0.7: Could not find endpoint
[ 1670.386929][ T8623] usbhid 4-1:0.7: couldn't find an input interrupt endpoint
[ 1670.591068][ T8623] usb 4-1: USB disconnect, device number 33
[ 1670.726494][T31716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5701'.
[ 1672.009973][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5712'.
[ 1673.011554][T30504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1673.023329][T30504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1673.033117][T30504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1673.042735][T30504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1673.051255][T30504] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1673.060036][T30504] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1673.231145][T31773] hub 6-0:1.0: USB hub found
[ 1673.298711][T31773] hub 6-0:1.0: 1 port detected
[ 1673.905887][T31768] chnl_net:caif_netlink_parms(): no params data found
[ 1674.148659][T31793] fuse: Bad value for 'group_id'
[ 1674.153660][T31793] fuse: Bad value for 'group_id'
[ 1674.241402][T31768] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1674.261197][T31768] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1674.280971][T31768] bridge_slave_0: entered allmulticast mode
[ 1674.291927][T31768] bridge_slave_0: entered promiscuous mode
[ 1674.319161][T31768] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1674.358461][T31768] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1674.406962][T31768] bridge_slave_1: entered allmulticast mode
[ 1674.427763][T31768] bridge_slave_1: entered promiscuous mode
[ 1674.537091][T31802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5725'.
[ 1674.718420][T31768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1674.778885][T31768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1674.915014][T31768] team0: Port device team_slave_0 added
[ 1674.954647][T23714] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1675.015374][T31768] team0: Port device team_slave_1 added
[ 1675.144731][T30504] Bluetooth: hci0: command tx timeout
[ 1675.170784][T31768] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1675.198620][T23714] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[ 1675.218760][T31768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1675.244761][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1675.258228][T23714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1675.291980][T23714] usb 2-1: config 0 descriptor??
[ 1675.326015][T31768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1675.365184][T31768] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1675.379787][T31768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1675.491381][T31768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1675.768462][T31800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1675.781103][T31800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1675.796294][T31768] hsr_slave_0: entered promiscuous mode
[ 1675.835884][T31768] hsr_slave_1: entered promiscuous mode
[ 1675.884800][T31768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1675.932871][T31768] Cannot create hsr debugfs directory
[ 1676.091656][T23714] gs_usb 2-1:0.0: Configuring for 74 interfaces
[ 1676.109571][T23714] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces
[ 1676.143002][T23714] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22
[ 1676.485753][T31768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1676.771142][T31768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1676.930070][T31768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1677.063470][T31768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1677.084634][ T8623] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1677.173145][T31846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5736'.
[ 1677.224537][T30504] Bluetooth: hci0: command tx timeout
[ 1677.335699][ T8623] usb 1-1: Using ep0 maxpacket: 16
[ 1677.353791][ T8623] usb 1-1: config 0 has an invalid interface number: 7 but max is 0
[ 1677.377340][ T8623] usb 1-1: config 0 has no interface number 0
[ 1677.395066][ T8623] usb 1-1: config 0 interface 7 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64
[ 1677.428438][ T8623] usb 1-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1677.470797][ T8623] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00
[ 1677.483884][T31768] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1677.494385][ T8623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1677.531499][ T8623] usb 1-1: config 0 descriptor??
[ 1677.546009][    C1] ------------[ cut here ]------------
[ 1677.546926][T31768] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1677.552315][    C1] WARNING: CPU: 1 PID: 31844 at net/ipv4/route.c:1241 ip_rt_bug+0x2c/0x110
[ 1677.567670][    C1] Modules linked in:
[ 1677.571551][    C1] CPU: 1 UID: 0 PID: 31844 Comm: syz.4.5735 Not tainted 6.11.0-rc2-syzkaller #0
[ 1677.580612][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1677.590743][    C1] RIP: 0010:ip_rt_bug+0x2c/0x110
[ 1677.595714][    C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b aa 82 f7 66 90 e8 74 aa 82 f7 31 ff 48 89 de ba 02 00 00 00 e8 15 a4 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e
[ 1677.615364][    C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286
[ 1677.621422][    C1] RAX: 78cb0e371b2eff00 RBX: ffff88802e4b03c0 RCX: ffffffff81702eca
[ 1677.629422][    C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad540 RDI: ffffffff8c605cc0
[ 1677.637404][    C1] RBP: 0000000000000001 R08: ffffffff9372c89f R09: 1ffffffff26e5913
[ 1677.645399][    C1] R10: dffffc0000000000 R11: fffffbfff26e5914 R12: dffffc0000000000
[ 1677.653367][    C1] R13: dffffc0000000000 R14: ffff88804dbc0000 R15: ffff888017bda080
[ 1677.661370][    C1] FS:  00007f6a774bd6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 1677.670320][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1677.676922][    C1] CR2: 00007f7775241630 CR3: 000000004fb58000 CR4: 00000000003526f0
[ 1677.684903][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1677.692872][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1677.700848][    C1] Call Trace:
[ 1677.704111][    C1]  <IRQ>
[ 1677.706967][    C1]  ? __warn+0x163/0x4e0
[ 1677.711124][    C1]  ? ip_rt_bug+0x2c/0x110
[ 1677.715468][    C1]  ? report_bug+0x2b3/0x500
[ 1677.719956][    C1]  ? ip_rt_bug+0x2c/0x110
[ 1677.724271][    C1]  ? handle_bug+0x3e/0x70
[ 1677.728613][    C1]  ? exc_invalid_op+0x1a/0x50
[ 1677.733271][    C1]  ? asm_exc_invalid_op+0x1a/0x20
[ 1677.738306][    C1]  ? mark_lock+0x9a/0x350
[ 1677.742635][    C1]  ? ip_rt_bug+0x2c/0x110
[ 1677.746976][    C1]  ip_push_pending_frames+0xbf/0x150
[ 1677.752256][    C1]  __icmp_send+0xf89/0x14e0
[ 1677.756787][    C1]  ? __icmp_send+0x59c/0x14e0
[ 1677.761468][    C1]  ? __pfx___icmp_send+0x10/0x10
[ 1677.766425][    C1]  ? mark_lock+0x9a/0x350
[ 1677.770740][    C1]  ? look_up_lock_class+0x77/0x160
[ 1677.775874][    C1]  ? mark_lock+0x9a/0x350
[ 1677.780199][    C1]  ipv4_link_failure+0x62f/0xa10
[ 1677.785191][    C1]  ? __pfx_ipv4_link_failure+0x10/0x10
[ 1677.790640][    C1]  ? do_raw_write_lock+0x148/0x4f0
[ 1677.795784][    C1]  ? __pfx_ipv4_link_failure+0x10/0x10
[ 1677.801309][    C1]  arp_error_report+0x114/0x160
[ 1677.806172][    C1]  neigh_invalidate+0x244/0x470
[ 1677.811035][    C1]  neigh_timer_handler+0x8a5/0xfd0
[ 1677.816159][    C1]  call_timer_fn+0x18e/0x650
[ 1677.820738][    C1]  ? call_timer_fn+0xc0/0x650
[ 1677.825437][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1677.831057][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1677.836179][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1677.841822][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1677.847466][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1677.853100][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1677.858356][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[ 1677.863546][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1677.869196][    C1]  __run_timer_base+0x66a/0x8e0
[ 1677.874044][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1677.879445][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1677.885823][    C1]  run_timer_softirq+0xb7/0x170
[ 1677.890693][    C1]  handle_softirqs+0x2c4/0x970
[ 1677.895506][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[ 1677.900263][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1677.905564][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[ 1677.910812][    C1]  __irq_exit_rcu+0xf4/0x1c0
[ 1677.915440][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1677.920638][    C1]  irq_exit_rcu+0x9/0x30
[ 1677.924898][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1677.930543][    C1]  </IRQ>
[ 1677.933464][    C1]  <TASK>
[ 1677.936409][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1677.942394][    C1] RIP: 0010:xas_find+0x0/0x960
[ 1677.947171][    C1] Code: 48 c7 c7 20 e8 fe 8f 48 89 ee 48 89 da e8 68 c9 38 f9 e9 d6 fa ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 f7 48
[ 1677.966845][    C1] RSP: 0018:ffffc90004c2f290 EFLAGS: 00000286
[ 1677.972905][    C1] RAX: ffffffff81c9a31a RBX: 00000000000009bf RCX: 0000000000040000
[ 1677.980902][    C1] RDX: ffffc90004981000 RSI: 00000000000009bf RDI: ffffc90004c2f460
[ 1677.988885][    C1] RBP: ffffc90004c2f510 R08: ffffffff81c99fe1 R09: 1ffffffff26e5900
[ 1677.996878][    C1] R10: dffffc0000000000 R11: fffffbfff26e5901 R12: ffffc90004c2f460
[ 1678.004860][    C1] R13: dffffc0000000000 R14: ffffffff81cb1c9f R15: 1ffff92000985f34
[ 1678.012835][    C1]  ? filemap_map_pages+0x24f/0x1e70
[ 1678.018060][    C1]  ? xas_next_entry+0x51/0x3d0
[ 1678.022809][    C1]  ? xas_next_entry+0x38a/0x3d0
[ 1678.027680][    C1]  next_uptodate_folio+0x29/0xa40
[ 1678.032693][    C1]  ? filemap_map_pages+0x24f/0x1e70
[ 1678.037948][    C1]  filemap_map_pages+0x302/0x1e70
[ 1678.043037][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1678.048523][    C1]  ? handle_pte_fault+0x331/0x6eb0
[ 1678.053641][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1678.058708][    C1]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1678.064167][    C1]  ? handle_pte_fault+0x21e2/0x6eb0
[ 1678.069375][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1678.074849][    C1]  ? handle_pte_fault+0x21e2/0x6eb0
[ 1678.080051][    C1]  handle_pte_fault+0x39aa/0x6eb0
[ 1678.085086][    C1]  ? __pfx_cgroup_rstat_updated+0x10/0x10
[ 1678.090795][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1678.095843][    C1]  ? __pfx_handle_pte_fault+0x10/0x10
[ 1678.101196][    C1]  ? do_raw_spin_lock+0x14f/0x370
[ 1678.106235][    C1]  ? follow_page_pte+0x29a/0x1ee0
[ 1678.111264][    C1]  ? follow_page_pte+0x83f/0x1ee0
[ 1678.116309][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1678.121322][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1678.126540][    C1]  handle_mm_fault+0x1029/0x1980
[ 1678.131478][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1678.136785][    C1]  ? __get_user_pages+0x78f/0x16a0
[ 1678.141900][    C1]  ? __get_user_pages+0x79d/0x16a0
[ 1678.147023][    C1]  __get_user_pages+0x6ec/0x16a0
[ 1678.151957][    C1]  ? __pfx___get_user_pages+0x10/0x10
[ 1678.157351][    C1]  populate_vma_page_range+0x264/0x330
[ 1678.162848][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1678.168866][    C1]  ? userfaultfd_unmap_complete+0x30c/0x360
[ 1678.174786][    C1]  ? do_mmap+0x961/0x1010
[ 1678.179133][    C1]  __mm_populate+0x27a/0x460
[ 1678.183721][    C1]  ? __pfx___mm_populate+0x10/0x10
[ 1678.188852][    C1]  vm_mmap_pgoff+0x2c3/0x3d0
[ 1678.193453][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1678.198583][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1678.204925][    C1]  ? do_syscall_64+0x100/0x230
[ 1678.209695][    C1]  ? ksys_mmap_pgoff+0xdf/0x720
[ 1678.214559][    C1]  ? __x64_sys_mmap+0x7f/0x140
[ 1678.219355][    C1]  do_syscall_64+0xf3/0x230
[ 1678.223843][    C1]  ? clear_bhb_loop+0x35/0x90
[ 1678.228584][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1678.234536][    C1] RIP: 0033:0x7f6a767779f9
[ 1678.238953][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1678.258541][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1678.264586][    C1] RSP: 002b:00007f6a774bd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1678.272986][    C1] RAX: ffffffffffffffda RBX: 00007f6a76905f80 RCX: 00007f6a767779f9
[ 1678.280984][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000
[ 1678.288974][    C1] RBP: 00007f6a767e58ee R08: ffffffffffffffff R09: 0000000000000000
[ 1678.296966][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[ 1678.304967][    C1] R13: 000000000000000b R14: 00007f6a76905f80 R15: 00007f6a76a2fa38
[ 1678.313222][    C1]  </TASK>
[ 1678.316260][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1678.323522][    C1] CPU: 1 UID: 0 PID: 31844 Comm: syz.4.5735 Not tainted 6.11.0-rc2-syzkaller #0
[ 1678.332548][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1678.342584][    C1] Call Trace:
[ 1678.345858][    C1]  <IRQ>
[ 1678.348687][    C1]  dump_stack_lvl+0x241/0x360
[ 1678.353352][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1678.358537][    C1]  ? __pfx__printk+0x10/0x10
[ 1678.363131][    C1]  ? vscnprintf+0x5d/0x90
[ 1678.367460][    C1]  panic+0x349/0x860
[ 1678.371355][    C1]  ? __warn+0x172/0x4e0
[ 1678.375506][    C1]  ? __pfx_panic+0x10/0x10
[ 1678.379921][    C1]  __warn+0x346/0x4e0
[ 1678.383884][    C1]  ? ip_rt_bug+0x2c/0x110
[ 1678.388200][    C1]  report_bug+0x2b3/0x500
[ 1678.392515][    C1]  ? ip_rt_bug+0x2c/0x110
[ 1678.396830][    C1]  handle_bug+0x3e/0x70
[ 1678.400963][    C1]  exc_invalid_op+0x1a/0x50
[ 1678.405449][    C1]  asm_exc_invalid_op+0x1a/0x20
[ 1678.410278][    C1] RIP: 0010:ip_rt_bug+0x2c/0x110
[ 1678.415202][    C1] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b aa 82 f7 66 90 e8 74 aa 82 f7 31 ff 48 89 de ba 02 00 00 00 e8 15 a4 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e
[ 1678.434797][    C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286
[ 1678.440850][    C1] RAX: 78cb0e371b2eff00 RBX: ffff88802e4b03c0 RCX: ffffffff81702eca
[ 1678.448801][    C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad540 RDI: ffffffff8c605cc0
[ 1678.456755][    C1] RBP: 0000000000000001 R08: ffffffff9372c89f R09: 1ffffffff26e5913
[ 1678.464710][    C1] R10: dffffc0000000000 R11: fffffbfff26e5914 R12: dffffc0000000000
[ 1678.472669][    C1] R13: dffffc0000000000 R14: ffff88804dbc0000 R15: ffff888017bda080
[ 1678.480635][    C1]  ? mark_lock+0x9a/0x350
[ 1678.484964][    C1]  ip_push_pending_frames+0xbf/0x150
[ 1678.490249][    C1]  __icmp_send+0xf89/0x14e0
[ 1678.494749][    C1]  ? __icmp_send+0x59c/0x14e0
[ 1678.499408][    C1]  ? __pfx___icmp_send+0x10/0x10
[ 1678.504361][    C1]  ? mark_lock+0x9a/0x350
[ 1678.508704][    C1]  ? look_up_lock_class+0x77/0x160
[ 1678.513812][    C1]  ? mark_lock+0x9a/0x350
[ 1678.518150][    C1]  ipv4_link_failure+0x62f/0xa10
[ 1678.523103][    C1]  ? __pfx_ipv4_link_failure+0x10/0x10
[ 1678.528555][    C1]  ? do_raw_write_lock+0x148/0x4f0
[ 1678.533651][    C1]  ? __pfx_ipv4_link_failure+0x10/0x10
[ 1678.539096][    C1]  arp_error_report+0x114/0x160
[ 1678.543929][    C1]  neigh_invalidate+0x244/0x470
[ 1678.548769][    C1]  neigh_timer_handler+0x8a5/0xfd0
[ 1678.553870][    C1]  call_timer_fn+0x18e/0x650
[ 1678.558449][    C1]  ? call_timer_fn+0xc0/0x650
[ 1678.563107][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1678.568809][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1678.573921][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1678.579548][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1678.585177][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1678.590791][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1678.595974][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[ 1678.601179][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[ 1678.606813][    C1]  __run_timer_base+0x66a/0x8e0
[ 1678.611661][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1678.617028][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1678.623348][    C1]  run_timer_softirq+0xb7/0x170
[ 1678.628188][    C1]  handle_softirqs+0x2c4/0x970
[ 1678.632942][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[ 1678.637692][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1678.642959][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[ 1678.648142][    C1]  __irq_exit_rcu+0xf4/0x1c0
[ 1678.652716][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1678.657900][    C1]  irq_exit_rcu+0x9/0x30
[ 1678.662123][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1678.667739][    C1]  </IRQ>
[ 1678.670651][    C1]  <TASK>
[ 1678.673599][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1678.680267][    C1] RIP: 0010:xas_find+0x0/0x960
[ 1678.685027][    C1] Code: 48 c7 c7 20 e8 fe 8f 48 89 ee 48 89 da e8 68 c9 38 f9 e9 d6 fa ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 f7 48
[ 1678.704616][    C1] RSP: 0018:ffffc90004c2f290 EFLAGS: 00000286
[ 1678.710668][    C1] RAX: ffffffff81c9a31a RBX: 00000000000009bf RCX: 0000000000040000
[ 1678.718621][    C1] RDX: ffffc90004981000 RSI: 00000000000009bf RDI: ffffc90004c2f460
[ 1678.726577][    C1] RBP: ffffc90004c2f510 R08: ffffffff81c99fe1 R09: 1ffffffff26e5900
[ 1678.734530][    C1] R10: dffffc0000000000 R11: fffffbfff26e5901 R12: ffffc90004c2f460
[ 1678.742483][    C1] R13: dffffc0000000000 R14: ffffffff81cb1c9f R15: 1ffff92000985f34
[ 1678.750440][    C1]  ? filemap_map_pages+0x24f/0x1e70
[ 1678.755629][    C1]  ? xas_next_entry+0x51/0x3d0
[ 1678.760374][    C1]  ? xas_next_entry+0x38a/0x3d0
[ 1678.765229][    C1]  next_uptodate_folio+0x29/0xa40
[ 1678.770242][    C1]  ? filemap_map_pages+0x24f/0x1e70
[ 1678.775428][    C1]  filemap_map_pages+0x302/0x1e70
[ 1678.780457][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1678.785904][    C1]  ? handle_pte_fault+0x331/0x6eb0
[ 1678.790997][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1678.796008][    C1]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1678.801462][    C1]  ? handle_pte_fault+0x21e2/0x6eb0
[ 1678.806642][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1678.812082][    C1]  ? handle_pte_fault+0x21e2/0x6eb0
[ 1678.817278][    C1]  handle_pte_fault+0x39aa/0x6eb0
[ 1678.822377][    C1]  ? __pfx_cgroup_rstat_updated+0x10/0x10
[ 1678.828082][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1678.833091][    C1]  ? __pfx_handle_pte_fault+0x10/0x10
[ 1678.838459][    C1]  ? do_raw_spin_lock+0x14f/0x370
[ 1678.843474][    C1]  ? follow_page_pte+0x29a/0x1ee0
[ 1678.848484][    C1]  ? follow_page_pte+0x83f/0x1ee0
[ 1678.853492][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1678.858507][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1678.863692][    C1]  handle_mm_fault+0x1029/0x1980
[ 1678.868713][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1678.873988][    C1]  ? __get_user_pages+0x78f/0x16a0
[ 1678.879090][    C1]  ? __get_user_pages+0x79d/0x16a0
[ 1678.884198][    C1]  __get_user_pages+0x6ec/0x16a0
[ 1678.889129][    C1]  ? __pfx___get_user_pages+0x10/0x10
[ 1678.894494][    C1]  populate_vma_page_range+0x264/0x330
[ 1678.899937][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1678.905899][    C1]  ? userfaultfd_unmap_complete+0x30c/0x360
[ 1678.911774][    C1]  ? do_mmap+0x961/0x1010
[ 1678.916097][    C1]  __mm_populate+0x27a/0x460
[ 1678.920671][    C1]  ? __pfx___mm_populate+0x10/0x10
[ 1678.925770][    C1]  vm_mmap_pgoff+0x2c3/0x3d0
[ 1678.930349][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1678.935442][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1678.941752][    C1]  ? do_syscall_64+0x100/0x230
[ 1678.946500][    C1]  ? ksys_mmap_pgoff+0xdf/0x720
[ 1678.951332][    C1]  ? __x64_sys_mmap+0x7f/0x140
[ 1678.956083][    C1]  do_syscall_64+0xf3/0x230
[ 1678.960571][    C1]  ? clear_bhb_loop+0x35/0x90
[ 1678.965235][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1678.971113][    C1] RIP: 0033:0x7f6a767779f9
[ 1678.975532][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1678.995130][    C1] RSP: 002b:00007f6a774bd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1679.003527][    C1] RAX: ffffffffffffffda RBX: 00007f6a76905f80 RCX: 00007f6a767779f9
[ 1679.011479][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000
[ 1679.019456][    C1] RBP: 00007f6a767e58ee R08: ffffffffffffffff R09: 0000000000000000
[ 1679.027413][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[ 1679.035368][    C1] R13: 000000000000000b R14: 00007f6a76905f80 R15: 00007f6a76a2fa38
[ 1679.043327][    C1]  </TASK>
[ 1679.046618][    C1] Kernel Offset: disabled
[ 1679.051099][    C1] Rebooting in 86400 seconds..