last executing test programs:

9.034805823s ago: executing program 4 (id=655):
futex_waitv(&(0x7f0000001700)=[{0x8ba, &(0x7f0000000180)=0xfffffffffffffff5, 0x2}, {0x7, &(0x7f00000001c0), 0x82}, {0x10000, 0x0}, {0x5, 0x0, 0x82}, {0xffff, &(0x7f0000000340)=0x3ff, 0x2}, {0x6, 0x0, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x4, 0x0, 0x82}, {0x25fa7ef3, &(0x7f0000000640)=0x2, 0x2}, {0x252dedf0, 0x0}, {0xf61b, 0x0, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x82}, {0xffffffff, 0x0, 0x82}, {0xb, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x1, 0x0, 0x2}], 0x10, 0x0, &(0x7f0000001f40), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)

7.797803142s ago: executing program 1 (id=657):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000103000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007200000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

7.619303042s ago: executing program 1 (id=660):
unshare(0x2c060000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000344, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup3(r5, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x1}, @free_buffer], 0x0, 0x0, 0x0})

7.612961193s ago: executing program 4 (id=661):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x4, {0x8, 0x1, 0x1, 0x5, 0x3, 0x4000, 0x0, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "fe1d0e223edc04a6a770f5dbbd0b0bd17b480240438ece397736ec0268208f7d"}})
r5 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r9)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000140)={0xc})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, 0x0)
r11 = socket(0x200000100000011, 0x3, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0xd0}}, 0x41)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r13=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r13, @ANYBLOB="14000200fe8000000000000000000100000000aa08000900", @ANYRES32], 0x48}}, 0x0)

6.2562192s ago: executing program 0 (id=663):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000084000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572004c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000210000b"], 0xe0}, 0x1, 0x0, 0x0, 0x4020000}, 0x20008000)

5.91571226s ago: executing program 1 (id=665):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9df86da}]}]}], {0x14}}, 0xc0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@kprobe_multi=@syms={0x0, 0x2, &(0x7f0000000140)=[&(0x7f0000000080)='syz1\x00', &(0x7f0000000100)='syz2\x00'], 0x0, 0x5}}, 0x30)

5.915265903s ago: executing program 4 (id=666):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan1\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000fedbdf052500000008000200", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x20008050)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0xffffffff, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'hsr0\x00'})

5.866776373s ago: executing program 0 (id=667):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001100feff29bd7002ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="334a05000a00000008000d00faffffff08000500", @ANYRES32=r0, @ANYBLOB="c4a31cb8c39818a7f6c40ff4696f52f01516ab665952eb2fa83e8d273420a56f638e30f76cdbef07ed75747d47bb3342255f96880bd7ac7dc1f2fe6c0c663a4a0002000000000000db"], 0x30}, 0x1, 0x2}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002a00090000000000000000000400002c140016002001000000000000000000000000000008000c"], 0x30}, 0x1, 0x3000000}, 0x0)

5.858279312s ago: executing program 1 (id=668):
syz_emit_ethernet(0x7e, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e004000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0xf, "9606053d0006ff00800000b61a"}]}, @lsrr={0x83, 0xf, 0x0, [@dev, @loopback, @loopback]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0)

5.781238525s ago: executing program 1 (id=670):
r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
unshare(0x2000400) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
read(r0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, &(0x7f00000000c0), 0x10) (async)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='batadv0\x00', 0x10) (async)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x1000000}}}}}}}, 0x0) (async)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async)
r5 = socket$inet6(0xa, 0x805, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0xb) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa, 0xd, 0x1, @SEQ_CONTROLLER=0xfe, 0xc, 0xcf, 0x5})
getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async)
r6 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f00000000c0)=0x3) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x14, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10)
syz_clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)

5.498152859s ago: executing program 4 (id=671):
futex_waitv(&(0x7f0000001700)=[{0x8ba, &(0x7f0000000180)=0xfffffffffffffff5, 0x2}, {0x7, &(0x7f00000001c0), 0x82}, {0x5, &(0x7f00000002c0)=0x2, 0x82}, {0xffff, &(0x7f0000000340)=0x3ff, 0x2}, {0x6, 0x0, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x4, 0x0, 0x82}, {0x25fa7ef3, &(0x7f0000000640)=0x2, 0x2}, {0x252dedf0, 0x0}, {0xf61b, 0x0, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x82}, {0xffffffff, 0x0, 0x82}, {0xb, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x1, 0x0, 0x2}], 0xf, 0x0, &(0x7f0000001f40), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)

4.377006949s ago: executing program 2 (id=672):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0x10})
io_uring_enter(r0, 0x47fe, 0x3, 0x8, 0x0, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x1) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x1)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./bus\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
membarrier(0x2, 0x0)
getdents(r5, 0xfffffffffffffffd, 0x58) (async)
getdents(r5, 0xfffffffffffffffd, 0x58)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x3, 0x2, 0x3]}, &(0x7f0000000100)=0x44) (async)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x3, 0x2, 0x3]}, &(0x7f0000000100)=0x44)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
r8 = dup(r6)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])
getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14)
syz_open_procfs(0x0, &(0x7f00000006c0)='net/mcfilter\x00') (async)
r9 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/mcfilter\x00')
preadv(r9, &(0x7f0000000680)=[{&(0x7f0000001000)=""/164, 0xa4}], 0x1, 0x8, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r3, &(0x7f0000000900)="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", 0x45d)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

4.192363507s ago: executing program 0 (id=674):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf8ff]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)

4.13764618s ago: executing program 1 (id=675):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$unix(0x1, 0x3, 0x0)
bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x2000004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000700000000000000000000ef763fafcfd2ac62cf343e51f2ea35ac98eac724896400000000000000"], 0x48)
r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r7, 0x82, 0x5, &(0x7f0000002340)='hello')
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000140), 0xe9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff95"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1011, &(0x7f0000002700)=""/4113, 0x41100, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6c}, {0x6}]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x10122)
r10 = socket$unix(0x1, 0x3, 0x0)
r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xf75380, 0x0)
sendmsg$unix(r10, &(0x7f0000000680)={&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r11, @ANYRES8=r10], 0x30}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.043745051s ago: executing program 0 (id=676):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00"], 0x44}}, 0x0) (fail_nth: 5)

3.760698163s ago: executing program 2 (id=677):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x1, 0xd1, "f90e04b89fdb07eae10bfb2e584fd026cf54382212cd90cefd33a6e713ed0c6eb6bdb3694cd1e9a6bcd59491671ae5d049586fff924c5fb7ed0fa453918615", 0x3f}, 0x60) (async)
futex(&(0x7f0000000080)=0x1, 0x4, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)=0x1, 0x2)
ppoll(&(0x7f0000000140)=[{r0, 0x5480}, {r0, 0x8141}], 0x2, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8)
r1 = syz_io_uring_setup(0x57b5, &(0x7f0000000200)={0x0, 0xff42, 0x200, 0x2, 0xa5}, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000002c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f0000000300)=0x6, 0x0, 0x4) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800001, 0x2010, r1, 0x0)
r6 = syz_io_uring_complete(r5) (async)
clock_gettime(0x0, &(0x7f00000003c0)={<r7=>0x0, <r8=>0x0})
clock_gettime(0x0, &(0x7f0000000400)={<r9=>0x0, <r10=>0x0})
setitimer(0x0, &(0x7f0000000440)={{r7, r8/1000+10000}, {r9, r10/1000+10000}}, &(0x7f0000000480)) (async)
ppoll(&(0x7f00000004c0)=[{r6, 0x8000}, {r1, 0x1100}, {0xffffffffffffffff, 0x1080}, {r3, 0x1410}, {r4, 0x40}], 0x5, &(0x7f0000000500), &(0x7f0000000540)={[0x8]}, 0x8) (async)
clock_gettime(0x0, &(0x7f0000000580)={<r11=>0x0, <r12=>0x0})
nanosleep(&(0x7f00000005c0)={r11, r12+10000000}, &(0x7f0000000600)) (async)
syz_open_dev$tty1(0xc, 0x4, 0x3)
sendmsg$nl_route(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv4_newrule={0x44, 0x20, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x20, 0x20, 0x0, 0x8}, [@FRA_FLOW={0x8, 0xb, 0x4719}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ipvlan1\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000780), 0x880, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000007c0)=0x80000) (async)
sendto$l2tp(r6, &(0x7f0000000800)="199956632d73dcdd558b6f9ebe8afe2e8f01273f524c318741ca2b329a12d3f26a1bb8f32956a1b5db48a0efa31536d87763b4fa487e07bf0bab5fda0936", 0x3e, 0x4040010, &(0x7f0000000840)={0x2, 0x0, @loopback, 0x4}, 0x10) (async)
clock_gettime(0x0, &(0x7f0000003d00)={<r13=>0x0, <r14=>0x0})
recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000880)=@ll={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000900)=""/114, 0x72}, {&(0x7f0000000980)=""/107, 0x6b}, {&(0x7f0000000a00)=""/60, 0x3c}, {&(0x7f0000000a40)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/8, 0x8}, {&(0x7f0000001b00)=""/195, 0xc3}], 0x7, &(0x7f0000001c80)=""/37, 0x25}, 0x7}, {{&(0x7f0000001cc0)=@l2, 0x80, &(0x7f0000002080)=[{&(0x7f0000001d40)=""/24, 0x18}, {&(0x7f0000001d80)=""/13, 0xd}, {&(0x7f0000001dc0)=""/168, 0xa8}, {&(0x7f0000001e80)=""/196, 0xc4}, {&(0x7f0000001f80)=""/145, 0x91}, {&(0x7f0000002040)=""/12, 0xc}], 0x6, &(0x7f0000002100)=""/160, 0xa0}, 0x5}, {{&(0x7f00000021c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002240)=""/201, 0xc9}, {&(0x7f0000002340)=""/49, 0x31}, {&(0x7f0000002380)=""/95, 0x5f}, {&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/241, 0xf1}, {&(0x7f0000002600)=""/250, 0xfa}], 0x6, &(0x7f0000002780)=""/138, 0x8a}, 0xe}, {{&(0x7f0000002840)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002900)=[{&(0x7f00000028c0)=""/63, 0x3f}], 0x1}, 0xf22}, {{&(0x7f0000002940)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000029c0)=""/231, 0xe7}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000003b00)=""/132, 0x84}, 0x6}], 0x5, 0x40000000, &(0x7f0000003d40)={r13, r14+60000000})
bpf$MAP_CREATE(0x0, &(0x7f0000003d80)=@base={0x25, 0x3, 0x1, 0x6, 0x2101, r6, 0x4, '\x00', r15, r6, 0x3, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003e80)={'caif0\x00', &(0x7f0000003e00)=@ethtool_coalesce={0xf, 0x10, 0x40, 0x4, 0xd7, 0x2eac, 0xffffffff, 0x8, 0x9, 0x80, 0x2, 0x1, 0x3ff, 0xffffffff, 0x9, 0x5, 0xffff5f3a, 0xff, 0x0, 0x0, 0xea, 0xf, 0x3}}) (async)
getpeername$packet(r6, &(0x7f0000003ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003f00)=0x14) (async)
epoll_pwait2(r6, &(0x7f0000003f40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000003fc0), &(0x7f0000004000)={[0xf874e99]}, 0x8) (async)
getsockopt$inet_tcp_int(r6, 0x6, 0x5, &(0x7f0000004040), &(0x7f0000004080)=0x4) (async)
io_uring_enter(0xffffffffffffffff, 0x5ffb, 0x497e, 0x4, &(0x7f0000004140)={[0x100]}, 0x8)

3.523795822s ago: executing program 2 (id=680):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x24}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

3.523658477s ago: executing program 3 (id=681):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd004e2210000100080c10000000000000000000", 0x58}], 0x1)

3.444435363s ago: executing program 4 (id=682):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SET_PTRACER(0x59616d61, r1)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
setitimer(0x2, &(0x7f0000000080)={{0x6, 0xfffffffffffffffb}, {0x7, 0x100000001}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002200)=ANY=[], 0x20}}, 0x0)
prctl$PR_GET_NAME(0x10, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
syz_io_uring_setup(0x2406, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000ffc000))
ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000240)={0x0, @reserved})
ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @start={0x7, 0x1}})

3.327183906s ago: executing program 3 (id=683):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000500000000ea2b6d7ea7c8fe1d000000a30000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000500000000ea2b6d7ea7c8fe1d000000a30000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x7fff, 0x0, 0x0, 0x0, 0x8, 0x4}) (async)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x7fff, 0x0, 0x0, 0x0, 0x8, 0x4})
r0 = socket(0x840000000002, 0x3, 0xff)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
getpid() (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8)
poll(&(0x7f00000000c0)=[{r3}, {r3, 0x20}], 0x2, 0xf45)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) (async)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
ioprio_set$pid(0x1, 0x0, 0x2000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) (async)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x20000023896)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
r8 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x101001)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="beef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="beef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0})

2.507600563s ago: executing program 3 (id=684):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000180)=@ax25={{0x3, @netrom}, [@default, @netrom, @null, @default, @bcast, @bcast, @null]}, 0xffffffffffffff48, &(0x7f0000001a00)=[{&(0x7f0000000340)=""/100, 0x64}, {0xfffffffffffffffd}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000001d00)=""/110, 0x6e}, {&(0x7f0000001b00)=""/219, 0xdb}, {&(0x7f0000000600)=""/22, 0x16}], 0x8, &(0x7f0000001d80)=""/260, 0xfe}, 0x8}], 0x1, 0x60000003, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'wlan0\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000, 0x0, @void, @value}, 0x20)
write$tun(r5, &(0x7f0000000340)=ANY=[], 0xfdef)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r9=>0x0})
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7)
sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc020000", @ANYRES16=r11, @ANYBLOB="100025bd7000fedbdf250b0000000c00028004000400040004001000068008000600030000000400020024000980080001000100000008000200ffffffff08000200800000000800020076e80000c8000180380004001400010002004e23640101020000000000000000200002000a004e2400000072fe8000000000000000000000000000aa0600000038000400200001000aa638447b1d16004e23000000a4fe8000000000000000000000000000aa020000001400020002004e230000000000000000000000000800030000080000140002800800020000800000080002000300000038000400200001000a004e2200000005fc020000000000000000000000000000090000001400020002004e247f00000100000000000000006000078008000100ffffffff08000200c10e000008000100030000000c00040033850000000000000c00030003000000000000000c000400ffffffffffffff7f0c000300ffffffff000000000c000300000000000000000008000100060000001c0004800900010073797a31000000000900010073797a3100000000dc0006804700040067636d28616573290000000000000000000000000000000000000000000000001f0000008df4ff81e5721260c762f0ec6f8c363952cdbd853ba0851a952143ce86437100080001000900000008000600040000006e000300767866d2d861438c26c4af8b71527a57cb28e061fb2ae26ee26f2489588d104583d95499d84ab6a5aee56e5a989593f92c06541c75c6b7e7c60ba026c0cf2d0ce7f1c216285905efb9c3484e765c3354518256ffc96916ccf6c43e2e13b34a82d629f5f5a9a9be36bc0000080001000200000008000600ffffffff400005803400028008000100170000000800040008000000080003009f0c000008000300010000000800030000000000080001000e0000000800010075647000480004801400078008000400f8ffffff08000300000000000900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a310000000000"], 0x2fc}, 0x1, 0x0, 0x0, 0x4c840}, 0x24004880)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000201c0100001800018014f1d706c6371a543a00022c3a91e1955b0e53365ffb9816f3006c6f080000000000000000010000000020530f36356333fdb21133f846c632b55a620123dde67c79463affddd188b46c3dc6163d2a626a31d50e1860e97ba6acf0a54fd6b9e7a2cdb7d148e21a51d364e10dd9211ae9071084faea933b9f7f1c4e3c75cee300ca96c86b319792"], 0x2c}}, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x24}}, 0x4000020)

2.373878923s ago: executing program 4 (id=685):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000100))
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4018aee2, &(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='jfs\x00', 0x0, 0x0)
r5 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x20002, 0xac)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}, 0x400}, 0x1c)
getdents(r5, 0x0, 0x66)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000240))
socket$nl_generic(0x10, 0x3, 0x10)

2.270943832s ago: executing program 0 (id=686):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000003c0)={0xfffffff8, {{0xa, 0x4e20, 0x1009, @private2, 0x3}}, {{0xa, 0x4e22, 0x5f, @mcast1, 0xe}}}, 0xfffffffffffffd64) (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={<r2=>0x0, 0x9f, "7d22c420a45fb54641c8d79458b5840dda244ee7dfd6670bf6250d3d42ef6a2a152c172abbff9e84af57439e34c73137035ec989ecfcbda6c3862903bb5ccc575a4015412a627daab13ed1b1a38cc50b1073b083688613719622ac261a2d1ad41d1bb7d200ce86ed7cb953caf76dea2f01948f46db4ca36e07cef6865b1aec0cc31f8879b64261f40bb3f9641d4925cc45d9fe63b2d369a1a9f00941dd463c"}, &(0x7f0000000100)=0xa7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f00000002c0)=0x10) (async)
r3 = socket$inet(0x2, 0xa, 0x8000)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async)
socket$packet(0x11, 0x2, 0x300) (async)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a4", 0x70}, {&(0x7f0000001540)="b3da23cbcecb0b0107a496fbe0bad3f402cb8be3b5ffdb88f6bbf4b6230ab98c8eb277df97b97bc85816f9158545dc085e3fe407d9e477a973f32fd54ea716ff085e02770b8da5e08bcb146b05b7444f78c1dbad47", 0x55}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc", 0x3d}, {&(0x7f0000001bc0)="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", 0x102}], 0x2}}], 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xb)
sched_setaffinity(0x0, 0x0, 0x0)

2.135660481s ago: executing program 2 (id=687):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, &(0x7f0000000300), 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7b2, &(0x7f0000000380)={{@host, 0xffffffbe}, 0x40000000000001, 0x10000000000002, 0x8})
rt_sigprocmask(0x0, 0x0, 0x0, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446f3280ea4f0e5"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00')
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000090c00006600fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800c002300400000000000000005002a0001000000"], 0x48}}, 0x0)

1.571836499s ago: executing program 3 (id=688):
socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001100feff29bd7002ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="334a05000a00000008000d00faffffff08000500", @ANYRES32=r0, @ANYBLOB="c4a31cb8c39818a7f6c40ff4696f52f01516ab665952eb2fa83e8d273420a56f638e30f76cdbef07ed75747d47bb3342255f96880bd7ac7dc1f2fe6c0c663a4a0002000000000000db"], 0x30}, 0x1, 0x2}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000002a00090000000000000000000400002c140016002001000000000000000000000000000008000c"], 0x30}, 0x1, 0x3000000}, 0x0)

1.177397472s ago: executing program 2 (id=689):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9df86da}]}]}], {0x14}}, 0xc0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@kprobe_multi=@syms={0x0, 0x2, &(0x7f0000000140)=[&(0x7f0000000080)='syz1\x00', &(0x7f0000000100)='syz2\x00'], 0x0, 0x5}}, 0x30)

217.0804ms ago: executing program 3 (id=690):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800008004000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007200000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

163.571593ms ago: executing program 0 (id=691):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
syz_emit_ethernet(0xa0e, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x1}, 0xfd}, 0x18)
syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @multicast}, 0x10)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x7c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random, 0x0, @void, @val, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{}, {}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}}, 0x0)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000c00), 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r11=>0x0})
bind$can_raw(r7, &(0x7f0000000080)={0x1d, r11}, 0x10)
close(r7)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000280)={0x0, 'dummy0\x00', {0x2}, 0x8004})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000008002700010900177a34b0ebce746690d688160b00384e662a138e7f8b7e74fe44d45b854874c34a648edeb389df1daa1a3205413f58f56f3e9af5c9695d40ae85e6398a992e9ef469045dec0f8a4fff96c402b540c5d279a745b3fe7b083e9c09d6c20aaf098918e3180945fe98a47bd368985f803d63ce79548c135a841b675969000000802997dffdce61d5005cf3a14cc6425c6bd05deaef8289a8fd559b9eef45586f08f8edcbcb3c2efe3a6684fbf22d1f95253e505d10ac42fea77c0badc59465532a2d68d239f2bf01c1be9041f3e701cc733ba3377b06f273e068e2bcbabe1cbf85a2e7d1"], 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f00000004c0)=ANY=[@ANYBLOB="500000000802110000000000000000000000000064000018000000000000000000000000000000000000000400"/59], 0x4b)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="ae1e56084e9835db1cca3cd279a63e1b55df5efb7b5cb614815709167e833c113b89a957e2c5a8c9e08f837a2f9ba1ab3f6fb9acecb984a30daae87ecad27cd7da2de028fc6f3593901bbc246b73019b81474ced23567d3c71bfbc7c35bb753e1a", @ANYRES32=r4, @ANYBLOB="d4dd6ab7e4ea37960929fedde36cd820f6dd4c10a12fc80611665fa8ce79a1b834b9883201ed240543763519d1bd3e6cb6803c01f696b2622cf9"], 0x18)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000080), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

114.49602ms ago: executing program 2 (id=692):
futex_waitv(&(0x7f0000001700)=[{0x8ba, &(0x7f0000000180)=0xfffffffffffffff5, 0x2}, {0x7, &(0x7f00000001c0), 0x82}, {0x5, &(0x7f00000002c0)=0x2, 0x82}, {0xffff, &(0x7f0000000340)=0x3ff, 0x2}, {0x6, 0x0, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x4, 0x0, 0x82}, {0x25fa7ef3, &(0x7f0000000640)=0x2, 0x2}, {0x252dedf0, 0x0}, {0xf61b, 0x0, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x82}, {0xffffffff, 0x0, 0x82}, {0xb, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x1, 0x0, 0x2}], 0xf, 0x0, &(0x7f0000001f40), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)

0s ago: executing program 3 (id=693):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240009050402100000fa0009058202407e81bdfaeb03bc25b83d68625d0c54f2bc4a4c0e26a98d1280700040d72921a8e80fd782f9f39550eaa31d1c96c234d8fb3d447d"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3ddb1aeb9c8a25a4c0", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,\x00'])
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240009050402100000fa0009058202407e81bdfaeb03bc25b83d68625d0c54f2bc4a4c0e26a98d1280700040d72921a8e80fd782f9f39550eaa31d1c96c234d8fb3d447d"], 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3ddb1aeb9c8a25a4c0", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,\x00']) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts.
[   55.035564][ T5818] cgroup: Unknown subsys name 'net'
[   55.160963][ T5818] cgroup: Unknown subsys name 'cpuset'
[   55.169111][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.454714][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.069488][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.069678][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.078832][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.085866][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.094215][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   60.100396][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.106355][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.113715][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.127989][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.128565][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.136409][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.143038][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   60.150651][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   60.156716][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.163938][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.171516][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.179347][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   60.186924][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   60.196312][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.199921][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.205514][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   60.214164][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   60.233338][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   60.241259][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   60.253502][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   60.261263][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   60.269438][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   60.277099][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   60.286070][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   60.293472][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   60.668883][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   60.724389][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   60.734513][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   60.823511][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   60.913324][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   60.923535][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.931786][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.939638][ T5830] bridge_slave_0: entered allmulticast mode
[   60.947173][ T5830] bridge_slave_0: entered promiscuous mode
[   60.982575][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.990534][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.997857][ T5830] bridge_slave_1: entered allmulticast mode
[   61.004456][ T5830] bridge_slave_1: entered promiscuous mode
[   61.019505][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.026618][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.033992][ T5840] bridge_slave_0: entered allmulticast mode
[   61.041148][ T5840] bridge_slave_0: entered promiscuous mode
[   61.048930][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.056025][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.063335][ T5840] bridge_slave_1: entered allmulticast mode
[   61.070379][ T5840] bridge_slave_1: entered promiscuous mode
[   61.101988][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.110294][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.117467][ T5828] bridge_slave_0: entered allmulticast mode
[   61.125096][ T5828] bridge_slave_0: entered promiscuous mode
[   61.170587][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.179866][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.187297][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.197951][ T5828] bridge_slave_1: entered allmulticast mode
[   61.204551][ T5828] bridge_slave_1: entered promiscuous mode
[   61.213240][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.225529][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.248087][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.257696][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.264822][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.272156][ T5841] bridge_slave_0: entered allmulticast mode
[   61.279269][ T5841] bridge_slave_0: entered promiscuous mode
[   61.310996][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.318408][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.325599][ T5841] bridge_slave_1: entered allmulticast mode
[   61.332718][ T5841] bridge_slave_1: entered promiscuous mode
[   61.383583][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.394966][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.410880][ T5840] team0: Port device team_slave_0 added
[   61.428640][ T5830] team0: Port device team_slave_0 added
[   61.435934][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.456167][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.466882][ T5840] team0: Port device team_slave_1 added
[   61.490631][ T5830] team0: Port device team_slave_1 added
[   61.516752][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.524390][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.550914][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.563965][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.571465][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.578793][ T5829] bridge_slave_0: entered allmulticast mode
[   61.585351][ T5829] bridge_slave_0: entered promiscuous mode
[   61.601573][ T5841] team0: Port device team_slave_0 added
[   61.618529][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.625540][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.651638][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.663565][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.672034][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.679653][ T5829] bridge_slave_1: entered allmulticast mode
[   61.686273][ T5829] bridge_slave_1: entered promiscuous mode
[   61.700960][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.708159][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.734402][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.755552][ T5841] team0: Port device team_slave_1 added
[   61.773350][ T5828] team0: Port device team_slave_0 added
[   61.781937][ T5828] team0: Port device team_slave_1 added
[   61.809711][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.816702][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.843276][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.869076][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.876062][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.902362][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.929218][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.940916][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.958184][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.965153][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.991808][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.004058][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.011804][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.038010][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.050752][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.057911][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.084169][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.154386][ T5828] hsr_slave_0: entered promiscuous mode
[   62.164527][ T5828] hsr_slave_1: entered promiscuous mode
[   62.183642][ T5840] hsr_slave_0: entered promiscuous mode
[   62.190195][ T5840] hsr_slave_1: entered promiscuous mode
[   62.196312][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.204359][ T5840] Cannot create hsr debugfs directory
[   62.227451][ T5830] hsr_slave_0: entered promiscuous mode
[   62.234311][ T5830] hsr_slave_1: entered promiscuous mode
[   62.240894][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.248686][ T5830] Cannot create hsr debugfs directory
[   62.250615][ T5844] Bluetooth: hci2: command tx timeout
[   62.268758][ T5829] team0: Port device team_slave_0 added
[   62.299143][ T5829] team0: Port device team_slave_1 added
[   62.320129][ T5841] hsr_slave_0: entered promiscuous mode
[   62.326591][ T5841] hsr_slave_1: entered promiscuous mode
[   62.327870][ T5144] Bluetooth: hci0: command tx timeout
[   62.337814][ T5844] Bluetooth: hci3: command tx timeout
[   62.338024][ T5844] Bluetooth: hci4: command tx timeout
[   62.344075][ T5839] Bluetooth: hci1: command tx timeout
[   62.349347][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.362203][ T5841] Cannot create hsr debugfs directory
[   62.444270][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.451633][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.478177][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.513071][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.520548][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.547071][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.687144][ T5829] hsr_slave_0: entered promiscuous mode
[   62.693728][ T5829] hsr_slave_1: entered promiscuous mode
[   62.703473][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.711135][ T5829] Cannot create hsr debugfs directory
[   62.815888][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.841988][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.851325][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.878555][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.923555][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.952056][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.969396][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.979492][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.010426][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.031413][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.042455][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.053653][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.131085][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.158608][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.180015][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.202507][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.226038][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.291394][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.304759][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.319220][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   63.336089][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.354912][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.373090][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.402354][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.409712][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.442750][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   63.452753][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.459856][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.489512][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.529347][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.536605][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.545659][   T72] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.552794][   T72] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.569217][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   63.622273][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.629463][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.640942][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.648148][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.676864][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.687492][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.792179][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.840482][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.911841][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   63.932006][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   63.960337][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.967506][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.025496][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.032652][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.059285][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.066421][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.125105][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.132273][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.155536][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.182637][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.201677][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.309401][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.328856][ T5839] Bluetooth: hci2: command tx timeout
[   64.344217][ T5828] veth0_vlan: entered promiscuous mode
[   64.360498][ T5828] veth1_vlan: entered promiscuous mode
[   64.408501][ T5837] Bluetooth: hci0: command tx timeout
[   64.413966][ T5837] Bluetooth: hci3: command tx timeout
[   64.420275][ T5144] Bluetooth: hci4: command tx timeout
[   64.425809][ T5839] Bluetooth: hci1: command tx timeout
[   64.451270][ T5830] veth0_vlan: entered promiscuous mode
[   64.500708][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.537369][ T5841] veth0_vlan: entered promiscuous mode
[   64.570401][ T5830] veth1_vlan: entered promiscuous mode
[   64.602061][ T5841] veth1_vlan: entered promiscuous mode
[   64.641800][ T5828] veth0_macvtap: entered promiscuous mode
[   64.659430][ T5828] veth1_macvtap: entered promiscuous mode
[   64.705997][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.715988][ T5830] veth0_macvtap: entered promiscuous mode
[   64.731740][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.745192][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.762107][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.772446][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.781537][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.791198][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.814512][ T5830] veth1_macvtap: entered promiscuous mode
[   64.824762][ T5841] veth0_macvtap: entered promiscuous mode
[   64.860409][ T5841] veth1_macvtap: entered promiscuous mode
[   64.895401][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.907980][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.920475][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.931213][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.942819][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.954387][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.988787][ T5840] veth0_vlan: entered promiscuous mode
[   64.994999][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.005650][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.015714][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.026413][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.038316][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.047033][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.058828][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.067550][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.076770][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.110316][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.121128][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.132089][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.143736][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.154752][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.168894][  T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.173365][ T5829] veth0_vlan: entered promiscuous mode
[   65.176855][  T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.188737][ T5840] veth1_vlan: entered promiscuous mode
[   65.242579][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.248243][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.252215][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.265169][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.268679][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.284355][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.315017][ T5829] veth1_vlan: entered promiscuous mode
[   65.421557][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.444914][ T5829] veth0_macvtap: entered promiscuous mode
[   65.463345][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.476500][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.494274][ T5840] veth0_macvtap: entered promiscuous mode
[   65.508289][ T5829] veth1_macvtap: entered promiscuous mode
[   65.527330][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.539769][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.553606][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.561456][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.576584][ T5840] veth1_macvtap: entered promiscuous mode
[   65.664117][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.685517][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.698651][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.710062][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.721776][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.738648][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.754827][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.764408][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.787327][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.799592][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.816414][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.841804][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.853085][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.873741][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.890751][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.901414][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.924533][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.959263][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.980121][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.993597][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.003834][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.015104][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.025512][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.036253][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.050201][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.075600][ T5921] netlink: 'syz.3.7': attribute type 33 has an invalid length.
[   66.090535][ T5921] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7'.
[   66.106313][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.132662][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.143904][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.156465][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.172222][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.186693][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.196923][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.212888][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.223913][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.234541][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.244837][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.255479][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.269018][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.293414][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.337710][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.357762][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.370974][ T5929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   66.376010][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.393160][ T5931] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10'.
[   66.403663][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'.
[   66.414049][ T5931] netlink: 'syz.3.10': attribute type 3 has an invalid length.
[   66.420430][ T5839] Bluetooth: hci2: command tx timeout
[   66.488150][ T5839] Bluetooth: hci0: command tx timeout
[   66.494064][ T5837] Bluetooth: hci1: command tx timeout
[   66.499717][ T5839] Bluetooth: hci3: command tx timeout
[   66.505725][ T5144] Bluetooth: hci4: command tx timeout
[   66.748210][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.775820][ T5941] kAFS: No cell specified
[   66.783666][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.828649][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   66.834030][ T5942] kAFS: No cell specified
[   67.236747][   T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   67.508157][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   67.526742][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.544674][  T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.553254][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.576917][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.577984][   T25] usb 4-1: Using ep0 maxpacket: 32
[   67.590337][  T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.611889][   T25] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[   67.674413][   T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   67.686489][   T25] usb 4-1: config 0 has no interface number 0
[   67.710323][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.775980][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.776035][   T25] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   67.876847][   T25] usb 4-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   67.922776][   T25] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[   68.028792][ T5959] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5'.
[   68.128933][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=75
[   68.137163][   T25] usb 4-1: Product: syz
[   68.141996][   T25] usb 4-1: Manufacturer: syz
[   68.146621][   T25] usb 4-1: SerialNumber: syz
[   68.175227][   T25] usb 4-1: config 0 descriptor??
[   68.263115][ T5966] ./bus: Can't lookup blockdev
[   68.497551][ T5144] Bluetooth: hci2: command tx timeout
[   68.572930][ T5844] Bluetooth: hci1: command tx timeout
[   68.579017][ T5837] Bluetooth: hci0: command tx timeout
[   68.584670][ T5839] Bluetooth: hci3: command tx timeout
[   68.599114][ T5144] Bluetooth: hci4: command tx timeout
[   68.817955][   T25] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   68.893457][ T5968] netlink: 'syz.0.1': attribute type 33 has an invalid length.
[   68.916620][ T5968] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.970638][ T5938] Zero length message leads to an empty skb
[   69.102491][ T5974] bridge0: port 3(syz_tun) entered blocking state
[   69.139955][ T5974] bridge0: port 3(syz_tun) entered disabled state
[   69.379861][ T5974] syz_tun: entered allmulticast mode
[   69.638586][ T5974] syz_tun: entered promiscuous mode
[   69.684801][ T5974] bridge0: port 3(syz_tun) entered blocking state
[   69.691619][ T5974] bridge0: port 3(syz_tun) entered forwarding state
[   69.787906][ T5982] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'.
[   69.971815][   T11] usb 4-1: Failed to submit usb control message: -71
[   69.981213][   T11] usb 4-1: unable to send the bmi data to the device: -71
[   69.988579][   T11] usb 4-1: unable to get target info from device
[   69.994933][   T11] usb 4-1: could not get target info (-71)
[   70.001139][   T11] usb 4-1: could not probe fw (-71)
[   70.086856][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.827137][ T5910] usb 4-1: USB disconnect, device number 2
[   71.128740][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   71.137579][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   71.517947][   T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   71.622469][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[   71.636270][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[   71.657855][   T25] usb 4-1: device descriptor read/64, error -71
[   71.752907][ T6030] batadv_slave_1: entered promiscuous mode
[   71.780187][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.811846][ T6022] batadv_slave_1 (unregistering): left promiscuous mode
[   71.829630][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.897868][   T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   72.037822][   T25] usb 4-1: device descriptor read/64, error -71
[   72.263376][   T25] usb usb4-port1: attempt power cycle
[   72.378020][ T5917] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   72.599997][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.710230][   T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   72.731321][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   72.766501][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   72.792660][   T25] usb 4-1: device descriptor read/8, error -71
[   72.800529][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.809396][ T5917] usb 1-1: Product: syz
[   72.813605][ T5917] usb 1-1: Manufacturer: syz
[   72.832170][ T5917] usb 1-1: SerialNumber: syz
[   73.983228][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   74.015871][   T25] usb 4-1: device descriptor read/8, error -71
[   74.124586][   T51] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   74.132776][   T25] usb usb4-port1: unable to enumerate USB device
[   74.253162][ T1206] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   74.299855][   T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.312414][   T51] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   74.326313][   T51] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   74.336086][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.344403][   T51] usb 2-1: Product: syz
[   74.349023][   T51] usb 2-1: Manufacturer: syz
[   74.353686][   T51] usb 2-1: SerialNumber: syz
[   74.377870][ T6064] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.427897][ T1206] usb 3-1: Using ep0 maxpacket: 32
[   74.441764][ T1206] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.459420][ T1206] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[   74.468795][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   74.480197][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.495282][ T1206] usb 3-1: Product: syz
[   74.503370][ T1206] usb 3-1: Manufacturer: syz
[   74.508185][ T1206] usb 3-1: SerialNumber: syz
[   74.518839][ T1206] usb 3-1: config 0 descriptor??
[   74.532013][ T1206] empeg 3-1:0.0: empeg converter detected
[   74.541558][ T1206] usb 3-1: active config #0 != 1 ??
[   74.638563][    T8] usb 5-1: Using ep0 maxpacket: 16
[   74.656935][    T8] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[   74.667431][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.672619][ T6067] netlink: 'syz.3.48': attribute type 1 has an invalid length.
[   74.676365][    T8] usb 5-1: Product: syz
[   74.684365][ T6067] netlink: 'syz.3.48': attribute type 2 has an invalid length.
[   74.694015][    T8] usb 5-1: Manufacturer: syz
[   74.700988][    T8] usb 5-1: SerialNumber: syz
[   74.710467][    T8] usb 5-1: config 0 descriptor??
[   74.746033][ T1206] usb 3-1: USB disconnect, device number 2
[   74.754277][    T8] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   74.868192][ T5932] IPVS: starting estimator thread 0...
[   74.958038][ T6073] IPVS: using max 18 ests per chain, 43200 per kthread
[   75.034952][ T6061] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET)
[   75.092802][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.130756][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.437087][ T5917] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[   75.485297][ T5917] cdc_ncm 1-1:1.0: bind() failure
[   75.538014][ T5917] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   75.576129][ T5917] cdc_ncm 1-1:1.1: bind() failure
[   75.646293][ T5917] usb 1-1: USB disconnect, device number 2
[   75.670678][ T3454] usb 5-1: Failed to submit usb control message: -71
[   75.682716][    T8] usb 5-1: USB disconnect, device number 2
[   75.700956][ T3454] usb 5-1: unable to send the bmi data to the device: -71
[   75.951204][ T3454] usb 5-1: unable to get target info from device
[   75.958419][ T3454] usb 5-1: could not get target info (-71)
[   75.965007][ T3454] usb 5-1: could not probe fw (-71)
[   76.673194][   T51] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[   76.679355][   T51] cdc_ncm 2-1:1.0: bind() failure
[   76.687840][   T51] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   76.694756][   T51] cdc_ncm 2-1:1.1: bind() failure
[   76.703768][   T51] usb 2-1: USB disconnect, device number 2
[   76.802883][ T1223] cfg80211: failed to load regulatory.db
[   77.274128][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   77.283993][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   77.335584][ T6108] netlink: 'syz.4.59': attribute type 33 has an invalid length.
[   77.357078][ T6108] netlink: 152 bytes leftover after parsing attributes in process `syz.4.59'.
[   77.538306][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.579534][ T6113] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.62'.
[   77.683728][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   77.693160][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   81.368023][ T1223] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   81.587839][ T1223] usb 3-1: Using ep0 maxpacket: 8
[   81.614815][ T1223] usb 3-1: config 0 has an invalid interface number: 244 but max is 0
[   81.639310][ T1223] usb 3-1: config 0 has no interface number 0
[   81.675843][ T1223] usb 3-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00
[   81.723909][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.775615][ T1223] usb 3-1: Product: syz
[   81.805013][ T1223] usb 3-1: Manufacturer: syz
[   81.823633][ T1223] usb 3-1: SerialNumber: syz
[   82.053161][ T1223] usb 3-1: config 0 descriptor??
[   82.073969][ T1223] usb-storage 3-1:0.244: USB Mass Storage device detected
[   83.338434][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.75'.
[   83.347268][ T6212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.75'.
[   83.558886][ T1223] usb 3-1: USB disconnect, device number 3
[   83.762410][ T6218] kAFS: No cell specified
[   87.133824][ T6243] input: syz1 as /devices/virtual/input/input5
[   87.251078][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'.
[   87.889566][ T6251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.86'.
[   87.902780][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'.
[   87.902990][   T29] audit: type=1326 audit(1730883712.267:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   87.939822][   T29] audit: type=1326 audit(1730883712.267:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   88.081002][   T29] audit: type=1326 audit(1730883712.267:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   88.170993][   T29] audit: type=1326 audit(1730883712.267:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   88.192383][    C1] vkms_vblank_simulate: vblank timer overrun
[   88.241048][ T6256] Cannot find add_set index 0 as target
[   88.366300][   T29] audit: type=1326 audit(1730883712.277:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   89.145297][   T29] audit: type=1326 audit(1730883712.277:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   89.168563][   T29] audit: type=1326 audit(1730883712.277:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   89.203464][ T1223] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   89.214051][   T29] audit: type=1326 audit(1730883712.277:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   89.255348][   T29] audit: type=1326 audit(1730883712.277:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   89.294155][   T29] audit: type=1326 audit(1730883712.277:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780bd7e719 code=0x7ffc0000
[   89.343340][   T51] IPVS: starting estimator thread 0...
[   89.415155][ T1223] usb 2-1: unable to get BOS descriptor or descriptor too short
[   89.425449][ T1223] usb 2-1: not running at top speed; connect to a high speed hub
[   89.447820][ T6270] IPVS: using max 17 ests per chain, 40800 per kthread
[   89.457479][ T1223] usb 2-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config
[   89.457531][ T1223] usb 2-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   89.457560][ T1223] usb 2-1: config 1 interface 0 has no altsetting 0
[   89.461673][ T1223] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   89.461705][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.461727][ T1223] usb 2-1: Product: syz
[   89.461744][ T1223] usb 2-1: Manufacturer: syz
[   89.461759][ T1223] usb 2-1: SerialNumber: syz
[   89.927117][ T1223] usb 2-1: bad CDC descriptors
[   89.936338][ T1223] usb 2-1: USB disconnect, device number 3
[   90.063954][ T6287] CUSE: unknown device info ""
[   90.069256][ T6287] CUSE: unknown device info "appraise_type"
[   90.076618][ T6287] CUSE: DEVNAME unspecified
[   90.406468][ T6296] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.415477][ T6296] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.424355][ T6296] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.433173][ T6296] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.196192][   T51] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   91.200999][ T1223] IPVS: starting estimator thread 0...
[   91.727877][ T6305] IPVS: using max 18 ests per chain, 43200 per kthread
[   91.780383][   T51] usb 4-1: Using ep0 maxpacket: 8
[   92.576928][   T51] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   92.592455][ T6309] netlink: 'syz.4.104': attribute type 1 has an invalid length.
[   92.629007][   T51] usb 4-1: config 179 has no interface number 0
[   92.635562][   T51] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   92.650588][   T51] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   92.662298][   T51] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   92.673928][   T51] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   92.685629][   T51] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   92.699287][   T51] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   92.708625][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.721631][ T6292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   94.024565][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   94.043083][ T1223] usb 4-1: USB disconnect, device number 7
[   94.043091][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   94.063430][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   94.150612][ T6324] bond1: entered promiscuous mode
[   94.156054][ T6324] bond1: entered allmulticast mode
[   94.162116][ T6324] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.298498][ T6330] cgroup: noprefix used incorrectly
[   96.168185][ T6357] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[   96.750506][ T6358] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.842677][  T988] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[   96.934000][ T6366] syz.3.116: attempt to access beyond end of device
[   96.934000][ T6366] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[   97.168258][ T6366] gfs2: error -5 reading superblock
[   97.228095][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[   97.264364][ T6372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.120'.
[   97.307821][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.120'.
[   97.713191][ T6372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.120'.
[   97.752409][ T6372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.120'.
[   98.843375][ T6384] capability: warning: `syz.1.123' uses 32-bit capabilities (legacy support in use)
[  101.040942][ T6406] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  101.414038][ T6432] kAFS: No cell specified
[  102.985051][ T6438] ieee802154 phy0 wpan0: encryption failed: -22
[  103.530030][ T6449] Cannot find set identified by id 0 to match
[  103.554922][ T6449] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.138'.
[  103.575795][ T6449] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.138'.
[  105.610774][ T6475] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[  105.798980][ T6475] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.831595][ T6477] 8021q: adding VLAN 0 to HW filter on device batadv1
[  105.858656][ T6477] bond2: (slave batadv1): making interface the new active one
[  105.886797][ T6477] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  106.146396][ T6480] tipc: Started in network mode
[  106.151992][ T6480] tipc: Node identity fec0000000000000400000000000002d, cluster identity 4711
[  106.161453][ T6480] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  106.446126][ T6493] FAULT_INJECTION: forcing a failure.
[  106.446126][ T6493] name failslab, interval 1, probability 0, space 0, times 1
[  106.503165][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.1.151 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  106.513812][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  106.523898][ T6493] Call Trace:
[  106.527202][ T6493]  <TASK>
[  106.530153][ T6493]  dump_stack_lvl+0x241/0x360
[  106.534882][ T6493]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.540205][ T6493]  ? __pfx__printk+0x10/0x10
[  106.544829][ T6493]  ? ref_tracker_alloc+0x332/0x490
[  106.550993][ T6493]  should_fail_ex+0x3b0/0x4e0
[  106.551027][ T6493]  ? skb_clone+0x20c/0x390
[  106.551061][ T6493]  should_failslab+0xac/0x100
[  106.551087][ T6493]  ? skb_clone+0x20c/0x390
[  106.551108][ T6493]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  106.551131][ T6493]  skb_clone+0x20c/0x390
[  106.551153][ T6493]  __netlink_deliver_tap+0x3cc/0x7c0
[  106.551178][ T6493]  ? netlink_deliver_tap+0x2e/0x1b0
[  106.551197][ T6493]  netlink_deliver_tap+0x19d/0x1b0
[  106.551217][ T6493]  netlink_unicast+0x7c4/0x990
[  106.551242][ T6493]  ? __pfx_netlink_unicast+0x10/0x10
[  106.551259][ T6493]  ? __virt_addr_valid+0x183/0x530
[  106.551281][ T6493]  ? __check_object_size+0x48e/0x900
[  106.551308][ T6493]  netlink_sendmsg+0x8e4/0xcb0
[  106.551327][ T6493]  ? mark_lock+0x9a/0x360
[  106.551354][ T6493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.551385][ T6493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.551404][ T6493]  __sock_sendmsg+0x221/0x270
[  106.551425][ T6493]  sock_write_iter+0x2d7/0x3f0
[  106.551451][ T6493]  ? __pfx_sock_write_iter+0x10/0x10
[  106.551493][ T6493]  do_iter_readv_writev+0x600/0x880
[  106.551523][ T6493]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  106.551552][ T6493]  ? bpf_lsm_file_permission+0x9/0x10
[  106.551571][ T6493]  ? security_file_permission+0x74/0x280
[  106.551596][ T6493]  ? rw_verify_area+0x1c3/0x6f0
[  106.551621][ T6493]  vfs_writev+0x376/0xba0
[  106.551654][ T6493]  ? __pfx_vfs_writev+0x10/0x10
[  106.551698][ T6493]  ? fdget_pos+0x19a/0x320
[  106.551726][ T6493]  do_writev+0x1b1/0x350
[  106.551750][ T6493]  ? __pfx_do_writev+0x10/0x10
[  106.551770][ T6493]  ? do_syscall_64+0x100/0x230
[  106.551796][ T6493]  ? do_syscall_64+0xb6/0x230
[  106.551819][ T6493]  do_syscall_64+0xf3/0x230
[  106.551842][ T6493]  ? clear_bhb_loop+0x35/0x90
[  106.551866][ T6493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.551898][ T6493] RIP: 0033:0x7f209757e719
[  106.551924][ T6493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.551945][ T6493] RSP: 002b:00007f2098422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  106.551968][ T6493] RAX: ffffffffffffffda RBX: 00007f2097735f80 RCX: 00007f209757e719
[  106.551984][ T6493] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004
[  106.551997][ T6493] RBP: 00007f2098422090 R08: 0000000000000000 R09: 0000000000000000
[  106.552010][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.552023][ T6493] R13: 0000000000000000 R14: 00007f2097735f80 R15: 00007ffc19ffc978
[  106.552059][ T6493]  </TASK>
[  106.619145][ T6497] CUSE: unknown device info ""
[  106.619163][ T6497] CUSE: unknown device info "appraise_type"
[  106.619173][ T6497] CUSE: DEVNAME unspecified
[  107.107614][ T6502] kAFS: No cell specified
[  107.864159][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'.
[  109.083646][ T6534] sctp: [Deprecated]: syz.1.164 (pid 6534) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.083646][ T6534] Use struct sctp_sack_info instead
[  110.329520][ T6556] netlink: 'syz.2.169': attribute type 1 has an invalid length.
[  110.337256][ T6556] netlink: 224 bytes leftover after parsing attributes in process `syz.2.169'.
[  110.898292][ T1223] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  111.059693][ T1223] usb 2-1: Using ep0 maxpacket: 16
[  111.087080][ T1223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.136986][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  111.179727][ T1223] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  111.207596][ T1223] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  111.244048][ T1223] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.289074][ T1223] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  111.309609][ T1223] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  111.327789][ T1223] usb 2-1: Manufacturer: syz
[  111.374666][ T1223] usb 2-1: config 0 descriptor??
[  112.317797][ T1223] rc_core: IR keymap rc-hauppauge not found
[  112.324628][ T1223] Registered IR keymap rc-empty
[  112.340755][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  112.557926][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  112.586707][ T1223] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  112.607945][ T1223] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6
[  112.642209][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  112.707913][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  112.808231][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  112.884474][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  113.420189][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  113.698963][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  114.200294][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  114.247892][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  114.278248][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  114.337163][ T1223] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  114.359669][ T1223] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  114.372387][ T1223] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  117.242918][ T6603] FAULT_INJECTION: forcing a failure.
[  117.242918][ T6603] name failslab, interval 1, probability 0, space 0, times 0
[  117.256468][ T6603] CPU: 0 UID: 0 PID: 6603 Comm: syz.4.181 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  117.267104][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  117.277191][ T6603] Call Trace:
[  117.280496][ T6603]  <TASK>
[  117.283451][ T6603]  dump_stack_lvl+0x241/0x360
[  117.288164][ T6603]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.293472][ T6603]  ? __pfx__printk+0x10/0x10
[  117.298084][ T6603]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  117.304091][ T6603]  ? __pfx___might_resched+0x10/0x10
[  117.309413][ T6603]  should_fail_ex+0x3b0/0x4e0
[  117.314128][ T6603]  should_failslab+0xac/0x100
[  117.318862][ T6603]  ? __alloc_skb+0x1c3/0x440
[  117.323477][ T6603]  kmem_cache_alloc_node_noprof+0x71/0x320
[  117.329295][ T6603]  __alloc_skb+0x1c3/0x440
[  117.333716][ T6603]  ? __pfx___alloc_skb+0x10/0x10
[  117.338657][ T6603]  ? netlink_autobind+0xd6/0x2f0
[  117.343593][ T6603]  ? netlink_autobind+0x2b0/0x2f0
[  117.348621][ T6603]  netlink_sendmsg+0x638/0xcb0
[  117.353389][ T6603]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.358684][ T6603]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.363967][ T6603]  __sock_sendmsg+0x221/0x270
[  117.368648][ T6603]  ____sys_sendmsg+0x52a/0x7e0
[  117.373422][ T6603]  ? __pfx_____sys_sendmsg+0x10/0x10
[  117.378715][ T6603]  __sys_sendmsg+0x292/0x380
[  117.383309][ T6603]  ? __pfx___sys_sendmsg+0x10/0x10
[  117.388425][ T6603]  ? __pfx_vfs_write+0x10/0x10
[  117.393204][ T6603]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  117.399570][ T6603]  ? do_syscall_64+0x100/0x230
[  117.404337][ T6603]  ? do_syscall_64+0xb6/0x230
[  117.409020][ T6603]  do_syscall_64+0xf3/0x230
[  117.413524][ T6603]  ? clear_bhb_loop+0x35/0x90
[  117.418204][ T6603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.424097][ T6603] RIP: 0033:0x7fbb0697e719
[  117.428509][ T6603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.448111][ T6603] RSP: 002b:00007fbb077e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.456524][ T6603] RAX: ffffffffffffffda RBX: 00007fbb06b35f80 RCX: 00007fbb0697e719
[  117.464492][ T6603] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  117.472458][ T6603] RBP: 00007fbb077e0090 R08: 0000000000000000 R09: 0000000000000000
[  117.480460][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.488437][ T6603] R13: 0000000000000000 R14: 00007fbb06b35f80 R15: 00007ffced0d1b18
[  117.496424][ T6603]  </TASK>
[  119.124987][ T6611] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.182'.
[  119.135474][ T6611] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.182'.
[  119.381423][   T51] usb 2-1: USB disconnect, device number 4
[  119.938199][   T51] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  119.944311][ T6624] tipc: Started in network mode
[  120.065728][   T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  120.065919][ T6624] tipc: Node identity fec0000000000000400000000000002d, cluster identity 4711
[  120.103793][   T51] usb 2-1: config 0 has an invalid interface number: 212 but max is 0
[  120.113690][   T51] usb 2-1: config 0 has no interface number 0
[  120.132196][   T51] usb 2-1: config 0 interface 212 has no altsetting 0
[  120.236471][ T6624] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  120.242592][   T51] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  120.355081][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.369294][   T51] usb 2-1: Product: syz
[  120.374896][   T25] usb 3-1: config 255 has an invalid interface number: 20 but max is 0
[  120.388137][   T25] usb 3-1: config 255 has no interface number 0
[  120.396140][   T51] usb 2-1: Manufacturer: syz
[  120.406283][   T51] usb 2-1: SerialNumber: syz
[  120.411507][   T25] usb 3-1: config 255 interface 20 has no altsetting 0
[  120.438812][   T51] usb 2-1: config 0 descriptor??
[  120.447197][   T51] ftdi_sio 2-1:0.212: FTDI USB Serial Device converter detected
[  120.457359][   T51] usb 2-1: Detected FT4232HP
[  120.466046][   T25] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f
[  120.475620][   T25] usb 3-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3
[  120.484240][   T25] usb 3-1: Product: syz
[  120.489680][   T25] usb 3-1: Manufacturer: syz
[  120.498061][   T25] usb 3-1: SerialNumber: syz
[  120.536887][ T6629] bond1: entered promiscuous mode
[  120.546627][ T6629] bond1: entered allmulticast mode
[  120.552329][ T6629] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.657107][   T51] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  120.720005][   T51] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  120.727543][ T6619] 9pnet_fd: Insufficient options for proto=fd
[  121.228220][ T6619] capability: warning: `syz.2.185' uses deprecated v2 capabilities in a way that may be insecure
[  121.495612][ T5917] usb 2-1: USB disconnect, device number 5
[  121.516237][ T5917] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  121.527377][ T5917] ftdi_sio 2-1:0.212: device disconnected
[  122.026421][   T25] usb 3-1: USB disconnect, device number 4
[  123.931325][   T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  124.585300][   T25] usb 3-1: Using ep0 maxpacket: 32
[  124.592188][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.603286][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.613439][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  124.622744][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.714836][   T25] usb 3-1: config 0 descriptor??
[  124.732353][   T25] hub 3-1:0.0: USB hub found
[  125.294318][ T6694] Cannot find del_set index 286 as target
[  125.817314][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[  126.761430][ T6697] delete_channel: no stack
[  127.425708][   T25] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  127.436478][   T25] usbhid 3-1:0.0: can't add hid device: -71
[  127.472090][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  127.558258][   T25] usb 3-1: USB disconnect, device number 5
[  127.971971][ T6722] netlink: 'syz.1.214': attribute type 33 has an invalid length.
[  127.994600][ T6722] netlink: 152 bytes leftover after parsing attributes in process `syz.1.214'.
[  128.534349][ T6734] netlink: 'syz.3.217': attribute type 1 has an invalid length.
[  129.108649][   T51] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  129.568010][   T51] usb 1-1: device descriptor read/64, error -71
[  129.703763][ T6734] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.743792][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv1
[  129.818134][   T51] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  130.073423][ T6737] bond1: (slave batadv1): making interface the new active one
[  130.083668][ T6737] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  130.106524][ T6731] kvm: kvm [6730]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x23303027
[  130.127852][   T51] usb 1-1: device descriptor read/64, error -71
[  130.238195][   T51] usb usb1-port1: attempt power cycle
[  130.641160][   T51] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  130.891012][   T51] usb 1-1: device descriptor read/8, error -71
[  131.285322][   T51] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  131.464131][   T51] usb 1-1: device descriptor read/8, error -71
[  131.776458][   T51] usb usb1-port1: unable to enumerate USB device
[  131.842378][ T6766] netlink: 'syz.3.227': attribute type 1 has an invalid length.
[  131.927007][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'.
[  132.116548][ T2148] IPVS: starting estimator thread 0...
[  132.267892][ T6771] IPVS: using max 22 ests per chain, 52800 per kthread
[  133.052496][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  133.062811][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  133.858235][ T6798] netlink: 'syz.4.235': attribute type 33 has an invalid length.
[  133.866031][ T6798] netlink: 152 bytes leftover after parsing attributes in process `syz.4.235'.
[  133.928060][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[  134.129813][   T29] kauditd_printk_skb: 32 callbacks suppressed
[  134.129829][   T29] audit: type=1326 audit(1730883758.507:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6804 comm="syz.2.238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f780bd7e719 code=0x0
[  134.186941][ T6812] kAFS: No cell specified
[  135.634674][ T6827] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  136.667761][ T1223] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  136.997810][ T2148] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  137.037764][ T1223] usb 2-1: Using ep0 maxpacket: 16
[  137.050796][ T1223] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.110084][ T1223] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  137.119396][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.147826][ T1223] usb 2-1: Product: syz
[  137.153709][ T1223] usb 2-1: Manufacturer: syz
[  137.178581][ T1223] usb 2-1: SerialNumber: syz
[  137.196494][ T1223] r8152-cfgselector 2-1: Unknown version 0x0000
[  137.279470][ T2148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.298329][ T2148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  137.389429][ T2148] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  137.407752][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.415797][ T2148] usb 4-1: Product: syz
[  137.427752][ T2148] usb 4-1: Manufacturer: syz
[  137.432406][ T2148] usb 4-1: SerialNumber: syz
[  137.697035][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.255'.
[  137.748061][ T6863] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  138.923178][ T6875] cgroup: noprefix used incorrectly
[  139.531794][ T5882] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  139.748612][ T2148] cdc_ncm 4-1:1.0: SET_CRC_MODE failed
[  139.778228][ T2148] cdc_ncm 4-1:1.0: bind() failure
[  139.786380][ T2148] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  139.807858][ T2148] cdc_ncm 4-1:1.1: bind() failure
[  139.918142][ T2148] usb 4-1: USB disconnect, device number 8
[  139.955019][ T1223] r8152-cfgselector 2-1: Unknown version 0x0000
[  139.961649][ T1223] r8152-cfgselector 2-1: bad CDC descriptors
[  139.971250][ T1223] r8152-cfgselector 2-1: USB disconnect, device number 6
[  140.029401][ T5882] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  140.079114][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.089455][ T6888] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  140.129374][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.786240][ T6892] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  140.896484][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  141.036224][ T5882] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  141.067726][ T5882] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  141.106946][ T5882] usb 5-1: Manufacturer: syz
[  141.214883][ T5882] usb 5-1: config 0 descriptor??
[  141.227251][   T51] IPVS: starting estimator thread 0...
[  141.537892][ T6898] IPVS: using max 17 ests per chain, 40800 per kthread
[  141.747410][ T5882] usbhid 5-1:0.0: can't add hid device: -71
[  141.753904][ T5882] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  141.778144][ T5882] usb 5-1: USB disconnect, device number 3
[  141.978034][ T1223] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  142.147786][ T1223] usb 2-1: Invalid ep0 maxpacket: 9
[  142.568092][ T5144] Bluetooth: hci2: command 0x0401 tx timeout
[  142.755616][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'.
[  142.797917][ T1223] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  143.005889][ T1223] usb 2-1: Invalid ep0 maxpacket: 9
[  143.048537][ T1223] usb usb2-port1: attempt power cycle
[  143.391347][ T6922] netlink: 72 bytes leftover after parsing attributes in process `syz.4.272'.
[  143.450476][ T1223] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  143.607898][ T1223] usb 2-1: Invalid ep0 maxpacket: 9
[  143.925797][ T1223] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  143.963049][ T6931] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  144.949898][ T1223] usb 2-1: Invalid ep0 maxpacket: 9
[  144.955835][ T1223] usb usb2-port1: unable to enumerate USB device
[  145.720445][ T6933] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  146.114952][ T6936] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  146.698106][ T6951] ./bus: Can't lookup blockdev
[  146.888173][ T5144] Bluetooth: hci2: command 0x0401 tx timeout
[  147.271174][ T6953] bond1: entered promiscuous mode
[  147.276263][ T6953] bond1: entered allmulticast mode
[  147.282299][ T6953] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.819464][ T6953] bond1 (unregistering): Released all slaves
[  148.374776][ T6962] syzkaller0: entered promiscuous mode
[  148.392037][ T6962] syzkaller0: entered allmulticast mode
[  149.608959][ T5144] Bluetooth: hci2: command 0x0401 tx timeout
[  150.630835][ T6986] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  152.569606][ T5144] Bluetooth: hci2: command 0x0401 tx timeout
[  154.152350][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.293'.
[  154.361613][ T7007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.294'.
[  154.372717][ T7007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.294'.
[  154.633494][ T7020] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  155.004588][   T29] audit: type=1326 audit(1730883779.337:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.103100][ T7036] netlink: 'syz.1.306': attribute type 11 has an invalid length.
[  155.124596][   T29] audit: type=1326 audit(1730883779.337:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.181570][   T29] audit: type=1326 audit(1730883779.337:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.270788][   T29] audit: type=1326 audit(1730883779.337:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.335404][   T29] audit: type=1326 audit(1730883779.337:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.691869][   T29] audit: type=1326 audit(1730883779.337:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.714493][   T29] audit: type=1326 audit(1730883779.337:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.738234][   T29] audit: type=1326 audit(1730883779.337:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.759841][   T29] audit: type=1326 audit(1730883779.337:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.782787][   T29] audit: type=1326 audit(1730883779.337:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7030 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe7e7b7e719 code=0x7ffc0000
[  155.804085][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.147780][ T5932] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  156.308079][ T5932] usb 5-1: Using ep0 maxpacket: 8
[  156.335602][ T5932] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  156.367602][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.375921][ T5932] usb 5-1: Product: syz
[  156.380561][ T5932] usb 5-1: Manufacturer: syz
[  156.385192][ T5932] usb 5-1: SerialNumber: syz
[  156.393085][ T5932] usb 5-1: config 0 descriptor??
[  156.398091][ T5882] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  156.438147][ T5932] cdc_phonet 5-1:0.0: skipping garbage
[  156.443835][ T5932] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22
[  156.585029][ T5882] usb 4-1: device descriptor read/64, error -71
[  156.932980][ T5882] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  157.479710][   T51] usb 5-1: USB disconnect, device number 4
[  157.597929][ T5882] usb 4-1: device descriptor read/64, error -71
[  157.713549][ T7078] bond1: entered promiscuous mode
[  157.721925][ T5882] usb usb4-port1: attempt power cycle
[  157.747202][ T7078] 8021q: adding VLAN 0 to HW filter on device bond1
[  158.345345][ T7084] netlink: 'syz.0.319': attribute type 33 has an invalid length.
[  158.358990][ T7084] netlink: 152 bytes leftover after parsing attributes in process `syz.0.319'.
[  158.596658][ T7086] batadv_slave_1: entered promiscuous mode
[  158.603819][ T7086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.737614][ T7086] batadv_slave_1 (unregistering): left promiscuous mode
[  158.745936][ T7086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.807947][ T5882] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  158.847283][ T5882] usb 4-1: device descriptor read/8, error -71
[  158.865867][ T7092] netlink: 'syz.1.321': attribute type 1 has an invalid length.
[  159.126335][ T7092] 8021q: adding VLAN 0 to HW filter on device bond2
[  159.214051][ T7103] CUSE: unknown device info ""
[  159.221085][ T7097] 8021q: adding VLAN 0 to HW filter on device batadv1
[  159.230244][ T5882] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  159.243654][ T7103] CUSE: unknown device info "appraise_type"
[  159.360923][ T7097] bond2: (slave batadv1): making interface the new active one
[  159.378025][ T7103] CUSE: DEVNAME unspecified
[  159.383172][ T7097] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  160.008378][ T5882] usb 4-1: device not accepting address 12, error -71
[  160.016977][ T5882] usb usb4-port1: unable to enumerate USB device
[  161.965248][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[  162.245991][ T7129] fuseblk: Unknown parameter '0xffffffffffffffff'
[  162.267885][ T5144] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  162.969128][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'.
[  163.116162][ T7137] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.334'.
[  163.129504][ T7137] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  163.226220][ T7138] loop2: detected capacity change from 0 to 7
[  163.260955][ T7138] Dev loop2: unable to read RDB block 7
[  164.083930][ T7138]  loop2: unable to read partition table
[  164.094076][ T7138] loop2: partition table beyond EOD, truncated
[  164.117788][ T7138] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  164.155396][ T7138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.335'.
[  164.358077][ T5882] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  164.412574][ T7161] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  164.549903][ T5882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.577831][ T5882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  164.610112][ T5882] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  164.651394][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.697947][ T5882] usb 5-1: Product: syz
[  164.716218][ T5882] usb 5-1: Manufacturer: syz
[  164.733137][ T7168] process 'syz.0.346' launched './file1' with NULL argv: empty string added
[  164.749863][ T5882] usb 5-1: SerialNumber: syz
[  165.550081][ T7174] netlink: 'syz.2.347': attribute type 33 has an invalid length.
[  165.580700][ T7174] netlink: 152 bytes leftover after parsing attributes in process `syz.2.347'.
[  166.927969][ T5882] cdc_ncm 5-1:1.0: SET_CRC_MODE failed
[  167.619218][ T5882] cdc_ncm 5-1:1.0: bind() failure
[  167.632567][ T7202] CUSE: unknown device info ""
[  167.637614][ T7202] CUSE: unknown device info "appraise_type"
[  167.645027][ T7202] CUSE: DEVNAME unspecified
[  167.651246][ T5882] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  167.659112][ T5882] cdc_ncm 5-1:1.1: bind() failure
[  167.667301][ T5882] usb 5-1: USB disconnect, device number 5
[  167.678812][ T1223] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  167.901299][ T1223] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.915792][ T1223] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  168.041752][ T1223] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  168.380646][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.389422][ T1223] usb 3-1: Product: syz
[  168.394293][ T1223] usb 3-1: Manufacturer: syz
[  168.400200][ T1223] usb 3-1: SerialNumber: syz
[  168.579332][ T7214] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  168.665880][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'.
[  168.683644][ T7220] Cannot find add_set index 0 as target
[  169.093466][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.366'.
[  169.289163][ T7235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.368'.
[  169.329910][ T7235] trusted_key: syz.0.368 sent an empty control message without MSG_MORE.
[  169.394033][ T7237] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  169.464730][ T7240] netlink: 'syz.0.370': attribute type 1 has an invalid length.
[  169.508483][ T7240] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.370'.
[  169.534707][ T7240] netlink: 225 bytes leftover after parsing attributes in process `syz.0.370'.
[  170.329289][ T1223] cdc_ncm 3-1:1.0: SET_CRC_MODE failed
[  170.579491][ T1223] cdc_ncm 3-1:1.0: bind() failure
[  170.592949][ T1223] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  170.613158][ T1223] cdc_ncm 3-1:1.1: bind() failure
[  170.648078][ T1223] usb 3-1: USB disconnect, device number 6
[  170.888958][ T7265] No such timeout policy "syz0"
[  173.417227][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'.
[  173.465679][ T7289] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  174.105224][ T7297] netlink: 'syz.1.387': attribute type 3 has an invalid length.
[  174.117074][ T7302] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  174.138968][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[  174.401709][ T7308] overlayfs: workdir and upperdir must reside under the same mount
[  174.810806][ T7319] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns
[  175.921055][ T7340] netlink: 'syz.3.397': attribute type 11 has an invalid length.
[  176.705958][ T7341] netlink: 'syz.1.395': attribute type 11 has an invalid length.
[  177.219464][ T7357] netlink: 'syz.4.404': attribute type 3 has an invalid length.
[  177.775991][ T7355] tmpfs: Bad value for 'size'
[  178.435671][ T7366] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  178.569518][ T7368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  178.818029][ T1223] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  178.858070][ T7377] CUSE: unknown device info ""
[  178.863017][ T7377] CUSE: unknown device info "appraise_type"
[  178.949222][ T7377] CUSE: DEVNAME unspecified
[  178.987803][ T1223] usb 1-1: Using ep0 maxpacket: 32
[  178.994746][ T1223] usb 1-1: no configurations
[  179.007492][ T1223] usb 1-1: can't read configurations, error -22
[  179.178239][ T1223] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  179.345604][ T1223] usb 1-1: Using ep0 maxpacket: 32
[  179.529489][ T1223] usb 1-1: no configurations
[  179.534117][ T1223] usb 1-1: can't read configurations, error -22
[  179.852517][ T1223] usb usb1-port1: attempt power cycle
[  179.912035][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  180.507953][ T1223] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  180.528381][ T1223] usb 1-1: Using ep0 maxpacket: 32
[  180.534082][ T1223] usb 1-1: no configurations
[  180.541335][ T1223] usb 1-1: can't read configurations, error -22
[  180.717763][ T1223] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  180.818621][ T1223] usb 1-1: Using ep0 maxpacket: 32
[  180.824577][ T1223] usb 1-1: no configurations
[  180.829884][ T1223] usb 1-1: can't read configurations, error -22
[  180.855552][ T1223] usb usb1-port1: unable to enumerate USB device
[  182.021766][ T5882] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  182.073474][ T7424] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.427'.
[  182.083242][ T7424] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.427'.
[  182.207801][ T5882] usb 5-1: device descriptor read/64, error -71
[  182.448014][ T5882] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  182.476756][ T7439] No such timeout policy "syz0"
[  182.628205][ T5882] usb 5-1: device descriptor read/64, error -71
[  182.761459][ T5882] usb usb5-port1: attempt power cycle
[  182.769220][ T7442] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  183.148487][ T5882] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  183.211778][ T5882] usb 5-1: device descriptor read/8, error -71
[  183.512982][ T7455] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  183.607932][ T5882] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  183.633065][ T5882] usb 5-1: device descriptor read/8, error -71
[  183.752659][ T5882] usb usb5-port1: unable to enumerate USB device
[  184.745092][ T7473] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  185.043071][ T7476] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  185.109695][ T7478] netlink: 'syz.1.444': attribute type 11 has an invalid length.
[  185.791492][ T7495] ./bus: Can't lookup blockdev
[  186.206355][ T7485] delete_channel: no stack
[  186.303355][   T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  186.313053][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  186.453545][   T25] usb 2-1: device descriptor read/64, error -32
[  186.575183][ T7506] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  186.879357][   T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  186.925817][ T7514] 9pnet_virtio: no channels available for device syz
[  187.634970][ T5144] Bluetooth: hci2: command 0x0401 tx timeout
[  187.641415][ T5144] Bluetooth: hci1: command 0x0406 tx timeout
[  187.647549][ T5144] Bluetooth: hci4: command 0x0406 tx timeout
[  187.654680][ T5144] Bluetooth: hci0: command 0x0406 tx timeout
[  187.669409][ T5144] Bluetooth: hci3: command 0x0406 tx timeout
[  187.699056][ T7511] batadv_slave_1: entered promiscuous mode
[  187.723639][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.758032][   T25] usb 2-1: Using ep0 maxpacket: 16
[  187.850456][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  187.905244][ T7517] netlink: 72 bytes leftover after parsing attributes in process `syz.3.459'.
[  187.953879][   T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  187.965622][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.975465][   T25] usb 2-1: Product: syz
[  187.980207][   T25] usb 2-1: Manufacturer: syz
[  187.996217][   T25] usb 2-1: SerialNumber: syz
[  188.015268][   T25] usb 2-1: config 0 descriptor??
[  188.040154][ T7511] batadv_slave_1 (unregistering): left promiscuous mode
[  188.047944][   T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  188.057211][   T25] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  188.067933][ T7511] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.668555][   T25] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  188.960750][ T7537] netlink: 'syz.3.463': attribute type 1 has an invalid length.
[  188.994702][ T7537] netlink: 224 bytes leftover after parsing attributes in process `syz.3.463'.
[  189.255697][   T25] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  189.302497][   T25] em28xx 2-1:0.0: board has no eeprom
[  189.366371][ T7550] netlink: 'syz.4.470': attribute type 11 has an invalid length.
[  189.397173][   T25] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  189.428405][   T25] em28xx 2-1:0.0: dvb set to bulk mode.
[  189.444294][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.470'.
[  189.457465][ T5932] em28xx 2-1:0.0: Binding DVB extension
[  189.491432][   T25] usb 2-1: USB disconnect, device number 12
[  189.513553][   T25] em28xx 2-1:0.0: Disconnecting em28xx
[  189.520029][ T2148] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  190.057250][ T7552] netlink: 'syz.1.469': attribute type 11 has an invalid length.
[  190.116466][ T5839] Bluetooth: hci2: command 0x0401 tx timeout
[  190.137873][ T2148] usb 1-1: Using ep0 maxpacket: 8
[  190.147339][ T2148] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  190.155960][ T2148] usb 1-1: config 179 has no interface number 0
[  190.163540][ T2148] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  190.174876][ T2148] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  190.186406][ T2148] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  190.197795][ T2148] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  190.235847][ T5932] em28xx 2-1:0.0: Registering input extension
[  190.243062][   T25] em28xx 2-1:0.0: Closing input extension
[  190.249704][ T2148] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  190.273341][ T2148] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  190.294349][   T25] em28xx 2-1:0.0: Freeing device
[  190.378122][ T2148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.428838][ T7546] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  191.660483][ T7584] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  191.673897][ T7584] netlink: 96 bytes leftover after parsing attributes in process `syz.3.480'.
[  191.792403][ T7587] netlink: 'syz.3.481': attribute type 11 has an invalid length.
[  191.799421][ T2148] usb 1-1: USB disconnect, device number 11
[  191.800173][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  191.800212][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  191.827918][ T7587] netlink: 'syz.3.481': attribute type 3 has an invalid length.
[  191.993147][ T7596] netlink: 'syz.2.485': attribute type 33 has an invalid length.
[  192.132657][ T7596] netlink: 152 bytes leftover after parsing attributes in process `syz.2.485'.
[  192.398159][ T2148] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  192.953026][ T2148] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  192.964237][ T2148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.004867][ T2148] usb 2-1: Product: syz
[  193.035402][ T2148] usb 2-1: Manufacturer: syz
[  193.059519][ T2148] usb 2-1: SerialNumber: syz
[  193.096503][ T2148] usb 2-1: config 0 descriptor??
[  193.148081][ T6009] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  193.360237][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.421591][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.442692][ T7613] netlink: 'syz.3.490': attribute type 1 has an invalid length.
[  193.858302][ T6009] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[  194.095705][ T2148] usb-storage 2-1:0.0: USB Mass Storage device detected
[  194.122353][ T6009] usb 5-1: config 0 has no interface number 0
[  194.128635][ T6009] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.133279][ T7613] netlink: 224 bytes leftover after parsing attributes in process `syz.3.490'.
[  194.139727][ T6009] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.139756][ T6009] usb 5-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.171766][ T6009] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  194.180967][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.191954][ T6009] usb 5-1: config 0 descriptor??
[  194.308751][ T2148] usb 2-1: USB disconnect, device number 13
[  194.509184][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.515557][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  194.645064][ T6009] uclogic 0003:28BD:0905.0001: interface is invalid, ignoring
[  194.879963][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.013680][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.033961][ T7591] Cannot find del_set index 1 as target
[  195.718580][ T6009] usb 5-1: USB disconnect, device number 10
[  195.729838][ T7644] netlink: 72 bytes leftover after parsing attributes in process `syz.1.499'.
[  195.772962][ T7640] dlm: no locking on control device
[  195.782436][ T7640] program syz.0.496 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.217792][ T2148] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  198.273402][   T29] kauditd_printk_skb: 56 callbacks suppressed
[  198.273419][   T29] audit: type=1804 audit(1730883822.647:111): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.512" name="/newroot/85/bus/file1" dev="overlay" ino=473 res=1 errno=0
[  198.830332][ T2148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.840682][ T2148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  198.969817][ T2148] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  199.000881][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.011199][ T7694] tipc: Started in network mode
[  199.016111][ T7694] tipc: Node identity 5fc0000000000000400000000000002d, cluster identity 4711
[  199.055667][ T7694] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  199.304343][ T2148] usb 4-1: Product: syz
[  199.308720][ T2148] usb 4-1: Manufacturer: syz
[  199.313368][ T2148] usb 4-1: SerialNumber: syz
[  199.401060][ T7703] netlink: 'syz.4.517': attribute type 11 has an invalid length.
[  200.058591][ T7707] netlink: 'syz.1.521': attribute type 33 has an invalid length.
[  200.099352][ T7707] netlink: 152 bytes leftover after parsing attributes in process `syz.1.521'.
[  201.295250][ T2148] usb 4-1: can't set config #1, error -71
[  201.351241][ T2148] usb 4-1: USB disconnect, device number 13
[  201.357908][ T7729] netlink: 'syz.1.525': attribute type 11 has an invalid length.
[  201.480299][ T7731] 9pnet_fd: Insufficient options for proto=fd
[  201.737970][   T29] audit: type=1326 audit(1730883826.107:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7736 comm="syz.1.532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f209757e719 code=0x0
[  201.893323][ T7747] ./bus: Can't lookup blockdev
[  203.054242][ T7751] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.535'.
[  203.150768][ T7759] binder: BINDER_SET_CONTEXT_MGR already set
[  203.157063][ T7759] binder: 7758:7759 ioctl 4018620d 20001080 returned -16
[  203.358369][ T7766] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  204.450899][ T7787] ./bus: Can't lookup blockdev
[  209.373000][ T7836] ./bus: Can't lookup blockdev
[  209.698008][ T6009] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  210.289143][ T7845] CUSE: unknown device info ""
[  210.294927][ T7845] CUSE: unknown device info "appraise_type"
[  210.301720][ T7845] CUSE: DEVNAME unspecified
[  210.347837][ T6009] usb 3-1: Using ep0 maxpacket: 8
[  210.367890][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.388620][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.414872][ T6009] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  210.491583][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.564536][ T6009] usb 3-1: config 0 descriptor??
[  211.630445][ T6009] logitech 0003:046D:C24F.0002: unknown main item tag 0x1
[  211.638410][ T6009] logitech 0003:046D:C24F.0002: unknown main item tag 0x0
[  211.680714][ T6009] logitech 0003:046D:C24F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.2-1/input0
[  211.734323][ T6009] logitech 0003:046D:C24F.0002: no inputs found
[  211.760950][ T7861] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.571'.
[  211.788958][ T6009] usb 3-1: USB disconnect, device number 7
[  212.093095][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.124377][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.675411][ T7868] netlink: 'syz.2.573': attribute type 11 has an invalid length.
[  212.687865][ T7868] netlink: 'syz.2.573': attribute type 3 has an invalid length.
[  212.697169][ T7869] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  212.848536][ T7871] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.880912][ T7871] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  213.135473][ T5839] Bluetooth: hci4: ISO packet for unknown connection handle 1992
[  213.237915][ T7880] ./bus: Can't lookup blockdev
[  214.334635][ T7894] netlink: 'syz.4.583': attribute type 11 has an invalid length.
[  215.168098][ T7901] CUSE: unknown device info ""
[  215.183326][ T7901] CUSE: unknown device info "appraise_type"
[  215.190254][ T7901] CUSE: DEVNAME unspecified
[  215.487844][ T6009] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  215.761316][ T6009] usb 3-1: device descriptor read/64, error -71
[  215.957912][ T7919] netlink: 'syz.4.590': attribute type 11 has an invalid length.
[  217.147856][ T6009] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  217.684094][ T7930] ./bus: Can't lookup blockdev
[  219.540685][ T7949] netlink: 'syz.2.599': attribute type 11 has an invalid length.
[  219.908478][ T2148] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  220.614918][ T7953] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  221.359022][ T7961] cgroup: noprefix used incorrectly
[  221.555407][ T2148] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  221.565134][ T2148] usb 4-1: config 0 has no interface number 0
[  221.589393][ T2148] usb 4-1: too many endpoints for config 0 interface 223 altsetting 0: 200, using maximum allowed: 30
[  221.649324][ T2148] usb 4-1: config 0 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 200
[  221.905870][ T2148] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28
[  221.915310][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.925559][ T2148] usb 4-1: Product: syz
[  221.930087][ T2148] usb 4-1: Manufacturer: syz
[  221.934720][ T2148] usb 4-1: SerialNumber: syz
[  221.969544][ T2148] usb 4-1: config 0 descriptor??
[  222.293790][ T2148] usb 4-1: USB disconnect, device number 14
[  222.503486][ T5839] Bluetooth: hci2: command 0x0401 tx timeout
[  223.699210][ T2148] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  224.109340][ T2148] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.120032][ T2148] usb 4-1: config 0 has no interfaces?
[  224.127355][ T2148] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  224.140289][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.150250][ T2148] usb 4-1: Product: syz
[  224.154536][ T2148] usb 4-1: Manufacturer: syz
[  224.161601][ T2148] usb 4-1: SerialNumber: syz
[  224.440088][ T2148] usb 4-1: config 0 descriptor??
[  224.907883][ T5882] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  225.021926][   T51] usb 4-1: USB disconnect, device number 15
[  225.028348][ T5879] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  225.057881][ T5882] usb 5-1: Using ep0 maxpacket: 32
[  225.064743][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.084662][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.107828][ T5882] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  225.116950][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.159280][ T5882] usb 5-1: config 0 descriptor??
[  225.189615][ T5879] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  225.199277][ T5879] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[  225.227834][ T5879] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[  225.237192][ T5879] usb 3-1: config 220 has no interface number 1
[  225.244717][ T5879] usb 3-1: config 220 interface 0 has no altsetting 0
[  225.260280][ T5879] usb 3-1: config 220 interface 76 has no altsetting 0
[  225.279238][ T5879] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.df
[  225.298313][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.306365][ T5879] usb 3-1: Product: syz
[  225.313542][ T5879] usb 3-1: Manufacturer: syz
[  225.322932][ T5879] usb 3-1: SerialNumber: syz
[  225.551670][ T5879] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  225.569662][ T5879] usb 3-1: No valid video chain found.
[  225.588824][ T5882] ft260 0003:0403:6030.0003: unknown main item tag 0x0
[  225.602355][ T5879] usb 3-1: USB disconnect, device number 10
[  225.868689][ T5882] ft260 0003:0403:6030.0003: chip code: 5e81 abf2
[  229.025893][ T8063] xt_hashlimit: max too large, truncated to 1048576
[  230.391015][ T5879] usb 5-1: USB disconnect, device number 11
[  232.455161][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.687924][ T1206] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  232.837892][ T1206] usb 3-1: Using ep0 maxpacket: 8
[  232.847112][ T1206] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  232.862354][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.907205][ T1206] usb 3-1: Product: syz
[  232.927468][ T1206] usb 3-1: Manufacturer: syz
[  232.961518][ T1206] usb 3-1: SerialNumber: syz
[  232.979183][ T8117] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  233.524582][ T8122] syz.3.649: attempt to access beyond end of device
[  233.524582][ T8122] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  233.540704][ T8122] (syz.3.649,8122,0):ocfs2_get_sector:1769 ERROR: status = -5
[  233.548392][ T8122] (syz.3.649,8122,0):ocfs2_sb_probe:749 ERROR: status = -5
[  233.555660][ T8122] (syz.3.649,8122,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  233.564428][ T8122] (syz.3.649,8122,0):ocfs2_fill_super:1178 ERROR: status = -5
[  233.953054][ T2148] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  233.979045][ T1206] usb 3-1: config 0 descriptor??
[  234.423260][ T1206] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  234.608554][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.619825][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.758163][ T2148] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  234.919882][ T2148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.757988][ T2148] usb 1-1: config 0 descriptor??
[  235.818813][ T2148] usb 1-1: can't set config #0, error -71
[  235.825985][ T2148] usb 1-1: USB disconnect, device number 12
[  236.081729][ T6009] hid-generic FFF8:0005:FFFFFFFD.0004: unknown main item tag 0x5
[  236.121567][ T6009] hid-generic FFF8:0005:FFFFFFFD.0004: unexpected long global item
[  236.155331][ T6009] hid-generic FFF8:0005:FFFFFFFD.0004: probe with driver hid-generic failed with error -22
[  236.165797][   T29] audit: type=1326 audit(1730883860.447:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8153 comm="syz.0.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7e7b7e719 code=0x0
[  236.591405][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.661'.
[  237.658428][ T8177] netlink: 'syz.2.664': attribute type 33 has an invalid length.
[  237.695872][ T8177] netlink: 152 bytes leftover after parsing attributes in process `syz.2.664'.
[  237.818383][ T1206] usb write operation failed. (-71)
[  237.839154][ T1206] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  237.868228][ T1206] dvbdev: DVB: registering new adapter (Terratec H7)
[  237.882163][ T1206] usb 3-1: media controller created
[  238.104647][ T8188] netlink: 64 bytes leftover after parsing attributes in process `syz.1.670'.
[  238.135832][ T1206] usb read operation failed. (-71)
[  238.148737][ T1206] usb write operation failed. (-71)
[  238.160096][ T1206] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  238.826728][ T8198] netlink: 'syz.0.667': attribute type 11 has an invalid length.
[  238.882054][ T1206] usb 3-1: USB disconnect, device number 11
[  239.148831][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'.
[  239.181619][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'.
[  239.464096][ T8208] SET target dimension over the limit!
[  239.541822][ T8214] FAULT_INJECTION: forcing a failure.
[  239.541822][ T8214] name failslab, interval 1, probability 0, space 0, times 0
[  239.568569][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.0.676 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  239.579438][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  239.589545][ T8214] Call Trace:
[  239.592851][ T8214]  <TASK>
[  239.595801][ T8214]  dump_stack_lvl+0x241/0x360
[  239.600516][ T8214]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.605748][ T8214]  ? __pfx__printk+0x10/0x10
[  239.610373][ T8214]  ? ref_tracker_alloc+0x332/0x490
[  239.615532][ T8214]  should_fail_ex+0x3b0/0x4e0
[  239.620258][ T8214]  ? skb_clone+0x20c/0x390
[  239.624707][ T8214]  should_failslab+0xac/0x100
[  239.629423][ T8214]  ? skb_clone+0x20c/0x390
[  239.633866][ T8214]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  239.639279][ T8214]  skb_clone+0x20c/0x390
[  239.643573][ T8214]  __netlink_deliver_tap+0x3cc/0x7c0
[  239.648900][ T8214]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.654142][ T8214]  netlink_deliver_tap+0x19d/0x1b0
[  239.659329][ T8214]  netlink_unicast+0x7c4/0x990
[  239.664128][ T8214]  ? __pfx_netlink_unicast+0x10/0x10
[  239.669468][ T8214]  ? __virt_addr_valid+0x183/0x530
[  239.674615][ T8214]  ? __check_object_size+0x48e/0x900
[  239.680200][ T8214]  netlink_sendmsg+0x8e4/0xcb0
[  239.685028][ T8214]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.690355][ T8214]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.695669][ T8214]  __sock_sendmsg+0x221/0x270
[  239.700375][ T8214]  ____sys_sendmsg+0x52a/0x7e0
[  239.705209][ T8214]  ? __pfx_____sys_sendmsg+0x10/0x10
[  239.710582][ T8214]  __sys_sendmsg+0x292/0x380
[  239.715204][ T8214]  ? __pfx___sys_sendmsg+0x10/0x10
[  239.720366][ T8214]  ? __pfx_vfs_write+0x10/0x10
[  239.725189][ T8214]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  239.731570][ T8214]  ? do_syscall_64+0x100/0x230
[  239.736371][ T8214]  ? do_syscall_64+0xb6/0x230
[  239.741085][ T8214]  do_syscall_64+0xf3/0x230
[  239.745621][ T8214]  ? clear_bhb_loop+0x35/0x90
[  239.750332][ T8214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.756276][ T8214] RIP: 0033:0x7fe7e7b7e719
[  239.760807][ T8214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.780447][ T8214] RSP: 002b:00007fe7e8a25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.788905][ T8214] RAX: ffffffffffffffda RBX: 00007fe7e7d35f80 RCX: 00007fe7e7b7e719
[  239.797091][ T8214] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[  239.805094][ T8214] RBP: 00007fe7e8a25090 R08: 0000000000000000 R09: 0000000000000000
[  239.813299][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.821324][ T8214] R13: 0000000000000000 R14: 00007fe7e7d35f80 R15: 00007ffdceeb34c8
[  239.829513][ T8214]  </TASK>
[  239.850299][ T8214] bond2: entered promiscuous mode
[  239.855469][ T8214] bond2: entered allmulticast mode
[  239.861082][ T8214] 8021q: adding VLAN 0 to HW filter on device bond2
[  239.921239][ T8221] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0
[  239.957803][ T2148] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  240.134557][ T2148] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.191426][ T2148] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  240.203395][ T2148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.211880][ T2148] usb 2-1: Product: syz
[  240.225211][ T2148] usb 2-1: Manufacturer: syz
[  240.237825][ T2148] usb 2-1: SerialNumber: syz
[  240.410649][ T8214] bond2 (unregistering): Released all slaves
[  241.340032][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.684'.
[  241.873339][ T2148] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  241.881898][ T2148] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  241.891759][ T2148] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  242.386935][   T29] audit: type=1326 audit(1730883866.737:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8210 comm="syz.1.675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f209757e719 code=0x0
[  242.716382][ T8265] netlink: 'syz.3.688': attribute type 11 has an invalid length.
[  243.277845][ T2148] cdc_ncm 2-1:1.0: setting tx_max = 88
[  243.292370][ T2148] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  243.417867][ T2148] usb 2-1: USB disconnect, device number 14
[  243.424668][ T2148] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  243.550491][ T8269] ipvlan0: entered promiscuous mode
[  243.599215][ T2148] ------------[ cut here ]------------
[  243.604703][ T2148] ODEBUG: free active (active state 0) object: ffff88805fdd51a0 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xc20
[  243.658559][ T2148] WARNING: CPU: 1 PID: 2148 at lib/debugobjects.c:517 debug_print_object+0x17a/0x1f0
[  243.668476][ T2148] Modules linked in:
[  243.672671][ T2148] CPU: 1 UID: 0 PID: 2148 Comm: kworker/1:2 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  243.684035][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  243.694480][ T2148] Workqueue: usb_hub_wq hub_event
[  243.699658][ T2148] RIP: 0010:debug_print_object+0x17a/0x1f0
[  243.705513][ T2148] Code: e8 0b 4a 40 fd 4c 8b 0b 48 c7 c7 20 3e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 0b 9d 9a fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 24 dc 60 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
[  243.725251][ T2148] RSP: 0018:ffffc90004b9f238 EFLAGS: 00010282
[  243.731403][ T2148] RAX: dab1eb45e3396800 RBX: ffffffff8c09f440 RCX: 0000000000100000
[  243.739691][ T2148] RDX: ffffc900168a8000 RSI: 000000000001453b RDI: 000000000001453c
[  243.747759][ T2148] RBP: ffffffff8c603fa0 R08: ffffffff8155d222 R09: fffffbfff1cf9fd0
[  243.755805][ T2148] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: 0000000000000000
[  243.763923][ T2148] R13: ffffffff8c603eb8 R14: dffffc0000000000 R15: ffff88805fdd51a0
[  243.766337][ T8273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.771999][ T2148] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  243.772043][ T2148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  243.798034][ T2148] CR2: 00007f02d4e656c0 CR3: 00000000652ea000 CR4: 00000000003526f0
[  243.806051][ T2148] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  243.814142][ T2148] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  243.822223][ T2148] Call Trace:
[  243.825537][ T2148]  <TASK>
[  243.828707][ T2148]  ? __warn+0x168/0x4e0
[  243.832907][ T2148]  ? debug_print_object+0x17a/0x1f0
[  243.838221][ T2148]  ? report_bug+0x2b3/0x500
[  243.842747][ T2148]  ? debug_print_object+0x17a/0x1f0
[  243.848170][ T2148]  ? handle_bug+0x60/0x90
[  243.852550][ T2148]  ? exc_invalid_op+0x1a/0x50
[  243.857267][ T2148]  ? asm_exc_invalid_op+0x1a/0x20
[  243.862474][ T2148]  ? __warn_printk+0x292/0x360
[  243.863374][ T8273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.867254][ T2148]  ? debug_print_object+0x17a/0x1f0
[  243.867287][ T2148]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  243.867308][ T2148]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  243.894774][ T2148]  debug_check_no_obj_freed+0x45b/0x580
[  243.900463][ T2148]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  243.906579][ T2148]  ? ref_tracker_dir_exit+0x1fa/0x550
[  243.912054][ T2148]  ? devres_release_all+0x1eb/0x250
[  243.917309][ T2148]  ? device_release+0x99/0x1c0
[  243.922175][ T2148]  kfree+0x11f/0x440
[  243.926087][ T2148]  ? __pfx_netdev_release+0x10/0x10
[  243.931348][ T2148]  device_release+0x99/0x1c0
[  243.935991][ T2148]  kobject_put+0x22f/0x480
[  243.940563][ T2148]  usb_unbind_interface+0x25e/0x940
[  243.945822][ T2148]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  243.951825][ T2148]  ? __pfx_usb_unbind_interface+0x10/0x10
[  243.957586][ T2148]  device_release_driver_internal+0x503/0x7c0
[  243.963762][ T2148]  bus_remove_device+0x34f/0x420
[  243.968921][ T2148]  device_del+0x57a/0x9b0
[  243.973286][ T2148]  ? kobject_put+0x272/0x480
[  243.977985][ T2148]  ? __pfx_device_del+0x10/0x10
[  243.983048][ T2148]  ? kobject_put+0x44d/0x480
[  243.987989][ T2148]  usb_disable_device+0x3bf/0x850
[  243.993073][ T2148]  usb_disconnect+0x340/0x950
[  243.997873][ T2148]  hub_event+0x1ebc/0x5150
[  244.002348][ T2148]  ? debug_object_deactivate+0x2d5/0x390
[  244.008108][ T2148]  ? __pfx_hub_event+0x10/0x10
[  244.012927][ T2148]  ? __pfx_lock_acquire+0x10/0x10
[  244.018108][ T2148]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  244.024974][ T2148]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  244.031379][ T2148]  ? process_scheduled_works+0x976/0x1850
[  244.037106][ T2148]  process_scheduled_works+0xa63/0x1850
[  244.042834][ T2148]  ? __pfx_process_scheduled_works+0x10/0x10
[  244.049319][ T2148]  ? assign_work+0x364/0x3d0
[  244.053960][ T2148]  worker_thread+0x870/0xd30
[  244.058673][ T2148]  ? __kthread_parkme+0x169/0x1d0
[  244.064667][ T2148]  ? __pfx_worker_thread+0x10/0x10
[  244.069929][ T2148]  kthread+0x2f0/0x390
[  244.074331][ T2148]  ? __pfx_worker_thread+0x10/0x10
[  244.079598][ T2148]  ? __pfx_kthread+0x10/0x10
[  244.085091][ T2148]  ret_from_fork+0x4b/0x80
[  244.089982][ T2148]  ? __pfx_kthread+0x10/0x10
[  244.094607][ T2148]  ret_from_fork_asm+0x1a/0x30
[  244.099509][ T2148]  </TASK>
[  244.102959][ T2148] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  244.110273][ T2148] CPU: 1 UID: 0 PID: 2148 Comm: kworker/1:2 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[  244.121151][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  244.131238][ T2148] Workqueue: usb_hub_wq hub_event
[  244.136307][ T2148] Call Trace:
[  244.139612][ T2148]  <TASK>
[  244.142565][ T2148]  dump_stack_lvl+0x241/0x360
[  244.147278][ T2148]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.152510][ T2148]  ? __pfx__printk+0x10/0x10
[  244.157128][ T2148]  ? _printk+0xd5/0x120
[  244.161318][ T2148]  ? __init_begin+0x41000/0x41000
[  244.166377][ T2148]  ? vscnprintf+0x5d/0x90
[  244.170735][ T2148]  panic+0x349/0x880
[  244.174640][ T2148]  ? __warn+0x177/0x4e0
[  244.178796][ T2148]  ? __pfx_panic+0x10/0x10
[  244.183209][ T2148]  ? show_trace_log_lvl+0x3b2/0x410
[  244.188419][ T2148]  ? ret_from_fork_asm+0x1a/0x30
[  244.193366][ T2148]  __warn+0x34b/0x4e0
[  244.197347][ T2148]  ? debug_print_object+0x17a/0x1f0
[  244.202544][ T2148]  report_bug+0x2b3/0x500
[  244.206878][ T2148]  ? debug_print_object+0x17a/0x1f0
[  244.212079][ T2148]  handle_bug+0x60/0x90
[  244.216237][ T2148]  exc_invalid_op+0x1a/0x50
[  244.220738][ T2148]  asm_exc_invalid_op+0x1a/0x20
[  244.225584][ T2148] RIP: 0010:debug_print_object+0x17a/0x1f0
[  244.231387][ T2148] Code: e8 0b 4a 40 fd 4c 8b 0b 48 c7 c7 20 3e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 0b 9d 9a fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 24 dc 60 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
[  244.251079][ T2148] RSP: 0018:ffffc90004b9f238 EFLAGS: 00010282
[  244.257148][ T2148] RAX: dab1eb45e3396800 RBX: ffffffff8c09f440 RCX: 0000000000100000
[  244.265125][ T2148] RDX: ffffc900168a8000 RSI: 000000000001453b RDI: 000000000001453c
[  244.273096][ T2148] RBP: ffffffff8c603fa0 R08: ffffffff8155d222 R09: fffffbfff1cf9fd0
[  244.281081][ T2148] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: 0000000000000000
[  244.289051][ T2148] R13: ffffffff8c603eb8 R14: dffffc0000000000 R15: ffff88805fdd51a0
[  244.297300][ T2148]  ? __warn_printk+0x292/0x360
[  244.302076][ T2148]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  244.308070][ T2148]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  244.313962][ T2148]  debug_check_no_obj_freed+0x45b/0x580
[  244.319514][ T2148]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  244.325577][ T2148]  ? ref_tracker_dir_exit+0x1fa/0x550
[  244.330948][ T2148]  ? devres_release_all+0x1eb/0x250
[  244.336156][ T2148]  ? device_release+0x99/0x1c0
[  244.340924][ T2148]  kfree+0x11f/0x440
[  244.344815][ T2148]  ? __pfx_netdev_release+0x10/0x10
[  244.350018][ T2148]  device_release+0x99/0x1c0
[  244.354614][ T2148]  kobject_put+0x22f/0x480
[  244.359066][ T2148]  usb_unbind_interface+0x25e/0x940
[  244.364380][ T2148]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  244.370105][ T2148]  ? __pfx_usb_unbind_interface+0x10/0x10
[  244.375822][ T2148]  device_release_driver_internal+0x503/0x7c0
[  244.381909][ T2148]  bus_remove_device+0x34f/0x420
[  244.386857][ T2148]  device_del+0x57a/0x9b0
[  244.391279][ T2148]  ? kobject_put+0x272/0x480
[  244.395878][ T2148]  ? __pfx_device_del+0x10/0x10
[  244.400729][ T2148]  ? kobject_put+0x44d/0x480
[  244.405329][ T2148]  usb_disable_device+0x3bf/0x850
[  244.410361][ T2148]  usb_disconnect+0x340/0x950
[  244.415057][ T2148]  hub_event+0x1ebc/0x5150
[  244.419508][ T2148]  ? debug_object_deactivate+0x2d5/0x390
[  244.425188][ T2148]  ? __pfx_hub_event+0x10/0x10
[  244.429949][ T2148]  ? __pfx_lock_acquire+0x10/0x10
[  244.434976][ T2148]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  244.440985][ T2148]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  244.447351][ T2148]  ? process_scheduled_works+0x976/0x1850
[  244.453087][ T2148]  process_scheduled_works+0xa63/0x1850
[  244.458666][ T2148]  ? __pfx_process_scheduled_works+0x10/0x10
[  244.464656][ T2148]  ? assign_work+0x364/0x3d0
[  244.469257][ T2148]  worker_thread+0x870/0xd30
[  244.473946][ T2148]  ? __kthread_parkme+0x169/0x1d0
[  244.478981][ T2148]  ? __pfx_worker_thread+0x10/0x10
[  244.484103][ T2148]  kthread+0x2f0/0x390
[  244.488167][ T2148]  ? __pfx_worker_thread+0x10/0x10
[  244.493281][ T2148]  ? __pfx_kthread+0x10/0x10
[  244.497893][ T2148]  ret_from_fork+0x4b/0x80
[  244.502346][ T2148]  ? __pfx_kthread+0x10/0x10
[  244.506955][ T2148]  ret_from_fork_asm+0x1a/0x30
[  244.511754][ T2148]  </TASK>
[  244.515063][ T2148] Kernel Offset: disabled
[  244.519437][ T2148] Rebooting in 86400 seconds..