last executing test programs:

9.190049768s ago: executing program 3 (id=1025):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x10000, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

9.150808496s ago: executing program 3 (id=1026):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r1, 0x4b66, &(0x7f0000000100)={0x1, 0x0, 0x2, 0xfdfdffff, 0x0, 0x0})

7.565437314s ago: executing program 0 (id=1032):
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x0, 0xbf, 0xa0f, 0x4000000004, 0x5, 0x3ff}, {0x7, 0x5, 0x0, 0x153c, 0x0, 0x2}], ['\x00', '\x00']})
socket(0x10, 0x3, 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
mremap(&(0x7f0000e65000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000080), 0x8800)
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000280), 0x2, 0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
keyctl$dh_compute(0x17, &(0x7f0000001640), &(0x7f0000003100)=""/4096, 0x1000, &(0x7f0000000280)={0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="ebff010000000500a7ea31"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000100)={0x0, 0x0, 0x6, "ff0700000091"}, 0x0, 0x0, 0x0, 0x0, 0x0})

6.949579218s ago: executing program 3 (id=1035):
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id, 0x10)
shutdown(r0, 0x2)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x84, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0)
fcntl$lock(r3, 0x25, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x40001)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = syz_usb_connect$cdc_ecm(0x6, 0x123, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x111, 0x1, 0x1, 0x29, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0xdd, {{0x9, 0x24, 0x6, 0x0, 0x0, "af330eeb"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xd4, 0x401, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x9, 0xf45}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm_detail={0xbd, 0x24, 0x13, 0x0, "ebef688ea9a6f12dcabc3eb4fa17f80739108b519d2b715ce29b65216f29b813fb2426a80ecc9d5f05e4d7c0ca731a00883c112b03f5cda73dd37270213f11d5d99e31b221fbd2055eafe73c08f8bcc53d073b377021ebe16ad212411674ed2aa3ca659aaa87de9fc5e9679e504305b7d942430490c9b56ff1bca80378acf22b1a7b58763b484d0fbe0f44b6cdc45dcb3b50812d0e9b11183f0e01a10241ec079eb44c9b8111553f7589a99f5d3bbeaad1885de5627474f892"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x3, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x4b0, 0x1, 0xb, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x800, 0x6, 0x5, 0xe}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x4, 0x2, 0x7, 0x8, 0x5}, 0x45, &(0x7f0000000700)=ANY=[@ANYBLOB="050f4500031410043310100aeccf1549000f0006000000ff001c100a02a40000aa22aac371208700ead5a7149d8a4a7e003fff00"], 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x42b}}]})
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x0, 0x23, 0x6c, {0x6c, 0x11, "1d9c43f659f71da430be4909c32cc4f374d206f0550f932a0fa72fbedf475a0049becf4a4c5612e948271e3ebc2820f79a0da5ccc00f69265627db9bbad30ac7543e3b39420f025fbe204c06713a8136ec3eb8efb4450ebb43865c980771036086a216d5ae2091a45429"}}, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000b00)={0x40, 0x14, 0x4e, "7956d050af3a79b2617ba6cc9bf1896dac3b69696e424d8230aba4413da0b9a308d26d51afe828bc3de221a64c9f91ddc8dac2dc7b1cee5d81dba75d596f23aa25d5dc3175ca41cf271c1b186c0d"}, &(0x7f0000000b80)={0x0, 0xa, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x8}})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1430b2f94d7a077bd200000000000000010000000100000057e5aa9e47cbca819bd5d9d8001872eebfe82ec6bb921d7862e2077b7c35bd547af1001e612084195c2a131cd74113f507dc6a16620281005eede48786d71f50798422885cc6c80c8c25a672cd2bbd45f0c3cc4a19459094f1078d1cebbb24aca95cdb823135b6f3cd418c77ad2418486a57ee5d48f80bf95a059203bc9ccb8053e1c057e421c651b53f34b313", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

6.337602145s ago: executing program 2 (id=1040):
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffc3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x0, 0xc3, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902b1000201000000000006240600013b05240000000d240f010000000000000000ff0624"], 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x4}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc)
sendmmsg$inet6(r2, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="78a367bd88eb9c7ed48495fc053ac615ff05f8479f142af391181a8b71f5a34a40c6fbf82fc257286f3d0b00b4130c11fdf6164017ebb15987dd0a87a1f48ead3da61d0187e2a314f402acdbe54e520a2ad28992c026c3dea55526f39dc27c67cafa1e4aedb8568c523d1fda22a092688791e96fe9", 0x75}], 0x1)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

4.52193007s ago: executing program 1 (id=1047):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
fcntl$dupfd(r0, 0x0, r2)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0xa382)
r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r4, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r5, 0x0, 0x0)
sendmmsg$inet(r5, 0x0, 0x0, 0x4004806)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r5, 0x0, 0x0, 0x11, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x24002de8)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x800)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x80fe)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="10005a800c000180050001006c0000000a001800030303030303000044002380050011000100000008000b000900000006000c000e000000050005"], 0x7c}}, 0x40000)

3.8165471s ago: executing program 3 (id=1048):
r0 = io_uring_setup(0x175c, &(0x7f000009df80))
r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r1, 0x1)
sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="99ccaa601b", 0x5}], 0x1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000b80)=ANY=[], 0xff2e)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000004200)="2e749e8cc85e6b0ee5df5723d688df544b556c55827971aac8755cf20fb368f051592f0f11cded477b6e2cccf88f63b6b9a785545c9ad2e3f802634ea9be5a9422a3e3a4fb5a31f9f1370b9b2ed84de8ed3434130a8e4a2a43da16c9ccb794ef54d69b6bbbc22f760968086c5015f2ea4a3c2b3ffb6c6f496728caf07383f8c92c266b5fd8737820d4109bb0d222215bba6ff978da9da26b0e58e3ebc39d3e4240585581b5ef46c07d31f59fddc66bcac21c633bf2d4a2035b29a8a7b5e88007827579c3abb9db30a25cd264de86a793d03c9e3fdfd8f30342d07764a52991a8280925eee8c387df8b3e0bb1d19110937271822237540ac0a56c940e966a21059bed07f4f72e2d39a9d660ec5825a14da750cbeee159dbef9449abdcc021df8e64785e78b41eb0ab9d7498cb2d5fa800d9fc0f44a6fe0be3a024d48cda95fddbcee3e5f6289cc2b184cf80b714a13922545dd9c14fc771f6ce08557b9ca99a4de6193155cda1164752707b78fa0e241dcdc7a70debb7ef136279e5e5aff42ed8eac8c46ac4471a056508b6bbe70d05530c906206780901bf45aa23d128956397d35329370cd248693285f86ffa28495721c1bfc49916c6e8daf36c18307f1997e7061e9763b79115f433bab381a84bf99031dca8d3f6354cbb6ef7de9609f36a41eff8894ce84a4baa53a1a75727005e1004f21cf6fce6f36821a10dc53fafb17a8be2d7f856b3bf746c8f3d0807c3f526f533fc5ccb7632f77e5652153477c120b2b93fef9b387a6bcd13f8805ffdb4112820a864188dfcbe67028caf8d267dae2c479ffd0415ce9756d268902c8f41c23734cdce58fbabcbefd7673f678c6796f2eaa21fbad557d5262b2b037cfde6a3536eb3cf3f4bdebcae638a2c63fe7677fcd7b8dbd9fe6b828f46dd7513abe880701c2005972b1208c8575f7a42a227f7ef355e61aa03f2f6514552aa767e50cb086633c556fd8c43494fc5278e179d2ebc2d7a86c88dd051e360bc2e226a64d412451904d301f93ebf232e367972781ffc91b51b4b160a5c571fca00b764add93a67d227ef5359a38d3e6444956940b66586a80b3dbd63255dc07ed3300a71cedec6d5ab9a5a0fe81c134426890f456a9fb9deb638fc188ec9e235d8bdc848febff19817e29f7a4be331b822110725bd3617096becf7193bc918d31dc02198ef314e7ff408c5bb3a2c6469d2b2312b2eca2b2bfbfc92a5822bdb308de0b533b762e1ccfcfbaa69a08102eb4de20b625f01cb22d27febe953547990ead464d87286407db7e7bc9e8f561c217273ee7acc656645bdc749afe289806c01b365f685d1b18425d3a0d1fa4ccce2fb44c46469fd5d34d4db9d4ffdbfc249d34cabe564d5ca193276dcf04a36c90fb15dfa552c987c0a611ed96602f47a0b3c3bcd7e0981020abf1c0b5cb48029485f644f3801037173a46f5886de9cfd388c8dec8a02762a1fbfd22698579176f1feecc8f177ed762a8d3daf4f43a3cf94ec7282a07747478cd5eb84b88786a8793fcc270937f6483e80612d4acdec8a88df226f172aaf530d0552df5f3adcd6dd13cc719c24d20847d6a7c73927c9696c7095a7582062c688f7712e8924d97df16405a2d5e571a1d06734761537b479824b4b961c8a7fa92f3a5f7ca95155e1291e10521204ba253e82ccb553f562bead4d02b5b1b10132349eb973149eb9f0bfd48d1bfce86f73d13ffa2b76f72677cf5ef92b67b8d8b02d7320ba5afe6049eeacd2c223e13c8ea5f231e25e8090143e235c457bc549b981a18c30e12f5954f54ede63c56e3edf63b4c20f01aefad3d3bfddb41b40673636caa2fc9ccf2e6124c7a32a1b472ff1b0e74da2777bb84ea51468519d03bd077afd8e36ed0e67d1060e5feba19c09fc63d8ecf5e10fa650a931a47a00439fc96f2ed4bad1d70c50cf1d4963267db0585e4ac3b605bdfa5aa90e1d3e407beba7b4e131b6af563b0e90f57fdb11f7da417cc0f38abd53060f56ae2d4da094d709b9b207aec1f9686c9c9352705453a189151c3278b7736929ffe93fa94143533919464888f08059cb915f7f2ee37bdc2c2d30305ef6407aea7d9f89c0d35ec93c6fcce964cbf7f912c5b2695b8a6983fa83ac5e0a0eaf78f134c211aa34a922b9458cafd072b49cb187b211d612e02b8f7749eb3b136bafc655a8b3d4e9961fc3043754930a4e7bdcce1883421e189e9c0b1268f1f95b9177347073898ff011482427c43decad44c8ff020fbe7d3680c76898d7f538e189720d42dbb707000013bb7fe448aa6238eeaf0d81dc7b03b5136edf865a996ed545dc5c0ad4659da7d01731705b0d9733ec5996d70eb62ef11534f19080f95226d0fa02771f53583f67166845ab1143fc804e23d6368597dd168a1ae0517cad84f04bbf036a9a04a7af8f67fb91b2934a473ccc5bdcce134c9a10c10d81afbaeac63c2706d74e464164249f5fba82d0be6b4e82415ea644009aa4a443fe9b80717b5d104986e60a13b335e228085b6390a110451523aeefcf603b124202c5d47349ff8a67c3871312602e30bd00dacd5b6e9ae2c4afbd590af002ff62cb8a30c64a3bc843ebfaf6c9cb102ccdc2f05aa57f240632966bcc7fb73b550922bd7dc183eb5b488a83c7ef0269f4c9b92592357ec0eca5a14c330202c87d8fe6f7a4350bad8dc29d1de33aecdd10dc2329c7cff90c8087251b948f58b864d4e7d6c5e5d800c2e7741273356b13c3277e8f60242cde5aee19bc5c55a240025e26bbb893a5b2f39dd77a24604d445ed5b22988fe530e952229e84b5c05f9521e014eadeef4565a0a9c57b9bb007b4177bdd8ebc87abcbc0317cf2988be2518291c0d89e0141a7cd0e2f37e4db94cab5204f804ec0d0fb0819dda879328cf675be07cc58d8f8b50ee56670229e8a7839a33831ea005a87eb84b3e644040915e8eb44055b7d90e23a3970e87957abceb632ec284438bfda423cd547ef14d786f36db71684cda4235b067408d85c544ea257bd75a2e4935fd325a6aaf57664c5430dd24d4588b2774c08f376bf606391d1199347281042431d0e1b6bb7f46fe4502d67ebb3f0469800a17162dddb37f7ca2c1951b8de5da108065aa933a9e04eab95f6018d3326fba38e33b5a701022244b0888f4a643b333cf18db2f37cf2dcbb86f20fecddbaf186987c7901b74376aad2b99829a478a2d68c0ca48cfeff10cc27110febbc37d33db56700f909e266ac33b60090a2f38f0b3557ad094d7d42dfdcfb27cf538cc121b1ca181362290cbf90e73c60cca5ce62cbd6ab49c39aab5054aee6de4dc2caf56079180c964dff0191185fec1065c508249db0e21391e00eaffae3300a19c462b09d76831262fa177923f02095c1f57595f560feec1d786edea504ba32dd39dc0b96d7d0f859709540baa8043f26deb237ee8425bf8069be89bcafabdbccc671ccad77f878f73cc08f230243a640a9c1675e395e41908899e5f3e579f7940239a042d9a95a392cea4def19696941e155b84163e5d398eb10a43adbd0054d175d0ecfc151c15df09eee236f0f8da5c373e851c56e8d3d80b5284f17f5a9b0a72a27a3400b4e2b3188a51d2352b991d6b4d97b3c6b2d0a184907ff3f4afbc22d5c72d79db1dd936a9df2757b1cf03cdef3c0367fe873074aecd48bc62ba63246682837625b4187b2273de35b6e7a0982fc62630193eee7c090d279b6513db822c3375c829c86ee57104e2049a410f521de405916b90018e8b81f457cd9294ac0eaec1627ff8954572ba7009f0504cac8be8fe1eaebda0e426be956061595216108332067ebc18e46ac9aa200d85ba60f0357148c9cdfffea9a7795a7dfe7d99bb045602685a28032e0475b96da0d576737e05b38401e1f8c3abc8b34a21bd08dfa492ef0d4496569f4a3eb52fc12486a15786a87b5c1b5ae2df6d9d75f4615a664e54b2fa0968507acde7a07f6435ab8bd84d0e6e9eb8cd6c78ea69a6679a535e4f88f224d7d4f4ec8d19739a3863f0f1eea35db1aa4ba4ef180025258c7f1c377603948372be9a22da66ca56a945908c274dcc4515a6253d9383dcf17a65d474863735c1b8655840446d31a5954bcc3581ad465d019c9ce240b75ff9d20e226d398687c78d21cc8899f5ba6397ee7bd8cb1875feb9a24b4abca8ddeecc7dfb03927a7fe7129d91fd3743932167b5a2995a5e4128b7db18cf6978de20af22018cfa0dd97af0fca0763be77b64d91dd5f31b5a65f12a32aef11954c05d9a7372362cec82c30a98eb4dce5548f73d8fa92c5e8dd44b054b323e3b153872eb8e8ba36c2f062f0bcfe762d41091d8dafffe71db31e9961312f1eeda0c3f3ff8a558468f05e8a3123086714b6980003a85afaeda65c6505d6586fe2f3ad773ef09d8c0deeab879c6895492d14ff01dffe8b65abc935a7c574acaeda6cbe624f1b4b733075b4d8028c9bfaf8f66b8078b98d1210c3afee89159e9e9c03861e062b7219462fb88643637467c0998682ffca0fd5f71a1840ef802d09ad0555774c7bb54fe5c413e2a1734c4be29f25fc58f65adc22ac294bed58fa69e24d3a9a6fce9e2d60f238809979d4c1db26d121f2f013fe5918b786a7b7f88226b92b40df9852b83b47dda5e876fa46961224511a947ff5b354a9a4064eebea9e22eb7a24953a02c5f640b9163eab5fce85b23be2d4c7ec014b5f8d32e0a798fdc2f8e905673bb02c7dd9a44be1741f6649379df146f18d64b428ae9840bf3323afeb3a2be43645341ca720be7b305d13de56a999875ab304786661594216c34ff6fc5e47f5a4e05ae6f8d64e5a7c598d4464b4a5a9d3f908015caeb39f635379af90c20a2dfee20aaff5ed5bc8646770333d29a4352a90f37c0ad33afda265f7c2fbdf4ae19d774620525f6cd9324aa009aac01ba58487c4b298753d03c72584205e3d92b64d933fa5f844d242ed0eb0b55793ef2c91e6483558089a533808dd41167e52e526f786b1953068c4807211725f64bfc745ef79c2a7c9400d2ba61113f10118fa54a91d6b531adddf5ecf6ec764f1e58ecedfa8ba08dc36c7cb91f74c77bd2e02ed878cdee30e8d0cf81b476589367ae2b67d65d2dcec5776d095a4b25f1145387a545c2ce0694827058c18783f6f0316770c2e01615785719f140e6765855272318175f4eb572e47c83404591489fe37ecb29379805a176d7969fa4148644f0b3e3ce9669b9dd1cc06881a11bf947a5518dc985714fbb3b428576b2daa7c1a31c1388faf03a73bd046df8ae6c4dbddd65739407bd827c419880cb76e7bf9db5718b50d899a9b01c8fec01befb0d6e72fc86e56df84716a70e1790246d36dbf6135d815f0cbab6c1ecaf89253d4063852cb1e11aef274b085ce2d7776e9abe075072bb39da5494c8c490e3547005a0763c6774546a73073d849310ca961c4c083ac2fc1e13a92460b8996b8d87e6abd420146a044658ac6859f2ec472b668dedd9af1b54388b55341bd66b7c90379a5b52e2db905d0e6a8341193af03f254044d194cf27eca879630c16da9c093586a1a6e42dcd5722e47c5e0c6070d3229e139e809307d2ddc4b9b7cdfb331df49ab3098a2e1121523ee810f2a28055beb88b0aa5cf93f87d366f4013c35c1c743f374e4c5b0e6005cf9429386d687450cd172b6a22049521682407315511c1311a3af4020c66a385e3a652c787fbcb1baf4e611d31e4cccd049cee851ac4f6077a2e9f2395420c3f6991e84b2cb9e331ef7d5da014e73fe6f5de2d07e372236f541650cdbee4c02d25d03b1cd3e9384a3004507061d4d8b897350d709f6643d40f16279e46529e9d4f58e0466e7df46c15fd43997f83574ce4f46f7a09123e7762014bd14b45d1cc8b28ef7de8aa8da2c63fa6e4b990c10aec5f6f3806b03f5e7d2c32cc206fb4af14f61c2b8ba117db15b57a1fb21bfd40f3b4fe1383b8043bd0ca7a75ddc0d6975432c211192024314722584e4dfd17b5d5ae40d27a257646ef20fbcd86e6a970d4506181f939b4719c634f66aba9c4d3ea4b18697dffb113344be354a1ba0a37973fbba6d569980522cd1dc398751f80a1a30ed368a2f513c101dc2aa3a233880847226437f56bb8ab9642281d867c80fc6dffe1f99807a00e55f0f2a8d16abb288e5ff87dca32c024c6a1a0a5588e704ab4bc3ddbcef6a7bc2d8a35de5a1cee5fa64d9e940d9c1fca2273a9fe520c555e3b076a6bacbe58f241ae24b36faba35541d747f277acfc7fb374070a259a659550b9d2d158b02d1902a71b382304c94771f380029ccd8c66b8ef2eea3319d810cd9088b81288c2af36c9e423f974a9a84ca6ea5aae1e9128aa7996ca154c2bcb70082d8eaa57bf8d9a0534deaa0b823916c87bc2b94bb68bc1b4cbf4728e23d4e1663c1d036e3a1342477d3303cba94f495778da51214f26d3cb765c7398cef04f0db6daf25d33b92b574cd4b9c85d69b296b153be60ad9ecba6abbd9b206af7495be5c1536aabeffae39d377e8b4c1425a66c496de9d4b83abf12f63ef2d2e02fbfb40a3ffc4cfb19c8ae0649dd71179c7c4338a6eaa6f51d4abb1aaa27218b4d2b68638b15174e6a4509eb0b9275e7468633244fddaed550e1c20cf256a0828348bbb915e70113cf8033ebca53bf35d06c8cbb09a3e1326a7209f011dc9cff55e192e64670dca28e57358089d06830f113fe06ac7f9dc0f3cf49687b45599d18c6affd99268192747bc4dc9be2d854baedf0d81b4d1eff347fbec4a0b4f8e2a94ece2c0217c9e3bd8dd43ba922a219f00cf2de35de84ef8e62fa983044bf5d4e5cdb31de8cf11aa148a936320bec00b26127d7ff24a555117aa449ec6f9d0ba98410d7ca0450cd99992d92670cf5ba59cb551f76c5060e3f618f46fb5176982d8f246cfa811d209b8f61cd00758a129bd6941da2451f1a19dd612425c97f152570e4e62db9aba7d148ed5e4e333068aeb2625ecf43c0ad9092638f688b8ee3e62780cc2befec03c5428a9376ae7e2ee17bc585ecd60cc8b46f268b793b9d74f20d475ab1b05f0ebda051630d003b424cf376a083663bff163756888dde2fa3385c7faac40472de6e1882b9131f9b9a755fb827a996a534077b85ea760077280d8dbf4988496720a64fb8e2c96afb69d529516bfa8f7e81d2eb780854823370a979c50566f88ebab97385f30ddaed0b0438b689506fb49c943713bf835ed75d09dfefd12ebeb2405a46594f556fa8b3d32547c922808f1182658ea0208ae0d62095e9588db1d94956bc959212a5a1bff0a669758d4aa8f1eb11ebd566cf65d92051b1877bd6fe4b7266b21bec833331abd7c4a347da57774e7c05897fb82b7ac39473b6c87a33bb912dc9e11bb5a0b4895371eeb500a827c3d839c885488faeee9586058238d2259163756f69eb533af03646ee4558a67d5978bafb8b2e8c896db55601b59ab4a5451f23611a02c6752a6c80ce8872dac2c03024750fb4a11ee23018ce0faba974b43a67503d353647959948c9ec697cd193b040c9be6569514b681097dcd6310dd9086c01d9bcb22483a880728504b8818902db0139667805d1b43550afd10229175813aea15bb2924afab70b1e4dbde6bf180bf9034e515102a25149e1eb634c9e56a037c2c3a3d1e213731e3611a167ab5155c6d7d103ef1ccbd748017f65493a95481de052d0183a4728b0ac202b10c517b09e8a8a8fdcb6bbae8fa797a8f1107b0f6d957472844518b3ea7cce89731c2074c533924dce44adbf6b6fd32044b624a63a3e0f5b2a8482b3294aa153eb03f2879b39e80078abd51d73a7f0ff77c546d7092ebb973a3bd013254576484538a8af8ceda9e6ac9daa38acbd7576a0054bc49a248ee2839aa8b604a41b735ee3dbc6e08cdaa92955dcf4fa7a4c783971e4134dcaf9a8b644c20894fd17d648452f90f9e00860eb8102534477f7e3279a0cbcee20d500ed648adcdfe6540509a49d438aaf1884bf1f0a434055866e643577fad463ffb8267b530d4bd8606d3638165ff4b9f6334c4ba818da17c5cc5ada304462a0c4dc0728d25428b7b61bf9804d54cc7bb7b0daf82a19576e5e6085561e66050e333e6302fd85d00f36a82a569e1b2ff7764a931a2e70409b5517df2fb1b3876ad4523d74ae224db617c40c55a2fa0c0aa3e97b7c350a2eff49ecc551b50d741f6c1aac4f6f78644eff674df4cbcf56c259355bceaf87dca07931d973018aca418e5e6f000e98eead669c39783e144ae3b43cd01920ad383d774105c1594a2fccdf159a5f9bcb395220cad1b22ce09e7c5683166b9bc4bd2fb2bd1b676890abfca67d8a5702d0dcb751b9a457be82cba2c2f3e31e7d59eb8b8fc8ba440bed80bfe560195968d430a9d15701147541b83acd50038f8beae9220a6e473ea41838b16c1bb6f5cb1a9dded046565db6327ec818c9aebc5e2304f9bae0325294fbf6282e49fad4af3538a52c44209e611869535f854005534767bc73834780f6d6ddf29b472da78d4ca7523cbcc33085778a596dc46e084cf624cc1b61fea19ebfdb5fdabc24c3a5e6b64f2a59b1dc015398fe62d092d93edcba1ff6f078c8033965ca34de7a74819903aa29ec4efae8c7bd5d8e5da21cc07a08c1cdaa535e1f79525a3fdfc153cc4af8d9906244f749f58418cd58c06f7d0f722a52978f1889350f5a1390bee67ec1093377f7f5c417f47e54e2531a3590ae8e512df1beef1c58a75985468e8cd481fe07ffeeac960bec795a690eb6f64d634e7c220ac8e628c30bb2e28395c69720e801f952b376cf9ef84011589cb9480f9194c2f7e06319a45253c9052e39983e0a59ffc484d0951eaa0eaced690518f08abe1390799799367c690c860193139f20c82aaabb5ee0eb8fd426e792d5bf68646c1e9697f375e7184f3675ec415d74aedbe814e24bf66a3b930fb4b44edcfd5414afb0b0d0420762cc3c124bceedce0e56a5204717e33230db15c8f8a9e5c23458c2091bffad6f3292afccd1513f0d302086da00f5582c83f643ba5bf75dfb4941c656b4f905be14f13379a830e7e15e71919f8b5be8e0f769906e5f6e6e5a618365516af74ee2360db3525329cd7e5cf4ee666afd04663c5b96565fae390cbf754804af05e03bb9596f036e52c187b66e46f3bcf4c7c73f6135f8ee308a544f9abe14ba1b077a9b9ebe9cb09e8924c7e24e664f9fe5e5471546ad23ab9384c99921ba0990bd15de906fc647d1d9489a5c1515a5efd8517049b910158c7efdc22a3671e86076189cfcefdddd5def5c4634b374f34d25f3b03018e5324b64626e69bb1b667647ec926add0a89648414a28058d04f12e9ac5bc2527d189f16558a82daeca13eedc125cb23436f86f68c147015853aa07738c99f571dd51e4864da4c81857c9fb5338c5eb2677d01dd134a749b7832b64d9ebcc33a04e1a62f07de55620a688e944daa2c480be3e00871058a6fb34b52bf0c3fc46a556f13a3d6402a9f42c48a7756c07b3a58aa2cf932e650d88dfcf9fa655386b13073eb6134b10806d60b4529d72153f2f4df6df19488c792b4d8d11086cf7ef2d9d1404d1876f4d30d566bf88d3fcd5bd439f82d918bc988cd50147d3770489e25bd953428c5bc66ddfbcdb2e40452cd4fd6adac67febb7de9e8b8ff6f59ad548b96256d80f1092c94d70df278477a36461fca896ebb6d2d40ebfb95f2fb3f584610a1540fd2b511d267e8486615674853112b3f371db52d954b81297d954bb3b5182fee5af93307ad79af888f87ff15445e3292f640c26063d17209f1c79c1267b55afe3228fa254c4875beaf6bf9d586d3ce743d5e8376aa214bc1c529c0f440b4c8a33dcac8938bb2f8c2f19fee903ba7af21d3f6c7049f371db6fa4d0436964f07274274ada68c8601b70f56860059605bcdc0a643a79132f3252141b2c151634dc85217ed18fdac27b3479382d045029fbfa90d655b3e0b5ad134e8d524ba837304ec07d3cd37d3314f3690e04c0c777f1cea960baf23d2c394f245394bbb7f6101fc02bdcf3705ef329a0e1749042a204a3463406f7b34bdf23a8d8e2759f1b24f5308dc2736d1a81173826b059f18eae9ee6be8cab6c24039b8afcf775ee08f290161532715f6c19ac57985299013088c358fada7fbfb9fa339bf9fe5478fc394005ffcddc7da185f9c5ba4a79bcb3a6fa1b280ca745e32211971bd76ed26e923ffc0387017e80e0de6904c0364c7aa54b7aee04ece2c2a318b91f60c6559ef13fb1f774c803fed514358ff6bb4972d1b71b71025d943d4a074d2918be1008f63ab15094d1020c641d04d89bda5326bbfcedd86a064506b33f20bfdd83f59a57500d4aca720c882b192b0232ecee67da5eb3cdf61c931ce96a3bd4210bff8d9b3cef39de2bb68fc9bb645382e2a2971f58ac39471a8091676011900f01a457838c129374dc6e72c4a3107e96361511e44da1c90aa784b4ee081bc2090c3344d12aeabd1c6c68475243e0b7c1e4e0b8df728bcdf3d0fcef630f372ce11bfb680897d3ebb427f08ee18ebb3f5e604121831506e8d3cc9c3700a5bdcb3ebb73d1f494257c353325ca7983781ba108819652041b5edcebb99118ba33244011c93b5044eeab58ec77eb4b9b88ba63a6b98ece554be80db1df349de18df6b66210e965f436cdc5c6e4e01840b6da8175eb074cdc22f8bb36f5ce18c6a9142ca726dd5a889967112535d125cd2e19c397fee7a786cc7d84cdf3d7e7cfe96e6b97ed50ec01a98e36ce7cbe8dded29bd9b701bc59a5a119b2f14af8e1ddc6907899178f1c40d78db921ed0bc5d0984e945f2ba0422452685755820b86133072ba4e6d4560b4baee9c87ea99a857061082d08425038a8ba5bf4988a19676a7757389eaf0d89f9e58c1642ff00913f0abcd23cdf01b5ecbdae37763dfb28a679db4fd8b7616b3a2d96c30e71d4e48dc6e25203a1260eb42a217a157296604806f919f11842668294dc03c57c33d605285bd5142420eb94fc92b1896722ee795871eec92e2dec45509c47b63653e539bc8607325b7d3712c43651bba0701bf6c8e4963d48d4748dfa9fa39c7d69c81cb794a7911cc18d576ae43f3e7d8e9eedc9ed02936e027698e413598bcc8ec1d5fd029b51abf080772abebdafbc6b5db07fb49e9bff7e71af635fab4fdbf15f6a6526acbcfc37bfa294183fe28903af69075c299f972f05f6f2cea53ddad14b115635fa8a637a42482b0fb3fa4c403d43b272c726e1f51f2b469c165d9525d0ada2a582610fa4974c8e57351f587502aa3ffad717b418c2de230b741ea3872d308fdc3ca1f7fb3c87cbd70e0e5d5255a0ae56a58650b3d5b986f0e8fe8b97d46bc52447247e0f6a2361d1ebd1bbad2649d33a1b8c95ad9d294f3e12ba777f0da16f3e7501e2607d5ad28d650b2641aec2eca83e4452a4bf8ed51768ad6238a79cb0d96dafa36915297bc95a3cad090dfb61b8b13b462110780df8acbdf337462a9403599b7f54563418bf314dd4aaa7a1406423a9e70b34ec54872c0cb14077cb5996134f10cd40a13b17cf0731675cf0ad2f981992a5c15613a66c9cf5e6d6910540dc17", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x7fffffffffffffed, 0x0, {0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lseek(r5, 0x0, 0x2)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"})
r6 = syz_open_pts(r2, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000080))
dup3(r6, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f00000000c0))
close_range(r0, 0xffffffffffffffff, 0x0)

3.507143638s ago: executing program 0 (id=1049):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local}, {@in6=@mcast1, 0x0, 0x32}, @in=@loopback, {}, {0x2000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0, 0x80000000}}, 0xf8}}, 0x0)

3.289968778s ago: executing program 1 (id=1050):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (fail_nth: 7)

2.637147843s ago: executing program 1 (id=1053):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000140001000000000000000000ffffffff000000000000000000000000000000000000000000000000002000000000000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002662c62600"/106], 0xc4}, 0x1, 0x0, 0x0, 0x4008884}, 0x0)

2.584295732s ago: executing program 0 (id=1054):
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x200)
set_mempolicy(0x1, &(0x7f0000000000)=0x2, 0x10001)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

2.578600446s ago: executing program 2 (id=1055):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x201, @local}]}, &(0x7f0000000440)=0x10)

2.449930643s ago: executing program 1 (id=1056):
syz_usb_connect(0x2, 0x24, &(0x7f0000001400)={{0x12, 0x1, 0x310, 0x23, 0xbf, 0xdd, 0x10, 0x497, 0xc001, 0x273, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xa, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0xff, 0x0, 0x58, 0x19, 0x30}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcc, 0xe5, 0xf3, 0x40, 0xb57, 0xd863, 0x2ebb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}]}}]}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r4], 0x20}, 0x1, 0x6}, 0x0)

2.449499318s ago: executing program 4 (id=1057):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1})
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118)
syz_io_uring_setup(0x66cc, &(0x7f00000002c0)={0x0, 0x681e, 0x400, 0x0, 0x21d, 0x0, r1}, &(0x7f0000000040), &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(r2, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x66, 0x0, r4, 0x0, &(0x7f0000000340)="07e5aa29f9b085a177666874ae0c225296fc640ad050be8c8aae0a0e4fff4c19bc3895794b32ecca417484aa507a29ce5b91f7487d3ed9cc3dfc8b8aef5dd0b833972aabeea0cd87dc8a2ee48953b46cf5ff03f7c9cb56c3a2d2e6211b028855b65a34670ec54d1261677894163e3a39fe35d7a6f962a44c5e053462de6552e235b435baf681f29c20b88fa15702fdc00d4e7d9c17534153dcf06fdf9af34ac51e7b79f705c7cb50d86b63e5e0bd6dd4b25a1c45994685f48c52867ca1e478e410bc393eb288629f0a7845f4a75cef440360", 0xd2, 0x50})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3)
setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000280)={@loopback}, 0x14)

2.448992909s ago: executing program 3 (id=1058):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff020000000000000000000022d33de404004e20004d03"], 0x0)

2.440884161s ago: executing program 2 (id=1059):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0x10000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x3000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xd, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xfe}, {0x1000, 0x3}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x0, 0xf801, 0x0, [0x0, 0x0, 0xfffffffffffffffd]})

2.413037977s ago: executing program 0 (id=1060):
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"6d254da5", 0x137a, 0x2, 0xc, 0x9, 0x0, "d3d3e117145dddb1d55050663e13c2", "ec38a74e", "60c1fedf", "2126f780", ["f40c58920f22b63e8dab4819", "d6a19c7a81c0896b459cd1fd", "59c88a8c552c3b74fde55ff7", "39e5565895707f08c9edec17"]})

2.300664588s ago: executing program 0 (id=1061):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
syz_open_dev$vim2m(0x0, 0x1, 0x2)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)}], 0x2}, 0x0)

2.276196903s ago: executing program 4 (id=1062):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x214500, 0x100)
statx(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, r1, &(0x7f0000000080)={0xc82, 0x1, 0x0, 0x2})
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000040), 0x80)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="1653f8a9bb4a62d22eb03c2fba10469882a6df05352f214a8e32279f7ace9a2c34d956c27731da9878a46d79f08397141bbf2b33b76b169dcefac1e0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev, @in=@empty}, {0x0, 0x39}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@private}}, 0xe8)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x20, 0x2, 0x400}]})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaacce3906777428100000086dd600cbb0500302f0000000000000000000000000000000000fe8000000000000000000000000000aa0300907800000000600120d200000000ff020000000000000000000000000001fe8000000000000000000000000000bb"], 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x6e93ebbbcc0884f2, 0x0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
openat2$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x2840, 0x1c3, 0x30}, 0x18)
sendto$inet6(r4, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r4, 0x1)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000011c0)=""/4055, &(0x7f0000001180)=0xfd7)
r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x205, 0x412202)
fcntl$dupfd(r5, 0x0, r5)

2.230049184s ago: executing program 2 (id=1063):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x150, 0x0, 0x148, 0x150, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@multiport={{0x50}, {0x4, 0x0, [0x0, 0x0, 0xfffd, 0x0, 0xfffd, 0xfffe]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x10000000}}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)

2.199984418s ago: executing program 0 (id=1064):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0)
syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000000000000f3ff07004503003000000000002f907800000000ffffffff0000883e001c907802070000000000002b23ca5ed9707954c73108015588fc0b552d6bbd7ef7e89f7930d07e28406f1391657139f4dd5f5e3f00bc0ca150259963a152f585d526b4f6ffa9b7124f307c078291e2c9ec9cae5a5d6c0df608eb544703"], 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$sequencer(0xffffffffffffffff, 0x0, 0x0)
write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1900000004000000080000000a00000040130000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/252, 0xfc}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r4, 0x8004745a, 0x2000000c)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r7, &(0x7f00000000c0)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000200000800040001000000", 0x24)

2.148210293s ago: executing program 3 (id=1065):
r0 = syz_usb_connect_ath9k(0x3, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e439, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xa7, &(0x7f0000000180)=ANY=[])
ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0xffffffff)

2.136822599s ago: executing program 2 (id=1066):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0)

1.871639995s ago: executing program 2 (id=1068):
pipe(&(0x7f00000045c0))
inotify_init()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x20000800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0xec8, 0x6, 0x8}, 0x10)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100010001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f00000000c0)='G', 0xfffffffffffffca0, 0x8001, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r3, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$isdn(0x22, 0x2, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000001880)=[{{0x0, 0x2, 0x0}}], 0xf000, 0x10002, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000480)=0x80000001)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x4a, 0xd9}}]}}]}}, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2)

1.202287992s ago: executing program 4 (id=1069):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000004c0)={0x400, 0x300, 0x2000, 0x320, 0x0, 0x0, 0x0, 0x2, {0xfffffffe, 0x0, 0xdd}, {0xfffffffe, 0x0, 0x1}, {0x0, 0x7}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x1, 0x0, 0x5})

942.417401ms ago: executing program 4 (id=1070):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000002013000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000)

713.983296ms ago: executing program 4 (id=1071):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x6, 0x500000000000000}])
dup3(r2, r0, 0x0)

488.038143ms ago: executing program 1 (id=1072):
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"6d254da5", 0x137a, 0x2, 0xc, 0x9, 0x0, "d3d3e117145dddb1d55050663e13c2", "ec38a74e", "60c1fedf", "2126f780", ["f40c58920f22b63e8dab4819", "d6a19c7a81c0896b459cd1fd", "59c88a8c552c3b74fde55ff7", "39e5565895707f08c9edec17"]})

355.543144ms ago: executing program 1 (id=1073):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x2, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0)
pread64(r1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x8e}]}}]}, 0x44}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001})
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010102}, 0x10)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=1074):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
syz_open_dev$vim2m(0x0, 0x1, 0x2)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)}], 0x2}, 0x0)

kernel console output (not intermixed with test programs):

th: hci0: unexpected cc 0x0c03 length: 249 > 1
[  264.058057][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  264.075313][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  264.086691][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  264.094787][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  264.105060][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  264.112420][ T9505] netlink: 'syz.4.901': attribute type 4 has an invalid length.
[  264.157947][   T36] bridge_slave_1: left allmulticast mode
[  264.184400][   T36] bridge_slave_1: left promiscuous mode
[  264.190156][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.207260][   T36] bridge_slave_0: left allmulticast mode
[  264.215142][   T36] bridge_slave_0: left promiscuous mode
[  264.220878][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.771470][ T9529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872256 (1073744512 ns) > initial count (40 ns). Using initial count to start timer.
[  264.840591][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.867512][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.879217][   T36] bond0 (unregistering): Released all slaves
[  265.033094][ T1172] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  265.040472][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'.
[  265.129182][ T9536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'.
[  265.213121][ T1172] usb 5-1: Using ep0 maxpacket: 16
[  265.224680][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  265.236383][ T1172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  265.252614][ T1172] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  265.261915][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.270243][ T1172] usb 5-1: Product: syz
[  265.275038][ T1172] usb 5-1: Manufacturer: syz
[  265.279657][ T1172] usb 5-1: SerialNumber: syz
[  265.286655][ T1172] usb 5-1: config 0 descriptor??
[  265.297296][ T1172] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  265.307506][ T1172] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  265.439581][ T9506] chnl_net:caif_netlink_parms(): no params data found
[  265.568408][ T1172] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  265.581924][   T36] hsr_slave_0: left promiscuous mode
[  265.593005][ T1172] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  265.610095][   T36] hsr_slave_1: left promiscuous mode
[  265.616433][ T1172] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  265.624527][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.632147][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.639561][ T1172] em28xx 5-1:0.0: No AC97 audio processor
[  265.648595][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.665242][ T5234] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  265.666725][ T1172] usb 5-1: USB disconnect, device number 36
[  265.691277][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.720860][ T1172] em28xx 5-1:0.0: Disconnecting em28xx
[  265.740452][ T1172] em28xx 5-1:0.0: Freeing device
[  265.749893][ T9569] xt_l2tp: invalid flags combination: 0
[  265.755663][   T36] veth1_macvtap: left promiscuous mode
[  265.756817][   T36] veth0_macvtap: left promiscuous mode
[  265.776291][   T36] veth1_vlan: left promiscuous mode
[  265.782187][   T36] veth0_vlan: left promiscuous mode
[  265.842268][ T5234] usb 4-1: device descriptor read/64, error -71
[  266.098720][ T5234] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  266.142297][   T54] Bluetooth: hci0: command tx timeout
[  266.192614][ T1172] usb 1-1: USB disconnect, device number 35
[  266.206139][ T1172] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  266.218069][ T1172] ftdi_sio 1-1:0.0: device disconnected
[  266.241750][ T5234] usb 4-1: device descriptor read/64, error -71
[  266.256369][ T5334] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  266.357212][ T5234] usb usb4-port1: attempt power cycle
[  266.375349][   T36] team0 (unregistering): Port device team_slave_1 removed
[  266.423902][ T5334] usb 3-1: Using ep0 maxpacket: 8
[  266.428790][   T36] team0 (unregistering): Port device team_slave_0 removed
[  266.430936][ T5334] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.462845][ T5334] usb 3-1: config 0 has no interfaces?
[  266.468415][ T5334] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  266.477623][ T5334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.487637][ T5334] usb 3-1: config 0 descriptor??
[  266.508624][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.519756][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.724545][ T5234] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  266.751776][   T25] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  266.772040][ T5234] usb 4-1: device descriptor read/8, error -71
[  266.911828][   T25] usb 5-1: Using ep0 maxpacket: 32
[  266.925335][   T25] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  266.939008][   T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 71, changing to 7
[  266.959367][   T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8900, setting to 1024
[  266.970936][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  266.980178][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.992086][   T25] hub 5-1:4.0: bad descriptor, ignoring hub
[  266.998029][   T25] hub 5-1:4.0: probe with driver hub failed with error -5
[  267.007989][   T25] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[  267.031753][ T5234] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  267.041014][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.048680][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.056844][ T9506] bridge_slave_0: entered allmulticast mode
[  267.067028][ T5234] usb 4-1: device descriptor read/8, error -71
[  267.075608][ T9506] bridge_slave_0: entered promiscuous mode
[  267.101864][ T9506] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.108933][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.131818][ T9506] bridge_slave_1: entered allmulticast mode
[  267.152766][ T9506] bridge_slave_1: entered promiscuous mode
[  267.193774][ T5234] usb usb4-port1: unable to enumerate USB device
[  267.225043][ T9506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.251286][ T9506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.325377][ T5234] usb 5-1: USB disconnect, device number 37
[  267.371424][ T9506] team0: Port device team_slave_0 added
[  267.403195][ T9506] team0: Port device team_slave_1 added
[  267.502400][ T9506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.521938][ T9506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.581712][ T9506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.612295][ T9506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.619257][ T9506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.693886][ T9506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.708447][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  267.718389][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  267.736073][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  267.755059][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  267.769250][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  267.776898][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  267.864365][ T9506] hsr_slave_0: entered promiscuous mode
[  267.881764][ T9506] hsr_slave_1: entered promiscuous mode
[  267.888277][ T9506] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.896611][ T9506] Cannot create hsr debugfs directory
[  267.964942][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.051255][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.170369][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.221800][ T5237] Bluetooth: hci0: command tx timeout
[  268.292538][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.540478][ T9597] chnl_net:caif_netlink_parms(): no params data found
[  268.661151][   T36] batadv0: left allmulticast mode
[  268.667401][   T36] batadv0: left promiscuous mode
[  268.677970][   T36] bridge0: port 3(batadv0) entered disabled state
[  268.704997][   T36] bridge_slave_1: left allmulticast mode
[  268.721772][   T36] bridge_slave_1: left promiscuous mode
[  268.751892][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.789942][   T36] bridge_slave_0: left allmulticast mode
[  268.815338][   T36] bridge_slave_0: left promiscuous mode
[  268.838700][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.062985][    T8] usb 3-1: USB disconnect, device number 42
[  269.136972][ T9635] xt_l2tp: invalid flags combination: 0
[  269.310629][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.322294][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.333656][   T36] bond0 (unregistering): Released all slaves
[  269.452938][ T9633] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.462413][ T9633] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.510363][ T9636] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.517533][ T9636] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.526961][ T9636] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.534087][ T9636] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.664682][ T9506] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  269.697256][ T9597] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.712941][ T9597] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.738423][ T9597] bridge_slave_0: entered allmulticast mode
[  269.764216][ T9597] bridge_slave_0: entered promiscuous mode
[  269.797279][ T9506] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  269.807596][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'.
[  269.816486][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'.
[  269.826711][ T5237] Bluetooth: hci1: command tx timeout
[  269.842665][ T9506] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  269.852926][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.868989][ T9597] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.881557][ T9597] bridge_slave_1: entered allmulticast mode
[  269.888429][ T9597] bridge_slave_1: entered promiscuous mode
[  269.968884][ T9506] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  270.006110][ T9647] warning: `syz.3.955' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  270.127041][ T9597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.183306][   T36] hsr_slave_0: left promiscuous mode
[  270.212221][ T5278] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  270.233486][   T36] hsr_slave_1: left promiscuous mode
[  270.269874][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.301853][ T5237] Bluetooth: hci0: command tx timeout
[  270.309947][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.360789][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.375142][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.408785][ T5278] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  270.425737][ T5278] usb 4-1: config 0 has no interface number 0
[  270.437554][ T5278] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  270.450334][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.460305][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'.
[  270.465990][   T36] veth1_macvtap: left promiscuous mode
[  270.485317][ T5278] usb 4-1: Product: syz
[  270.499704][   T36] veth0_macvtap: left promiscuous mode
[  270.505396][   T36] veth1_vlan: left promiscuous mode
[  270.511298][   T36] veth0_vlan: left promiscuous mode
[  270.511359][ T5278] usb 4-1: Manufacturer: syz
[  270.540269][ T5278] usb 4-1: SerialNumber: syz
[  270.566411][ T5278] usb 4-1: config 0 descriptor??
[  270.789279][ T5278] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  270.850329][ T5278] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  270.878318][ T5278] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  270.897828][ T5278] usb 4-1: media controller created
[  270.919244][ T5278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  271.211774][    T8] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  271.397324][    T8] usb 5-1: Using ep0 maxpacket: 16
[  271.419240][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.448496][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  271.482750][    T8] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  271.502643][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.510889][    T8] usb 5-1: Product: syz
[  271.511115][   T36] team0 (unregistering): Port device team_slave_0 removed
[  271.521760][    T8] usb 5-1: Manufacturer: syz
[  271.541835][    T8] usb 5-1: SerialNumber: syz
[  271.564888][    T8] usb 5-1: config 0 descriptor??
[  271.911915][ T5237] Bluetooth: hci1: command tx timeout
[  271.982516][ T5278] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  272.296607][ T9597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.382646][ T5237] Bluetooth: hci0: command tx timeout
[  272.428818][ T9647] dvmrp0: entered allmulticast mode
[  272.533696][ T9597] team0: Port device team_slave_0 added
[  272.570410][ T9597] team0: Port device team_slave_1 added
[  272.685396][ T9597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.722419][ T9597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.821475][ T9597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.924060][ T9597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.969745][ T9597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.072330][ T9597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.226514][ T9597] hsr_slave_0: entered promiscuous mode
[  273.260369][ T9597] hsr_slave_1: entered promiscuous mode
[  273.438183][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  273.456097][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  273.465926][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  273.484718][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  273.495089][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  273.504362][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  273.601588][ T1172] usb 4-1: USB disconnect, device number 37
[  273.653029][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.851572][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.881190][ T9506] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.958715][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.983108][   T54] Bluetooth: hci1: command tx timeout
[  274.037713][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.071790][ T1172] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  274.121597][ T9506] 8021q: adding VLAN 0 to HW filter on device team0
[  274.157226][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.164323][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.233624][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.271230][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.289614][ T1172] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  274.327215][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.334340][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.342259][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.362896][ T1172] usb 4-1: config 0 descriptor??
[  274.567365][   T36] bridge_slave_1: left allmulticast mode
[  274.581138][   T36] bridge_slave_1: left promiscuous mode
[  274.594106][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.613169][   T36] bridge_slave_0: left allmulticast mode
[  274.618944][   T36] bridge_slave_0: left promiscuous mode
[  274.625041][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.786559][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  274.786576][   T29] audit: type=1326 audit(1727531971.652:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956d37dff9 code=0x7ffc0000
[  274.816906][   T29] audit: type=1326 audit(1727531971.652:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956d37dff9 code=0x7ffc0000
[  274.841514][   T29] audit: type=1326 audit(1727531971.652:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f956d37dff9 code=0x7ffc0000
[  274.849172][ T1172] pyra 0003:1E7D:2CF6.000F: item fetching failed at offset 5/7
[  274.902986][ T1172] pyra 0003:1E7D:2CF6.000F: parse failed
[  274.903912][   T29] audit: type=1326 audit(1727531971.652:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956d37dff9 code=0x7ffc0000
[  274.913283][ T1172] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -22
[  274.933420][   T29] audit: type=1326 audit(1727531971.652:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f956d37dff9 code=0x7ffc0000
[  274.963837][   T29] audit: type=1326 audit(1727531971.652:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956d37dff9 code=0x7ffc0000
[  274.986700][   T29] audit: type=1326 audit(1727531971.652:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f956d37dff9 code=0x7ffc0000
[  275.037572][   T29] audit: type=1326 audit(1727531971.652:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956d37dff9 code=0x7ffc0000
[  275.062556][   T29] audit: type=1326 audit(1727531971.652:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f956d37dbfb code=0x7ffc0000
[  275.091513][   T29] audit: type=1326 audit(1727531971.652:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f956d37dbfb code=0x7ffc0000
[  275.112909][ T1172] usb 5-1: USB disconnect, device number 38
[  275.335140][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.348124][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.363474][   T36] bond0 (unregistering): Released all slaves
[  275.437677][ T9689] chnl_net:caif_netlink_parms(): no params data found
[  275.583412][   T54] Bluetooth: hci2: command tx timeout
[  276.011469][   T36] hsr_slave_0: left promiscuous mode
[  276.019700][   T36] hsr_slave_1: left promiscuous mode
[  276.032484][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.039914][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.056115][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.064146][   T54] Bluetooth: hci1: command tx timeout
[  276.078350][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.108072][   T36] veth1_macvtap: left promiscuous mode
[  276.121779][   T36] veth0_macvtap: left promiscuous mode
[  276.127379][   T36] veth1_vlan: left promiscuous mode
[  276.139272][   T36] veth0_vlan: left promiscuous mode
[  276.679050][ T9742] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  276.704893][ T9742] kvm: pic: level sensitive irq not supported
[  276.705176][ T9742] kvm: pic: non byte read
[  276.731844][ T9742] kvm: pic: level sensitive irq not supported
[  276.731910][ T9742] kvm: pic: non byte read
[  276.778335][ T9742] kvm: pic: level sensitive irq not supported
[  276.778419][ T9742] kvm: pic: non byte read
[  276.791884][ T9742] kvm: pic: level sensitive irq not supported
[  276.791945][ T9742] kvm: pic: non byte read
[  276.815059][ T9742] kvm: pic: level sensitive irq not supported
[  276.815119][ T9742] kvm: pic: non byte read
[  276.862842][ T9742] kvm: pic: level sensitive irq not supported
[  276.862907][ T9742] kvm: pic: non byte read
[  277.121265][   T36] team0 (unregistering): Port device team_slave_1 removed
[  277.201247][   T36] team0 (unregistering): Port device team_slave_0 removed
[  277.315155][ T5281] usb 4-1: USB disconnect, device number 38
[  277.662047][   T54] Bluetooth: hci2: command tx timeout
[  278.085687][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.101925][ T9689] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.109168][ T9689] bridge_slave_0: entered allmulticast mode
[  278.122418][ T9689] bridge_slave_0: entered promiscuous mode
[  278.152944][ T9689] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.173275][ T9689] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.180486][ T9689] bridge_slave_1: entered allmulticast mode
[  278.194791][ T9689] bridge_slave_1: entered promiscuous mode
[  278.304971][ T9689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.320789][ T9597] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  278.345930][ T9597] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  278.359777][ T9689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.413895][ T9597] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  278.449695][ T9689] team0: Port device team_slave_0 added
[  278.464393][ T9597] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  278.487241][ T9506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.508473][ T9689] team0: Port device team_slave_1 added
[  278.533332][ T5281] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  278.589534][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.601521][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.661380][ T9689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.688224][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.703723][ T5281] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  278.706705][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.730256][ T5281] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  278.754018][ T9689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.759563][ T5281] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  278.759591][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.770166][ T9803] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  278.781124][ T5281] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  278.870697][ T9689] hsr_slave_0: entered promiscuous mode
[  278.905125][ T9689] hsr_slave_1: entered promiscuous mode
[  278.910875][ T9689] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  278.910901][ T9689] Cannot create hsr debugfs directory
[  279.071274][ T9506] veth0_vlan: entered promiscuous mode
[  279.093478][ T5281] usb 5-1: USB disconnect, device number 39
[  279.121808][ T9506] veth1_vlan: entered promiscuous mode
[  279.264799][ T9597] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.388290][ T9597] 8021q: adding VLAN 0 to HW filter on device team0
[  279.466340][ T9506] veth0_macvtap: entered promiscuous mode
[  279.560367][ T9506] veth1_macvtap: entered promiscuous mode
[  279.591821][ T5281] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  279.604694][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.611828][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.628868][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.635958][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.680459][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.711410][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.727300][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.741968][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.749396][   T54] Bluetooth: hci2: command tx timeout
[  279.752077][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.771756][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.783464][ T5281] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  279.815577][ T9506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.825275][ T5281] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  279.873767][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.889330][ T9832] program syz.3.977 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  279.897993][ T5281] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  279.907848][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.911791][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.923537][ T9824] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  279.936777][ T5281] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  279.956224][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.972963][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.989588][ T9506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.012743][ T9506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.044578][ T9506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.093683][ T9506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.107952][ T9506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.122197][ T9506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.132126][ T9506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.150057][ T9597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  280.162747][ T9597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  280.200917][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.247934][ T9841] loop8: detected capacity change from 0 to 7
[  280.258823][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.299560][ T9841] Dev loop8: unable to read RDB block 7
[  280.302692][ T9597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.308803][ T9841]  loop8: unable to read partition table
[  280.340070][ T9841] loop8: partition table beyond EOD, truncated
[  280.360423][ T9841] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  280.360423][ T9841] 
) failed (rc=-5)
[  280.414711][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.432588][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.542770][ T9689] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  280.560271][ T3999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.566328][ T9689] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  280.572165][ T3999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.605527][ T9597] veth0_vlan: entered promiscuous mode
[  280.615660][ T9689] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  280.635105][ T9689] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  280.643744][ T9847] dccp_invalid_packet: P.Data Offset(0) too small
[  280.677417][ T9597] veth1_vlan: entered promiscuous mode
[  280.757582][ T9597] veth0_macvtap: entered promiscuous mode
[  280.783394][ T9597] veth1_macvtap: entered promiscuous mode
[  280.836350][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.861693][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.871948][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.882566][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.892689][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.907329][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.917679][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.928222][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.943188][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.973799][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.991374][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.007990][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.018546][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.033174][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.048704][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.061273][ T9597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.078105][ T9597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.090130][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.106896][ T9597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.125546][ T9597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.136863][ T9597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.149435][ T9597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.176647][ T9689] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.202290][ T2636] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  281.249806][ T9689] 8021q: adding VLAN 0 to HW filter on device team0
[  281.300058][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.307150][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.352951][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.360034][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.368932][ T2636] usb 2-1: Using ep0 maxpacket: 16
[  281.377888][ T2636] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.394198][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.412130][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.419495][ T2636] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  281.442731][ T2636] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  281.463171][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.477683][ T2636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.486870][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.495646][ T9689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  281.516678][ T2636] usb 2-1: Product: syz
[  281.520877][ T2636] usb 2-1: Manufacturer: syz
[  281.527013][ T2636] usb 2-1: SerialNumber: syz
[  281.536542][ T2636] usb 2-1: config 0 descriptor??
[  281.562461][ T9689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  281.654001][ T2636] usb 5-1: USB disconnect, device number 40
[  281.699284][ T9689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.824630][   T54] Bluetooth: hci2: command tx timeout
[  281.932710][ T9689] veth0_vlan: entered promiscuous mode
[  281.954056][ T9689] veth1_vlan: entered promiscuous mode
[  282.225701][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.539458][ T9689] veth0_macvtap: entered promiscuous mode
[  282.606998][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.668906][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  282.678359][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  282.686377][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  282.699934][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  282.708585][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  282.717612][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  282.766382][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.822482][ T9689] veth1_macvtap: entered promiscuous mode
[  282.842444][ T5334] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  282.887801][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.015122][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.026299][ T5334] usb 1-1: Using ep0 maxpacket: 8
[  283.032340][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.044106][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.055385][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.065401][ T5334] usb 1-1: config 0 has no interfaces?
[  283.070880][ T5334] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  283.084549][ T5334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.094264][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.100545][ T5334] usb 1-1: config 0 descriptor??
[  283.137579][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.151533][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.170619][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.180678][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.196100][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.211478][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.262682][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.273537][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.283999][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.295013][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.305713][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.314434][ T9864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.318764][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.334648][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.345993][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.356217][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.378389][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.401403][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.413712][ T9864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.468997][ T9866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.506865][ T9689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.521733][ T9689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.531697][ T9689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.541735][ T9689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.652295][ T9866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.672429][   T12] bridge_slave_1: left allmulticast mode
[  283.680751][   T12] bridge_slave_1: left promiscuous mode
[  283.686934][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.735559][   T12] bridge_slave_0: left allmulticast mode
[  283.751977][   T12] bridge_slave_0: left promiscuous mode
[  283.770500][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.794927][ T5281] usb 1-1: USB disconnect, device number 36
[  283.890682][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  283.890699][   T29] audit: type=1326 audit(1727531980.752:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.3.986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f956d37dff9 code=0x0
[  284.231841][ T5234] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  284.411911][ T5234] usb 1-1: Using ep0 maxpacket: 16
[  284.427565][ T5234] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  284.476016][ T5234] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  284.492444][ T5234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.512097][ T5234] usb 1-1: Product: syz
[  284.519695][ T5234] usb 1-1: Manufacturer: syz
[  284.526214][ T5234] usb 1-1: SerialNumber: syz
[  284.552094][ T5234] usb 1-1: config 0 descriptor??
[  284.658767][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.687437][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.716196][   T12] bond0 (unregistering): Released all slaves
[  284.784926][ T5237] Bluetooth: hci4: command tx timeout
[  284.945868][ T9868] chnl_net:caif_netlink_parms(): no params data found
[  285.254210][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.291052][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.609198][   T12] hsr_slave_0: left promiscuous mode
[  285.621332][   T12] hsr_slave_1: left promiscuous mode
[  285.645783][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.655503][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.665316][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.677411][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.725535][   T12] veth1_macvtap: left promiscuous mode
[  285.741781][   T12] veth0_macvtap: left promiscuous mode
[  285.756583][   T12] veth1_vlan: left promiscuous mode
[  285.777251][   T12] veth0_vlan: left promiscuous mode
[  285.993965][ T5281] usb 2-1: USB disconnect, device number 32
[  286.818838][   T12] team0 (unregistering): Port device team_slave_1 removed
[  286.870358][   T12] team0 (unregistering): Port device team_slave_0 removed
[  286.872649][ T5237] Bluetooth: hci4: command tx timeout
[  287.425435][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.447636][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.459298][ T9868] bridge_slave_0: entered allmulticast mode
[  287.472039][ T9868] bridge_slave_0: entered promiscuous mode
[  287.550960][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.562156][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.569362][ T9868] bridge_slave_1: entered allmulticast mode
[  287.593019][ T9868] bridge_slave_1: entered promiscuous mode
[  287.623816][ T3999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.639444][ T9868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.652397][ T3999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.674364][ T9868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.872096][ T9868] team0: Port device team_slave_0 added
[  287.932117][ T9868] team0: Port device team_slave_1 added
[  288.092690][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.158641][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.256502][ T9868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.320069][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.358780][ T9932] xt_l2tp: invalid flags combination: 0
[  288.365718][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.467109][ T9868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.643196][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  288.652598][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  288.661349][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  288.691860][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  288.699776][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  288.709006][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  288.720588][ T5334] usb 1-1: USB disconnect, device number 37
[  288.729422][ T9868] hsr_slave_0: entered promiscuous mode
[  288.742159][ T9868] hsr_slave_1: entered promiscuous mode
[  288.775993][ T9868] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  288.796384][ T9868] Cannot create hsr debugfs directory
[  288.862782][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  288.879506][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  288.890591][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  288.900750][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  288.916017][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  288.923566][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  288.950493][   T54] Bluetooth: hci4: command tx timeout
[  288.967871][ T9941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872256 (1073744512 ns) > initial count (40 ns). Using initial count to start timer.
[  289.137647][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.287942][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.377177][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.485214][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.692045][ T5234] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  289.713132][ T9944] chnl_net:caif_netlink_parms(): no params data found
[  289.856247][ T5234] usb 1-1: Using ep0 maxpacket: 16
[  289.869725][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.881309][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.891337][ T5234] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  289.892925][ T9939] chnl_net:caif_netlink_parms(): no params data found
[  289.900497][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.907850][    T8] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  289.924541][ T5234] usb 1-1: config 0 descriptor??
[  290.035821][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.043109][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.050261][ T9944] bridge_slave_0: entered allmulticast mode
[  290.058110][ T9944] bridge_slave_0: entered promiscuous mode
[  290.066902][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.076286][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.083845][    T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  290.095228][    T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  290.105610][ T9944] bridge_slave_1: entered allmulticast mode
[  290.112701][ T9944] bridge_slave_1: entered promiscuous mode
[  290.118991][    T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  290.130468][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.143481][ T9971] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  290.168265][    T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  290.188266][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.356158][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.375844][ T5234] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0
[  290.404924][    T8] usb 3-1: USB disconnect, device number 43
[  290.411477][ T5234] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0
[  290.433469][ T5234] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0
[  290.447513][ T5234] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0
[  290.469132][ T5234] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x0
[  290.478251][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.489217][ T5234] lua 0003:1E7D:2C2E.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0
[  290.507881][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.559133][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.603742][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.632181][ T9944] team0: Port device team_slave_0 added
[  290.644947][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.654701][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.671253][ T9939] bridge_slave_0: entered allmulticast mode
[  290.679106][ T9939] bridge_slave_0: entered promiscuous mode
[  290.696792][ T9944] team0: Port device team_slave_1 added
[  290.726225][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.733553][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.740729][ T9939] bridge_slave_1: entered allmulticast mode
[  290.748725][ T9939] bridge_slave_1: entered promiscuous mode
[  290.761214][ T9868] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  290.775397][ T9868] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  290.791382][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.791805][   T54] Bluetooth: hci0: command tx timeout
[  290.798954][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.830217][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.847500][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.854537][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.880531][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.891867][ T5234] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  290.910363][ T9939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.928942][ T9868] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  290.949993][ T9939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.959331][ T9868] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  290.995890][ T9939] team0: Port device team_slave_0 added
[  291.004472][ T9939] team0: Port device team_slave_1 added
[  291.023911][ T5232] Bluetooth: hci4: command tx timeout
[  291.023921][   T54] Bluetooth: hci3: command tx timeout
[  291.059194][ T9944] hsr_slave_0: entered promiscuous mode
[  291.065407][ T9944] hsr_slave_1: entered promiscuous mode
[  291.072003][ T9944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.076388][ T5234] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  291.079552][ T9944] Cannot create hsr debugfs directory
[  291.100748][ T5234] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  291.116007][ T5234] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  291.140516][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.156242][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.183169][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.192402][ T9939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.210091][ T9971] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  291.220485][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.228365][ T5234] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  291.231884][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.270027][ T9939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.326843][   T12] bridge_slave_1: left allmulticast mode
[  291.335218][   T12] bridge_slave_1: left promiscuous mode
[  291.342235][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.360425][   T12] bridge_slave_0: left allmulticast mode
[  291.366358][   T12] bridge_slave_0: left promiscuous mode
[  291.373126][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.382812][   T12] bridge_slave_1: left allmulticast mode
[  291.388579][   T12] bridge_slave_1: left promiscuous mode
[  291.394373][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.409455][   T12] bridge_slave_0: left allmulticast mode
[  291.415507][   T12] bridge_slave_0: left promiscuous mode
[  291.421172][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.429140][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.446348][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.759115][   T12] dvmrp0 (unregistering): left allmulticast mode
[  292.040608][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.051920][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.067941][   T12] bond0 (unregistering): Released all slaves
[  292.177588][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.188693][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.200384][   T12] bond0 (unregistering): Released all slaves
[  292.419035][ T9939] hsr_slave_0: entered promiscuous mode
[  292.431831][ T9939] hsr_slave_1: entered promiscuous mode
[  292.438077][ T9939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.446151][ T9939] Cannot create hsr debugfs directory
[  292.465240][ T5334] usb 1-1: USB disconnect, device number 38
[  292.635111][ T9987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872256 (1073744512 ns) > initial count (40 ns). Using initial count to start timer.
[  292.662736][ T9987] FAULT_INJECTION: forcing a failure.
[  292.662736][ T9987] name failslab, interval 1, probability 0, space 0, times 0
[  292.713782][ T9987] CPU: 0 UID: 0 PID: 9987 Comm: syz.0.1001 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0
[  292.723205][ T5334] usb 3-1: USB disconnect, device number 44
[  292.724137][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  292.724170][ T9987] Call Trace:
[  292.743395][ T9987]  <TASK>
[  292.746340][ T9987]  dump_stack_lvl+0x241/0x360
[  292.751058][ T9987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.756281][ T9987]  ? __pfx__printk+0x10/0x10
[  292.760902][ T9987]  ? __kmalloc_cache_noprof+0x44/0x2c0
[  292.766391][ T9987]  ? __pfx___might_resched+0x10/0x10
[  292.771701][ T9987]  should_fail_ex+0x3b0/0x4e0
[  292.776397][ T9987]  should_failslab+0xac/0x100
[  292.781069][ T9987]  ? kvm_vcpu_ioctl+0x348/0xea0
[  292.785913][ T9987]  __kmalloc_cache_noprof+0x6c/0x2c0
[  292.791197][ T9987]  kvm_vcpu_ioctl+0x348/0xea0
[  292.795872][ T9987]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  292.801074][ T9987]  ? __fget_files+0x29/0x470
[  292.805655][ T9987]  ? __fget_files+0x3f3/0x470
[  292.810326][ T9987]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  292.815518][ T9987]  __se_sys_ioctl+0xf9/0x170
[  292.820114][ T9987]  do_syscall_64+0xf3/0x230
[  292.824620][ T9987]  ? clear_bhb_loop+0x35/0x90
[  292.829289][ T9987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.835175][ T9987] RIP: 0033:0x7fae5cf7dbfb
[  292.839584][ T9987] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  292.859186][ T9987] RSP: 002b:00007fae5de4a490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  292.867595][ T9987] RAX: ffffffffffffffda RBX: 00007fae5de4abe0 RCX: 00007fae5cf7dbfb
[  292.875560][ T9987] RDX: 00007fae5de4aaa0 RSI: 000000008138ae83 RDI: 0000000000000006
[  292.883522][ T9987] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000000000050
[  292.891483][ T9987] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000018
[  292.899443][ T9987] R13: 0000000020018000 R14: 0000000020000000 R15: 00000000fec00000
[  292.907416][ T9987]  </TASK>
[  292.918022][ T5232] Bluetooth: hci0: command tx timeout
[  293.102203][ T5232] Bluetooth: hci3: command tx timeout
[  293.244067][ T9868] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.323466][ T9868] 8021q: adding VLAN 0 to HW filter on device team0
[  293.327018][T10006] xt_l2tp: invalid flags combination: 0
[  293.349580][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.356732][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.514637][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.521793][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.622476][   T12] hsr_slave_0: left promiscuous mode
[  293.633710][   T12] hsr_slave_1: left promiscuous mode
[  293.649855][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.671302][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.679406][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.687148][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.705081][   T12] hsr_slave_0: left promiscuous mode
[  293.710905][   T12] hsr_slave_1: left promiscuous mode
[  293.722919][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.740536][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.761460][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.770914][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.819026][   T12] veth1_macvtap: left promiscuous mode
[  293.836228][   T12] veth0_macvtap: left promiscuous mode
[  293.849944][   T12] veth1_vlan: left promiscuous mode
[  293.855921][   T12] veth0_vlan: left promiscuous mode
[  293.873053][   T12] veth1_macvtap: left promiscuous mode
[  293.883974][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  293.895672][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  293.907146][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  293.915989][   T12] veth0_macvtap: left promiscuous mode
[  293.915991][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  293.921562][   T12] veth1_vlan: left promiscuous mode
[  293.936922][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  293.946561][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  293.966837][   T12] veth0_vlan: left promiscuous mode
[  294.462017][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  294.624686][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  294.643863][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  294.654245][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  294.668423][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.697935][T10035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  294.713592][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  294.802615][   T12] team0 (unregistering): Port device team_slave_1 removed
[  294.847046][   T12] team0 (unregistering): Port device team_slave_0 removed
[  294.942338][ T5232] Bluetooth: hci0: command tx timeout
[  294.979257][    T9] usb 1-1: USB disconnect, device number 39
[  295.187404][ T5232] Bluetooth: hci3: command tx timeout
[  295.432039][    T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  295.572930][   T12] team0 (unregistering): Port device team_slave_1 removed
[  295.595216][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  295.614424][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  295.630818][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  295.645908][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.646363][   T12] team0 (unregistering): Port device team_slave_0 removed
[  295.666622][T10041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  295.683618][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  295.887117][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.900994][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.076367][ T5232] Bluetooth: hci2: command tx timeout
[  296.308974][ T9868] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.441578][ T9868] veth0_vlan: entered promiscuous mode
[  296.466575][T10024] chnl_net:caif_netlink_parms(): no params data found
[  296.489076][ T9868] veth1_vlan: entered promiscuous mode
[  296.655299][ T9868] veth0_macvtap: entered promiscuous mode
[  296.664838][ T9868] veth1_macvtap: entered promiscuous mode
[  296.773006][T10024] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.780107][T10024] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.802631][T10024] bridge_slave_0: entered allmulticast mode
[  296.809238][T10024] bridge_slave_0: entered promiscuous mode
[  296.844043][ T9939] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  296.860125][ T9939] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  296.892213][T10024] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.902265][T10024] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.909515][T10024] bridge_slave_1: entered allmulticast mode
[  296.917226][T10024] bridge_slave_1: entered promiscuous mode
[  296.942316][ T9939] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  296.959169][ T9939] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  296.979042][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.990049][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.999913][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.010409][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.020299][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.030989][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.031865][ T5232] Bluetooth: hci0: command tx timeout
[  297.043608][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.060497][T10024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.079724][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.091185][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.110031][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.120721][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.135009][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.145936][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.160332][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.170321][T10024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.208163][ T1172] usb 1-1: USB disconnect, device number 40
[  297.262325][ T5232] Bluetooth: hci3: command tx timeout
[  297.266088][ T9868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.279651][ T9868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.293545][ T9868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.302369][ T9868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.381013][T10024] team0: Port device team_slave_0 added
[  297.389408][T10024] team0: Port device team_slave_1 added
[  297.457679][ T9944] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  297.492444][ T9944] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  297.521176][T10024] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.552734][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.595683][T10024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.623836][T10024] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.631877][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.689792][T10024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.712401][ T9944] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  297.742597][ T9944] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  297.864552][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.037395][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.142667][ T5232] Bluetooth: hci2: command tx timeout
[  298.163730][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.182119][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.193271][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.202383][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.205001][T10024] hsr_slave_0: entered promiscuous mode
[  298.216981][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.226242][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  298.229220][T10024] hsr_slave_1: entered promiscuous mode
[  298.238408][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.281768][T10024] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.289642][T10024] Cannot create hsr debugfs directory
[  298.368684][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.439830][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.454488][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.501441][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.570856][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.581409][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.649952][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.726840][ T9939] 8021q: adding VLAN 0 to HW filter on device team0
[  298.738776][ T9944] 8021q: adding VLAN 0 to HW filter on device team0
[  298.813695][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.820791][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.881273][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.888374][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.903121][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'.
[  298.937037][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.944185][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.017350][   T12] bridge_slave_1: left allmulticast mode
[  299.030232][   T12] bridge_slave_1: left promiscuous mode
[  299.040498][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.062631][   T12] bridge_slave_0: left allmulticast mode
[  299.068299][   T12] bridge_slave_0: left promiscuous mode
[  299.083818][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.489875][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.506129][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.517551][   T12] bond0 (unregistering): Released all slaves
[  299.530871][T10087] chnl_net:caif_netlink_parms(): no params data found
[  299.543532][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.550642][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.600584][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.984'.
[  300.001211][T10087] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.063135][T10087] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.070366][T10087] bridge_slave_0: entered allmulticast mode
[  300.083011][T10087] bridge_slave_0: entered promiscuous mode
[  300.171882][ T2636] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  300.180353][T10087] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.200025][T10087] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.220714][T10087] bridge_slave_1: entered allmulticast mode
[  300.236206][ T5232] Bluetooth: hci2: command tx timeout
[  300.252849][T10087] bridge_slave_1: entered promiscuous mode
[  300.293055][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.302387][ T5232] Bluetooth: hci1: command tx timeout
[  300.332464][ T2636] usb 5-1: Using ep0 maxpacket: 16
[  300.345312][ T2636] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  300.388695][ T9944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  300.402039][ T2636] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  300.411189][ T2636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.419897][ T2636] usb 5-1: Product: syz
[  300.431037][ T2636] usb 5-1: Manufacturer: syz
[  300.452089][ T2636] usb 5-1: SerialNumber: syz
[  300.456898][ T9944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  300.469339][ T2636] usb 5-1: config 0 descriptor??
[  300.501436][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.558624][ T9939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.626417][   T12] hsr_slave_0: left promiscuous mode
[  300.645887][   T12] hsr_slave_1: left promiscuous mode
[  300.662666][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.670080][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.702616][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.710032][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.786183][   T12] veth1_macvtap: left promiscuous mode
[  300.831760][   T12] veth0_macvtap: left promiscuous mode
[  300.837367][   T12] veth1_vlan: left promiscuous mode
[  300.862058][   T12] veth0_vlan: left promiscuous mode
[  301.772215][   T12] team0 (unregistering): Port device team_slave_1 removed
[  301.833131][   T12] team0 (unregistering): Port device team_slave_0 removed
[  302.312390][ T5232] Bluetooth: hci2: command tx timeout
[  302.382953][ T5232] Bluetooth: hci1: command tx timeout
[  302.616035][T10087] team0: Port device team_slave_0 added
[  302.634703][T10087] team0: Port device team_slave_1 added
[  302.734611][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  302.741572][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.773690][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  302.818497][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  302.826035][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.853506][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.877343][T10024] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  302.928070][T10024] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  302.980731][T10087] hsr_slave_0: entered promiscuous mode
[  302.993361][T10087] hsr_slave_1: entered promiscuous mode
[  302.999386][T10087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  303.007334][T10087] Cannot create hsr debugfs directory
[  303.045975][T10024] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  303.057517][T10024] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  303.087562][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.262924][ T9939] veth0_vlan: entered promiscuous mode
[  303.319592][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.450030][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.499930][ T9939] veth1_vlan: entered promiscuous mode
[  303.531485][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.566433][ T9944] veth0_vlan: entered promiscuous mode
[  303.610840][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.666832][ T9944] veth1_vlan: entered promiscuous mode
[  303.720346][T10024] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.764580][ T1172] usb 5-1: USB disconnect, device number 41
[  303.785579][ T9939] veth0_macvtap: entered promiscuous mode
[  303.873913][ T9939] veth1_macvtap: entered promiscuous mode
[  303.890056][T10024] 8021q: adding VLAN 0 to HW filter on device team0
[  303.939063][ T9944] veth0_macvtap: entered promiscuous mode
[  303.949944][   T12] bridge_slave_1: left allmulticast mode
[  303.956516][   T12] bridge_slave_1: left promiscuous mode
[  303.964163][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.975052][   T12] bridge_slave_0: left allmulticast mode
[  303.980685][   T12] bridge_slave_0: left promiscuous mode
[  303.988137][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.349779][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.361411][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.372669][   T12] bond0 (unregistering): Released all slaves
[  304.411877][ T9944] veth1_macvtap: entered promiscuous mode
[  304.412020][    T9] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  304.448920][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'.
[  304.472343][ T5232] Bluetooth: hci1: command tx timeout
[  304.477925][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1014'.
[  304.489197][T10157] tc_dump_action: action bad kind
[  304.527686][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.534855][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.549652][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.560624][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.571470][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.587895][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.590682][    T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  304.612026][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.631679][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.641537][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.651413][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.660894][    T9] usb 5-1: config 0 descriptor??
[  304.670567][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  304.758254][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.765407][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.840527][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.871900][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.880559][    T9] gp8psk: usb in 128 operation failed.
[  304.888701][    T9] gp8psk: usb in 137 operation failed.
[  304.891679][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.901512][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  304.919097][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.923627][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  304.941898][    T9] usb 5-1: USB disconnect, device number 42
[  304.949743][ T9939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  304.980021][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.993013][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.040314][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.051568][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.062212][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.073463][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.083776][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.094458][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.104751][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.115388][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.127192][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.175213][ T9939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.184419][ T9939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.193213][ T9939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.203530][ T9939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.214372][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.226992][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.237367][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.247884][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.257711][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.268194][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.278037][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.289276][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.300173][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.310609][ T9944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.319945][ T9944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.329170][ T9944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.337925][ T9944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.393624][   T12] hsr_slave_0: left promiscuous mode
[  305.400818][   T12] hsr_slave_1: left promiscuous mode
[  305.420688][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.429320][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.442418][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.449822][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.467479][   T12] veth1_macvtap: left promiscuous mode
[  305.473151][   T12] veth0_macvtap: left promiscuous mode
[  305.478733][   T12] veth1_vlan: left promiscuous mode
[  305.484656][   T12] veth0_vlan: left promiscuous mode
[  305.880016][   T12] team0 (unregistering): Port device team_slave_1 removed
[  305.920498][   T12] team0 (unregistering): Port device team_slave_0 removed
[  306.465774][T10024] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.519273][T10087] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  306.552037][ T5232] Bluetooth: hci1: command tx timeout
[  306.592302][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.600137][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.686390][T10087] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  306.715541][ T8022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.722526][T10087] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  306.766271][ T8022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.790911][T10024] veth0_vlan: entered promiscuous mode
[  306.818861][T10087] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  306.865564][ T8022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.899308][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.901870][ T8022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.907770][T10024] veth1_vlan: entered promiscuous mode
[  306.928534][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.125483][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.135353][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.144079][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.152819][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.160399][   T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  307.170012][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.182786][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.371575][T10024] veth0_macvtap: entered promiscuous mode
[  307.394569][T10194] netlink: 'syz.3.995': attribute type 11 has an invalid length.
[  307.482556][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.603560][ T2636] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  307.627646][T10024] veth1_macvtap: entered promiscuous mode
[  307.765732][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.801856][ T2636] usb 4-1: Using ep0 maxpacket: 32
[  307.813509][ T2636] usb 4-1: unable to get BOS descriptor or descriptor too short
[  307.853064][ T2636] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  307.876371][ T2636] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  307.905658][ T2636] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  307.945249][ T2636] usb 4-1: config 128 has no interface number 0
[  307.985250][ T2636] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 242, changing to 11
[  308.025884][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.045520][ T2636] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 8405, setting to 1024
[  308.095988][ T2636] usb 4-1: config 128 interface 127 has no altsetting 0
[  308.110779][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.115793][ T2636] usb 4-1: language id specifier not provided by device, defaulting to English
[  308.147888][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.165100][ T2636] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  308.190704][ T2636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.241672][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.283225][ T2636] usb 4-1: Product: syz
[  308.301700][ T2636] usb 4-1: Manufacturer: syz
[  308.309609][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.329165][ T2636] usb 4-1: SerialNumber: syz
[  308.356168][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.387575][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.415752][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.433821][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.448478][T10024] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.495869][T10087] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.515292][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.536745][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.547379][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.566036][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.577219][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.590660][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.603636][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.619372][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.645184][T10024] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.793235][T10024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.808853][T10024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.820735][T10202] xt_l2tp: invalid flags combination: 0
[  308.832886][T10024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.842676][T10024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.911006][T10087] 8021q: adding VLAN 0 to HW filter on device team0
[  309.079318][   T12] bridge_slave_1: left allmulticast mode
[  309.087027][   T12] bridge_slave_1: left promiscuous mode
[  309.101033][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.125616][   T12] bridge_slave_0: left allmulticast mode
[  309.132683][   T12] bridge_slave_0: left promiscuous mode
[  309.138490][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.262993][ T5232] Bluetooth: hci4: command tx timeout
[  309.781820][ T5304] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  309.975677][ T5304] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=83.ca
[  309.993561][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.016031][ T5304] usb 2-1: Product: syz
[  310.020201][ T5304] usb 2-1: Manufacturer: syz
[  310.042319][ T5304] usb 2-1: SerialNumber: syz
[  310.067124][ T5304] usb 2-1: config 0 descriptor??
[  310.095340][ T5304] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[  310.119979][ T5304] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  310.139721][ T5304] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  310.185424][ T5304] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84
[  310.194726][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.217262][ T5304] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  310.235009][ T2636] usb 4-1: USB disconnect, device number 39
[  310.254847][ T5304] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  310.284029][ T5304] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88
[  310.287454][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.323111][ T5304] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  310.332825][ T5304] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  310.338656][ T7296] udevd[7296]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  310.364391][   T12] bond0 (unregistering): Released all slaves
[  310.400176][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.407359][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.508558][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.515683][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.568862][T10193] chnl_net:caif_netlink_parms(): no params data found
[  310.736506][   T12] hsr_slave_0: left promiscuous mode
[  310.742589][   T12] hsr_slave_1: left promiscuous mode
[  310.749796][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.758540][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.766505][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.774309][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.791801][ T2636] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  310.805559][   T12] veth1_macvtap: left promiscuous mode
[  310.811046][   T12] veth0_macvtap: left promiscuous mode
[  310.817645][   T12] veth1_vlan: left promiscuous mode
[  310.823047][   T12] veth0_vlan: left promiscuous mode
[  310.852331][   T47] usb 2-1: USB disconnect, device number 33
[  310.871339][   T47] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  310.920232][   T47] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  310.935204][   T47] keyspan 2-1:0.0: device disconnected
[  310.973385][ T2636] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4
[  310.989235][ T2636] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0
[  311.001676][ T2636] usb 4-1: Manufacturer: syz
[  311.009257][ T2636] usb 4-1: config 0 descriptor??
[  311.351835][ T5232] Bluetooth: hci4: command tx timeout
[  311.371102][   T12] team0 (unregistering): Port device team_slave_1 removed
[  311.417039][   T12] team0 (unregistering): Port device team_slave_0 removed
[  311.458814][ T2636] gs_usb 4-1:0.0: Configuring for 83 interfaces
[  311.465347][ T2636] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  311.474009][ T2636] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[  311.844271][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.852431][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.891497][T10193] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.913309][T10193] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.920543][T10193] bridge_slave_0: entered allmulticast mode
[  311.952497][T10193] bridge_slave_0: entered promiscuous mode
[  311.960737][T10193] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.968693][T10193] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.978826][T10193] bridge_slave_1: entered allmulticast mode
[  311.997990][T10193] bridge_slave_1: entered promiscuous mode
[  312.119257][T10193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.149217][T10193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.202472][ T3999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.214326][T10193] team0: Port device team_slave_0 added
[  312.220206][ T3999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.232069][ T5279] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  312.244358][T10193] team0: Port device team_slave_1 added
[  312.314474][T10193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.327829][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.362057][T10193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.382747][T10193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.389774][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.461993][ T5279] usb 2-1: Using ep0 maxpacket: 8
[  312.467273][T10193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.485439][ T5279] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  312.493241][ T5279] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  312.508992][ T5279] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  312.521006][ T5279] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  312.545736][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.557507][ T5279] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  312.606195][ T5279] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  312.615647][ T5279] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  312.641475][T10193] hsr_slave_0: entered promiscuous mode
[  312.653196][T10193] hsr_slave_1: entered promiscuous mode
[  312.658976][ T5279] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  312.674040][ T5279] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  312.686359][ T5279] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  312.699544][ T5279] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  312.707948][ T5304] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  312.717159][ T5279] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  312.744128][ T5279] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  312.756818][ T5279] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  312.775341][ T5279] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  312.818075][ T5279] usb 2-1: string descriptor 0 read error: -22
[  312.828153][ T5279] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  312.846169][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.871758][ T5304] usb 3-1: Using ep0 maxpacket: 16
[  312.898799][ T5304] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  312.931092][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.958236][ T5279] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  312.974532][ T5304] usb 3-1: Product: syz
[  312.989141][ T5304] usb 3-1: Manufacturer: syz
[  313.003919][ T5304] usb 3-1: SerialNumber: syz
[  313.023478][ T5304] usb 3-1: config 0 descriptor??
[  313.055657][T10087] veth0_vlan: entered promiscuous mode
[  313.098776][T10087] veth1_vlan: entered promiscuous mode
[  313.237542][ T5304] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v184 fw v148.0.0 (1 channels)
[  313.306903][ T5279] usb 2-1: USB disconnect, device number 34
[  313.331149][ T5278] usb 4-1: USB disconnect, device number 40
[  313.352510][T10087] veth0_macvtap: entered promiscuous mode
[  313.433539][ T5232] Bluetooth: hci4: command tx timeout
[  313.443221][ T5304] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  313.451505][ T5304] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71)
[  313.486277][T10087] veth1_macvtap: entered promiscuous mode
[  313.519454][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.541905][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.561786][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.573296][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.592712][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.611719][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.632566][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.658282][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.682355][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.695897][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.708907][ T5304] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[  313.721785][ T5304] usb 3-1: USB disconnect, device number 45
[  313.730720][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.741535][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.758992][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.778024][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.793208][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.810296][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.821358][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.839813][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.864346][T10087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.880031][T10087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.898972][T10087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.908273][T10087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.108864][T10193] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  314.116178][T10276] xt_l2tp: invalid flags combination: 0
[  314.136600][T10193] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  314.146660][T10193] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  314.158653][ T8022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.160928][T10193] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  314.171664][ T8022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.190586][ T5234] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  314.234628][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.259368][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.361755][ T5234] usb 4-1: Using ep0 maxpacket: 16
[  314.370374][ T5234] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  314.378647][T10193] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.382672][ T5234] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  314.406114][ T5234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  314.429935][ T5234] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  314.443169][T10287] FAULT_INJECTION: forcing a failure.
[  314.443169][T10287] name failslab, interval 1, probability 0, space 0, times 0
[  314.450645][T10193] 8021q: adding VLAN 0 to HW filter on device team0
[  314.455805][T10287] CPU: 1 UID: 0 PID: 10287 Comm: syz.0.1012 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0
[  314.455838][T10287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  314.455855][T10287] Call Trace:
[  314.455863][T10287]  <TASK>
[  314.455872][T10287]  dump_stack_lvl+0x241/0x360
[  314.455907][T10287]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.455933][T10287]  ? __pfx__printk+0x10/0x10
[  314.455972][T10287]  should_fail_ex+0x3b0/0x4e0
[  314.508289][T10287]  should_failslab+0xac/0x100
[  314.512986][T10287]  ? __alloc_skb+0x1c3/0x440
[  314.517599][T10287]  kmem_cache_alloc_node_noprof+0x71/0x320
[  314.523435][T10287]  __alloc_skb+0x1c3/0x440
[  314.527884][T10287]  ? __pfx___alloc_skb+0x10/0x10
[  314.532858][T10287]  skb_segment+0x1039/0x4340
[  314.537473][T10287]  ? finish_task_switch+0x2cf/0x870
[  314.540129][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.542696][T10287]  ? __pfx_validate_chain+0x10/0x10
[  314.542735][T10287]  ? __pfx_skb_segment+0x10/0x10
[  314.549795][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.554902][T10287]  ? skb_pull+0xc1/0x1e0
[  314.554930][T10287]  __udp_gso_segment+0x5b8/0x2620
[  314.576329][T10287]  ? __pfx_sock_wfree+0x10/0x10
[  314.581207][T10287]  udp6_ufo_fragment+0x6a7/0xf10
[  314.586169][T10287]  ? __lock_acquire+0x1384/0x2050
[  314.591233][T10287]  ? __pfx_udp6_ufo_fragment+0x10/0x10
[  314.591587][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.596701][T10287]  ipv6_gso_segment+0xb55/0x2120
[  314.596742][T10287]  ? __pfx_ipv6_gso_segment+0x10/0x10
[  314.596771][T10287]  ? __pfx_ipv6_gso_segment+0x10/0x10
[  314.603847][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.608668][T10287]  skb_mac_gso_segment+0x383/0x740
[  314.631704][T10287]  ? skb_mac_gso_segment+0x1b8/0x740
[  314.637020][T10287]  ? __pfx_skb_mac_gso_segment+0x10/0x10
[  314.642694][T10287]  __skb_gso_segment+0x324/0x4c0
[  314.647662][T10287]  validate_xmit_skb+0x585/0x1120
[  314.652710][T10287]  ? rcu_read_lock_bh_held+0x7e/0x120
[  314.658104][T10287]  ? __pfx_validate_xmit_skb+0x10/0x10
[  314.663594][T10287]  __dev_queue_xmit+0x17a2/0x3e80
[  314.668657][T10287]  ? __dev_queue_xmit+0x2da/0x3e80
[  314.673785][T10287]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  314.679802][T10287]  ? __pfx___dev_queue_xmit+0x10/0x10
[  314.685201][T10287]  ? neigh_connected_output+0x1d5/0x450
[  314.690768][T10287]  ? read_seqbegin+0x157/0x2b0
[  314.695557][T10287]  ? lockdep_hardirqs_on+0x99/0x150
[  314.700779][T10287]  ? read_seqbegin+0x208/0x2b0
[  314.705565][T10287]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  314.711315][T10287]  ? neigh_connected_output+0x3a7/0x450
[  314.716892][T10287]  ip6_finish_output2+0x1001/0x1730
[  314.722118][T10287]  ? ip6_finish_output2+0x75c/0x1730
[  314.725396][T10193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  314.727409][T10287]  ? __pfx_ip6_finish_output2+0x10/0x10
[  314.743260][T10287]  ? skb_gso_transport_seglen+0x345/0x580
[  314.749013][T10287]  ? skb_gso_validate_network_len+0x12e/0x290
[  314.755106][T10287]  ip6_finish_output+0x41e/0x810
[  314.760071][T10287]  ip6_send_skb+0x1b1/0x3b0
[  314.764597][T10287]  ? ip6_send_skb+0xfd/0x3b0
[  314.769214][T10287]  udp_v6_send_skb+0xbf5/0x1870
[  314.774098][T10287]  ? udpv6_sendmsg+0x1cca/0x3270
[  314.779065][T10287]  udpv6_sendmsg+0x23b6/0x3270
[  314.783867][T10287]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  314.789443][T10287]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  314.794582][T10287]  ? __pfx_lock_release+0x10/0x10
[  314.799660][T10287]  ? inet_send_prepare+0x21/0x260
[  314.804717][T10287]  ? inet_send_prepare+0x5a/0x260
[  314.809771][T10287]  __sock_sendmsg+0xef/0x270
[  314.814393][T10287]  sock_write_iter+0x2d7/0x3f0
[  314.819181][T10287]  ? __pfx_sock_write_iter+0x10/0x10
[  314.824503][T10287]  ? bpf_lsm_file_permission+0x9/0x10
[  314.829901][T10287]  ? security_file_permission+0x74/0x280
[  314.835568][T10287]  vfs_write+0xa6d/0xc90
[  314.838527][T10193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.839823][T10287]  ? __pfx_sock_write_iter+0x10/0x10
[  314.851868][T10287]  ? __pfx_vfs_write+0x10/0x10
[  314.856671][T10287]  ? fdget_pos+0x19a/0x320
[  314.861106][T10287]  ksys_write+0x183/0x2b0
[  314.865463][T10287]  ? __pfx_ksys_write+0x10/0x10
[  314.870334][T10287]  ? do_syscall_64+0x100/0x230
[  314.875122][T10287]  ? do_syscall_64+0xb6/0x230
[  314.879833][T10287]  do_syscall_64+0xf3/0x230
[  314.884362][T10287]  ? clear_bhb_loop+0x35/0x90
[  314.889057][T10287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.894975][T10287] RIP: 0033:0x7fad90d7dff9
[  314.899406][T10287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.919029][T10287] RSP: 002b:00007fad91c36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  314.927466][T10287] RAX: ffffffffffffffda RBX: 00007fad90f36058 RCX: 00007fad90d7dff9
[  314.935452][T10287] RDX: 0000000000001fc0 RSI: 0000000020000200 RDI: 0000000000000004
[  314.943435][T10287] RBP: 00007fad91c36090 R08: 0000000000000000 R09: 0000000000000000
[  314.951421][T10287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  314.959408][T10287] R13: 0000000000000000 R14: 00007fad90f36058 R15: 00007fad9105fa28
[  314.967411][T10287]  </TASK>
[  314.967617][T10193] veth0_vlan: entered promiscuous mode
[  314.974390][ T5234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.988999][ T5234] usb 4-1: Product: syz
[  314.993259][ T5234] usb 4-1: Manufacturer: syz
[  314.995456][T10297] fuse: Bad value for 'fd'
[  314.997847][ T5234] usb 4-1: SerialNumber: syz
[  315.008121][T10284] xt_CT: No such helper "netbios-ns"
[  315.067565][T10193] veth1_vlan: entered promiscuous mode
[  315.103503][T10305] xt_HMARK: proto mask must be zero with L3 mode
[  315.232405][T10193] veth0_macvtap: entered promiscuous mode
[  315.289139][T10193] veth1_macvtap: entered promiscuous mode
[  315.312684][ T5234] usb 4-1: 0:2 : does not exist
[  315.347443][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.362442][ T5234] usb 4-1: USB disconnect, device number 41
[  315.396375][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.432313][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.464079][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.486275][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.497422][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.507435][ T5232] Bluetooth: hci4: command tx timeout
[  315.513430][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.524114][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.548762][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.561369][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.588287][T10193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.624379][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.640638][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.680949][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.728670][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.781219][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.806932][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'.
[  315.847802][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.877547][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.940034][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.952733][T10193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.971885][T10193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.007971][T10193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.071114][T10193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.112340][T10193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.151782][T10193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.160501][T10193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.178693][T10340] syz.1.1036 (10340) used greatest stack depth: 18384 bytes left
[  316.312074][ T5234] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  316.343634][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.351449][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.410496][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.442856][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.472126][ T5234] usb 4-1: Using ep0 maxpacket: 8
[  316.485769][ T5234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  316.531787][ T5234] usb 4-1: config 0 has no interfaces?
[  316.537270][ T5234] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  316.554873][ T5280] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  316.609064][ T5234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.672773][ T5234] usb 4-1: config 0 descriptor??
[  316.741833][ T5280] usb 1-1: Using ep0 maxpacket: 32
[  316.759094][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.800796][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.857286][ T5280] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  316.915572][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.992473][ T5280] usb 1-1: config 0 descriptor??
[  317.211831][ T5281] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  317.292529][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  317.298835][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  317.400490][ T5281] usb 3-1: Using ep0 maxpacket: 32
[  317.444175][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  317.499396][ T5281] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  317.576423][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  317.629387][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.691676][ T5281] usb 3-1: Product: syz
[  317.703746][ T5281] usb 3-1: Manufacturer: syz
[  317.708403][ T5281] usb 3-1: SerialNumber: syz
[  317.904171][   T47] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  318.043799][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.091717][   T47] usb 5-1: Using ep0 maxpacket: 32
[  318.114559][   T47] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config
[  318.130563][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  318.146929][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.166427][T10361] sctp: [Deprecated]: syz.2.1040 (pid 10361) Use of int in max_burst socket option deprecated.
[  318.166427][T10361] Use struct sctp_assoc_value instead
[  318.209614][   T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  318.247894][   T47] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74
[  318.274430][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.306377][   T47] usb 5-1: Product: syz
[  318.310559][   T47] usb 5-1: Manufacturer: syz
[  318.321601][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'.
[  318.342065][   T47] usb 5-1: SerialNumber: syz
[  318.350797][   T47] usb 5-1: config 0 descriptor??
[  318.375763][   T47] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  318.514208][T10397] loop0: detected capacity change from 0 to 16384
[  318.697383][T10400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1047'.
[  318.984403][   T47] usb 5-1: USB disconnect, device number 43
[  319.139076][ T5234] usb 4-1: USB disconnect, device number 42
[  319.317007][ T5280] usbhid 1-1:0.0: can't add hid device: -71
[  319.361479][ T5280] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  319.551333][ T5280] usb 1-1: USB disconnect, device number 41
[  319.900507][T10420] FAULT_INJECTION: forcing a failure.
[  319.900507][T10420] name failslab, interval 1, probability 0, space 0, times 0
[  319.939415][T10420] CPU: 1 UID: 0 PID: 10420 Comm: syz.1.1050 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0
[  319.949863][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  319.959916][T10420] Call Trace:
[  319.963198][T10420]  <TASK>
[  319.966127][T10420]  dump_stack_lvl+0x241/0x360
[  319.970799][T10420]  ? __pfx_dump_stack_lvl+0x10/0x10
[  319.975995][T10420]  ? __pfx__printk+0x10/0x10
[  319.980581][T10420]  ? __kmalloc_cache_noprof+0x44/0x2c0
[  319.986031][T10420]  ? __pfx___might_resched+0x10/0x10
[  319.991315][T10420]  should_fail_ex+0x3b0/0x4e0
[  319.995986][T10420]  should_failslab+0xac/0x100
[  320.000651][T10420]  ? sctp_association_new+0x8a/0x2400
[  320.006020][T10420]  __kmalloc_cache_noprof+0x6c/0x2c0
[  320.011296][T10420]  ? __asan_memcpy+0x40/0x70
[  320.015887][T10420]  sctp_association_new+0x8a/0x2400
[  320.021092][T10420]  ? sctp_do_bind+0x679/0x950
[  320.025771][T10420]  sctp_connect_new_asoc+0x2d8/0x6c0
[  320.031066][T10420]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  320.036866][T10420]  ? sctp_get_af_specific+0x2a/0x80
[  320.042052][T10420]  ? sctp_endpoint_lookup_assoc+0xc9/0x250
[  320.047860][T10420]  __sctp_connect+0x66d/0xe30
[  320.052532][T10420]  ? __pfx___sctp_connect+0x10/0x10
[  320.057729][T10420]  ? __might_fault+0xc6/0x120
[  320.062410][T10420]  ? _copy_from_user+0xa6/0xe0
[  320.067159][T10420]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  320.072722][T10420]  sctp_getsockopt_connectx3+0x46c/0x730
[  320.078346][T10420]  ? __local_bh_enable_ip+0x168/0x200
[  320.083712][T10420]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[  320.089851][T10420]  ? __local_bh_enable_ip+0x168/0x200
[  320.095211][T10420]  ? sctp_getsockopt+0x13a/0xbb0
[  320.100146][T10420]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  320.105876][T10420]  sctp_getsockopt+0x8de/0xbb0
[  320.110629][T10420]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  320.116512][T10420]  do_sock_getsockopt+0x3c4/0x7e0
[  320.121527][T10420]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  320.127058][T10420]  ? __fget_files+0x3f3/0x470
[  320.131729][T10420]  ? __fget_files+0x29/0x470
[  320.136326][T10420]  __sys_getsockopt+0x267/0x330
[  320.141164][T10420]  ? __pfx___sys_getsockopt+0x10/0x10
[  320.146521][T10420]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  320.152838][T10420]  ? do_syscall_64+0x100/0x230
[  320.157600][T10420]  __x64_sys_getsockopt+0xb5/0xd0
[  320.162612][T10420]  do_syscall_64+0xf3/0x230
[  320.167105][T10420]  ? clear_bhb_loop+0x35/0x90
[  320.171766][T10420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.177647][T10420] RIP: 0033:0x7ff29eb7dff9
[  320.182060][T10420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.201670][T10420] RSP: 002b:00007ff29f9f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  320.210070][T10420] RAX: ffffffffffffffda RBX: 00007ff29ed35f80 RCX: 00007ff29eb7dff9
[  320.218026][T10420] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004
[  320.225980][T10420] RBP: 00007ff29f9f0090 R08: 0000000020000440 R09: 0000000000000000
[  320.233958][T10420] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  320.241923][T10420] R13: 0000000000000000 R14: 00007ff29ed35f80 R15: 00007ff29ee5fa28
[  320.249892][T10420]  </TASK>
[  320.252970][    C1] vkms_vblank_simulate: vblank timer overrun
[  320.301891][ T5227] usb 3-1: USB disconnect, device number 46
[  320.376566][T10423] netlink: 'syz.4.1052': attribute type 3 has an invalid length.
[  320.427479][T10425] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1053'.
[  320.794527][   T29] audit: type=1326 audit(1727532017.662:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.4.1062" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe5ef7dff9 code=0x0
[  320.816256][    C1] vkms_vblank_simulate: vblank timer overrun
[  320.887174][ T5234] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  321.099920][ T2932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.139390][ T5279] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  321.240289][T10437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.265760][T10437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.292207][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  321.307152][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  321.311948][ T5279] usb 1-1: Using ep0 maxpacket: 32
[  321.322855][ T2932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.333707][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.397044][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.404926][ T5279] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  321.419261][ T5279] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  321.429420][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.438238][ T5279] usb 1-1: Product: syz
[  321.442213][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  321.442871][ T5279] usb 1-1: Manufacturer: syz
[  321.454629][ T5279] usb 1-1: SerialNumber: syz
[  321.454799][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  321.520694][ T5279] usb 1-1: config 0 descriptor??
[  321.530179][T10448] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  321.548850][ T5279] hub 1-1:0.0: bad descriptor, ignoring hub
[  321.554940][ T5279] hub 1-1:0.0: probe with driver hub failed with error -5
[  321.565037][ T5279] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18
[  321.671875][T10437] hsr_slave_1 (unregistering): left promiscuous mode
[  321.781975][    T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  321.783547][ T5279] usb 1-1: USB disconnect, device number 42
[  321.789587][    C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  321.817942][ T2932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.901403][ T5234] usb 2-1: unable to get BOS descriptor or descriptor too short
[  321.903113][ T5234] usb 2-1: unable to read config index 0 descriptor/start: -71
[  321.903147][ T5234] usb 2-1: can't read configurations, error -71
[  321.978110][    T9] usb 3-1: Using ep0 maxpacket: 32
[  321.996972][ T2932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.028633][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13
[  322.047359][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.098917][    T9] usb 3-1: Product: syz
[  322.119180][    T9] usb 3-1: Manufacturer: syz
[  322.159707][    T9] usb 3-1: SerialNumber: syz
[  322.197346][    T9] usb 3-1: config 0 descriptor??
[  322.230538][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  322.321767][ T5279] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  322.323922][    T9] pvrusb2: **********
[  322.389799][ T2932] bridge_slave_1: left allmulticast mode
[  322.406305][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  322.422756][ T2932] bridge_slave_1: left promiscuous mode
[  322.445606][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.461745][    T9] pvrusb2: Important functionality might not be entirely working.
[  322.511913][ T2932] bridge_slave_0: left allmulticast mode
[  322.513432][ T5279] usb 1-1: config 0 has an invalid interface number: 18 but max is 0
[  322.536081][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  322.560243][ T5279] usb 1-1: config 0 has no interface number 0
[  322.579833][ T5279] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.599450][ T2932] bridge_slave_0: left promiscuous mode
[  322.617192][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.647408][ T5279] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.674476][ T5279] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  322.690618][ T5279] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  322.708103][ T5279] usb 1-1: Manufacturer: syz
[  322.732875][    T9] pvrusb2: **********
[  322.742617][ T5279] usb 1-1: config 0 descriptor??
[  322.977913][   T47] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  323.050796][   T47] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  323.288847][   T29] audit: type=1326 audit(1727532020.152:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.1.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff29eb7dff9 code=0x0
[  323.585018][   T54] Bluetooth: hci3: command tx timeout
[  323.715080][T10477] 
[  323.717435][T10477] ======================================================
[  323.724456][T10477] WARNING: possible circular locking dependency detected
[  323.731476][T10477] 6.11.0-syzkaller-11728-gad46e8f95e93 #0 Not tainted
[  323.738236][T10477] ------------------------------------------------------
[  323.745234][T10477] syz.1.1073/10477 is trying to acquire lock:
[  323.751280][T10477] ffff88806e668fd8 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x439/0x1fb0
[  323.762004][T10477] 
[  323.762004][T10477] but task is already holding lock:
[  323.769360][T10477] ffff88807bff8b18 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50
[  323.779383][T10477] 
[  323.779383][T10477] which lock already depends on the new lock.
[  323.779383][T10477] 
[  323.789773][T10477] 
[  323.789773][T10477] the existing dependency chain (in reverse order) is:
[  323.798784][T10477] 
[  323.798784][T10477] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[  323.806351][T10477]        lock_acquire+0x1ed/0x550
[  323.811369][T10477]        down_read_killable+0xca/0xd30
[  323.816824][T10477]        mmap_read_lock_killable+0x1d/0x70
[  323.822613][T10477]        lock_mm_and_find_vma+0x29c/0x2f0
[  323.828313][T10477]        exc_page_fault+0x1bf/0x8c0
[  323.833499][T10477]        asm_exc_page_fault+0x26/0x30
[  323.838867][T10477]        fault_in_readable+0x165/0x2b0
[  323.844320][T10477]        fault_in_iov_iter_readable+0x229/0x280
[  323.850549][T10477]        generic_perform_write+0x259/0x6d0
[  323.856341][T10477]        shmem_file_write_iter+0xf9/0x120
[  323.862041][T10477]        vfs_write+0xa6d/0xc90
[  323.866803][T10477]        ksys_write+0x183/0x2b0
[  323.871662][T10477]        do_syscall_64+0xf3/0x230
[  323.876689][T10477]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.883110][T10477] 
[  323.883110][T10477] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}:
[  323.891800][T10477]        validate_chain+0x18ef/0x5920
[  323.897161][T10477]        __lock_acquire+0x1384/0x2050
[  323.902519][T10477]        lock_acquire+0x1ed/0x550
[  323.907528][T10477]        down_write+0x99/0x220
[  323.912281][T10477]        process_measurement+0x439/0x1fb0
[  323.917984][T10477]        ima_file_mmap+0x13d/0x2b0
[  323.923072][T10477]        security_mmap_file+0x7e7/0xa40
[  323.928606][T10477]        __se_sys_remap_file_pages+0x6e6/0xa50
[  323.934765][T10477]        do_syscall_64+0xf3/0x230
[  323.939770][T10477]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.946183][T10477] 
[  323.946183][T10477] other info that might help us debug this:
[  323.946183][T10477] 
[  323.956406][T10477]  Possible unsafe locking scenario:
[  323.956406][T10477] 
[  323.963846][T10477]        CPU0                    CPU1
[  323.969208][T10477]        ----                    ----
[  323.974561][T10477]   lock(&mm->mmap_lock);
[  323.978957][T10477]                                lock(&sb->s_type->i_mutex_key#12);
[  323.986939][T10477]                                lock(&mm->mmap_lock);
[  323.993772][T10477]   lock(&sb->s_type->i_mutex_key#12);
[  323.999213][T10477] 
[  323.999213][T10477]  *** DEADLOCK ***
[  323.999213][T10477] 
[  324.007338][T10477] 1 lock held by syz.1.1073/10477:
[  324.012431][T10477]  #0: ffff88807bff8b18 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50
[  324.022854][T10477] 
[  324.022854][T10477] stack backtrace:
[  324.028721][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.1.1073 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0
[  324.039131][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  324.049179][T10477] Call Trace:
[  324.052448][T10477]  <TASK>
[  324.055361][T10477]  dump_stack_lvl+0x241/0x360
[  324.060026][T10477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.065216][T10477]  ? __pfx__printk+0x10/0x10
[  324.069807][T10477]  print_circular_bug+0x13a/0x1b0
[  324.074834][T10477]  check_noncircular+0x36a/0x4a0
[  324.079778][T10477]  ? __pfx_check_noncircular+0x10/0x10
[  324.085228][T10477]  ? lockdep_lock+0x123/0x2b0
[  324.089891][T10477]  validate_chain+0x18ef/0x5920
[  324.094737][T10477]  ? validate_chain+0x11e/0x5920
[  324.099676][T10477]  ? __pfx_validate_chain+0x10/0x10
[  324.104873][T10477]  ? mark_lock+0x9a/0x360
[  324.109193][T10477]  ? __pfx_validate_chain+0x10/0x10
[  324.114376][T10477]  ? __lock_acquire+0x1384/0x2050
[  324.119395][T10477]  ? look_up_lock_class+0x77/0x170
[  324.124498][T10477]  ? register_lock_class+0x102/0x980
[  324.129765][T10477]  ? __pfx_register_lock_class+0x10/0x10
[  324.135392][T10477]  ? mark_lock+0x9a/0x360
[  324.139708][T10477]  ? ima_match_policy+0x115/0x22f0
[  324.144821][T10477]  __lock_acquire+0x1384/0x2050
[  324.149700][T10477]  lock_acquire+0x1ed/0x550
[  324.154191][T10477]  ? process_measurement+0x439/0x1fb0
[  324.159554][T10477]  ? __pfx_lock_acquire+0x10/0x10
[  324.164571][T10477]  ? __pfx___might_resched+0x10/0x10
[  324.169853][T10477]  ? ima_match_policy+0x115/0x22f0
[  324.174975][T10477]  ? __pfx_ima_match_policy+0x10/0x10
[  324.180354][T10477]  down_write+0x99/0x220
[  324.184600][T10477]  ? process_measurement+0x439/0x1fb0
[  324.189968][T10477]  ? __pfx_down_write+0x10/0x10
[  324.194816][T10477]  ? ima_get_action+0x75/0xb0
[  324.199476][T10477]  process_measurement+0x439/0x1fb0
[  324.204665][T10477]  ? __pfx_process_measurement+0x10/0x10
[  324.210285][T10477]  ? __pfx_lock_acquire+0x10/0x10
[  324.215305][T10477]  ? aa_file_perm+0x137/0xf50
[  324.219993][T10477]  ? mtree_load+0x8a1/0x9c0
[  324.224495][T10477]  ? apparmor_current_getsecid_subj+0xde/0x1b0
[  324.230637][T10477]  ima_file_mmap+0x13d/0x2b0
[  324.235220][T10477]  ? __pfx_mtree_load+0x10/0x10
[  324.240065][T10477]  ? __pfx_ima_file_mmap+0x10/0x10
[  324.245162][T10477]  ? end_current_label_crit_section+0x151/0x180
[  324.251379][T10477]  ? common_file_perm+0x1a6/0x210
[  324.256390][T10477]  security_mmap_file+0x7e7/0xa40
[  324.261405][T10477]  __se_sys_remap_file_pages+0x6e6/0xa50
[  324.267223][T10477]  ? __pfx_do_futex+0x10/0x10
[  324.271918][T10477]  ? __pfx___se_sys_remap_file_pages+0x10/0x10
[  324.278079][T10477]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  324.284053][T10477]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  324.290368][T10477]  ? do_syscall_64+0x100/0x230
[  324.295137][T10477]  ? __x64_sys_remap_file_pages+0x20/0xc0
[  324.300846][T10477]  do_syscall_64+0xf3/0x230
[  324.305344][T10477]  ? clear_bhb_loop+0x35/0x90
[  324.310014][T10477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.315913][T10477] RIP: 0033:0x7ff29eb7dff9
[  324.320328][T10477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.339932][T10477] RSP: 002b:00007ff29f98d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  324.348345][T10477] RAX: ffffffffffffffda RBX: 00007ff29ed36208 RCX: 00007ff29eb7dff9
[  324.356306][T10477] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  324.364270][T10477] RBP: 00007ff29ebf0296 R08: 0000000000000000 R09: 0000000000000000
[  324.372234][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  324.380199][T10477] R13: 0000000000000000 R14: 00007ff29ed36208 R15: 00007ff29ee5fa28
[  324.388168][T10477]  </TASK>
[  324.391294][    C1] vkms_vblank_simulate: vblank timer overrun
[  324.531994][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.546209][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.558115][ T2932] bond0 (unregistering): Released all slaves
[  325.150348][ T2932] hsr_slave_0: left promiscuous mode
[  325.175380][ T2024] pvrusb2: Invalid write control endpoint
[  325.186460][    T9] usb 3-1: USB disconnect, device number 47
[  325.203900][ T2932] hsr_slave_1: left promiscuous mode
[  325.216092][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.231147][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.232290][ T2024] pvrusb2: Invalid write control endpoint
[  325.244280][ T2024] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  325.244858][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.255610][ T2024] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  325.261455][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.271982][ T2024] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  325.286307][ T2024] pvrusb2: Device being rendered inoperable
[  325.292317][ T2024] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  325.292497][ T2932] veth1_macvtap: left promiscuous mode
[  325.300286][ T2024] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  325.305949][ T2932] veth0_macvtap: left promiscuous mode
[  325.315123][ T2024] pvrusb2: Attached sub-driver cx25840
[  325.318210][ T2932] veth1_vlan: left promiscuous mode
[  325.323290][ T2024] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  325.331194][ T2932] veth0_vlan: left promiscuous mode
[  325.340380][ T2024] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  325.493580][ T2932] team0 (unregistering): Port device team_slave_1 removed
[  325.521357][ T2932] team0 (unregistering): Port device team_slave_0 removed
[  325.737853][ T5279] usbhid 1-1:0.18: can't add hid device: -71
[  325.744562][ T5279] usbhid 1-1:0.18: probe with driver usbhid failed with error -71
[  325.813193][ T5279] usb 1-1: USB disconnect, device number 43
[  325.994912][ T2932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.039293][ T2932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.109571][ T2932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.158950][ T2932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.244494][ T2932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.306402][ T2932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.335498][ T2932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.393674][ T2932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.468444][ T2932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.506863][ T2932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.557323][ T2932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.619176][ T2932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.706478][ T2932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.747153][ T2932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.785550][ T2932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.835690][ T2932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.905431][ T2932] bridge_slave_1: left allmulticast mode
[  326.911703][ T2932] bridge_slave_1: left promiscuous mode
[  326.920848][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.932516][ T2932] bridge_slave_0: left allmulticast mode
[  326.939471][ T2932] bridge_slave_0: left promiscuous mode
[  326.947323][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.957115][ T2932] bridge_slave_1: left allmulticast mode
[  326.964820][ T2932] bridge_slave_1: left promiscuous mode
[  326.970478][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.979300][ T2932] bridge_slave_0: left allmulticast mode
[  326.986420][ T2932] bridge_slave_0: left promiscuous mode
[  326.992353][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.000508][ T2932] bridge_slave_1: left allmulticast mode
[  327.006708][ T2932] bridge_slave_1: left promiscuous mode
[  327.012995][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.020765][ T2932] bridge_slave_0: left allmulticast mode
[  327.026668][ T2932] bridge_slave_0: left promiscuous mode
[  327.032284][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.040828][ T2932] bridge_slave_1: left allmulticast mode
[  327.046602][ T2932] bridge_slave_1: left promiscuous mode
[  327.052308][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.060180][ T2932] bridge_slave_0: left allmulticast mode
[  327.066816][ T2932] bridge_slave_0: left promiscuous mode
[  327.072750][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.448525][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.458351][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.468169][ T2932] bond0 (unregistering): Released all slaves
[  327.479259][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.489684][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.499231][ T2932] bond0 (unregistering): Released all slaves
[  327.511501][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.523806][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.534376][ T2932] bond0 (unregistering): Released all slaves
[  327.546446][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.556905][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.567360][ T2932] bond0 (unregistering): Released all slaves
[  328.140835][ T2932] hsr_slave_0: left promiscuous mode
[  328.149186][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.159163][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.168998][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.178237][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.189352][ T2932] hsr_slave_0: left promiscuous mode
[  328.195617][ T2932] hsr_slave_1: left promiscuous mode
[  328.201467][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.209201][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.217068][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.224533][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.234378][ T2932] hsr_slave_0: left promiscuous mode
[  328.240016][ T2932] hsr_slave_1: left promiscuous mode
[  328.246622][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.254028][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.261478][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.269053][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.278724][ T2932] hsr_slave_0: left promiscuous mode
[  328.285263][ T2932] hsr_slave_1: left promiscuous mode
[  328.290941][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.298406][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.306340][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.313824][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.325665][ T2932] veth1_macvtap: left promiscuous mode
[  328.331166][ T2932] veth0_macvtap: left promiscuous mode
[  328.336735][ T2932] veth1_vlan: left promiscuous mode
[  328.342095][ T2932] veth0_vlan: left promiscuous mode
[  328.347830][ T2932] veth1_macvtap: left promiscuous mode
[  328.353358][ T2932] veth0_macvtap: left promiscuous mode
[  328.358859][ T2932] veth1_vlan: left promiscuous mode
[  328.364467][ T2932] veth0_vlan: left promiscuous mode
[  328.370374][ T2932] veth1_macvtap: left promiscuous mode
[  328.375902][ T2932] veth0_macvtap: left promiscuous mode
[  328.381401][ T2932] veth1_vlan: left promiscuous mode
[  328.386747][ T2932] veth0_vlan: left promiscuous mode
[  328.392502][ T2932] veth1_macvtap: left promiscuous mode
[  328.397960][ T2932] veth0_macvtap: left promiscuous mode
[  328.403518][ T2932] veth1_vlan: left promiscuous mode
[  328.408746][ T2932] veth0_vlan: left promiscuous mode
[  328.616051][ T2932] team0 (unregistering): Port device team_slave_1 removed
[  328.642463][ T2932] team0 (unregistering): Port device team_slave_0 removed
[  328.788885][ T2932] team0 (unregistering): Port device team_slave_1 removed
[  328.800967][ T2932] team0 (unregistering): Port device team_slave_0 removed
[  328.957482][ T2932] team0 (unregistering): Port device team_slave_1 removed
[  328.967837][ T2932] team0 (unregistering): Port device team_slave_0 removed
[  329.124390][ T2932] team0 (unregistering): Port device team_slave_1 removed
[  329.146276][ T2932] team0 (unregistering): Port device team_slave_0 removed