last executing test programs:

35.20281491s ago: executing program 0 (id=334):
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) (async)
ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000080)) (async)
io_setup(0x8, &(0x7f00000000c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x57, r0, &(0x7f0000000100)="c185f14d2b607ed07bd49a9b378f487ea5054c9f26689f0be4d6ebf5ec689fdbd321c0054029ac0f4317978cbdb78fc48e05092a0ff2a16cd86e01f1299067892cdf939adfb8442be14a36096b8c547a7d70e4a8bae2fbab4c31c036d5de69c135f8e0991cf33d5424e6f5b9f91d7f615943dec873f842aa278cc933e0b3b9b7393f044cf00b8e4252c957996ebc831981381e0f8ce7d1488171a66896f18a159b30c1e6fb540d4c31894a53c4", 0xad, 0x6, 0x0, 0x1, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xff, r0, &(0x7f0000000200)="92423d4d75e0ae4456a1d4da0c5267be5a6a82783205cedcb206fcf33ac50256cbb80b28b5d5da9f0285b92bceff5b4a881b97605e9a3c16b6a035fc3622", 0x3e, 0x2, 0x0, 0x1}]) (async)
r2 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x100)
r3 = geteuid()
quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, r3, &(0x7f0000000300)={0x2f208c61, 0xd, 0x1, 0x2})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r2, 0x0, 0x9, &(0x7f0000000340)='/dev/bsg\x00'}, 0x30)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async)
setuid(r3)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000003c0)=0x4)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x10800, 0x0) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x400, 0x70bd25, 0x8, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40014) (async)
read$FUSE(r2, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
write$P9_RGETATTR(r2, &(0x7f00000025c0)={0xa0, 0x19, 0x1, {0xaa, {0x18, 0x4}, 0xa6, r3, r6, 0x5f, 0x23, 0x7, 0xffff, 0xfffffffffffffff9, 0x0, 0xfffffffffffffff7, 0xfb8, 0x7, 0x8, 0x4, 0x0, 0x10001, 0x6}}, 0xa0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000002680)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x627, 0xa, 0x21b711a2, 0x7fffffff, 0x5, 0x1570}, {0x5, 0x7, 0x7fffffffffffffff, 0x400000000000000, 0x3, 0x7fffffffffffffff}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000029c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002880)=""/33, 0x21, 0x1, &(0x7f00000028c0)=""/225, 0xe1}, &(0x7f0000002a00)=0x40)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000002a40)={0x6, 0x4, 0x7aa, 0x2, 'syz0\x00', 0x101})
ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000002a80)="9790435331d2e24f0692704bce9d71ffedfb7abfa9b595ea6e51beb74e2226a322037d29c340eec97510c808a1b809c948893e448b8c4c794980ab129e6eeda409918c484aa1c961c9a6c65b923a0b89519ccea4d71a698ff4d02d32299316dffcd2542720abd66fa74ac0be661ae38e97da029f82358efbe8b16cd7ccde05e6c62a197eac8bbb1df6a7c87522dc5ddeceb93b")
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002b40)='ip6erspan0\x00', 0x10) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x4a03c0, 0x1be, 0x28}, 0x18) (async)
r8 = syz_io_uring_setup(0x2be0, &(0x7f0000002c00)={0x0, 0xa854, 0x20, 0x1, 0x57, 0x0, r4}, &(0x7f0000002c80), &(0x7f0000002cc0))
syz_io_uring_setup(0x7c28, &(0x7f0000002d00)={0x0, 0x7938, 0x2, 0x2, 0x186, 0x0, r8}, &(0x7f0000002d80), &(0x7f0000002dc0)) (async)
preadv2(r8, &(0x7f0000002e80)=[{&(0x7f0000002e00)=""/116, 0x74}], 0x1, 0x9, 0x0, 0x12)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002ec0)={'veth0_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
sendmsg$alg(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000002f00)="8b1347577e23d75eca5771f097f95c3f67bcd9f8dfa8ada555f54a907f10714887dde12dbdf37940c8b559b7b9979d1d4baff51e2f4dbc23ccfeb5e01b920c4b2a49635fa447ebdcda770a803fb5908f2ee3822db61b14195c40c7a3c718fdb4e62186830ec1f9936a2ff90c99f772bede846537d621ae031e62b93ee1160eb9ecd77b93bcceb5455bddf4120e658c200053320600d97cc6aa2be92edcc4af78a18eedbf353654db8ad01de61b6e23f9484132acc0416a3ee866c968eb6c81b68b5dab3cc31a8671e1bf8ed9860874c24e32c238c66d7f57d634406393ac2426c89091943fe40e13c2dc7f833c4296960e22", 0xf2}, {&(0x7f0000003000)="79705ab73d3cd48b7ee633baf7530b89fe37a427a76aab6331c26d0df5a23b28ac5500f1e1376ec3eb217ceb3e2c80439f6613bf3883e26b81aff37d15d8cade2acb461ece9b20e2d3154aa806cdebc6f7c3deff29dd839a561f8a084a154dac327ec6e6e8148341879949f7563e3eacc8ce33cfb378e0bb0fd1a330cae2428d5a87aa6c4f4494614e153ee97de3824563efe7aecd7f3ff314af838a8f13d0ed3546b47a4a0b16f5c7a37de1a03616ea035ed34e0e49be7b9b489a83489ac57ea65c3482d065ea3174e2296893df331dcc4a40c04513559c4663f8e684bce3f704afb0e532d60d38e710bcf493fabcbff99f7279e1d3f3", 0xf7}, {&(0x7f0000003100)="7a6a6db724a9b4cc1edd2b6fed14b9778d45fbdb6a0b7bf2128f889865020f37618ff029fd462c4285341332f75f7cca5f45d76951033160649d327165682674c4440a6d4886b5aa39cafaeb8834760384a4f18da7289a731adee9c88ebecbeb433ceaea05c7d8e35fbf59f040a23149aa9d4fa293718490491e58d8ac7d9ec70005d04e1de6596d23281a44f8f02d58598011f79f35079b4f5fc606fd2cff6b60eedf9c12cf0186bbe663ae9ad1005fdacdeeefb818d811202c84ca4bcc8657d16064ceed31fe1cbb1415b111d7784f2fbc0acba886773ac6647cdcffe2a3", 0xdf}, {&(0x7f0000003200)="cecab655cccf69a27983f46baa0050cf611779b2ac4a0a8ed945e573c408110f2699fb963cc0499e6210afb8d1e48108582ded5afe9056eefa118b5b37b2c0cf78a79bab75b9db7958f083d284c6c3be3b2cec18cd9d2444c2edb9ffd33e1892070f30be82893699de9605118d4c3c55d69ead2d95c86d16497d28cacb0d11a7cfae842099f42b581abd530da5ffa53a8ff57403fe7d0b0629045372649f569f408bcb3fc785822a55c69c979f1a", 0xae}, {&(0x7f00000032c0)="5191bd4c6d2d5cacfcb0799f20d66f59dcd6ca004db91efbe6e9d0424a1467bccb620a93e086e5c3e649f0f18a6825e23c9b", 0x32}, {&(0x7f0000003300)="f80940080cd365cf4e289fa27bb50031eb6f8cf56d21a81b7ff99e4c59030e22a615a8113e4df8e21c3d91500f1944b37d3721b877081b2e8bdfe33204aef861c4549af03bac1642eab2453d83fef50f0e58e8218b4b016b68c9a31dab93b632132754e542003d601b53afacc568f6b57a218cae8dca357cac477b1e24f1c77e82571acf25a1108f32ac8cc4cf2a5ef503186cd2b871f108b7a90dfa4862f9", 0x9f}, {&(0x7f00000033c0)="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", 0x1000}], 0x7, &(0x7f0000004440)=[@iv={0x110, 0x117, 0x2, 0xf6, "523d2c88be7fa318fd33d48e055d8861be32e208e8d31e3adcb80d1be2a420b67031b7d89196de13b99b911a8766d53dec0cbce278f32f79bc605fe0fab1e3b4c61b02b808939964089eba8212fe2c6ef4f0a77ab9065d6347cef1dad470000354f106ed9bd9e66b761a8582e0803359f4b5e0db115db456776ecc5f9ea629d3cd63ed26e2b75c9cff46b05b05ab916c7a91a636b530f10171afd517d8a17dcce5ea946c0d086baa24da75ee7ab81fe810d365889cc04e9d5b66061f64738cef926822993087e4e93d1c909a32d36a653bfb4c04f4e3afc757a06bc21f1c9a74641812695c803fe20766173d6420e57915744fdf7ac6"}], 0x110, 0x4040041}, 0x20000040)

34.90574372s ago: executing program 1 (id=340):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0), 0xfec8)
recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

34.766642517s ago: executing program 1 (id=344):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207f400020000002cbd700002dbdf25", @ANYRES64=r0, @ANYRES8], 0x10}}, 0x40000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x8, 0x4, 0xffffffc1, 0x4}}, 0x20)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
futex(0x0, 0x86, 0x0, &(0x7f00000002c0), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
shmdt(0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e0014000000000000000000008000"}})
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x58}}, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74fc6820fc3a1409b4500000900"})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e002803008c71ef288563"], 0xffdd)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x81)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)

34.535582475s ago: executing program 0 (id=347):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x8000)

33.780470331s ago: executing program 0 (id=349):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff020400000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) (fail_nth: 17)

33.312401932s ago: executing program 0 (id=353):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000006840)='./file1\x00', &(0x7f0000006880), 0x1868c, &(0x7f0000006900)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}})

32.855142966s ago: executing program 0 (id=354):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x80000, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000001f00)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="0c5fc04f", 0x4}], 0x1}], 0x1, 0x2000c884)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x0, 0x11, 0xe8, {0xe8, 0xc, "7aec231be407333875fca64ae85c1b919f74b6d123406640f9a7f045f82dc5c92a9a4cb45cb33bba4ae443c408b8abe472aad17842ce6f5bd46ce0d17660bacc1883feae4b236cd19141ac2e9552a642defe2b29033816c9d8e102f45d585ea7f262b7e8479ae1cdbdb0f242cc5600f598e1b1102214bf2bfcaa2ccf4db331c3e7f8ba6dd2ac25d12848a41862ce5e3bfbb5b1aa4579af66045b45437961bb2d6906e5739f80336737227ce3a4f7ef41661fb05a9ba050d0f7f6506f388b4afecda21feaebb9e76dd6075b92f693b5a0b3aecc1efcfb2df75daf6945a74b25c71b1ab982ad51"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000000240)={0x0, 0x22, 0x1e, {[@global=@item_012={0x1, 0x1, 0x4, "b9"}, @main, @global=@item_4={0x3, 0x1, 0x9, "9ed35061"}, @main=@item_012={0x1, 0x0, 0xb, ':'}, @local=@item_4={0x3, 0x2, 0x8, "d6444708"}, @local=@item_4={0x3, 0x2, 0x9, "0224c8b4"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x1, 0x2, 0x4, 'o'}, @local=@item_4={0x3, 0x2, 0x9, "e9b8a540"}, @main=@item_012={0x1, 0x0, 0xb, "f6"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x40f}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x0, 0x12, "3f482d22ffcb2ea6ca660a675f89ec09d826"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x1, 0x2, "0e83"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}})
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a0000000000000000000000000000000000000000003a0100000000200002000a00"], 0x6c}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5f, 0xfffffffe, 0x0, 0xfffffff6}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x25dfdbfd, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0)

29.261363456s ago: executing program 1 (id=361):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000d040000ff030000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002000128009000100766c616e00000000100002800c0002000b0000001e"], 0x40}}, 0x0)
syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0)
read$FUSE(r3, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000000c0)={{0x3, 0x0, 0x80000001, 0x1000}, 0x6, 0x30, 0x1, r4, 0x3, 0x2, 'syz0\x00', &(0x7f0000000000)=['-\x00', '/dev/snd/controlC#\x00', 'cpuset.effective_mems\x00'], 0x2b})
sync()

29.231918102s ago: executing program 0 (id=363):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0xfeff, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff020400000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0)

27.015134649s ago: executing program 1 (id=370):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x2a, 0x821, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0xe}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1=0x1ac0f00}]}, 0x20}, 0x1, 0x3000000, 0x0, 0x11}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="340000002100010000000000000000000220200000000001040000000800010064010100080002"], 0x34}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88e82, 0x0)
close(r3)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x182403a, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "3951b38e"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4, @local=@item_4={0x3, 0x2, 0x2, "849b9173"}, @local=@item_012={0x2, 0x2, 0x1, "0100"}, @global, @local=@item_4={0x3, 0x2, 0x7, "fa9e274a"}, @local=@item_4={0x3, 0x2, 0x2, "dc3e0803"}, @global=@item_012={0x1, 0x1, 0x0, "a7"}]}}, 0x0}, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaabb6a2ddcf6177a0800450000700000000000069078ac1414bb9c52ac1414aa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7410000090780000080a0000000000000001fe10f9896080356e793ca9d55b8ef24e01050e04f6fea52eb715ea7022d662051a000000000000000000000000000000000000000000000000fe04f98900"], 0x0)

24.573382686s ago: executing program 1 (id=379):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x3a070a00) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) (async)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$FICLONE(r1, 0x40049409, r2)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200200, 0x10100, 0x1000000, 0x137}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0) (async)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0) (async)
unshare(0x60400) (async)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ppoll(&(0x7f0000000080)=[{r7, 0xa13b}], 0x1, 0x0, 0x0, 0x0) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x1, 0x100, 0x0) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@hyper}) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000000000730300000000000039000000000000001e09000000000000010000000000948af4e50a27450000"]) (async)
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) (async)
r9 = timerfd_create(0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) (async)
r10 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb2ad, 0x0) (async)
r11 = fsopen(&(0x7f00000007c0)='befs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000500)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xc0cM\x97<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\xc3z\xf2\xfc\xc8\x8d#\xce\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xf8\xff#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8\xa5^3v\xdb2\xcdB\xd9\xdby\xc25!\xae\x81\xde\t\x1e\xecy\xfa(D\x8d\x8d|Inv\n\xbb\\\vY.\xfa4R[\xcfI\xfa\x97\xb4N\xbd5^\xb9\x82\aB\xf8:\x1e\xea\xc8J\xc5|\x97\a}\x8f\xbd1\xb9\x1dH\xf5\xad\xee\xe0f\x10\xde\xae\xba\xa6\xaa\xa6\x11\xf8^\xb2\xb6<\xdb~54\b\n \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x18\v_Hp4R\xe9`F~\x1a\xad\xc9\xe7V\xeaA\xa5>\xa9E\x9f^\x1f\x17g]\xd2\x8cX\x1dV\x15\x19!\xa5a\x93\xb7\xb8m\xe0\x87B\xd6\xf1\xd3/G\xbb_\x9b\xaf\xa5Sb\xbf\xf7\xd5\x1b\xf2\xc9\xb2r\xee\xb5G\xa8\x87\x1b\x7f\x13\xb4\xf4v\x16\xdey\x89\x04x\xfcFV}\xeb\xf4\x127\xd6\xe1\xb6\x01\xf8\x0e&NE\x113\x95\xccP\xeb@!\xca\x89\xed/0\x01\xa5\xe0\xa8(\xa0\xcd\xb5-\xd3\x8a\xdd\xee\xa86\x19\x10]\x93\xa3k\t{\x938\xbbV\x87^;\x94\xce\xb2$\x96\xd3\xf1\xef:\xf50H\xbb\xd1<\xd3\xe4W\xeb.\xe4{\xe1\xe2c\a\xbf\xc4G\xbe\xfe\x9c\x97\xe0\xc3\x18\xf3\xd6\xdbA6\xf0|\xd8\xef\xd0%\x9a\xd0\xc7\xcf<\x05^\x82\xa7_u\x97\xe4(\x9dz', &(0x7f0000000280)='so\x02kfs\x00H~\xef\x92\x83tc\x84\xfa11\x1a\x11\xb2\xcd\xb7\b\x89g\xf2#K\x95\xa6\xaew\xd2\x82\xfa\x83\xd1\xbd\xfd($\x9b5\x92\x12\vDP\xb8\xda\xff\xc8e.\xe3\xc3\x91\x96\x7f\xbfI`\xd8{\x0f\xc8P{\x92\xe8f\x8c]\f+', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0xc0045540, &(0x7f0000000080)) (async)
timerfd_gettime(r9, 0x0)

24.572789611s ago: executing program 4 (id=380):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500007400000000000190780a010101ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830329070300443c00030a010188000000000000000000000000e000000200000000ac1414bb00000000ff4142ba73babd2e7b010100"/130], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212"], 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007"], 0x70}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000740)="db01", 0x2}], 0x1}, 0x41)
syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_usb_connect(0x3, 0x198, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x8000000, &(0x7f0000000900), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x2, 0x8}}, 0x20)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0})

23.116117757s ago: executing program 4 (id=382):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f00000006c0)=""/241, 0xf1}], 0x2, &(0x7f0000001800)=""/4096, 0x1000}, 0x835a}], 0x1, 0x142, 0x0)
shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000017c0)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
timer_create(0x4, &(0x7f0000066000)={0x0, 0x1b, 0x0, @thr={&(0x7f0000000580)="5b7518b687018aa8c5", &(0x7f00000007c0)="164830c5078b38e948aec81c97ef89e52c0d84fbf11b90675d9c00f5e8b951e850deb3f574a2e333753d89d1dc38f97d522ed4c682022a5a2f36a8d6054bb9bf3cf21c3f3f91a023ca776c61174dff79fd73f713834b45d26cae47b3"}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r5=>0x0)
nanosleep(&(0x7f0000000000)={0x77359400}, 0x0)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x4000000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @private1, 0xfffffffd}, 0x1c)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000204000000000000000020266c95e71a434500009a0d1a4cb200000000020000000000000802000000000000000000d20000e45b5e3fe216c621be060eaeb9c1"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
lsetxattr$trusted_overlay_origin(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0xb, 0x148, 0x0, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0xa0, 0x108, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0)

21.69218105s ago: executing program 1 (id=385):
write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0x8000000000000d2, 0x20, 0x9, 0x20, 0x200000000a}, 0x48)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0), 0xfec8)
recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000c9ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

19.589547771s ago: executing program 4 (id=390):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594", 0xf}], 0x1}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
dup(r2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x2131c100, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000200), 0x208e24b)
syz_usb_control_io(r3, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x20, 0x30, 0x87, {0x87, 0xe, "9e7dd764623ccc53f6f7b3bb8a9503f3829a2fd955904dde26a58d7cd81c1317b2fc6c78e96dc8b3f86ccc0c1954ee772332ade077c280602cbc8dcbbf39f09de6ab437082be79c023899bb6d78bf5ab494b1d419011e258074e284558cdd1b3d32783658243e2d951d59cb7634666e081d2e69a15ca945a044026b9f0139b162886a51d7c"}}, &(0x7f00000004c0)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "f38c4fa5d579482b17544a6047434d8574448010f106e313a67b315d0c276eb1b91860b52eaf7da15ff11c8067bd9b5d5897ca4fc26033f24b3d05dd76b77e02d0362d44d95def3f0c3d5a00073cbfdd6d236d5a593db8c76bc386da681c71d83e6c38c80944025fcbd2d998a6837e90469359f23f75310e41d91ed13631828c13183a838b73a82cd1116800fe1464c5cd38d35da3fb1b0d7b6447"}}, &(0x7f0000000100)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x32, 0xf, 0x9, 0x40, 0x3}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x7, 0x5, "8235cf5d", "a11c02e4"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x1, 0x1, 0x7, 0x9, 0x8}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "b6c7"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6, @random="6d7d62dce283"}, &(0x7f0000000980)={0x40, 0x19, 0x2, "fa07"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xa9}, &(0x7f0000000a00)={0x40, 0x1c, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x4d}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x1}})
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x800000000000000)

14.871638085s ago: executing program 3 (id=397):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200108"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073"], 0xb4}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c000180090001006861736800000000180002800800074000000001080002400000000008000440000000000900010073797a30000000"], 0x84}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r6=>0x0})
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r6, 0x3d, r3}, 0x10)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x3a, 0x2, 0x0, 0x52)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r8 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
close(0x3)
accept4(r7, 0x0, 0x0, 0x0)

13.754973303s ago: executing program 4 (id=398):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$kcm(0x10, 0x2, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0505405, &(0x7f0000000100)={0x3})
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
dup(r4)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90424fc605800024004000400060082c137153e", 0x23}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000140)=r9}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
r11 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000180)={0x4e, 0x1, 0x0, "0088f20000000000000000dfffffff95c1000000000000269800"})
setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, 0x0, 0x0)
r12 = syz_io_uring_setup(0x6246, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000080))
io_uring_enter(r12, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x110, r0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000e5c8cf40480b0d30a0ab00000001090212000100000000090400000001dd3900", @ANYRESDEC=r5, @ANYRES64=r7, @ANYBLOB="8639a151c739f46464611447bb5f1db625b4c366ea35aea9e21c45f651f7d7b667db656228d1216844c3"], 0x0)

12.043326662s ago: executing program 3 (id=402):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_a, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3e}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x0)

11.529298085s ago: executing program 3 (id=403):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48, 0x0, 0x100000005}]})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r3}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003ac0)="bb", 0x1}, {&(0x7f0000000280)}, {&(0x7f0000000380)="037176f3e156e627befe157d5047c183705d501cb7891c8e7f4be6e3407b6329ca427d9435662e5bd0a74f0f67895f0903413e48fd619a6311376924a9d75869733e2c9f770b2993e76b86c901b73e7bafed04a6ad6918e8233a1bc98afd87c436e3957814b0c047ff0916ad5a5e900fa7de082d4f9614427cef591e233d74fe010b2dd5b131f2a08ddc9113beefe15fe4d24e0afde319d008038b61472b9fd7955a47d67ae9819b1ee731f1a21663ea57139b9a07b4eb6b11b7cbae1d2c476a671bc6dcba9b59191c1b4cf31352ac1609d7df", 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000000080)="a365e029c6", 0x5}], 0x1, 0x0, 0x0, 0xffa6}}], 0x4, 0x60cd095)

10.504134337s ago: executing program 3 (id=404):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000001c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="980221b422406230761e375360cc790b5fd5ebf4059959bc8bc8af3384e0902a4fe02d5ad29a751b0238479ed846405aa63130c3f73a660a38c463bdb497800432872e327828c7e21b6ae0159ce77dc13e2913ff9407da49086096fed1e840d762fa46c02a632a5819a6eb69a59780c2b1a777dcc4b579292cc39fcc5196fbe29b36fa4c49d1d2f12494412ad4b480025662d2b094b4900ccb8e4f882618f50523672ead05479ae51a19d837802e1522f248c456bdf7", @ANYRES16=r1, @ANYRES32, @ANYBLOB='\b\x00]\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x0)
r4 = socket$isdn(0x22, 0x3, 0x23)
sendto$isdn(r4, &(0x7f0000000780)=ANY=[], 0x2b, 0x40400c0, &(0x7f00000001c0)={0x22, 0x1, 0xe7, 0xb5}, 0x6)
socket$netlink(0x10, 0x3, 0x14)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007fff970108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x40404c0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008084)
gettid()
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000000380), 0x0, 0x8)
r7 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
listen(r7, 0x80080400)
socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)

10.000518394s ago: executing program 4 (id=405):
syz_usb_connect(0x3, 0x2d, &(0x7f00000052c0)=ANY=[@ANYBLOB="12010003033dd608f80600b0a85d0102030109021b00010908b006090405090184435f070937a0030000c00300"], &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80000000002010400000000000002000a0000003c0001800c00028004000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000040000000000ffff000000003c0003800c00028005000100000000002c000180140003000000000014000400fe8000000000000000001772ee3b45e5186b55a0f948c900000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0xc8}}, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x13, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x97, 0x2c, 0x1, {0x22, 0x4e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x10, 0xf4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xb8, 0x2}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x2, 0x1, 0x2, 0xff, 0x6}, 0x64, &(0x7f00000002c0)={0x5, 0xf, 0x64, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x3, 0x2}, @generic={0x34, 0x10, 0xb, "321a27c5b04454b9bc17c9c76e84ba430f43fae9e1877055c99ccab2b090ba0b0ca46eab39562e5adef2cdfb4c521ac616"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x10, 0xff00, 0x49ff, [0x0, 0xff00, 0x60, 0xf, 0xffc00f, 0x3f00]}]}, 0x7, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x406}}, {0x61, &(0x7f0000000380)=@string={0x61, 0x3, "971a97991019a2701f76526c85c5e571fa5d8195184de05f37ebaec46bd0c90e37e42a471344d824328ec42fc99b12037188604fd37470b2afc81cf6b3b98de72a57dd46200ebc22a7f8a9fdd69517b334431b6c2b78d01fccbcf451ab595f"}}, {0x65, &(0x7f0000000400)=@string={0x65, 0x3, "c8518016ad3d8f8c666e2d7273b4bc8935007d921c29d866286de68015026c98e3e9cf5a4b99f4a1357992a85199a5c854d5ea0f2bceb77bff65c41ccb7e0d35b7e6e94e11e180eaab26a7eef200decb1f9dda18d4cbcd7957a9e15f62575323e5b9c4"}}, {0x33, &(0x7f0000000480)=@string={0x33, 0x3, "813c83be493355f47ca8dc1379e3d5aaf1e3413837ddcdada90a4ae6b12f62e1573aae3f55371f056ed631f72827d08fc3"}}, {0xd3, &(0x7f00000005c0)=@string={0xd3, 0x3, "934320a412a3d854c1be1c22f9a6acf0bff46fe117eb8056fd1aed46fe7b15f4bf4254884451de58d361c55f6c7ea5ccd11f1ffded14259ed44d1e448e8d2e9f664121f392d4c4c9bbda95ef614708d8169c54037553442743442c69407cc8b7d2531821f8b490c1d70796c2564dc62753c11a6456f94c8aa04b9b3bf90fd692c9a0d41c4a22d529a8a24502bdbf5874e4d2e6a522bf94ca59bd9a427c09d358a23184f22a44af62546f9a5dff3298e7c3e9ff51c61c6838a7312effdf6405bcc84c50d9e1e95bcfb4ae00c7ffaafb2d0a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x78, &(0x7f0000000500)=@string={0x78, 0x3, "9761b1162ea147966ff33b32fb4e02317dd230d7f6fe88c8875e1d7083ec9e153f2affa995f2c52d8763cd8f74861f58141edb8a80d575d98b7b9bd6b1723b974601b8934be36fe7d797d60eb6935adff6b309d26def218a882eb1ebdd6dc688620861b1b93aa67f49d65dcb00c22ebbd6643f8422a6"}}]})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x90, 0xf1, 0x9c, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x8004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="980000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/112], 0xb8}}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000200)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x6, 0x800, 0x5, {r4, r5/1000+10000}, {}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "2184619b8363ea1b"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
sendto(r6, &(0x7f0000000740)="b6f77395c99794c80911db3ad9494deba0f9812f9f3e8542d860d08d31f16e6606f289888711ba", 0x27, 0x20008000, &(0x7f0000000780)=@llc={0x1a, 0x336, 0x3, 0x6, 0x3, 0x2}, 0x80)

9.386530762s ago: executing program 3 (id=406):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @bt={0x200, 0x9, 0xfffffffd, 0x5ed, 0x1, 0xd, 0x19, 0x2}})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0xc0000, 0x322, 0x5, 0x7, 0x4, [{0x3ff, 0x400, 0x3, '\x00', 0x816}, {0x2, 0x9, 0xd, '\x00', 0x1000}, {0xd3, 0x3}, {0x2, 0x8, 0x4, '\x00', 0x480}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0)
vmsplice(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r5 = eventfd(0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r7 = eventfd(0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r7, 0x0, 0x2, r5})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0xa, @vbi={0xb5, 0xffffffff, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}})

8.048254079s ago: executing program 3 (id=408):
sync() (fail_nth: 4)

7.539400363s ago: executing program 4 (id=409):
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b2402"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmat(0x0, &(0x7f0000f75000/0x3000)=nil, 0x400c)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x20040000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
userfaultfd(0x80800)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010428bd7000fcdbdf2500000000f128905bc260c65aa07d0bfd96316ddb81c409afd6edc279c2adfe747837ca46a99ccebd463835fe79c68dde37e6cb1d1d3a282a7d17ee4f1a00a82f719d4374f9489579c2af5e1f4bab2ad63b38590a9099b67eead34f", @ANYRES32=0x0, @ANYBLOB="0042020000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)

2.477477733s ago: executing program 2 (id=410):
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x138}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2c00, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) (async)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20001010}, 0x20000800) (async)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x0) (async)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e72060900000005090212000100000000090400000002060000"], 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xecb6})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) (async)
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x3, 0x8000000000, 0x4001}) (async)
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000001c0)={0x28, 0x3, 0x0, 0x0, &(0x7f0000000180)='O', 0x1, 0x6})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000240)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000280)='O2', 0x2, 0xfffffffffffffffb}) (async)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001a0000082dbd7000fbdbdf251c8020f5ff00fd080010000005001a00030000001400120025009a827fc54d26bfb67494c0c51a200c0009000d001001", @ANYRES32=0x0, @ANYBLOB="0c00090008002007f53a58c68eb4211b2dd3453e7d9ee2bfbf2e53efed7186a3ef43a1fb7a38df51edba08aac06c526dabd121725946f522772f4e9130bac2cdcde04682ebd295cfc2b3dc811cdde9734a8613415734bea10f13690d7c8727ea094975c7a57f7aad4494f63f4558c8284fd3d53e73ad67457f3c8128b43bc13ab5668bf2f95234d7afe12c93a9d42fab8abf6b350f8963b9bc190566d0148f3f3934ba010724e0c5ccbfe81c0cc7a5dd1ecb1b0ca88e35b5dab34ea569", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/64, 0x40}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001900674c000000000000df00ff010000000000000000000000000001e000000100000000000000000000000800000000000400000a", @ANYRESDEC], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x4, 0x0, &(0x7f0000000400)=""/187, &(0x7f0000000600)=""/202, &(0x7f0000000700)=""/122, 0x1})

975.338293ms ago: executing program 2 (id=411):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x50)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c51283ff85d942f84066f3e7d2e6fb2fa8551ad8ae6142acd64f95aafa42885f75ac9e02880a13eac4e14a1337ebb25d7e707b07f15dcd069d4236752d10fc3293a275f6af4c8e67a928071dccbc723882e7da8c36b0b25e3fdd069594509dc8e8d2f7125959a13504ee38a020c8202b693c64fdfac49c9a57d82f664b728ad9c65f585057dcab90ac12c303cb782e8ca16530c24136bb7e1159867f75b639c074ac807bb5c71447be6047574e121c3dde8cdadf7aa6e67ff026cc2d6c7151da74a9c2192f7441df79a607cb5739776c5b73cffd9dbfb5afc9ea8abae29e8246850bd951eb6b89d2ff3620b1ed6f7c96cfe", @ANYBLOB=','])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r2 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2001, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x617}}, {@allow_other}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@hash}, {@flag='ro'}]}}, 0x1, 0x0, &(0x7f0000000480)="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")
move_mount(r2, &(0x7f0000000280)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0x301)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
close(r3)
landlock_create_ruleset(&(0x7f0000000500)={0x10, 0x1}, 0x10, 0x0)
write$FUSE_INIT(r3, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x1, @mcast1, 0x9}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="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", 0x2de}, {&(0x7f0000000800)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee0f236e7cb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a178919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f628ad5de745fc858b1f6166753b33ed6006a824210fd9e0dd9f23b88e3dcb2388a7311364fac143895932d4768ccb3e05871b3d5a0ef70da8eeceb8668bf67d24174de5a416b91b561733fad1096feaab1ecc5c0176df9b40b8c9c3515d0f15e6ad486ca058414f82d009f015521587860d3c39e28695b152872be1d833518c3a43cfc8e29961d03496ee5299f0ee78be5334b9453d308019bd8503e24cc079ed5827babe13a5073c243dfcbe082e71d14f03163fabb684e6f141642dc77776a3e414fb188", 0x2a7}], 0x2, 0x0, 0x0, 0x900}}], 0x2, 0x24000004)
readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/20, 0x14)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7)

665.187681ms ago: executing program 2 (id=412):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x378, 0x2e8, 0x2e8, 0x378, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x33}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x34, 0x2, 0x8, 0x3, 'syz1\x00', 'syz1\x00', {0x80000001}}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x1f8, 0x118, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xfe}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x6, 0x1, 0x9, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)

497.928805ms ago: executing program 2 (id=413):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4800, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10}}, 0x80}}, 0x0)

261.278111ms ago: executing program 2 (id=414):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x0, 0x0, 0x2028, r0, 0xd371, '\x00', 0x0, r0, 0x0, 0x1, 0x1, 0x8, @void, @value, @void, @value}, 0x48)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r2 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0)
dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_getnetconf={0x14}, 0x14}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x10)
write$sndseq(r3, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={@mcast1, @loopback, 0x19, 0x18}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605020a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c0007800800084000000020060004400000000006000540"], 0x64}, 0x1, 0x0, 0xa00}, 0x0)

0s ago: executing program 2 (id=415):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f00002dc000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
madvise(&(0x7f0000467000/0x4000)=nil, 0x4000, 0x17)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00004bb000/0x1000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x7d})
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)

kernel console output (not intermixed with test programs):

 device strings: Mfr=1, Product=2, SerialNumber=3
[   81.832587][    T8] usb 5-1: Product: ‫鶤蹆굶ﰓ娸䟬跛쿴Ἡ엵
[   81.868077][    T8] usb 5-1: Manufacturer: 䂦̓쀄馩䳚㪾뒵呛ꗬᬢᖂ�羺�૕쫺ﮇ��榕
[   81.937047][    T8] usb 5-1: SerialNumber: syz
[   82.346812][   T46] gspca_sonixj: reg_w1 err -71
[   82.351744][   T46] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[   82.396645][ T5588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.440520][   T46] usb 4-1: USB disconnect, device number 3
[   82.447644][ T5588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.530527][ T5588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.544897][ T5588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.619330][ T5600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.671487][ T5600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.777335][ T5286] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.787523][    T8] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8
[   82.801617][ T4671] bcm5974 5-1:1.0: could not read from device
[   82.812506][    T8] usb 5-1: USB disconnect, device number 12
[   82.945219][ T5286] usb 1-1: Using ep0 maxpacket: 16
[   82.963314][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.998920][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.040002][ T5286] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[   83.051459][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.069231][ T5286] usb 1-1: config 0 descriptor??
[   83.663272][ T5619] Failed to get privilege flags for destination (handle=0x0:0x0)
[   83.754891][ T5286] corsair 0003:1B1C:1B02.0003: unbalanced collection at end of report description
[   83.787367][ T5286] corsair 0003:1B1C:1B02.0003: parse failed
[   83.793348][ T5286] corsair 0003:1B1C:1B02.0003: probe with driver corsair failed with error -22
[   83.885714][ T5237] Bluetooth: hci0: command tx timeout
[   84.272660][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.473216][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.519791][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'.
[   84.555113][ T5626] netlink: 'syz.3.89': attribute type 12 has an invalid length.
[   84.562946][ T5626] netlink: 132 bytes leftover after parsing attributes in process `syz.3.89'.
[   84.668321][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.789033][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.824137][ T5632] netlink: 76 bytes leftover after parsing attributes in process `syz.2.91'.
[   85.276683][   T52] bridge_slave_1: left allmulticast mode
[   85.283069][   T52] bridge_slave_1: left promiscuous mode
[   85.294966][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.350897][   T52] bridge_slave_0: left allmulticast mode
[   85.392889][   T52] bridge_slave_0: left promiscuous mode
[   85.441479][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.526615][ T5644] ALSA: seq fatal error: cannot create timer (-22)
[   85.731013][ T5283] usb 1-1: USB disconnect, device number 4
[   85.974216][ T5237] Bluetooth: hci0: command tx timeout
[   86.034170][  T938] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   86.317694][  T938] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   86.326995][  T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.339478][  T938] usb 3-1: config 0 descriptor??
[   86.796739][  T938] usb 3-1: Cannot set MAC address
[   86.802064][  T938] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   86.875612][  T938] usb 3-1: USB disconnect, device number 4
[   87.068907][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.093895][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.122573][   T52] bond0 (unregistering): Released all slaves
[   87.152134][ T5654] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 !
[   87.186510][ T5596] chnl_net:caif_netlink_parms(): no params data found
[   87.270276][   T52] tipc: Left network mode
[   87.699280][ T5671] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   88.050942][   T29] audit: type=1326 audit(1728838896.415:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fe877dff9 code=0x0
[   88.072452][    C1] vkms_vblank_simulate: vblank timer overrun
[   88.080729][ T5237] Bluetooth: hci0: command tx timeout
[   88.176821][   T29] audit: type=1326 audit(1728838896.465:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.2.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f6fe877dff9 code=0x0
[   88.297361][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.312197][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.339922][ T5596] bridge_slave_0: entered allmulticast mode
[   88.372119][ T5596] bridge_slave_0: entered promiscuous mode
[   88.547965][   T52] hsr_slave_0: left promiscuous mode
[   88.578488][   T52] hsr_slave_1: left promiscuous mode
[   88.611737][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.640786][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.671874][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.696740][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.753151][   T52] veth1_macvtap: left promiscuous mode
[   88.772720][   T52] veth0_macvtap: left promiscuous mode
[   88.801877][   T52] veth1_vlan: left promiscuous mode
[   88.839083][   T52] veth0_vlan: left promiscuous mode
[   89.314391][ T5709] trusted_key: syz.4.108 sent an empty control message without MSG_MORE.
[   89.738326][ T5718] ALSA: seq fatal error: cannot create timer (-22)
[   89.772102][ T5719] netlink: 36 bytes leftover after parsing attributes in process `syz.3.109'.
[   90.146021][ T5237] Bluetooth: hci0: command tx timeout
[   90.224345][  T938] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   90.399525][  T938] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   90.444316][  T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.505432][  T938] usb 5-1: config 0 descriptor??
[   91.130122][  T938] usb 5-1: Cannot set MAC address
[   91.156437][  T938] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   91.225995][  T938] usb 5-1: USB disconnect, device number 13
[   91.385306][   T52] team0 (unregistering): Port device team_slave_1 removed
[   91.455178][   T52] team0 (unregistering): Port device team_slave_0 removed
[   92.314585][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.322014][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.329783][ T5596] bridge_slave_1: entered allmulticast mode
[   92.338100][ T5596] bridge_slave_1: entered promiscuous mode
[   92.481909][ T5759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.117'.
[   92.630552][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.653485][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.752206][   T29] audit: type=1326 audit(1728838901.115:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.2.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fe877dff9 code=0x0
[   92.782333][   T29] audit: type=1326 audit(1728838901.115:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.2.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fe877dff9 code=0x0
[   92.833377][ T5596] team0: Port device team_slave_0 added
[   92.990372][ T5596] team0: Port device team_slave_1 added
[   93.005315][ T5774] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 !
[   93.039000][ T5776] tipc: Started in network mode
[   93.059928][ T5776] tipc: Node identity 2e3a0000000000000000000000002d01, cluster identity 4711
[   93.076055][ T5776] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   93.215579][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.222611][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.248577][    C1] vkms_vblank_simulate: vblank timer overrun
[   93.268717][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.291159][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.305552][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.331456][    C1] vkms_vblank_simulate: vblank timer overrun
[   93.364668][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.600529][ T5596] hsr_slave_0: entered promiscuous mode
[   93.651901][ T5793] loop2: detected capacity change from 0 to 7
[   93.654524][ T5596] hsr_slave_1: entered promiscuous mode
[   93.671267][ T5793] Dev loop2: unable to read RDB block 7
[   93.685844][ T5596] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.690852][ T5793]  loop2: unable to read partition table
[   93.714231][ T5596] Cannot create hsr debugfs directory
[   93.724391][ T5793] loop2: partition table beyond EOD, truncated
[   93.751031][ T5793] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   93.775052][  T938] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   93.804481][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.828031][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.840435][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.850363][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.862561][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   93.871843][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.966598][ T2975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.980582][  T938] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   94.007916][  T938] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   94.018873][  T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.021278][ T5801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.131'.
[   94.027295][  T938] usb 1-1: Product: syz
[   94.040691][  T938] usb 1-1: Manufacturer: syz
[   94.068576][  T938] usb 1-1: SerialNumber: syz
[   94.140265][ T2975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.246649][ T2975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.416301][ T2975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.456643][ T5286] usb 1-1: USB disconnect, device number 5
[   95.076217][ T2975] bridge_slave_1: left allmulticast mode
[   95.081932][ T2975] bridge_slave_1: left promiscuous mode
[   95.104718][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.143992][ T2975] bridge_slave_0: left allmulticast mode
[   95.152429][ T2975] bridge_slave_0: left promiscuous mode
[   95.170350][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.459046][ T5832] ALSA: seq fatal error: cannot create timer (-22)
[   95.924227][ T5282] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   95.974366][ T5237] Bluetooth: hci2: command tx timeout
[   96.180906][ T5282] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   96.193670][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.204368][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.221116][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.233651][ T5282] usb 1-1: config 0 descriptor??
[   96.243605][ T2975] bond0 (unregistering): Released all slaves
[   96.394306][ T5270] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   96.584750][ T5270] usb 3-1: Using ep0 maxpacket: 8
[   96.595682][ T5270] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   96.609305][ T5270] usb 3-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[   96.639334][ T5270] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[   96.692182][ T5270] usb 3-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[   96.711038][ T5799] chnl_net:caif_netlink_parms(): no params data found
[   96.748397][ T5270] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   96.798138][ T5270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.875849][ T5270] usb 3-1: Product: syz
[   96.890132][ T5270] usb 3-1: Manufacturer: syz
[   96.898842][ T5270] usb 3-1: SerialNumber: syz
[   96.932782][ T5270] hso 3-1:6.0: Can't find BULK OUT endpoint
[   97.060708][ T2975] hsr_slave_0: left promiscuous mode
[   97.067063][ T2975] hsr_slave_1: left promiscuous mode
[   97.075639][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.084026][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.101473][ T2975] veth1_macvtap: left promiscuous mode
[   97.108262][ T2975] veth0_macvtap: left promiscuous mode
[   97.113892][ T2975] veth1_vlan: left promiscuous mode
[   97.119847][ T2975] veth0_vlan: left promiscuous mode
[   97.447318][ T5313] usb 3-1: USB disconnect, device number 5
[   97.798159][ T5282] usb 1-1: Cannot set MAC address
[   97.803360][ T5282] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   97.843188][ T5282] usb 1-1: USB disconnect, device number 6
[   98.047373][ T5237] Bluetooth: hci2: command tx timeout
[   98.140546][ T5857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.143'.
[   98.232558][ T2975] team0 (unregistering): Port device team_slave_1 removed
[   98.323419][ T2975] team0 (unregistering): Port device team_slave_0 removed
[   98.399571][ T5860] loop2: detected capacity change from 0 to 7
[   98.419803][ T5860] Dev loop2: unable to read RDB block 7
[   98.430045][ T5860]  loop2: unable to read partition table
[   98.459452][ T5860] loop2: partition table beyond EOD, truncated
[   98.487937][ T5860] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   98.713712][ T5869] FAULT_INJECTION: forcing a failure.
[   98.713712][ T5869] name failslab, interval 1, probability 0, space 0, times 1
[   98.727238][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: syz.0.146 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[   98.737875][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   98.747959][ T5869] Call Trace:
[   98.751255][ T5869]  <TASK>
[   98.754207][ T5869]  dump_stack_lvl+0x241/0x360
[   98.758944][ T5869]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.764166][ T5869]  ? __pfx__printk+0x10/0x10
[   98.768807][ T5869]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[   98.774820][ T5869]  ? __pfx___might_resched+0x10/0x10
[   98.780131][ T5869]  should_fail_ex+0x3b0/0x4e0
[   98.784830][ T5869]  should_failslab+0xac/0x100
[   98.789512][ T5869]  ? __alloc_skb+0x1c3/0x440
[   98.794105][ T5869]  kmem_cache_alloc_node_noprof+0x71/0x320
[   98.800021][ T5869]  __alloc_skb+0x1c3/0x440
[   98.804445][ T5869]  ? __pfx___alloc_skb+0x10/0x10
[   98.809379][ T5869]  ? netlink_autobind+0xd6/0x2f0
[   98.814315][ T5869]  ? netlink_autobind+0x2b0/0x2f0
[   98.819347][ T5869]  netlink_sendmsg+0x638/0xcb0
[   98.824117][ T5869]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.829405][ T5869]  ? aa_sock_msg_perm+0x91/0x160
[   98.834345][ T5869]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.839711][ T5869]  __sock_sendmsg+0x221/0x270
[   98.844396][ T5869]  ____sys_sendmsg+0x52a/0x7e0
[   98.849162][ T5869]  ? __pfx_____sys_sendmsg+0x10/0x10
[   98.854451][ T5869]  __sys_sendmsg+0x292/0x380
[   98.859041][ T5869]  ? __pfx___sys_sendmsg+0x10/0x10
[   98.864155][ T5869]  ? __pfx_vfs_write+0x10/0x10
[   98.868933][ T5869]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   98.875259][ T5869]  ? do_syscall_64+0x100/0x230
[   98.880017][ T5869]  ? do_syscall_64+0xb6/0x230
[   98.884689][ T5869]  do_syscall_64+0xf3/0x230
[   98.889184][ T5869]  ? clear_bhb_loop+0x35/0x90
[   98.893883][ T5869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.899810][ T5869] RIP: 0033:0x7fde3eb7dff9
[   98.904225][ T5869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.923837][ T5869] RSP: 002b:00007fde3f968038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   98.932257][ T5869] RAX: ffffffffffffffda RBX: 00007fde3ed35f80 RCX: 00007fde3eb7dff9
[   98.940223][ T5869] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003
[   98.948221][ T5869] RBP: 00007fde3f968090 R08: 0000000000000000 R09: 0000000000000000
[   98.956187][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.964151][ T5869] R13: 0000000000000000 R14: 00007fde3ed35f80 R15: 00007fde3ee5fa28
[   98.972126][ T5869]  </TASK>
[   98.975240][    C1] vkms_vblank_simulate: vblank timer overrun
[   99.314358][ T5313] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   99.350625][ T5857] netlink: 'syz.3.143': attribute type 11 has an invalid length.
[   99.361354][ T5857] netlink: 140 bytes leftover after parsing attributes in process `syz.3.143'.
[   99.498599][ T5313] usb 3-1: device descriptor read/64, error -71
[   99.528837][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   99.571271][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   99.596281][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.605490][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.612977][ T5799] bridge_slave_0: entered allmulticast mode
[   99.621157][ T5799] bridge_slave_0: entered promiscuous mode
[   99.629743][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   99.642940][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   99.671423][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.686840][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.733710][ T5799] bridge_slave_1: entered allmulticast mode
[   99.758246][ T5799] bridge_slave_1: entered promiscuous mode
[   99.797182][ T5313] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   99.990800][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.015043][ T5313] usb 3-1: device descriptor read/64, error -71
[  100.038754][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.099541][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.124741][ T5237] Bluetooth: hci2: command tx timeout
[  100.135532][ T5313] usb usb3-port1: attempt power cycle
[  100.376605][ T5799] team0: Port device team_slave_0 added
[  100.455485][ T5799] team0: Port device team_slave_1 added
[  100.493457][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[  100.526510][ T5313] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  100.578467][ T5313] usb 3-1: device descriptor read/8, error -71
[  100.613804][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.655063][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.721398][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.767537][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.787123][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.848248][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.889921][ T5313] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  100.946095][ T5313] usb 3-1: device descriptor read/8, error -71
[  100.957808][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.964986][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.982636][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.989875][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.073171][ T5799] hsr_slave_0: entered promiscuous mode
[  101.082042][ T5799] hsr_slave_1: entered promiscuous mode
[  101.088466][ T5313] usb usb3-port1: unable to enumerate USB device
[  101.112223][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.129133][ T5799] Cannot create hsr debugfs directory
[  101.424969][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.594726][ T5596] veth0_vlan: entered promiscuous mode
[  101.629369][ T5596] veth1_vlan: entered promiscuous mode
[  101.882519][ T5596] veth0_macvtap: entered promiscuous mode
[  101.952421][ T5596] veth1_macvtap: entered promiscuous mode
[  102.041969][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.093815][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.107888][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.122149][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.150551][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.167609][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.212866][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.216660][ T5237] Bluetooth: hci2: command tx timeout
[  102.273562][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.294156][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.304275][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.315028][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.324999][ T5596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.335636][ T5596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.346359][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.380271][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.487365][ T5596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.496364][ T5596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.507957][ T5596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.539410][ T5596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.552747][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.667600][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.723634][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.855567][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.868896][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.975666][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.003035][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.014633][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  103.023268][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.089218][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[  103.141638][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.148764][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.175784][    T8] usb 1-1: Using ep0 maxpacket: 8
[  103.203230][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.210392][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.216212][    T8] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  103.238721][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.265607][    T8] usb 1-1: config 0 descriptor??
[  103.505639][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.676680][ T5799] veth0_vlan: entered promiscuous mode
[  103.780486][ T5799] veth1_vlan: entered promiscuous mode
[  103.938930][ T5799] veth0_macvtap: entered promiscuous mode
[  103.981215][ T5799] veth1_macvtap: entered promiscuous mode
[  104.069416][ T5952] netlink: 9 bytes leftover after parsing attributes in process `syz.3.159'.
[  104.083321][ T5952] 0·: renamed from hsr0 (while UP)
[  104.093419][ T5952] 0·: entered promiscuous mode
[  104.099378][ T5952] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  104.129514][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.164169][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.175224][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.202959][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.217369][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.228092][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.239492][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.251022][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.262849][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.290230][ T5959] Zero length message leads to an empty skb
[  104.379196][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.414741][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.433952][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.454554][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.466454][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.477926][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.498033][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.521025][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.543101][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.587272][ T5799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.613632][ T5799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.658095][ T5799] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.698833][ T5799] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.732348][    T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  104.743848][    T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  104.756691][    T8] asix 1-1:0.0: probe with driver asix failed with error -71
[  104.826610][    T8] usb 1-1: USB disconnect, device number 7
[  105.001260][ T5982] misc userio: No port type given on /dev/userio
[  105.032988][ T5982] misc userio: Invalid payload size
[  105.051239][  T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.081554][  T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.167460][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.211843][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.222451][ T5986] tipc: Started in network mode
[  105.231243][ T5986] tipc: Node identity 2e3a0000000000000000000000002d01, cluster identity 4711
[  105.278808][ T5986] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  105.512775][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'.
[  106.396526][ T6038] x_tables: ip_tables: icmp match: only valid for protocol 1
[  106.409164][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.176'.
[  106.666754][   T29] audit: type=1326 audit(1728838915.035:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2b7dff9 code=0x7ffc0000
[  106.689302][   T29] audit: type=1326 audit(1728838915.035:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2b7dff9 code=0x7ffc0000
[  106.726170][   T29] audit: type=1326 audit(1728838915.095:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe9e2b7dff9 code=0x7ffc0000
[  106.756940][   T29] audit: type=1326 audit(1728838915.095:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2b7dff9 code=0x7ffc0000
[  106.825716][   T29] audit: type=1326 audit(1728838915.145:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe9e2b7dff9 code=0x7ffc0000
[  106.879187][   T29] audit: type=1326 audit(1728838915.145:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2b7dff9 code=0x7ffc0000
[  106.940873][   T29] audit: type=1326 audit(1728838915.145:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2b7dff9 code=0x7ffc0000
[  106.993661][   T29] audit: type=1326 audit(1728838915.155:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9e2b7c990 code=0x7ffc0000
[  107.034250][  T938] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  107.070013][   T29] audit: type=1326 audit(1728838915.155:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9e2b7dbfb code=0x7ffc0000
[  107.143285][   T29] audit: type=1326 audit(1728838915.155:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9e2b7dbfb code=0x7ffc0000
[  107.314997][  T938] usb 4-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed
[  107.320429][ T6059] netlink: 'syz.0.180': attribute type 29 has an invalid length.
[  107.339688][  T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.369038][  T938] usb 4-1: Product: syz
[  107.369944][ T6059] netlink: 'syz.0.180': attribute type 29 has an invalid length.
[  107.381950][  T938] usb 4-1: Manufacturer: syz
[  107.409197][  T938] usb 4-1: SerialNumber: syz
[  107.429709][ T6061] netlink: 5 bytes leftover after parsing attributes in process `syz.2.181'.
[  107.443207][  T938] usb 4-1: config 0 descriptor??
[  107.449438][ T6061] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  107.458935][ T6059] netlink: 500 bytes leftover after parsing attributes in process `syz.0.180'.
[  107.463491][  T938] r8712u: register rtl8712_netdev_ops to netdev_ops
[  107.489164][  T938] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  107.492044][ T6064] input: syz1 as /devices/virtual/input/input9
[  107.547741][ T6061] 0ªX¹¦Dö»: entered allmulticast mode
[  107.686185][  T938] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed
[  107.701034][  T938] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  107.711600][  T938] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  107.762352][  T938] usb 4-1: USB disconnect, device number 4
[  107.844426][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  108.005133][ T5980] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  108.015086][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.027239][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.038734][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  108.059521][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.081464][    T9] usb 3-1: config 0 descriptor??
[  108.154677][ T5980] usb 1-1: device descriptor read/64, error -71
[  108.404375][ T5980] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  108.523575][    T9] appletouch 3-1:0.0: Failed to request geyser raw mode
[  108.555926][ T5980] usb 1-1: device descriptor read/64, error -71
[  108.562943][    T9] appletouch 3-1:0.0: probe with driver appletouch failed with error -5
[  108.606106][    T9] usb 3-1: USB disconnect, device number 10
[  108.695605][ T5980] usb usb1-port1: attempt power cycle
[  108.889449][ T6122] x_tables: ip_tables: icmp match: only valid for protocol 1
[  108.929755][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.192'.
[  109.054729][ T5980] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  109.074810][ T5980] usb 1-1: device descriptor read/8, error -71
[  109.314290][ T5980] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  109.449136][ T5980] usb 1-1: device descriptor read/8, error -71
[  109.595260][ T5980] usb usb1-port1: unable to enumerate USB device
[  110.074254][ T1168] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  110.194177][ T5270] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  110.214226][ T1168] usb 3-1: device descriptor read/64, error -71
[  110.294595][ T5282] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  110.354190][ T5270] usb 4-1: Using ep0 maxpacket: 16
[  110.365885][ T5270] usb 4-1: config 1 interface 0 altsetting 107 endpoint 0x81 has an invalid bInterval 247, changing to 11
[  110.386092][ T5270] usb 4-1: config 1 interface 0 altsetting 107 bulk endpoint 0x82 has invalid maxpacket 64
[  110.402019][ T5270] usb 4-1: config 1 interface 0 altsetting 107 bulk endpoint 0x3 has invalid maxpacket 8
[  110.413907][ T5270] usb 4-1: config 1 interface 0 has no altsetting 0
[  110.430255][ T5270] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  110.439987][ T5270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.454255][ T1168] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  110.454592][ T5270] usb 4-1: Product: 쬅닗켂㤃�랕�ꬩྒྷ亢팶り��꺠��ⶦ몵沬虩ꙛ�儈�碓噉쀱䓔�텕㢋榹帔赀ኃ걡⻂瘵�凉毡�覌掸拉錵ތ斖듫꿢您ﶘ�ଣ⽜碄�髮��紗䑀땷煩븅㤀⬵ඩ�䵽ퟻ�踾Οസ⇟輪
[  110.487540][    C1] vkms_vblank_simulate: vblank timer overrun
[  110.497892][ T5282] usb 2-1: Using ep0 maxpacket: 8
[  110.505866][ T5270] usb 4-1: Manufacturer: 妻�⧾��Ὺ玂澌勃廸ﾡ៘�劚��뼓₮ꅋ먻鶳멋ឩᭌ트痼�౞ᜧꇪ儆팎�≂
[  110.519560][ T5282] usb 2-1: config 0 has an invalid interface number: 153 but max is 0
[  110.527997][ T5282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.538718][ T5282] usb 2-1: config 0 has no interface number 0
[  110.548685][ T5282] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=c3.3e
[  110.559124][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.567800][ T5270] usb 4-1: SerialNumber: ï³£
[  110.572589][ T5282] usb 2-1: Product: syz
[  110.577702][ T5282] usb 2-1: Manufacturer: syz
[  110.583526][ T5282] usb 2-1: SerialNumber: syz
[  110.589628][ T6148] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  110.599051][ T6148] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  110.608998][ T5282] usb 2-1: config 0 descriptor??
[  110.674396][ T1168] usb 3-1: device descriptor read/64, error -71
[  110.786376][ T1168] usb usb3-port1: attempt power cycle
[  110.833539][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.863854][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.144185][ T5980] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  111.165585][ T1168] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  111.194875][ T1168] usb 3-1: device descriptor read/8, error -71
[  111.320961][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'.
[  111.323213][ T5282] usb 2-1: bad CDC descriptors
[  111.336653][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.356362][ T5282] usb 2-1: USB disconnect, device number 6
[  111.389178][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.432121][ T5270] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  111.474267][ T1168] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  111.504296][ T1168] usb 3-1: device descriptor read/8, error -71
[  111.520998][ T5270] usb 4-1: USB disconnect, device number 5
[  111.590718][ T5980] usb 1-1: unable to get BOS descriptor or descriptor too short
[  111.606282][ T5980] usb 1-1: no configurations
[  111.611168][ T5980] usb 1-1: can't read configurations, error -22
[  111.611235][ T6163] loop2: detected capacity change from 0 to 7
[  111.626114][ T1168] usb usb3-port1: unable to enumerate USB device
[  111.645279][ T6163] Dev loop2: unable to read RDB block 7
[  111.650873][ T6163]  loop2: unable to read partition table
[  111.657173][ T6163] loop2: partition table beyond EOD, truncated
[  111.663585][ T6163] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ¨�â·û) failed (rc=-5)
[  111.984359][ T1168] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  112.159045][ T1168] usb 2-1: Using ep0 maxpacket: 8
[  112.168937][ T1168] usb 2-1: config 0 has an invalid interface number: 153 but max is 0
[  112.169015][ T6172] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  112.180909][ T1168] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.198084][ T1168] usb 2-1: config 0 has no interface number 0
[  112.219125][ T1168] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=c3.3e
[  112.237184][ T1168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.249549][ T1168] usb 2-1: Product: syz
[  112.253943][ T1168] usb 2-1: Manufacturer: syz
[  112.260137][ T1168] usb 2-1: SerialNumber: syz
[  112.269549][ T1168] usb 2-1: config 0 descriptor??
[  112.284421][ T5270] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  112.417461][ T6175] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  112.429002][ T5270] usb 4-1: device descriptor read/64, error -71
[  112.684731][ T5270] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  112.845136][ T5270] usb 4-1: device descriptor read/64, error -71
[  112.898513][ T6183] FAULT_INJECTION: forcing a failure.
[  112.898513][ T6183] name failslab, interval 1, probability 0, space 0, times 0
[  112.927972][ T6183] CPU: 1 UID: 0 PID: 6183 Comm: syz.2.209 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[  112.938629][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  112.948711][ T6183] Call Trace:
[  112.952009][ T6183]  <TASK>
[  112.954956][ T6183]  dump_stack_lvl+0x241/0x360
[  112.959659][ T6183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.964884][ T6183]  ? __pfx__printk+0x10/0x10
[  112.969505][ T6183]  ? __nla_validate_parse+0x26ce/0x3090
[  112.975087][ T6183]  should_fail_ex+0x3b0/0x4e0
[  112.979806][ T6183]  ? xfrm_state_alloc+0x22/0x2a0
[  112.984769][ T6183]  should_failslab+0xac/0x100
[  112.989472][ T6183]  ? xfrm_state_alloc+0x22/0x2a0
[  112.994429][ T6183]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  112.999833][ T6183]  ? aa_get_newest_label+0xff/0x6f0
[  113.005046][ T6183]  xfrm_state_alloc+0x22/0x2a0
[  113.009806][ T6183]  xfrm_add_sa+0x134a/0x3b60
[  113.014404][ T6183]  ? __pfx_xfrm_add_sa+0x10/0x10
[  113.019338][ T6183]  ? __nla_parse+0x40/0x60
[  113.023757][ T6183]  xfrm_user_rcv_msg+0x75b/0xa80
[  113.028708][ T6183]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  113.034273][ T6183]  ? __mutex_trylock_common+0x183/0x2e0
[  113.039812][ T6183]  ? __pfx___might_resched+0x10/0x10
[  113.045105][ T6183]  netlink_rcv_skb+0x1e3/0x430
[  113.049879][ T6183]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  113.055347][ T6183]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  113.060680][ T6183]  xfrm_netlink_rcv+0x79/0x90
[  113.065372][ T6183]  netlink_unicast+0x7f6/0x990
[  113.070157][ T6183]  ? __pfx_netlink_unicast+0x10/0x10
[  113.075466][ T6183]  ? __virt_addr_valid+0x183/0x530
[  113.080592][ T6183]  ? __check_object_size+0x48e/0x900
[  113.085886][ T6183]  netlink_sendmsg+0x8e4/0xcb0
[  113.090669][ T6183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.095949][ T6183]  ? aa_sock_msg_perm+0x91/0x160
[  113.100905][ T6183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.106202][ T6183]  __sock_sendmsg+0x221/0x270
[  113.110882][ T6183]  ____sys_sendmsg+0x52a/0x7e0
[  113.115677][ T6183]  ? __pfx_____sys_sendmsg+0x10/0x10
[  113.120984][ T6183]  __sys_sendmsg+0x292/0x380
[  113.125583][ T6183]  ? __pfx___sys_sendmsg+0x10/0x10
[  113.130722][ T6183]  ? __pfx_vfs_write+0x10/0x10
[  113.135497][ T6183]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  113.141852][ T6183]  ? do_syscall_64+0x100/0x230
[  113.146634][ T6183]  ? do_syscall_64+0xb6/0x230
[  113.151322][ T6183]  do_syscall_64+0xf3/0x230
[  113.155841][ T6183]  ? clear_bhb_loop+0x35/0x90
[  113.160525][ T6183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.166417][ T6183] RIP: 0033:0x7f6fe877dff9
[  113.170840][ T6183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.190447][ T6183] RSP: 002b:00007f6fe9584038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  113.198874][ T6183] RAX: ffffffffffffffda RBX: 00007f6fe8935f80 RCX: 00007f6fe877dff9
[  113.206847][ T6183] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003
[  113.214817][ T6183] RBP: 00007f6fe9584090 R08: 0000000000000000 R09: 0000000000000000
[  113.222796][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.230775][ T6183] R13: 0000000000000000 R14: 00007f6fe8935f80 R15: 00007f6fe8a5fa28
[  113.238762][ T6183]  </TASK>
[  113.286340][ T1168] usb 2-1: bad CDC descriptors
[  113.304260][ T5270] usb usb4-port1: attempt power cycle
[  113.393280][ T1168] usb 2-1: USB disconnect, device number 7
[  113.556944][ T6192] x_tables: ip_tables: icmp match: only valid for protocol 1
[  113.606292][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.211'.
[  113.675580][ T5270] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  113.702044][ T5270] usb 4-1: device descriptor read/8, error -71
[  113.714176][ T1168] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  113.864156][ T1168] usb 2-1: Using ep0 maxpacket: 32
[  113.878316][ T1168] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  113.892625][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  113.920567][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  113.954220][ T1168] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  113.959520][ T5270] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  113.963386][ T1168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.991183][ T1168] usb 2-1: config 0 descriptor??
[  113.997102][ T6185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  114.017753][ T1168] hub 2-1:0.0: USB hub found
[  114.025180][ T5270] usb 4-1: device descriptor read/8, error -71
[  114.134717][ T5270] usb usb4-port1: unable to enumerate USB device
[  114.227847][ T1168] hub 2-1:0.0: 2 ports detected
[  114.464515][ T6197] tipc: Failed to obtain node identity
[  114.487877][ T6197] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  114.504605][ T6196] tipc: Started in network mode
[  114.511476][ T6196] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  114.519298][ T6196] tipc: Enabled bearer <eth:ipvlan0>, priority 0
[  114.710496][ T6206] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  115.122666][ T6210] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  115.515575][ T5282] tipc: Node number set to 10136234
[  115.675423][ T6226] vxcan0: tx drop: invalid da for name 0x0000000000000007
[  115.953055][ T6231] netlink: 'syz.2.226': attribute type 9 has an invalid length.
[  115.966928][ T6231] bond_slave_0: entered promiscuous mode
[  115.972938][ T6231] bond_slave_1: entered promiscuous mode
[  115.985759][ T6231] macvlan2: entered promiscuous mode
[  115.991231][ T6231] bond0: entered promiscuous mode
[  115.999828][ T6231] macvlan2: entered allmulticast mode
[  116.007320][ T6231] bond0: entered allmulticast mode
[  116.013322][ T6231] bond_slave_0: entered allmulticast mode
[  116.022447][ T6231] bond_slave_1: entered allmulticast mode
[  116.032319][ T6231] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  116.341823][ T5282] usb 2-1: USB disconnect, device number 8
[  116.349279][ T6236] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  116.358817][    T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  116.511468][ T6246] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  116.580431][ T6248] xt_CT: You must specify a L4 protocol and not use inversions on it
[  117.053465][ T5270] IPVS: starting estimator thread 0...
[  117.164432][ T6264] IPVS: using max 32 ests per chain, 76800 per kthread
[  117.211308][ T6268] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 !
[  117.535782][   T29] kauditd_printk_skb: 49 callbacks suppressed
[  117.535794][   T29] audit: type=1326 audit(1728838925.905:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  117.620893][   T29] audit: type=1326 audit(1728838925.935:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  117.720141][   T29] audit: type=1326 audit(1728838925.935:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  117.793154][   T29] audit: type=1326 audit(1728838925.935:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  117.869779][   T29] audit: type=1326 audit(1728838925.935:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  117.892124][ T5270] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  117.951864][   T29] audit: type=1326 audit(1728838925.935:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  118.067844][ T5270] usb 3-1: config 0 has an invalid interface number: 79 but max is 0
[  118.076203][ T5270] usb 3-1: config 0 has no interface number 0
[  118.113795][   T29] audit: type=1326 audit(1728838925.935:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  118.135852][    C1] vkms_vblank_simulate: vblank timer overrun
[  118.154753][ T5270] usb 3-1: config 0 interface 79 has no altsetting 0
[  118.226430][   T29] audit: type=1326 audit(1728838925.935:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  118.304931][ T5270] usb 3-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92
[  118.344462][ T5270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.352705][ T5270] usb 3-1: Product: syz
[  118.357697][   T29] audit: type=1326 audit(1728838925.935:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  118.380988][   T29] audit: type=1326 audit(1728838925.935:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6271 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f6fe877dff9 code=0x7ffc0000
[  118.445128][ T5270] usb 3-1: Manufacturer: syz
[  118.449921][ T5270] usb 3-1: SerialNumber: syz
[  118.526021][ T5270] usb 3-1: config 0 descriptor??
[  118.547217][ T5270] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state.
[  118.599043][ T5270] dvb-usb: bulk message failed: -22 (2/0)
[  118.625338][ T5270] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  118.655107][ T5270] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom))
[  118.698209][ T5270] usb 3-1: media controller created
[  118.725889][ T5270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  118.818445][ T5270] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  118.867660][ T5270] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  118.917957][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.195799][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.361322][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.567323][ T5270] rc_core: IR keymap rc-dtt200u not found
[  119.583500][ T5270] Registered IR keymap rc-empty
[  119.606961][ T5270] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  119.626723][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.667926][ T5270] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11
[  119.684198][ T5313] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  119.723136][ T6291] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  119.743657][ T5270] dvb-usb: schedule remote query interval to 300 msecs.
[  119.757145][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.779470][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.782649][ T5270] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected.
[  119.799682][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.841065][   T52] bridge_slave_1: left allmulticast mode
[  119.846839][   T52] bridge_slave_1: left promiscuous mode
[  119.852576][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.874268][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.884269][ T5313] usb 5-1: Using ep0 maxpacket: 16
[  119.900061][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  119.910604][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.920619][ T5313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  119.960833][   T52] bridge_slave_0: left allmulticast mode
[  119.969107][ T5313] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  119.979913][   T52] bridge_slave_0: left promiscuous mode
[  119.991303][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.000561][ T5313] usb 5-1: Product: syz
[  120.015102][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.040911][ T5313] usb 5-1: Manufacturer: syz
[  120.060725][ T5270] usb 3-1: USB disconnect, device number 15
[  120.071507][ T5313] usb 5-1: SerialNumber: syz
[  120.128628][ T5313] usb 5-1: config 0 descriptor??
[  120.156420][ T5313] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  120.173244][ T5270] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected.
[  120.189949][ T5313] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  120.406765][ T5313] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  120.487645][ T5313] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  120.504129][ T5313] em28xx 5-1:0.0: board has no eeprom
[  120.584190][ T5313] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  120.599319][ T5313] em28xx 5-1:0.0: dvb set to bulk mode.
[  120.645853][ T5270] em28xx 5-1:0.0: Binding DVB extension
[  120.668651][ T5313] usb 5-1: USB disconnect, device number 14
[  120.689666][ T5313] em28xx 5-1:0.0: Disconnecting em28xx
[  120.758876][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.769104][ T5270] em28xx 5-1:0.0: Registering input extension
[  120.808561][ T5313] em28xx 5-1:0.0: Closing input extension
[  120.850972][ T5313] em28xx 5-1:0.0: Freeing device
[  120.857648][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.862852][ T6307] loop2: detected capacity change from 0 to 7
[  120.879509][ T6307] Dev loop2: unable to read RDB block 7
[  120.886876][ T6307]  loop2: unable to read partition table
[  120.925156][ T6307] loop2: partition table beyond EOD, truncated
[  120.950397][ T6307] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  121.141591][   T52] bond0 (unregistering): Released all slaves
[  121.353969][   T52] tipc: Left network mode
[  121.694211][ T1168] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  121.880915][ T1168] usb 3-1: unable to get BOS descriptor or descriptor too short
[  121.889713][ T6329] netlink: 44 bytes leftover after parsing attributes in process `syz.4.256'.
[  121.924768][ T1168] usb 3-1: config 247 has an invalid interface number: 205 but max is 0
[  121.964356][ T5237] Bluetooth: hci0: command tx timeout
[  121.991801][ T1168] usb 3-1: config 247 has no interface number 0
[  122.010908][ T1168] usb 3-1: config 247 interface 205 has no altsetting 0
[  122.079801][ T1168] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice=37.27
[  122.110540][ T1168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.153077][ T1168] usb 3-1: Product: syz
[  122.175620][ T1168] usb 3-1: Manufacturer: syz
[  122.199967][ T1168] usb 3-1: SerialNumber: syz
[  122.253883][ T6334] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 !
[  122.308142][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'.
[  122.452999][ T6345] xt_CT: You must specify a L4 protocol and not use inversions on it
[  122.535492][ T1168] oti6858 3-1:247.205: required endpoints missing
[  122.553922][   T52] hsr_slave_0: left promiscuous mode
[  122.560671][ T1168] usb 3-1: USB disconnect, device number 16
[  122.588213][   T52] hsr_slave_1: left promiscuous mode
[  122.607384][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.618279][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.635095][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.652897][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.701177][   T52] veth1_macvtap: left promiscuous mode
[  122.710688][   T52] veth0_macvtap: left promiscuous mode
[  122.721533][   T52] veth1_vlan: left promiscuous mode
[  122.730964][   T52] veth0_vlan: left promiscuous mode
[  123.347094][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  123.362919][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  123.373119][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  123.382261][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  123.402531][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  123.414349][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  123.535309][   T52] team0 (unregistering): Port device team_slave_1 removed
[  123.592766][   T52] team0 (unregistering): Port device team_slave_0 removed
[  124.046725][ T5237] Bluetooth: hci0: command tx timeout
[  124.216703][ T6364] x_tables: ip_tables: icmp match: only valid for protocol 1
[  124.332520][ T6300] chnl_net:caif_netlink_parms(): no params data found
[  124.363639][ T6364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'.
[  124.513470][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.558648][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.574501][ T5270] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  124.583687][ T6300] bridge_slave_0: entered allmulticast mode
[  124.610090][ T6300] bridge_slave_0: entered promiscuous mode
[  124.744655][ T5270] usb 5-1: Using ep0 maxpacket: 16
[  124.779012][ T5270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.812967][ T5270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  124.824387][ T5270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.832453][ T5270] usb 5-1: Product: syz
[  124.836764][ T5270] usb 5-1: Manufacturer: syz
[  124.841453][ T5270] usb 5-1: SerialNumber: syz
[  124.858840][ T5270] cdc_ether 5-1:1.0: skipping garbage
[  124.864373][ T5270] usb 5-1: bad CDC descriptors
[  124.878914][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.894346][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.901759][ T6300] bridge_slave_1: entered allmulticast mode
[  124.908884][ T6300] bridge_slave_1: entered promiscuous mode
[  124.927038][ T5313] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  125.023941][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.070924][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.106358][ T5313] usb 4-1: Using ep0 maxpacket: 32
[  125.115444][ T5313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.127060][ T5313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.149361][ T5270] usb 5-1: USB disconnect, device number 15
[  125.178647][ T5313] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  125.237462][ T5313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.245576][ T6359] chnl_net:caif_netlink_parms(): no params data found
[  125.330504][ T5313] usb 4-1: config 0 descriptor??
[  125.347885][ T6300] team0: Port device team_slave_0 added
[  125.357515][ T6300] team0: Port device team_slave_1 added
[  125.358202][ T5313] hub 4-1:0.0: USB hub found
[  125.495535][ T5237] Bluetooth: hci5: command tx timeout
[  125.560537][ T5313] hub 4-1:0.0: 1 port detected
[  125.579914][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.586984][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.613021][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.626699][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.633676][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.660348][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.813837][ T6406] netlink: 'syz.4.270': attribute type 9 has an invalid length.
[  125.838838][ T6406] bond_slave_0: entered promiscuous mode
[  125.844652][ T6406] bond_slave_1: entered promiscuous mode
[  125.851108][ T6406] macvlan2: entered promiscuous mode
[  125.856629][ T6406] bond0: entered promiscuous mode
[  125.862222][ T6406] macvlan2: entered allmulticast mode
[  125.867738][ T6406] bond0: entered allmulticast mode
[  125.872905][ T6406] bond_slave_0: entered allmulticast mode
[  125.878737][ T6406] bond_slave_1: entered allmulticast mode
[  125.885839][ T6406] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  126.050136][ T6300] hsr_slave_0: entered promiscuous mode
[  126.057747][ T6300] hsr_slave_1: entered promiscuous mode
[  126.063906][ T6300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.084973][ T6300] Cannot create hsr debugfs directory
[  126.124814][ T5237] Bluetooth: hci0: command tx timeout
[  126.326962][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.334465][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.341778][ T6359] bridge_slave_0: entered allmulticast mode
[  126.349137][ T6359] bridge_slave_0: entered promiscuous mode
[  126.358876][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.366878][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.374224][ T6359] bridge_slave_1: entered allmulticast mode
[  126.381502][ T6359] bridge_slave_1: entered promiscuous mode
[  126.568573][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.582133][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.801427][ T6359] team0: Port device team_slave_0 added
[  126.813361][ T6359] team0: Port device team_slave_1 added
[  126.902589][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.910132][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.936442][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.950254][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.957355][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.983799][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.057706][ T6359] hsr_slave_0: entered promiscuous mode
[  127.075884][ T6359] hsr_slave_1: entered promiscuous mode
[  127.083933][ T6359] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.092044][ T6359] Cannot create hsr debugfs directory
[  127.216703][ T5313] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  127.260427][ T5270] hub 4-1:0.0: hub_ext_port_status failed (err = -32)
[  127.295585][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.317969][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.590564][ T5237] Bluetooth: hci5: command tx timeout
[  127.739744][ T6416] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 !
[  128.102759][ T6359] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.153315][ T6300] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  128.172461][ T6300] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  128.212786][ T5237] Bluetooth: hci0: command tx timeout
[  128.418231][ T6300] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  128.507305][ T6359] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.593285][ T6300] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  128.681683][ T6359] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.873461][ T6359] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.283619][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.404744][ T6359] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  129.468466][ T6444] xt_CT: You must specify a L4 protocol and not use inversions on it
[  129.509894][ T6300] 8021q: adding VLAN 0 to HW filter on device team0
[  129.590785][ T6359] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  129.633557][ T6359] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  129.645261][ T5286] usb 4-1: USB disconnect, device number 10
[  129.651297][ T5237] Bluetooth: hci5: command tx timeout
[  129.691338][  T301] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.698526][  T301] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.709497][  T301] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.716744][  T301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.849223][ T6359] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  129.982091][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.998169][ T6359] 8021q: adding VLAN 0 to HW filter on device team0
[  130.033177][ T6359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  130.043611][ T6359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.072465][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.105765][ T6359] veth0_vlan: entered promiscuous mode
[  130.117605][ T6359] veth1_vlan: entered promiscuous mode
[  130.139382][ T6359] veth0_macvtap: entered promiscuous mode
[  130.148375][ T6359] veth1_macvtap: entered promiscuous mode
[  130.163614][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.174156][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.183966][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.194480][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.204349][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.214840][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.224734][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.235222][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.246465][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.257462][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.268188][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.278108][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.288741][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.298604][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.309169][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.319087][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.329608][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.340867][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.350922][ T6359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.359978][ T6359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.369015][ T6359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.377789][ T6359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.650809][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.658003][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.703167][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.710349][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.891757][ T6459] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  130.951146][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.984465][ T6300] veth0_vlan: entered promiscuous mode
[  130.995285][ T6300] veth1_vlan: entered promiscuous mode
[  131.016724][ T6300] veth0_macvtap: entered promiscuous mode
[  131.026039][ T6300] veth1_macvtap: entered promiscuous mode
[  131.040571][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.051169][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.061771][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.072482][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.082537][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.093711][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.103898][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.114464][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.124321][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.135028][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.147610][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.157739][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.168286][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.178374][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.189008][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.198936][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.209415][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.219341][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.229820][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.239693][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.250571][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.261729][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.271829][ T6300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.280869][ T6300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.289774][ T6300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.298570][ T6300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.726224][ T5237] Bluetooth: hci5: command tx timeout
[  131.857402][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.895616][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.903473][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.967268][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.151604][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.241778][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.511872][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.566465][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.834174][ T5313] usb 3-1: device not accepting address 17, error -71
[  133.011089][ T6490] netlink: 'syz.3.289': attribute type 21 has an invalid length.
[  133.020340][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  133.026870][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  133.072153][ T6495] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  133.092588][ T6490] netlink: 'syz.3.289': attribute type 1 has an invalid length.
[  133.166571][ T6490] netlink: 132 bytes leftover after parsing attributes in process `syz.3.289'.
[  133.269599][ T6503] fuse: blksize only supported for fuseblk
[  133.669981][ T6515] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  133.735781][ T6516] netlink: 'syz.3.293': attribute type 29 has an invalid length.
[  133.783407][ T6519] netlink: 'syz.3.293': attribute type 29 has an invalid length.
[  133.831905][ T6516] netlink: 500 bytes leftover after parsing attributes in process `syz.3.293'.
[  135.004824][ T5313] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  135.271653][ T6558] xt_CT: You must specify a L4 protocol and not use inversions on it
[  135.334296][ T5313] usb 1-1: too many configurations: 245, using maximum allowed: 8
[  135.359184][ T5313] usb 1-1: config index 0 descriptor too short (expected 64797, got 132)
[  135.417036][ T5313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.449125][ T5313] usb 1-1: config index 1 descriptor too short (expected 64797, got 132)
[  135.490549][ T5313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.560795][ T5313] usb 1-1: config index 2 descriptor too short (expected 64797, got 132)
[  135.643356][ T5313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.687219][ T5313] usb 1-1: config index 3 descriptor too short (expected 64797, got 132)
[  135.738217][ T5313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.784227][ T5313] usb 1-1: config index 4 descriptor too short (expected 64797, got 132)
[  135.823108][ T5313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.907577][ T5313] usb 1-1: config index 5 descriptor too short (expected 64797, got 132)
[  135.942562][ T5313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.025932][ T5313] usb 1-1: config index 6 descriptor too short (expected 64797, got 132)
[  136.074141][ T5313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.126371][ T5313] usb 1-1: config index 7 descriptor too short (expected 64797, got 132)
[  136.181206][ T5313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.252244][ T5313] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  136.284265][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.292357][ T5313] usb 1-1: Product: syz
[  136.355740][ T5313] usb 1-1: Manufacturer: syz
[  136.375404][ T5313] usb 1-1: SerialNumber: syz
[  136.469794][ T5313] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  136.592253][ T5270] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  137.138480][ T6585] x_tables: ip_tables: icmp match: only valid for protocol 1
[  137.503415][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'.
[  137.796909][ T5270] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  137.806294][ T5270] ath9k_htc: Failed to initialize the device
[  137.924605][ T5270] usb 1-1: ath9k_htc: USB layer deinitialized
[  138.126928][ T6596] loop2: detected capacity change from 0 to 7
[  138.147309][ T6596] Dev loop2: unable to read RDB block 7
[  138.165407][ T6596]  loop2: unable to read partition table
[  138.171313][ T6596] loop2: partition table beyond EOD, truncated
[  138.198503][ T6596] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  138.744920][ T5313] usb 1-1: USB disconnect, device number 15
[  139.647955][ T6636] input: syz1 as /devices/virtual/input/input13
[  139.866361][ T6633] syzkaller0: entered promiscuous mode
[  139.871979][ T6633] syzkaller0: entered allmulticast mode
[  140.346886][ T6651] loop2: detected capacity change from 0 to 7
[  140.361990][ T6651] Dev loop2: unable to read RDB block 7
[  140.378507][ T6651]  loop2: unable to read partition table
[  140.455277][ T6651] loop2: partition table beyond EOD, truncated
[  140.594169][ T6651] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  140.987343][ T6659] ALSA: seq fatal error: cannot create timer (-22)
[  141.467133][ T5313] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  141.637307][ T5313] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  141.666282][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.686916][ T5313] usb 2-1: config 0 descriptor??
[  142.103347][ T5313] usb 2-1: Cannot set MAC address
[  142.109080][ T5313] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  142.168535][ T5313] usb 2-1: USB disconnect, device number 9
[  143.613775][ T6657] tipc: Started in network mode
[  143.618800][ T6657] tipc: Node identity 003a00002e0000000000000000002d01, cluster identity 4711
[  143.627826][ T6657] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  143.797671][ T6672] =======================================================
[  143.797671][ T6672] WARNING: The mand mount option has been deprecated and
[  143.797671][ T6672]          and is ignored by this kernel. Remove the mand
[  143.797671][ T6672]          option from the mount to silence this warning.
[  143.797671][ T6672] =======================================================
[  143.878035][ T6678] xt_CT: You must specify a L4 protocol and not use inversions on it
[  143.908660][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  144.388935][ T6703] raw_sendmsg: syz.4.341 forgot to set AF_INET. Fix it!
[  144.651762][ T6719] netlink: 44 bytes leftover after parsing attributes in process `syz.0.347'.
[  145.146684][ T6716] syzkaller0: entered promiscuous mode
[  145.154755][ T6716] syzkaller0: entered allmulticast mode
[  145.354191][ T1168] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  145.381895][ T6734] FAULT_INJECTION: forcing a failure.
[  145.381895][ T6734] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  145.425379][ T6734] CPU: 0 UID: 0 PID: 6734 Comm: syz.0.349 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[  145.436027][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  145.446096][ T6734] Call Trace:
[  145.449382][ T6734]  <TASK>
[  145.452334][ T6734]  dump_stack_lvl+0x241/0x360
[  145.457040][ T6734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.462259][ T6734]  ? __pfx__printk+0x10/0x10
[  145.466880][ T6734]  ? snprintf+0xda/0x120
[  145.471137][ T6734]  should_fail_ex+0x3b0/0x4e0
[  145.475823][ T6734]  _copy_to_user+0x2f/0xb0
[  145.480241][ T6734]  simple_read_from_buffer+0xca/0x150
[  145.485640][ T6734]  proc_fail_nth_read+0x1e9/0x250
[  145.490688][ T6734]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  145.496248][ T6734]  ? rw_verify_area+0x55e/0x6f0
[  145.501112][ T6734]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  145.506662][ T6734]  vfs_read+0x201/0xbc0
[  145.510822][ T6734]  ? __pfx_lock_release+0x10/0x10
[  145.515860][ T6734]  ? __pfx_vfs_read+0x10/0x10
[  145.520546][ T6734]  ? __fget_files+0x3f3/0x470
[  145.525227][ T6734]  ? fdget_pos+0x24e/0x320
[  145.529640][ T6734]  ksys_read+0x183/0x2b0
[  145.533884][ T6734]  ? __pfx_ksys_read+0x10/0x10
[  145.538642][ T6734]  ? do_syscall_64+0x100/0x230
[  145.543403][ T6734]  ? do_syscall_64+0xb6/0x230
[  145.548103][ T6734]  do_syscall_64+0xf3/0x230
[  145.552601][ T6734]  ? clear_bhb_loop+0x35/0x90
[  145.557274][ T6734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.563172][ T6734] RIP: 0033:0x7fbe9a17ca3c
[  145.567584][ T6734] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  145.587187][ T6734] RSP: 002b:00007fbe9affb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  145.595599][ T6734] RAX: ffffffffffffffda RBX: 00007fbe9a335f80 RCX: 00007fbe9a17ca3c
[  145.603562][ T6734] RDX: 000000000000000f RSI: 00007fbe9affb0a0 RDI: 0000000000000004
[  145.611538][ T6734] RBP: 00007fbe9affb090 R08: 0000000000000000 R09: 0000000000000000
[  145.619600][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  145.627566][ T6734] R13: 0000000000000000 R14: 00007fbe9a335f80 R15: 00007fbe9a45fa28
[  145.635545][ T6734]  </TASK>
[  145.724218][ T1168] usb 4-1: device descriptor read/64, error -71
[  145.974403][ T5313] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  146.004353][ T1168] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  146.144330][ T1168] usb 4-1: device descriptor read/64, error -71
[  146.159325][ T5313] usb 5-1: Using ep0 maxpacket: 8
[  146.229178][ T5313] usb 5-1: config 1 has an invalid interface number: 9 but max is 0
[  146.246368][ T5313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.266203][ T5313] usb 5-1: config 1 has no interface number 0
[  146.266335][ T1168] usb usb4-port1: attempt power cycle
[  146.299586][ T5313] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  146.311813][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.342578][ T5313] usb 5-1: Product: syz
[  146.356041][ T5313] usb 5-1: Manufacturer: syz
[  146.370281][ T5313] usb 5-1: SerialNumber: syz
[  146.759767][ T5287] usb 5-1: USB disconnect, device number 16
[  146.815191][ T1168] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  146.852508][ T6747] FAULT_INJECTION: forcing a failure.
[  146.852508][ T6747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.867314][ T1168] usb 4-1: device descriptor read/8, error -71
[  146.876948][ T6747] CPU: 0 UID: 0 PID: 6747 Comm: syz.4.355 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[  146.887756][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  146.897837][ T6747] Call Trace:
[  146.901147][ T6747]  <TASK>
[  146.904079][ T6747]  dump_stack_lvl+0x241/0x360
[  146.908765][ T6747]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.913953][ T6747]  ? __pfx__printk+0x10/0x10
[  146.918538][ T6747]  ? __pfx_lock_release+0x10/0x10
[  146.923562][ T6747]  should_fail_ex+0x3b0/0x4e0
[  146.928238][ T6747]  _copy_from_user+0x2f/0xe0
[  146.932822][ T6747]  copy_msghdr_from_user+0xae/0x680
[  146.938016][ T6747]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  146.943843][ T6747]  __sys_sendmsg+0x22d/0x380
[  146.948431][ T6747]  ? __pfx___sys_sendmsg+0x10/0x10
[  146.953536][ T6747]  ? __pfx_vfs_write+0x10/0x10
[  146.958329][ T6747]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  146.964672][ T6747]  ? do_syscall_64+0x100/0x230
[  146.969421][ T6747]  ? do_syscall_64+0xb6/0x230
[  146.974102][ T6747]  do_syscall_64+0xf3/0x230
[  146.978609][ T6747]  ? clear_bhb_loop+0x35/0x90
[  146.983309][ T6747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.989196][ T6747] RIP: 0033:0x7f57a517dff9
[  146.993611][ T6747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.013214][ T6747] RSP: 002b:00007f57a6052038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.021620][ T6747] RAX: ffffffffffffffda RBX: 00007f57a5335f80 RCX: 00007f57a517dff9
[  147.029582][ T6747] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  147.037543][ T6747] RBP: 00007f57a6052090 R08: 0000000000000000 R09: 0000000000000000
[  147.045505][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.053465][ T6747] R13: 0000000000000000 R14: 00007f57a5335f80 R15: 00007f57a545fa28
[  147.061436][ T6747]  </TASK>
[  147.214231][ T1168] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  147.244903][ T1168] usb 4-1: device descriptor read/8, error -71
[  147.364372][ T1168] usb usb4-port1: unable to enumerate USB device
[  148.177242][ T5287] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  148.358291][ T5287] usb 4-1: Using ep0 maxpacket: 16
[  148.383875][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  148.407604][ T5287] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  148.464169][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.483405][ T5287] usb 4-1: Product: syz
[  148.499641][ T5287] usb 4-1: Manufacturer: syz
[  148.519168][ T5287] usb 4-1: SerialNumber: syz
[  148.534352][ T5287] usb 4-1: config 0 descriptor??
[  148.561885][ T5287] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  148.582402][ T5287] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  148.745678][ T6752] FAULT_INJECTION: forcing a failure.
[  148.745678][ T6752] name failslab, interval 1, probability 0, space 0, times 0
[  148.834647][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.3.357 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[  148.845300][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  148.855387][ T6752] Call Trace:
[  148.858686][ T6752]  <TASK>
[  148.861625][ T6752]  dump_stack_lvl+0x241/0x360
[  148.866331][ T6752]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.871550][ T6752]  ? __pfx__printk+0x10/0x10
[  148.876185][ T6752]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  148.882203][ T6752]  ? __pfx___might_resched+0x10/0x10
[  148.887524][ T6752]  should_fail_ex+0x3b0/0x4e0
[  148.892324][ T6752]  should_failslab+0xac/0x100
[  148.897026][ T6752]  ? __alloc_skb+0x1c3/0x440
[  148.901627][ T6752]  kmem_cache_alloc_node_noprof+0x71/0x320
[  148.907452][ T6752]  __alloc_skb+0x1c3/0x440
[  148.911883][ T6752]  ? __pfx___alloc_skb+0x10/0x10
[  148.916841][ T6752]  ? netlink_autobind+0xd6/0x2f0
[  148.921784][ T6752]  ? netlink_autobind+0x2b0/0x2f0
[  148.926830][ T6752]  netlink_sendmsg+0x638/0xcb0
[  148.931621][ T6752]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.936918][ T6752]  ? aa_sock_msg_perm+0x91/0x160
[  148.941873][ T6752]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.947170][ T6752]  __sock_sendmsg+0x221/0x270
[  148.951864][ T6752]  ____sys_sendmsg+0x52a/0x7e0
[  148.956647][ T6752]  ? __pfx_____sys_sendmsg+0x10/0x10
[  148.961954][ T6752]  __sys_sendmsg+0x292/0x380
[  148.966563][ T6752]  ? __pfx___sys_sendmsg+0x10/0x10
[  148.971700][ T6752]  ? __pfx_vfs_write+0x10/0x10
[  148.976497][ T6752]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  148.982841][ T6752]  ? do_syscall_64+0x100/0x230
[  148.987616][ T6752]  ? do_syscall_64+0xb6/0x230
[  148.992308][ T6752]  do_syscall_64+0xf3/0x230
[  148.996836][ T6752]  ? clear_bhb_loop+0x35/0x90
[  149.001530][ T6752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.007444][ T6752] RIP: 0033:0x7fe9e2b7dff9
[  149.011873][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.031495][ T6752] RSP: 002b:00007fe9e38b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.039928][ T6752] RAX: ffffffffffffffda RBX: 00007fe9e2d35f80 RCX: 00007fe9e2b7dff9
[  149.047909][ T6752] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005
[  149.055893][ T6752] RBP: 00007fe9e38b7090 R08: 0000000000000000 R09: 0000000000000000
[  149.063871][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.071853][ T6752] R13: 0000000000000000 R14: 00007fe9e2d35f80 R15: 00007fe9e2e5fa28
[  149.079851][ T6752]  </TASK>
[  149.455164][ T5287] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  149.520628][ T5287] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  149.529038][ T5287] em28xx 4-1:0.0: board has no eeprom
[  149.614270][ T5287] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  149.624338][ T5287] em28xx 4-1:0.0: dvb set to bulk mode.
[  149.642670][ T5286] em28xx 4-1:0.0: Binding DVB extension
[  149.766089][ T5286] em28xx 4-1:0.0: Registering input extension
[  149.800555][ T6759] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  149.838188][ T5287] usb 4-1: USB disconnect, device number 15
[  149.844967][ T5287] em28xx 4-1:0.0: Disconnecting em28xx
[  149.850476][ T5287] em28xx 4-1:0.0: Closing input extension
[  149.879320][ T5287] em28xx 4-1:0.0: Freeing device
[  150.000617][   T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.114223][ T5286] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  150.225419][   T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.275759][ T5286] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  150.285761][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.318254][ T5286] usb 3-1: config 0 descriptor??
[  150.334843][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  150.346474][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.355017][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.362765][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  150.370490][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  150.377726][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  150.449870][   T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.474390][ T5313] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  150.620255][   T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.644322][ T5313] usb 2-1: Using ep0 maxpacket: 32
[  150.658628][ T5313] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  150.679635][ T5313] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  150.698618][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.755606][ T5313] usb 2-1: Product: syz
[  150.763150][ T5313] usb 2-1: Manufacturer: syz
[  150.790278][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.792841][ T5313] usb 2-1: SerialNumber: syz
[  150.806622][ T5313] usb 2-1: config 0 descriptor??
[  150.808049][ T5286] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00
[  150.816248][ T6763] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  150.827399][ T5286] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  150.842062][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.867314][ T5286] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  150.888574][ T5286] [drm] Initialized udl on minor 2
[  150.902598][ T5313] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  151.006952][   T52] bridge_slave_1: left allmulticast mode
[  151.012662][   T52] bridge_slave_1: left promiscuous mode
[  151.018594][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.056388][ T5286] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  151.076945][ T5286] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  151.088438][ T1168] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  151.100145][ T1168] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  151.108917][ T1168] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  151.127310][ T5286] usb 3-1: USB disconnect, device number 19
[  151.209294][   T52] bridge_slave_0: left allmulticast mode
[  151.215084][   T52] bridge_slave_0: left promiscuous mode
[  151.220828][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.389558][ T5287] usb 2-1: USB disconnect, device number 10
[  152.060151][   T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  152.217895][   T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  152.230822][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.259009][   T25] usb 3-1: config 0 descriptor??
[  152.444791][ T5231] Bluetooth: hci5: command tx timeout
[  152.593489][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.604312][ T5287] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  152.618704][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.639438][   T52] bond0 (unregistering): Released all slaves
[  152.710000][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[  152.730215][ T6788] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722
[  152.754022][ T6788] PKCS7: Only support pkcs7_signedData type
[  152.766100][ T5287] usb 2-1: Using ep0 maxpacket: 16
[  152.794574][   T25] hackrf 3-1:0.0: Board ID: e6
[  152.799408][   T25] hackrf 3-1:0.0: Firmware version: æ
[  152.820702][ T5287] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.843477][ T5287] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.858433][ T5287] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  152.878474][   T25] hackrf 3-1:0.0: Registered as swradio16
[  152.882587][ T5287] usb 2-1: config 0 interface 0 has no altsetting 0
[  152.891740][ T5287] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  152.922121][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.930538][   T25] hackrf 3-1:0.0: Registered as swradio17
[  152.981349][   T25] hackrf 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  152.984790][ T5287] usb 2-1: config 0 descriptor??
[  153.080573][ T6773] chnl_net:caif_netlink_parms(): no params data found
[  153.178906][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'.
[  153.490983][ T5286] usb 3-1: USB disconnect, device number 20
[  153.592383][ T5287] hid (null): no more usage index available
[  153.610570][ T5287] hid-generic 0003:045E:05DA.0004: ignoring exceeding usage max
[  153.647136][ T5287] hid-generic 0003:045E:05DA.0004: ignoring exceeding usage max
[  153.674428][ T5287] hid-generic 0003:045E:05DA.0004: no more usage index available
[  153.682627][ T5287] hid-generic 0003:045E:05DA.0004: item 0 4 2 2 parsing failed
[  153.691268][ T5287] hid-generic 0003:045E:05DA.0004: probe with driver hid-generic failed with error -22
[  153.696667][ T6805] syzkaller0: entered promiscuous mode
[  153.716316][ T6805] syzkaller0: entered allmulticast mode
[  153.819530][ T5286] usb 2-1: USB disconnect, device number 11
[  154.528498][ T5231] Bluetooth: hci5: command tx timeout
[  154.864217][ T5287] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  155.040147][ T5287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.050533][ T5287] usb 5-1: config 0 has no interfaces?
[  155.064387][ T5287] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  155.086850][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.104300][ T5287] usb 5-1: config 0 descriptor??
[  155.332194][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.356158][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.373742][ T5313] usb 5-1: USB disconnect, device number 17
[  156.604259][ T5231] Bluetooth: hci5: command tx timeout
[  157.312993][   T52] hsr_slave_0: left promiscuous mode
[  157.321817][   T52] hsr_slave_1: left promiscuous mode
[  157.330525][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.341476][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.377706][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.385509][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.425644][   T52] veth1_macvtap: left promiscuous mode
[  157.436800][   T52] veth0_macvtap: left promiscuous mode
[  157.449183][   T52] veth1_vlan: left promiscuous mode
[  157.460870][   T52] veth0_vlan: left promiscuous mode
[  157.554268][ T1168] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  157.733028][ T1168] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  157.742120][ T1168] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  157.759320][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  157.776899][ T1168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  157.786140][ T1168] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  157.797780][ T1168] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  157.813034][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  157.814948][ T1168] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  157.832605][ T1168] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  157.841937][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  157.848806][ T1168] usb 3-1: Product: syz
[  157.865594][ T1168] usb 3-1: Manufacturer: syz
[  157.907208][ T1168] cdc_wdm 3-1:1.0: skipping garbage
[  157.912572][ T1168] cdc_wdm 3-1:1.0: skipping garbage
[  157.924598][ T1168] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  157.930599][ T1168] cdc_wdm 3-1:1.0: Unknown control protocol
[  157.939109][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  157.959327][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  157.972461][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.147632][ T6854] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.165507][ T6854] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  158.194667][ T6854] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.383'.
[  158.224454][ T6854] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  158.284639][ T1168] usb 3-1: USB disconnect, device number 21
[  158.435502][   T52] team0 (unregistering): Port device team_slave_1 removed
[  158.492408][   T52] team0 (unregistering): Port device team_slave_0 removed
[  158.685403][ T5231] Bluetooth: hci5: command tx timeout
[  159.029640][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'.
[  159.041042][ T6865] FAULT_INJECTION: forcing a failure.
[  159.041042][ T6865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.054444][ T6865] CPU: 0 UID: 0 PID: 6865 Comm: syz.2.388 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[  159.065057][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  159.075143][ T6865] Call Trace:
[  159.078448][ T6865]  <TASK>
[  159.081400][ T6865]  dump_stack_lvl+0x241/0x360
[  159.086106][ T6865]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.091317][ T6865]  ? __pfx__printk+0x10/0x10
[  159.095934][ T6865]  ? __pfx_lock_release+0x10/0x10
[  159.100995][ T6865]  should_fail_ex+0x3b0/0x4e0
[  159.105704][ T6865]  _copy_from_iter+0x1ed/0x1d60
[  159.110575][ T6865]  ? __virt_addr_valid+0x183/0x530
[  159.115709][ T6865]  ? __pfx_lock_release+0x10/0x10
[  159.120759][ T6865]  ? __alloc_skb+0x28f/0x440
[  159.125353][ T6865]  ? __pfx__copy_from_iter+0x10/0x10
[  159.130647][ T6865]  ? __virt_addr_valid+0x183/0x530
[  159.135759][ T6865]  ? __virt_addr_valid+0x183/0x530
[  159.140869][ T6865]  ? __virt_addr_valid+0x45f/0x530
[  159.145984][ T6865]  ? __check_object_size+0x48e/0x900
[  159.151293][ T6865]  netlink_sendmsg+0x73d/0xcb0
[  159.156088][ T6865]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.161382][ T6865]  ? aa_sock_msg_perm+0x91/0x160
[  159.166325][ T6865]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.171610][ T6865]  __sock_sendmsg+0x221/0x270
[  159.176377][ T6865]  ____sys_sendmsg+0x52a/0x7e0
[  159.181144][ T6865]  ? __pfx_____sys_sendmsg+0x10/0x10
[  159.186448][ T6865]  __sys_sendmsg+0x292/0x380
[  159.191055][ T6865]  ? __pfx___sys_sendmsg+0x10/0x10
[  159.196174][ T6865]  ? __pfx_vfs_write+0x10/0x10
[  159.200953][ T6865]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  159.207281][ T6865]  ? do_syscall_64+0x100/0x230
[  159.212047][ T6865]  ? do_syscall_64+0xb6/0x230
[  159.216751][ T6865]  do_syscall_64+0xf3/0x230
[  159.221249][ T6865]  ? clear_bhb_loop+0x35/0x90
[  159.225921][ T6865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.231816][ T6865] RIP: 0033:0x7f6fe877dff9
[  159.236232][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.255844][ T6865] RSP: 002b:00007f6fe9584038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.264260][ T6865] RAX: ffffffffffffffda RBX: 00007f6fe8935f80 RCX: 00007f6fe877dff9
[  159.272224][ T6865] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004
[  159.280187][ T6865] RBP: 00007f6fe9584090 R08: 0000000000000000 R09: 0000000000000000
[  159.288151][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.296113][ T6865] R13: 0000000000000000 R14: 00007f6fe8935f80 R15: 00007f6fe8a5fa28
[  159.304096][ T6865]  </TASK>
[  159.307237][    C0] vkms_vblank_simulate: vblank timer overrun
[  159.693733][ T6856] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 !
[  160.007714][ T6875] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  160.046622][ T5231] Bluetooth: hci0: command tx timeout
[  160.063998][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.100431][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.145516][ T6773] bridge_slave_0: entered allmulticast mode
[  160.162542][ T6773] bridge_slave_0: entered promiscuous mode
[  160.164318][ T5286] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  160.170602][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.183123][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.190461][ T6773] bridge_slave_1: entered allmulticast mode
[  160.206117][ T6773] bridge_slave_1: entered promiscuous mode
[  160.400957][ T5286] usb 5-1: Using ep0 maxpacket: 32
[  160.428076][ T6773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.443699][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.463990][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.514224][ T5286] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  160.516080][ T6773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.543805][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.571434][ T5286] usb 5-1: config 0 descriptor??
[  160.611086][ T5286] hub 5-1:0.0: USB hub found
[  160.698567][ T6773] team0: Port device team_slave_0 added
[  160.728715][ T6889] netlink: 44 bytes leftover after parsing attributes in process `syz.3.393'.
[  160.777800][ T6773] team0: Port device team_slave_1 added
[  160.814153][ T5286] hub 5-1:0.0: 1 port detected
[  161.084751][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.106513][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.193395][ T6773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.336109][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.412705][ T6773] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.435080][ T6773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.512286][ T6773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.664928][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.802983][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.831227][ T6773] hsr_slave_0: entered promiscuous mode
[  161.890307][ T6773] hsr_slave_1: entered promiscuous mode
[  161.926601][ T6773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.945902][ T6773] Cannot create hsr debugfs directory
[  162.036261][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.085434][ T6859] chnl_net:caif_netlink_parms(): no params data found
[  162.127931][ T5231] Bluetooth: hci0: command tx timeout
[  162.520475][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.665690][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.935951][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.944741][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.985777][ T6859] bridge_slave_0: entered allmulticast mode
[  163.077422][ T6859] bridge_slave_0: entered promiscuous mode
[  163.176068][   T52] bridge_slave_1: left allmulticast mode
[  163.354212][   T52] bridge_slave_1: left promiscuous mode
[  163.360102][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.658003][   T52] bridge_slave_0: left allmulticast mode
[  163.663847][   T52] bridge_slave_0: left promiscuous mode
[  163.670271][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.224366][ T5231] Bluetooth: hci0: command tx timeout
[  164.636732][ T1168] hub 5-1:0.0: activate --> -90
[  164.704950][ T1168] hub 5-1:0.0: hub_ext_port_status failed (err = -32)
[  164.734197][ T5980] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  164.886899][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.934172][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.944229][ T5980] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  164.953282][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.970861][ T5980] usb 4-1: config 0 descriptor??
[  165.336508][ T1168] usb 5-1: USB disconnect, device number 18
[  165.385505][ T5980] appletouch 4-1:0.0: Geyser mode initialized.
[  165.405440][ T5980] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15
[  165.586978][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'.
[  165.642874][ T5555] udevd[5555]: Error opening device "/dev/input/event4": Input/output error
[  165.652984][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'.
[  165.674476][ T5555] udevd[5555]: Unable to EVIOCGABS device "/dev/input/event4"
[  165.682684][ T5555] udevd[5555]: Unable to EVIOCGABS device "/dev/input/event4"
[  165.996512][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'.
[  166.011581][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'.
[  166.111167][ T6936] mmap: syz.4.398 (6936) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  166.205873][  T938] usb 4-1: USB disconnect, device number 16
[  166.228887][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.271483][  T938] appletouch 4-1:0.0: input: appletouch disconnected
[  166.299909][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.310997][ T5231] Bluetooth: hci0: command tx timeout
[  166.328484][   T52] bond0 (unregistering): Released all slaves
[  166.352214][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.365942][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.402241][ T6859] bridge_slave_1: entered allmulticast mode
[  166.409860][ T6859] bridge_slave_1: entered promiscuous mode
[  166.424218][ T5270] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  166.660469][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.673184][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.703495][ T5270] usb 5-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=ab.a0
[  166.713033][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.726208][ T5270] usb 5-1: config 0 descriptor??
[  166.756629][ T5270] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[  166.767627][ T5270] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  167.122935][ T6859] team0: Port device team_slave_0 added
[  167.131590][ T6859] team0: Port device team_slave_1 added
[  168.752162][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.773954][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.029150][ T5980] usb 5-1: USB disconnect, device number 19
[  169.194297][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.504319][ T5980] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  169.712497][ T5980] usb 5-1: Using ep0 maxpacket: 8
[  169.737846][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.756664][ T5980] usb 5-1: unable to get BOS descriptor or descriptor too short
[  169.767191][ T5980] usb 5-1: config 9 has an invalid interface number: 5 but max is 0
[  169.781731][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.828753][ T5980] usb 5-1: config 9 has no interface number 0
[  169.847379][ T5980] usb 5-1: config 9 interface 5 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  169.869512][ T5980] usb 5-1: config 9 interface 5 has no altsetting 0
[  169.880616][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.912501][ T5980] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  169.952563][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.965747][   T52] hsr_slave_0: left promiscuous mode
[  170.042032][ T5980] usb 5-1: Product: syz
[  170.048124][ T5980] usb 5-1: Manufacturer: syz
[  170.052851][   T52] hsr_slave_1: left promiscuous mode
[  170.072763][ T5980] usb 5-1: SerialNumber: syz
[  170.081822][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.111760][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.342766][ T6960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.405'.
[  170.396399][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.451936][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.495506][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.502998][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.564406][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.606929][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.745274][   T52] veth1_macvtap: left promiscuous mode
[  170.750848][   T52] veth0_macvtap: left promiscuous mode
[  170.766977][ T5980] usb 5-1: USB disconnect, device number 20
[  170.839676][   T52] veth1_vlan: left promiscuous mode
[  170.880181][   T52] veth0_vlan: left promiscuous mode
[  172.367786][ T5286] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  172.552583][ T5286] usb 5-1: too many configurations: 65, using maximum allowed: 8
[  173.262832][ T5286] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  173.307140][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.358723][ T5286] usb 5-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  173.402303][ T5286] usb 5-1: No valid video chain found.
[  177.021945][ T5286] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  177.194411][ T5286] usb 3-1: Using ep0 maxpacket: 16
[  177.213659][ T5286] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 9.06
[  177.243561][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.285851][ T5286] r8152-cfgselector 3-1: Unknown version 0x0000
[  177.302418][ T5286] r8152-cfgselector 3-1: config 0 descriptor??
[  177.554252][ T5286] r8152-cfgselector 3-1: Unknown version 0x0000
[  177.573243][ T5286] r8152-cfgselector 3-1: bad CDC descriptors
[  177.616244][ T5286] r8152-cfgselector 3-1: USB disconnect, device number 22
[  177.700758][   T52] team0 (unregistering): Port device team_slave_1 removed
[  177.942696][   T52] team0 (unregistering): Port device team_slave_0 removed
[  178.254755][ T6983] fuse: Unknown parameter ''
[  181.181462][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  181.190372][ T5241] Bluetooth: hci3: command 0x0406 tx timeout
[  181.201280][ T5239] Bluetooth: hci4: command 0x0406 tx timeout
[  182.674257][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'.
[  188.322618][    T0] sched: DL replenish lagged too much
[  193.434844][ T6859] hsr_slave_0: entered promiscuous mode
[  193.516143][ T6859] hsr_slave_1: entered promiscuous mode
[  193.721999][ T6859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  193.771543][ T6859] Cannot create hsr debugfs directory
[  193.884152][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.921902][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.932258][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.954703][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.967636][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  193.975162][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.020788][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  194.042354][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  194.050976][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  194.067199][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  194.075418][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  194.083466][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  194.460343][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  194.476934][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  194.517048][    T9] usb 5-1: USB disconnect, device number 21
[  194.910828][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.921349][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.942818][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.952383][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.984633][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  194.993399][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  195.488065][ T6773] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  195.584650][ T6773] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  195.654757][ T6773] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  195.821949][ T6773] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  196.064305][ T5237] Bluetooth: hci2: command tx timeout
[  196.124351][ T5237] Bluetooth: hci6: command tx timeout
[  196.949922][   T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.084379][ T5237] Bluetooth: hci3: command tx timeout
[  198.124250][ T5237] Bluetooth: hci2: command tx timeout
[  198.206756][ T5237] Bluetooth: hci6: command tx timeout
[  199.164340][ T5237] Bluetooth: hci3: command tx timeout
[  200.204371][ T5243] Bluetooth: hci2: command tx timeout
[  200.284249][ T5237] Bluetooth: hci6: command tx timeout
[  201.250892][ T5237] Bluetooth: hci3: command tx timeout
[  202.284907][ T5237] Bluetooth: hci2: command tx timeout
[  202.374214][ T5237] Bluetooth: hci6: command tx timeout
[  203.324313][ T5237] Bluetooth: hci3: command tx timeout
[  212.269044][ T5243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  212.289375][ T5243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  212.297906][ T5243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  212.306205][ T5243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  212.315217][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  212.337212][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  214.444414][ T5243] Bluetooth: hci7: command tx timeout
[  216.525056][ T5243] Bluetooth: hci7: command tx timeout
[  218.604279][ T5243] Bluetooth: hci7: command tx timeout
[  219.071436][ T5237] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  219.088202][ T5237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  219.104346][ T5237] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  219.112669][ T5237] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  219.121579][ T5237] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  219.134790][ T5237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  220.687577][ T5243] Bluetooth: hci7: command tx timeout
[  221.244492][ T5243] Bluetooth: hci8: command tx timeout
[  223.324364][ T5243] Bluetooth: hci8: command tx timeout
[  225.404307][ T5243] Bluetooth: hci8: command tx timeout
[  227.489151][ T5243] Bluetooth: hci8: command tx timeout
[  244.704047][ T5237] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  244.719498][ T5237] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  244.728193][ T5237] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  244.744319][ T5237] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  244.751961][ T5237] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  244.759753][ T5237] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  244.956071][ T5243] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  244.967007][ T5243] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  244.974926][ T5243] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  244.992464][ T5243] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  245.000198][ T5243] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  245.008266][ T5243] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  246.844384][ T5243] Bluetooth: hci9: command tx timeout
[  247.084511][ T5243] Bluetooth: hci10: command tx timeout
[  248.930978][ T5243] Bluetooth: hci9: command tx timeout
[  249.164368][ T5243] Bluetooth: hci10: command tx timeout
[  251.004629][ T5243] Bluetooth: hci9: command tx timeout
[  251.244323][ T5243] Bluetooth: hci10: command tx timeout
[  253.084434][ T5243] Bluetooth: hci9: command tx timeout
[  253.324631][ T5237] Bluetooth: hci10: command tx timeout
[  254.296034][ T5237] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  254.312519][ T5237] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  254.320960][ T5237] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  254.332165][ T5237] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  254.340246][ T5237] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  254.347958][ T5237] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  255.894671][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  255.901409][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  256.451113][ T5237] Bluetooth: hci11: command tx timeout
[  258.524301][ T5237] Bluetooth: hci11: command tx timeout
[  260.605006][ T5237] Bluetooth: hci11: command tx timeout
[  262.684276][ T5237] Bluetooth: hci11: command tx timeout
[  273.324338][ T5243] Bluetooth: hci5: command 0x0406 tx timeout
[  273.437907][ T5243] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  273.448232][ T5243] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  273.458215][ T5243] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  273.467145][ T5243] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  273.475670][ T5243] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  273.484337][ T5243] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  275.565128][ T5243] Bluetooth: hci12: command tx timeout
[  277.644435][ T5243] Bluetooth: hci12: command tx timeout
[  279.724577][ T5243] Bluetooth: hci12: command tx timeout
[  280.239634][ T5237] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  280.248697][ T5237] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  280.257132][ T5237] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  280.269588][ T5237] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  280.277727][ T5237] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  280.285686][ T5237] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  281.804324][ T5237] Bluetooth: hci12: command tx timeout
[  282.364325][ T5237] Bluetooth: hci13: command tx timeout
[  283.569724][ T5237] Bluetooth: hci0: command 0x0406 tx timeout
[  284.444357][ T5243] Bluetooth: hci13: command tx timeout
[  286.524358][ T5243] Bluetooth: hci13: command tx timeout
[  288.610979][ T5243] Bluetooth: hci13: command tx timeout
[  305.609889][ T5237] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  305.628408][ T5237] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  305.636885][ T5237] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  305.646707][ T5237] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  305.656018][ T5237] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  305.663915][ T5237] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  305.781622][ T5243] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  305.794660][ T5243] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  305.803092][ T5243] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  305.812568][ T5243] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  305.820394][ T5243] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  305.830752][ T5243] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  307.724427][ T5243] Bluetooth: hci14: command tx timeout
[  307.884323][ T5243] Bluetooth: hci15: command tx timeout
[  309.810854][ T5243] Bluetooth: hci14: command tx timeout
[  309.970822][ T5243] Bluetooth: hci15: command tx timeout
[  311.884320][ T5243] Bluetooth: hci14: command tx timeout
[  312.044590][ T5243] Bluetooth: hci15: command tx timeout
[  313.964365][ T5243] Bluetooth: hci14: command tx timeout
[  314.124744][ T5243] Bluetooth: hci15: command tx timeout
[  315.396457][ T5243] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  315.409885][ T5243] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  315.420415][ T5243] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  315.430012][ T5243] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  315.438073][ T5243] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  315.448058][ T5243] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  317.329046][   T30] INFO: task syz.3.408:6970 blocked for more than 143 seconds.
[  317.344649][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  317.350985][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  317.390863][   T30]       Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[  317.454118][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  317.462846][   T30] task:syz.3.408       state:D stack:27360 pid:6970  tgid:6969  ppid:5251   flags:0x00004004
[  317.484375][ T5231] Bluetooth: hci16: command tx timeout
[  317.664286][   T30] Call Trace:
[  317.667632][   T30]  <TASK>
[  317.670591][   T30]  __schedule+0x1895/0x4b30
[  317.724577][   T30]  ? __pfx___schedule+0x10/0x10
[  317.729514][   T30]  ? __pfx_lock_release+0x10/0x10
[  317.764746][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  317.770736][   T30]  ? schedule+0x90/0x320
[  317.821614][   T30]  schedule+0x14b/0x320
[  317.826201][   T30]  jbd2_log_wait_commit+0x29f/0x4a0
[  317.831456][   T30]  ? __pfx_lock_release+0x10/0x10
[  317.864168][   T30]  ? __pfx_jbd2_log_wait_commit+0x10/0x10
[  317.869975][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  317.934194][   T30]  ? __jbd2_log_start_commit+0x5e/0x320
[  317.939826][   T30]  ? _raw_write_unlock+0x28/0x50
[  317.981451][   T30]  ext4_sync_fs+0x45c/0x710
[  318.003805][   T30]  ? __pfx_super_lock+0x10/0x10
[  318.024156][   T30]  ? __pfx_ext4_sync_fs+0x10/0x10
[  318.029269][   T30]  iterate_supers+0xc6/0x190
[  318.033893][   T30]  ? __pfx_sync_fs_one_sb+0x10/0x10
[  318.090776][   T30]  ksys_sync+0xdb/0x1c0
[  318.105697][   T30]  ? __pfx_ksys_sync+0x10/0x10
[  318.110518][   T30]  ? do_syscall_64+0x100/0x230
[  318.150782][   T30]  ? do_syscall_64+0xb6/0x230
[  318.172504][   T30]  __do_sys_sync+0xe/0x20
[  318.200692][   T30]  do_syscall_64+0xf3/0x230
[  318.205652][   T30]  ? clear_bhb_loop+0x35/0x90
[  318.210373][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.254208][   T30] RIP: 0033:0x7fe9e2b7dff9
[  318.273749][   T30] RSP: 002b:00007fe9e38b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  318.314261][   T30] RAX: ffffffffffffffda RBX: 00007fe9e2d35f80 RCX: 00007fe9e2b7dff9
[  318.322294][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  318.394239][   T30] RBP: 00007fe9e38b7090 R08: 0000000000000000 R09: 0000000000000000
[  318.402286][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.454176][   T30] R13: 0000000000000001 R14: 00007fe9e2d35f80 R15: 00007fe9e2e5fa28
[  318.491876][   T30]  </TASK>
[  318.514238][   T30] 
[  318.514238][   T30] Showing all locks held in the system:
[  318.522015][   T30] 3 locks held by kworker/u8:1/12:
[  318.581198][   T30]  #0: ffff88814ba22948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  318.654265][   T30]  #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  318.696161][   T30]  #2: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[  318.731170][   T30] 1 lock held by khungtaskd/30:
[  318.764359][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  318.810844][   T30] 6 locks held by kworker/u8:3/52:
[  318.832213][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  318.873074][   T30]  #1: ffffc90000bd7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  318.920566][   T30]  #2: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  318.954123][   T30]  #3: ffff8880302960e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440
[  318.994125][   T30]  #4: ffff888030297250 (&devlink->lock_key#2){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440
[  319.040682][   T30]  #5: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0
[  319.084719][   T30] 3 locks held by kworker/u8:8/2975:
[  319.090066][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  319.161475][   T30]  #1: ffffc9000a31fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  319.211311][   T30]  #2: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  319.254148][   T30] 1 lock held by dhcpcd/4900:
[  319.258893][   T30]  #0: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0
[  319.312953][   T30] 2 locks held by getty/4989:
[  319.333597][   T30]  #0: ffff88814bcfb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  319.381463][   T30]  #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  319.418873][ T5231] Bluetooth: hci2: command 0x0406 tx timeout
[  319.425216][ T5239] Bluetooth: hci6: command 0x0406 tx timeout
[  319.431257][ T5239] Bluetooth: hci3: command 0x0406 tx timeout
[  319.454324][   T30] 5 locks held by kworker/u9:4/5237:
[  319.459669][   T30]  #0: ffff888036ce6948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  319.534195][   T30]  #1: ffffc900020ffd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  319.570923][ T5239] Bluetooth: hci16: command tx timeout
[  319.584545][   T30]  #2: ffff8880202ecd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  319.630575][   T30]  #3: ffff8880202ec078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  319.673189][   T30]  #4: ffffffff8fe3ea28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  319.702198][   T30] 5 locks held by kworker/u9:7/5241:
[  319.724338][   T30]  #0: ffff888036b2e948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  319.754315][   T30]  #1: ffffc900020cfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  319.791155][   T30]  #2: ffff88802e97cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  319.830753][   T30]  #3: ffff88802e97c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  319.860722][   T30]  #4: ffffffff8fe3ea28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  319.890702][   T30] 6 locks held by kworker/u9:9/5243:
[  319.896578][   T30]  #0: ffff888039442148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  319.930426][   T30]  #1: ffffc9000380fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  319.964350][   T30]  #2: ffff8880396c8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  319.990655][   T30]  #3: ffff8880396c8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  320.031571][   T30]  #4: ffffffff8fe3ea28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  320.064922][   T30]  #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  320.094292][   T30] 3 locks held by kworker/0:5/5287:
[  320.099543][   T30]  #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  320.140391][   T30]  #1: ffffc90003d67d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  320.172990][   T30]  #2: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  320.203520][   T30] 4 locks held by kworker/1:8/5313:
[  320.229026][   T30] 1 lock held by syz-executor/6773:
[  320.237940][   T30]  #0: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  320.264210][   T30] 8 locks held by syz-executor/6859:
[  320.269547][   T30]  #0: ffff8880244be420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  320.304310][   T30]  #1: ffff88801c3da888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  320.340886][   T30]  #2: ffff8881417d95a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  320.384202][   T30]  #3: ffffffff8f570208 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  320.410863][   T30]  #4: ffff8880312750e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  320.441092][   T30]  #5: ffff88802a8a4250 (&devlink->lock_key#8){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160
[  320.470733][   T30]  #6: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0
[  320.504982][   T30]  #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0
[  320.540716][   T30] 1 lock held by syz.3.408/6970:
[  320.554277][   T30]  #0: ffff888032dfa0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x27c/0x400
[  320.584349][   T30] 1 lock held by syz-executor/7005:
[  320.589605][   T30]  #0: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  320.621325][   T30] 1 lock held by syz-executor/7006:
[  320.642731][   T30]  #0: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  320.674263][   T30] 1 lock held by syz-executor/7008:
[  320.679518][   T30]  #0: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400
[  320.717012][   T30] 2 locks held by syz-executor/7030:
[  320.722359][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  320.760750][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  320.791279][   T30] 2 locks held by syz-executor/7035:
[  320.804348][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  320.813846][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  320.870809][   T30] 2 locks held by syz-executor/7042:
[  320.877587][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  320.904215][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  320.932254][   T30] 2 locks held by syz-executor/7044:
[  320.953877][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  320.984303][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  321.014258][   T30] 2 locks held by syz-executor/7049:
[  321.019596][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  321.053350][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  321.084560][   T30] 2 locks held by syz-executor/7054:
[  321.089897][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  321.124282][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  321.161140][   T30] 2 locks held by syz-executor/7059:
[  321.181416][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  321.221337][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  321.244318][   T30] 2 locks held by syz-executor/7067:
[  321.249658][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  321.285019][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  321.309679][   T30] 2 locks held by syz-executor/7069:
[  321.329921][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  321.364304][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  321.384250][   T30] 2 locks held by syz-executor/7074:
[  321.389581][   T30]  #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  321.432178][   T30]  #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  321.460067][   T30] 
[  321.462448][   T30] =============================================
[  321.462448][   T30] 
[  321.538192][   T30] NMI backtrace for cpu 0
[  321.542577][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[  321.553105][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  321.563184][   T30] Call Trace:
[  321.566478][   T30]  <TASK>
[  321.569424][   T30]  dump_stack_lvl+0x241/0x360
[  321.574127][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  321.579348][   T30]  ? __pfx__printk+0x10/0x10
[  321.583969][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  321.588941][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  321.594422][   T30]  ? _printk+0xd5/0x120
[  321.598603][   T30]  ? __pfx__printk+0x10/0x10
[  321.603213][   T30]  ? __wake_up_klogd+0xcc/0x110
[  321.608087][   T30]  ? __pfx__printk+0x10/0x10
[  321.612700][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  321.617746][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  321.623759][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  321.629776][   T30]  watchdog+0xff4/0x1040
[  321.634039][   T30]  ? watchdog+0x1ea/0x1040
[  321.638474][   T30]  ? __pfx_watchdog+0x10/0x10
[  321.643259][   T30]  kthread+0x2f0/0x390
[  321.647344][   T30]  ? __pfx_watchdog+0x10/0x10
[  321.652044][   T30]  ? __pfx_kthread+0x10/0x10
[  321.656661][   T30]  ret_from_fork+0x4b/0x80
[  321.661110][   T30]  ? __pfx_kthread+0x10/0x10
[  321.665723][   T30]  ret_from_fork_asm+0x1a/0x30
[  321.670534][   T30]  </TASK>
[  321.674485][   T30] Sending NMI from CPU 0 to CPUs 1:
[  321.679769][    C1] NMI backtrace for cpu 1
[  321.679783][    C1] CPU: 1 UID: 0 PID: 5313 Comm: kworker/1:8 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[  321.679803][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  321.679814][    C1] Workqueue: events_power_efficient neigh_periodic_work
[  321.679839][    C1] RIP: 0010:kasan_check_range+0x79/0x290
[  321.679861][    C1] Code: 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 <4c> 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 49 ff c3
[  321.679875][    C1] RSP: 0018:ffffc90000a17be0 EFLAGS: 00000002
[  321.679889][    C1] RAX: 0000000000000001 RBX: 1ffffffff2858f00 RCX: ffffffff81706f51
[  321.679901][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c7800
[  321.679912][    C1] RBP: 0000000000000001 R08: ffffffff942c7807 R09: 1ffffffff2858f00
[  321.679923][    C1] R10: dffffc0000000000 R11: fffffbfff2858f00 R12: 0000000000000000
[  321.679935][    C1] R13: ffff8880217c8ad8 R14: dffffc0000000001 R15: fffffbfff2858f01
[  321.679948][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  321.679962][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  321.679974][    C1] CR2: 000000002020b030 CR3: 000000000e734000 CR4: 00000000003526f0
[  321.679989][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  321.679999][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  321.680010][    C1] Call Trace:
[  321.680016][    C1]  <NMI>
[  321.680030][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  321.680048][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  321.680069][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  321.680092][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  321.680111][    C1]  ? nmi_handle+0x14f/0x5a0
[  321.680127][    C1]  ? nmi_handle+0x2a/0x5a0
[  321.680143][    C1]  ? kasan_check_range+0x79/0x290
[  321.680159][    C1]  ? default_do_nmi+0x63/0x160
[  321.680179][    C1]  ? exc_nmi+0x123/0x1f0
[  321.680195][    C1]  ? end_repeat_nmi+0xf/0x53
[  321.680213][    C1]  ? __lock_acquire+0x12a1/0x2050
[  321.680232][    C1]  ? kasan_check_range+0x79/0x290
[  321.680249][    C1]  ? kasan_check_range+0x79/0x290
[  321.680266][    C1]  ? kasan_check_range+0x79/0x290
[  321.680283][    C1]  </NMI>
[  321.680289][    C1]  <IRQ>
[  321.680295][    C1]  __lock_acquire+0x12a1/0x2050
[  321.680320][    C1]  lock_acquire+0x1ed/0x550
[  321.680339][    C1]  ? debug_check_no_obj_freed+0x234/0x580
[  321.680363][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  321.680382][    C1]  ? ip_finish_output2+0x45f/0x1390
[  321.680405][    C1]  ? mark_lock+0x9a/0x360
[  321.680422][    C1]  _raw_spin_lock_irqsave+0xd5/0x120
[  321.680442][    C1]  ? debug_check_no_obj_freed+0x234/0x580
[  321.680460][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  321.680480][    C1]  ? ip_finish_output2+0xa14/0x1390
[  321.680500][    C1]  ? skb_release_data+0x6a0/0x8a0
[  321.680517][    C1]  debug_check_no_obj_freed+0x234/0x580
[  321.680541][    C1]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  321.680561][    C1]  ? ip_skb_dst_mtu+0x6ba/0x9b0
[  321.680582][    C1]  ? skb_release_data+0x6a0/0x8a0
[  321.680598][    C1]  ? skb_release_data+0x6a0/0x8a0
[  321.680615][    C1]  kfree+0x11f/0x440
[  321.680635][    C1]  skb_release_data+0x6a0/0x8a0
[  321.680654][    C1]  consume_skb+0x9f/0xf0
[  321.680669][    C1]  nft_synproxy_eval_v4+0x3d2/0x610
[  321.680691][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  321.680712][    C1]  ? nf_ip_checksum+0x13a/0x500
[  321.680733][    C1]  nft_synproxy_do_eval+0x362/0xa60
[  321.680754][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  321.680775][    C1]  ? __pfx_validate_chain+0x10/0x10
[  321.680795][    C1]  nft_do_chain+0x4ad/0x1da0
[  321.680819][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  321.680838][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  321.680866][    C1]  ? __pfx_nf_nat_inet_fn+0x10/0x10
[  321.680883][    C1]  nft_do_chain_inet+0x418/0x6b0
[  321.680903][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  321.680922][    C1]  ? ipt_do_table+0x312/0x1860
[  321.680946][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  321.680964][    C1]  nf_hook_slow+0xc3/0x220
[  321.680982][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  321.680999][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  321.681016][    C1]  NF_HOOK+0x29e/0x450
[  321.681039][    C1]  ? NF_HOOK+0x9a/0x450
[  321.681054][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  321.681070][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  321.681089][    C1]  ? ip_rcv_finish+0x406/0x560
[  321.681106][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  321.681122][    C1]  NF_HOOK+0x3a4/0x450
[  321.681138][    C1]  ? NF_HOOK+0x9a/0x450
[  321.681153][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  321.681169][    C1]  ? ip_rcv_core+0x801/0xd10
[  321.681186][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  321.681204][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  321.681219][    C1]  __netif_receive_skb+0x2bf/0x650
[  321.681238][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  321.681257][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  321.681274][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  321.681294][    C1]  ? __pfx_lock_release+0x10/0x10
[  321.681312][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  321.681335][    C1]  process_backlog+0x662/0x15b0
[  321.681355][    C1]  ? process_backlog+0x33b/0x15b0
[  321.681375][    C1]  ? __pfx_process_backlog+0x10/0x10
[  321.681392][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  321.681412][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  321.681433][    C1]  __napi_poll+0xcb/0x490
[  321.681452][    C1]  net_rx_action+0x89b/0x1240
[  321.681477][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  321.681494][    C1]  ? __run_timer_base+0x178/0x8e0
[  321.681512][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  321.681542][    C1]  handle_softirqs+0x2c5/0x980
[  321.681562][    C1]  ? do_softirq+0x11b/0x1e0
[  321.681580][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  321.681601][    C1]  do_softirq+0x11b/0x1e0
[  321.681618][    C1]  </IRQ>
[  321.681623][    C1]  <TASK>
[  321.681629][    C1]  ? __pfx_do_softirq+0x10/0x10
[  321.681646][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  321.681667][    C1]  ? rcu_is_watching+0x15/0xb0
[  321.681684][    C1]  __local_bh_enable_ip+0x1bb/0x200
[  321.681702][    C1]  ? neigh_periodic_work+0xb35/0xd50
[  321.681720][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  321.681738][    C1]  ? neigh_destroy+0x423/0x580
[  321.681756][    C1]  neigh_periodic_work+0xb35/0xd50
[  321.681776][    C1]  ? process_scheduled_works+0x976/0x1850
[  321.681796][    C1]  process_scheduled_works+0xa63/0x1850
[  321.681824][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  321.681845][    C1]  ? assign_work+0x364/0x3d0
[  321.681864][    C1]  worker_thread+0x870/0xd30
[  321.681885][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  321.681906][    C1]  ? __kthread_parkme+0x169/0x1d0
[  321.681926][    C1]  ? __pfx_worker_thread+0x10/0x10
[  321.681944][    C1]  kthread+0x2f0/0x390
[  321.681958][    C1]  ? __pfx_worker_thread+0x10/0x10
[  321.681976][    C1]  ? __pfx_kthread+0x10/0x10
[  321.681991][    C1]  ret_from_fork+0x4b/0x80
[  321.682009][    C1]  ? __pfx_kthread+0x10/0x10
[  321.682028][    C1]  ret_from_fork_asm+0x1a/0x30
[  321.682052][    C1]  </TASK>
[  322.415325][ T5241] Bluetooth: hci16: command tx timeout
[  322.554173][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  322.561080][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0
[  322.571610][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  322.581689][   T30] Call Trace:
[  322.584991][   T30]  <TASK>
[  322.587938][   T30]  dump_stack_lvl+0x241/0x360
[  322.592638][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.597854][   T30]  ? __pfx__printk+0x10/0x10
[  322.602471][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  322.608479][   T30]  ? vscnprintf+0x5d/0x90
[  322.612834][   T30]  panic+0x349/0x880
[  322.616767][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  322.622955][   T30]  ? __pfx_panic+0x10/0x10
[  322.627488][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  322.632914][   T30]  ? __irq_work_queue_local+0x137/0x410
[  322.638494][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  322.643887][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  322.650060][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  322.656248][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  322.662438][   T30]  watchdog+0x1033/0x1040
[  322.666811][   T30]  ? watchdog+0x1ea/0x1040
[  322.671261][   T30]  ? __pfx_watchdog+0x10/0x10
[  322.675983][   T30]  kthread+0x2f0/0x390
[  322.680080][   T30]  ? __pfx_watchdog+0x10/0x10
[  322.684786][   T30]  ? __pfx_kthread+0x10/0x10
[  322.689403][   T30]  ret_from_fork+0x4b/0x80
[  322.693848][   T30]  ? __pfx_kthread+0x10/0x10
[  322.698552][   T30]  ret_from_fork_asm+0x1a/0x30
[  322.703359][   T30]  </TASK>
[  322.706681][   T30] Kernel Offset: disabled
[  322.711004][   T30] Rebooting in 86400 seconds..