last executing test programs:

42.882069029s ago: executing program 1 (id=1052):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bc980000000000002408009a8efaf2008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500000001000072000000000000000000", 0x39}], 0x1)

40.671892476s ago: executing program 2 (id=1062):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x13}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
unshare(0x28000600)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000600))
fallocate(0xffffffffffffffff, 0x2, 0x400000000000004, 0x5)
r1 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB="d38898f975705f9332b74c88908404643d2ad65867a2478b8b05d4a25dbeff88fb37069f47c7e232f23a7bc66f4e94690677e84cdf20883f28d18a6ce4f8fa4924a143c22778f7177b4d26ea30c72c41ffcc515c033576c343cbb08c5b70cfcfbeadecdcf68842cfd6d6fefc500cb8616b1d51ed6b1621f2b4b55837e230d1a9ecf256e05f9a98062282ab5168a97a1f52cd0bc2169498950f390651e7d6a3038ba0b40d69b14d03f830a77e019084b404ffed6f9554edd247d5e1966cfb62590ad638ef9d0d730590f51c15df4c07269d47f934d5c7ab5ed13ff839009bdbbcb66e", @ANYRESDEC=r2, @ANYBLOB=',\x00'])
syz_fuse_handle_req(r2, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close(r2)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
lstat(&(0x7f0000000080)='./file0\x00', 0x0)
mmap(&(0x7f0000694000/0x1000)=nil, 0x1000, 0xf, 0x4008031, r1, 0x99d2a000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r3=>0xffffffffffffffff, 0x1, 0x80000000, 0x8})
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={@private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, @dev, 0x0, 0x0, 0x5018})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)

39.671613682s ago: executing program 2 (id=1066):
socket$inet6(0xa, 0x3, 0x6)
socket$igmp6(0xa, 0x3, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0)
socket(0x10, 0x80003, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200027fff000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x94}}, 0x0)

39.625787062s ago: executing program 3 (id=1067):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000002900000036000000000000000000000024000000000000002900000032"], 0x40}}], 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="7000000010004b0402000000ffdbdf257a000000", @ANYRES32=0x0, @ANYBLOB="0000000004030100440012800b00010065727370616e000034000280050008000800000008000100", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="060003000300000008000600e000000208001500e5fc080008000400018000000a00010031"], 0x70}}, 0x40)
r3 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r4, &(0x7f0000000300)={0x2, 0x0, @broadcast, 0xfffffffd}, 0x10)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10)
syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002206"], 0x0}, 0x0)

36.990082296s ago: executing program 2 (id=1076):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0)

36.864730741s ago: executing program 2 (id=1077):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYBLOB="0517"], 0x0)

36.459212229s ago: executing program 3 (id=1078):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500005c0000000000019078ae1e0001ac1414aa0500900000002f0000000000060000000000000001ac1414bb0000000000000000000000007f00000100000000ac1414bb00000000ac1414bb00000000"], 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f00000000c0)="24d41e88f7000000000000008100", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000003480)=@can_delroute={0x294, 0x19, 0x100, 0x70bd2b, 0x25dfdbff, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3a, 0x75, 0x3f, 0x80, 0x9, "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", 0x2, "1616d18b11c7438ee5a6eba8ae2d601e11926ce5"}}, @CGW_SRC_IF={0x8, 0x9, r4}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x15, 0x4e, 0x57, 0x6, 0x4, "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", 0x0, "caa230c95843e9c9c6e31aaf92a4d2ce34ede211"}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffff9, 0x1, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "000000008a97e8ff"}, 0x7}}]}, 0x294}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020)
sendmsg$key(r0, 0x0, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000003440)={'macsec0\x00', 0x1ff})
r5 = socket(0x10, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000380), 0x0, 0x0})
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$printer(r7, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff}}}, 0x24}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0)

35.455739876s ago: executing program 4 (id=1079):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0xf8030000}}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)

35.175321536s ago: executing program 4 (id=1080):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x13}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
unshare(0x28000600)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000600))
fallocate(0xffffffffffffffff, 0x2, 0x400000000000004, 0x5)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4)
r1 = socket(0xa, 0x3, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000390400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000803040000000000"], 0x28}}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0xc4, 0x0, &(0x7f0000000780)=[@free_buffer={0x40086303, r8}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fd, @fd, @fda={0x66646185, 0x7, 0x0, 0x22}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}, @transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x0, 0x0, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000001740)=""/4096, 0x1000, 0x0, 0x16}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/81, 0x51, 0x0, 0x33}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}}, @free_buffer={0x40086303, r8}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r10, 0x4038ae7a, &(0x7f0000000240)={[{0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]})
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

33.731131756s ago: executing program 4 (id=1083):
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x24008000)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = syz_open_dev$dri(0x0, 0x7ffffffb, 0x22d01)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x8000, '\x00', @ptr=0x20001100}})
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={<r6=>0xffffffffffffffff, 0x3})
close_range(r6, r5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000640))
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000740)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7d1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0xa0}}], 0x1, 0x44)
r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="65bb150a2bacf14cf93c7cae7de07db5ea3f3859ce116c3c4f065bf5d303af7f3c7978b1ce63738988ba26c1d5e984c3ac7b9af64b03ce1cba3662e7499552b9fea3ccd16916f663d7feff6bbe435704b2464bc4a4285833baf711ef5d28d26581fa9809e4d2549d293dbdba43a30cd4ca543600"/131, 0x83}, {&(0x7f00000000c0)="3f610405f03d3179ba4e94402962a22b217f3c0260812b335e595f012296c16bb933be128ca3f15fdeef0fed183d2af83eb53b2e81273d1e10a9f8f3b842396086df712694d48a9f87462dd28bc4941a47b98192c223611f378f041ba7d67712594e1d51fb4411cb", 0x68}, {&(0x7f0000000140)="3f5bfdf074cf0a77f4a044a499ac4159b2aa2207b4c84d973fce04be8e33d1eebb65430cb98bce4eebcdc886b3456faead2145f8d984886da46c479b38596cb2bb1e1bc4af894c04c837b78b806c27824d02dd14b396fa15cb4a64a2d6794ff26dc830c2627f3bdcd1429821f2", 0x6d}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xf8, 0x2004001c}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="9936bbad29e39a99d613426d196c8768a290e897507db8658ddce566e671cc33521d03cad3f30357976f79ccfa65257fcb9d7bacaba06c4fa4abe1b18b1b419b98572243ec7c41e63d64fa7a485f40b0d54a069e5bf5997e308dbf4319dc375050e4b5d52ad2af5ef781ecc97bf660c3152e70b5f86b2ac6749d0cc2c68d1adbe1994dcb1461308951516caaf7c61a70dfee84", 0x93}, {&(0x7f0000000380)="c2ffdd18f7b9ca08666e2d90fd95703587afc29bf51cea1922d0010d75b56fc27062d18906972ee10259de0b0777f4dcb4af7978587fc0799ea7cb482db023cad86cdd84724ffc0c6ef2186be5", 0x4d}, {&(0x7f0000000400)="417ce116a61408c3f6733274d143386e6a33d600e09fef2e62315025e07bfe34002b6eaf2c65f2dee892913c038c173fd9fd707d73ae2c5cc48c1be9dcae3b79d6eb1f85eed5c40e4431b54db50caea548a181d42d330f9e71fa4920d3da1a14e0ce53aa9b1ee205d68f2fd88085e6189dc12340c47ca57cbd9a0fd66c9d5fc6aecd3c421a623579ba265f3dfcf2002310649a2603130799070abb09e6b3ef58f209389b32e04d65156108b42511602f", 0xb0}, {&(0x7f00000004c0)="e313900c17feaa75fa95", 0xa}], 0x4, &(0x7f0000000540), 0x0, 0x4}], 0x2, 0x20008880)

33.713178713s ago: executing program 2 (id=1084):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x7f)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file1', [{}]}, 0xc)
close(r0)
getsockname$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e)
r1 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0xc, 0x0, 0x0, 0x0, &(0x7f0000000300)})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
open_tree(r0, &(0x7f0000000280)='./file1/../file0\x00', 0x89001)
execveat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x100)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x5, 0x3ff, 0x2, 0x5}, 0x8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x40002009})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbee3, 0x1010, 0xffffffffffffffff, 0xffffd000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)

33.383445574s ago: executing program 3 (id=1085):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x806, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x6, 0xf989, "1bd7"}, @timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r1, 0x3)
socket$inet_dccp(0x2, 0x6, 0x0)
r3 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
readv(r4, &(0x7f0000000000), 0x0)
connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r5 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_reply={0x12, 0x0, 0x0, 0x1}}}}}, 0x0)

32.646400219s ago: executing program 0 (id=1087):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bc980000000000002408009a8efaf2008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500000003000072000000000000000000", 0x39}], 0x1)

32.456976945s ago: executing program 4 (id=1088):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000008000406b1d010140000102030109029c0003010000000904000000010100000a24010000000201020a24040000fd0a1d16bc11240600000500000000000000000000000a24070000000000fcff0904010000010200000904010101010200000905010900000000000725010000000009040200"], 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$TIOCGDEV(r1, 0x80045432, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x4044055)
preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/70, 0x46}, {0x0}, {&(0x7f00000003c0)=""/238, 0xee}, {0x0}], 0x4, 0x4, 0x8)
io_setup(0x589, 0x0)
io_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)
epoll_create1(0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x34, 0x3, "7dd86dc9b7ffffc7961e64e816e2fa144f7707e5f7f6cbd498a6b1affd1a3a7027bb2a1535664f6c1793c8ab258d7f10"}, @NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0xc8}}, 0x0)
getpid()

32.265745408s ago: executing program 1 (id=1053):
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x89, &(0x7f0000000fc0)=@string={0x89, 0x3, "b44a774707234ae6b32d33e9c39baa6d508fb4df9c59d56464eaced71ae90b759e1aa1e7f1ffc66cf326802eb09a7968f90b38417dd21692e49842ec3f5780b65c4480fb7aacc3b30eb4e68a228b1ebf1df08dac2e62a615c94eee6de0ba611a5aed8789b5cc1795e1b1dc2beb58df2dbd248cc4c2da2c4464c9ba8617b351669f8528aef42375"}}]})
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3)
write$binfmt_misc(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="588c90aadaedde6a2e64f465b0fcbcb8b6449c2f317140214a9be29c9e467325a38e1b43cddd210783f3dc083935e3b9dbfc09a3e0b8febcada80457ed"], 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000000000003000000ffffffffffffab5600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

31.875655618s ago: executing program 0 (id=1089):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x44}}, 0x0)

31.714694124s ago: executing program 0 (id=1090):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000003010000b702000014000000b7030000000000f08400000083000000870900000000000055090100000000009500000000000000bf910000000000007b020000000000008500000085000000b70000002000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

31.25271563s ago: executing program 0 (id=1091):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000240)=[<r2=>0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x9, 0x4})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000440)=r2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f00000002c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000540)={'wg1\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x1, 0x3, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r10=>r0, {0x1d7}}, './file0\x00'})
openat2(r10, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xb2082, 0x100}, 0x18)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x0, 0x0, 0xa, 0x1ff, 0x1})

30.924213633s ago: executing program 0 (id=1092):
socket$inet6(0xa, 0x3, 0x6)
socket$igmp6(0xa, 0x3, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0)
socket(0x10, 0x80003, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c00020002feff000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x94}}, 0x0)

29.972962204s ago: executing program 4 (id=1093):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0)

26.531601045s ago: executing program 1 (id=1094):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="be38", 0x2}, {0x0}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c000000000000000000000007"], 0x40}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a1400000010"], 0x28}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES8=r3, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x1010)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
dup(r4) (async)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="be38", 0x2}, {0x0}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c000000000000000000000007"], 0x40}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a1400000010"], 0x28}}, 0x0) (async)
sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES8=r3, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x1010) (async)

26.174996109s ago: executing program 4 (id=1095):
creat(&(0x7f0000000080)='./file0\x00', 0x1de)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x100}, 0x24}}, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e000100"], 0x52)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f00000038c0)=""/102372, 0x18fe4}], 0x1, 0x0, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
ftruncate(r2, 0x3f)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}]}, 0x48}}, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
rmdir(0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001500f1ffffff00f5ffffff000a000000", @ANYRES32=0x0], 0x18}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20000080)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="d126ca64150000", @ANYBLOB], 0x1564}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

25.810799139s ago: executing program 3 (id=1096):
creat(&(0x7f0000000080)='./file0\x00', 0x1de)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x100}, 0x24}}, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e000100"], 0x52)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f00000038c0)=""/102372, 0x18fe4}], 0x1, 0x0, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
ftruncate(r2, 0x3f)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (fail_nth: 1)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}]}, 0x48}}, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
rmdir(0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001500f1ffffff00f5ffffff000a000000", @ANYRES32=0x0], 0x18}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20000080)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="d126ca64150000", @ANYBLOB], 0x1564}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

25.660890161s ago: executing program 2 (id=1097):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000020000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000020000002008000000000000140400000cf80000000000000a000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005849000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ead800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b4b918d3e29a2e2c4dc5c8910000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f18a0afe99350000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f000000000000000000000000000000000001000000000000000000000000000000000000000000000001a62825cc07f99a1ccc36931604600000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90400000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000206c25019f82833ccf000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea18fde51d55aaab000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003fc95bb0000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000001100000000000000000000000000000000000000000000005080000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77000000000000"]}, 0xa08)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x4, 0x1, @remote}]}, 0x44}}, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x10f)
syz_usb_control_io$printer(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
close(0xffffffffffffffff)

25.21945728s ago: executing program 1 (id=1098):
creat(&(0x7f0000000080)='./file0\x00', 0x1de)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x100}, 0x24}}, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e000100"], 0x52)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f00000038c0)=""/102372, 0x18fe4}], 0x1, 0x0, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
ftruncate(r2, 0x3f)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}]}, 0x48}}, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

24.666611189s ago: executing program 3 (id=1099):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0xff000000}}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)

24.120847098s ago: executing program 0 (id=1100):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffd, 0x80)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x5, 0x1, 0x2008, 0x5, 0x7, 0x0, 0x0, 0x1}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0xc018620c, &(0x7f0000000700))
syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000280)={0x20, 0xf, 0xd7, {0xd7, 0xb, "ed61d8dc0512715285e709ebec6c8233c663527156d7fad03e3707c1e60658f3b03015f389747d4d0bf2e4a8a50fd2a121af61f1d1f528abf9f8589470ab4ebfc1cda0479761d96271507f4c711d1875b8c89ec7276f32c7eca5c59f2430d57ef1ee5fb8f5e8530ad94a3ad9cff9b49b4d27132e25f1d746e739073e74d95c603b1db58fa037a6a2cfc8d32bf450bed56fe70649bddee3bba2df64c102b6c3322b64eda83c60e40ba5bf56dfd7cfea53b839bd6b320fcc20814762de2efd4e07d4e73ffcac85b251eb54718078e5c7172f9bb3306a"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000000600)={0x34, &(0x7f0000000380)={0x40, 0x17, 0x40, "ce88c6bf2801849b8a43f44ac184463c9870fff259d01d81d522a57289f4900c0bbdf25a7785a5492dadc66ef9346ce7b89c56703b799f6ccf025aed307ef8c8"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0xfc, {0xfa, "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"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0xf4}})

23.955313774s ago: executing program 3 (id=1101):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0xd})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000001600000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = io_uring_setup(0x4bef, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
close_range(r6, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x39)

9.339744321s ago: executing program 1 (id=1102):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x13}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
unshare(0x28000600)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8000000, 0x0}, 0x0, 0x8, &(0x7f0000000600))
fallocate(0xffffffffffffffff, 0x2, 0x400000000000004, 0x5)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4)
r3 = socket(0xa, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth1_vlan\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000022ad7ae0d2f766d702c679eaff032bbd"], 0x14}}, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc8, 0x0, &(0x7f0000000780)=[@free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x8, 0x2, 0x5}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x400}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x0, 0x0, 0x800000000030}, @ptr={0x70742a85, 0x1, &(0x7f0000001740)=""/4096, 0x1000, 0x0, 0x1a}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r9, 0x4038ae7a, &(0x7f0000000240)={[{0x2, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x7, 0xfffd, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc}]})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=1107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x806, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x6, 0xf989, "1bd7"}, @timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

910628][ T5286] [drm] Initialized udl on minor 2
[  227.917696][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.926198][ T5286] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  227.935421][ T5287] usb 4-1: Product: syz
[  227.940644][ T5286] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  227.959979][ T5287] usb 4-1: Manufacturer: syz
[  227.968598][ T5287] usb 4-1: SerialNumber: syz
[  227.976120][   T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  227.985486][ T5286] usb 5-1: USB disconnect, device number 33
[  228.001322][ T5287] usb 4-1: config 0 descriptor??
[  228.007089][   T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  228.114722][ T8524] loop4: detected capacity change from 0 to 7
[  228.121533][ T8524] Dev loop4: unable to read RDB block 7
[  228.128995][ T8524]  loop4: unable to read partition table
[  228.135275][ T8524] loop4: partition table beyond EOD, truncated
[  228.141471][ T8524] loop_reread_partitions: partition scan of loop4 (�被x������ڬ��dƤ����ݡ�����
[  228.141471][ T8524] 
) failed (rc=-5)
[  228.181806][    T8] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  228.272152][ T8511] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  228.342636][ T4623] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  228.351451][ T4623] Bluetooth: hci0: Injecting HCI hardware error event
[  228.359705][ T4623] Bluetooth: hci0: hardware error 0x00
[  228.367347][    T8] usb 1-1: Using ep0 maxpacket: 8
[  228.379913][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.392307][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.402323][    T8] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  228.411491][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.425470][    T8] usb 1-1: config 0 descriptor??
[  228.662147][ T8520] vlan3: entered promiscuous mode
[  228.667494][ T8520] bond0: (slave vlan3): Error -34 calling dev_set_mtu
[  228.689615][ T8533] netlink: 104 bytes leftover after parsing attributes in process `syz.2.820'.
[  228.789645][ T8535] bridge0: port 4(bond0) entered blocking state
[  228.813780][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  228.821402][    T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  228.825542][ T8537] binder: 8536:8537 ioctl c0306201 200001c0 returned -14
[  228.871429][ T8535] bridge0: port 4(bond0) entered disabled state
[  228.879884][    T8] usb 1-1: USB disconnect, device number 36
[  228.906457][ T8535] bond0: entered allmulticast mode
[  228.923253][ T8535] bond_slave_0: entered allmulticast mode
[  228.929056][ T8535] bond_slave_1: entered allmulticast mode
[  228.949064][ T8535] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  228.960071][ T8535] bond0: entered promiscuous mode
[  228.967439][ T5290] usb 4-1: USB disconnect, device number 52
[  228.977918][ T8535] bond_slave_0: entered promiscuous mode
[  228.991005][ T8535] bond_slave_1: entered promiscuous mode
[  229.005296][ T8535] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  229.014803][ T8535] bridge0: port 4(bond0) entered blocking state
[  229.021208][ T8535] bridge0: port 4(bond0) entered forwarding state
[  229.042097][ T8540] tunl0: entered promiscuous mode
[  229.049021][ T8540] netlink: 'syz.2.823': attribute type 1 has an invalid length.
[  229.082137][ T8540] netlink: 9 bytes leftover after parsing attributes in process `syz.2.823'.
[  229.102282][   T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  229.277969][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.828'.
[  229.314821][   T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.314856][   T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.316351][   T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  229.316386][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  229.316411][   T25] usb 5-1: SerialNumber: syz
[  229.576952][   T25] usb 5-1: 0:2 : does not exist
[  229.601066][   T25] usb 5-1: unit 5 not found!
[  229.684211][   T25] usb 5-1: USB disconnect, device number 34
[  229.691640][ T5290] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  229.730207][ T8566] netlink: 'syz.1.833': attribute type 1 has an invalid length.
[  229.739329][ T8566] netlink: 9 bytes leftover after parsing attributes in process `syz.1.833'.
[  229.753241][ T5254] udevd[5254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.843957][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.855570][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.865940][ T5290] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  229.875342][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.886365][ T5290] usb 3-1: config 0 descriptor??
[  229.903697][    T8] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  229.921980][ T8570] bridge0: port 3(syz_tun) entered blocking state
[  229.928712][ T8570] bridge0: port 3(syz_tun) entered disabled state
[  229.942399][ T8570] syz_tun: entered allmulticast mode
[  229.948877][ T8570] syz_tun: entered promiscuous mode
[  229.969838][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.835'.
[  230.073705][    T8] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  230.084052][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.111033][    T8] usb 4-1: config 0 descriptor??
[  230.237426][ T8579] loop4: detected capacity change from 0 to 7
[  230.246482][ T8579] Dev loop4: unable to read RDB block 7
[  230.255192][ T8579]  loop4: unable to read partition table
[  230.261212][ T8579] loop4: partition table beyond EOD, truncated
[  230.277558][ T8579] loop_reread_partitions: partition scan of loop4 (�被x������ڬ��dƤ����ݡ�����
[  230.277558][ T8579] 
) failed (rc=-5)
[  230.327582][   T29] kauditd_printk_skb: 49 callbacks suppressed
[  230.327603][   T29] audit: type=1326 audit(1726979400.862:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.840" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f618017def9 code=0x0
[  230.335273][ T5290] wacom 0003:056A:0016.0009: Unknown device_type for 'HID 056a:0016'. Assuming pen.
[  230.370893][    T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  230.372457][   T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  230.382947][    T8] asix 4-1:0.0: probe with driver asix failed with error -71
[  230.404158][ T5290] wacom 0003:056A:0016.0009: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.2-1/input0
[  230.419049][ T5290] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0016.0009/input/input21
[  230.440454][    T8] usb 4-1: USB disconnect, device number 53
[  230.511929][ T4623] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  230.543255][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.553788][   T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  230.563551][   T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  230.578267][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.589869][   T25] usb 2-1: config 0 descriptor??
[  230.896816][ T8586] binder: 8585:8586 ioctl c0306201 200001c0 returned -14
[  231.015711][ T8590] netlink: 'syz.4.843': attribute type 1 has an invalid length.
[  231.023994][ T8590] netlink: 9 bytes leftover after parsing attributes in process `syz.4.843'.
[  231.199261][ T8597] fuse: Unknown parameter ''
[  231.432586][    T8] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  231.605484][    T8] usb 4-1: Using ep0 maxpacket: 8
[  231.617581][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.649247][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.671190][    T8] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  231.748521][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.765109][    T8] usb 4-1: config 0 descriptor??
[  232.067309][ T8596] vlan2: entered promiscuous mode
[  232.122109][ T8596] bond0: (slave vlan2): Error -34 calling dev_set_mtu
[  232.218723][  T937] usb 3-1: USB disconnect, device number 25
[  232.230334][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  232.245914][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  232.336659][    T8] usb 4-1: USB disconnect, device number 54
[  232.662852][ T5287] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  232.791756][  T937] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  232.832510][ T5287] usb 1-1: Using ep0 maxpacket: 16
[  232.848606][ T5287] usb 1-1: config 0 has no interfaces?
[  232.869975][ T5287] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  232.910856][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.934845][ T5287] usb 1-1: Product: syz
[  232.946176][ T5287] usb 1-1: Manufacturer: syz
[  232.961139][ T5287] usb 1-1: SerialNumber: syz
[  232.981711][  T937] usb 5-1: device descriptor read/64, error -71
[  232.997645][ T5287] r8152-cfgselector 1-1: Unknown version 0x0000
[  233.018186][ T5287] r8152-cfgselector 1-1: config 0 descriptor??
[  233.164936][ T5287] usb 2-1: USB disconnect, device number 31
[  233.202533][ T5286] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  233.232449][  T937] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  233.371735][ T5286] usb 4-1: Using ep0 maxpacket: 8
[  233.383617][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  233.402199][  T937] usb 5-1: device descriptor read/64, error -71
[  233.402581][ T5286] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8
[  233.421086][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.436127][ T5286] usb 4-1: Product: syz
[  233.442552][ T5286] usb 4-1: Manufacturer: syz
[  233.451328][ T5286] usb 4-1: SerialNumber: syz
[  233.479675][ T5286] usb 4-1: config 0 descriptor??
[  233.500858][ T5286] redrat3 4-1:0.0: Couldn't find all endpoints
[  233.513110][  T937] usb usb5-port1: attempt power cycle
[  233.582208][ T5287] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  233.708890][ T5286] usb 4-1: USB disconnect, device number 55
[  233.743479][ T5287] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  233.756291][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.772420][ T5287] usb 2-1: config 0 descriptor??
[  233.881681][  T937] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  233.915654][  T937] usb 5-1: device descriptor read/8, error -71
[  233.986700][ T8627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.191931][  T937] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  234.212443][  T937] usb 5-1: device descriptor read/8, error -71
[  234.325709][  T937] usb usb5-port1: unable to enumerate USB device
[  234.589289][ T5287] pegasus 2-1:0.0: probe with driver pegasus failed with error -71
[  234.606887][ T8631] raw_sendmsg: syz.2.857 forgot to set AF_INET. Fix it!
[  234.620400][ T5287] usb 2-1: USB disconnect, device number 32
[  234.641795][   T25] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  234.803406][   T25] usb 4-1: Using ep0 maxpacket: 16
[  234.813827][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  234.834241][   T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  234.846253][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.868206][   T25] usb 4-1: config 0 descriptor??
[  234.878397][   T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  235.023075][ T5289] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  235.189396][ T5289] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99
[  235.196672][  T937] r8152-cfgselector 1-1: USB disconnect, device number 37
[  235.198883][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.215763][ T5289] usb 3-1: Product: syz
[  235.247868][ T5289] usb 3-1: Manufacturer: syz
[  235.260777][ T5289] usb 3-1: SerialNumber: syz
[  235.268625][ T5289] usb 3-1: config 0 descriptor??
[  235.286100][ T8642] netlink: 104 bytes leftover after parsing attributes in process `syz.0.861'.
[  235.545901][   T25] usb 3-1: USB disconnect, device number 26
[  235.667448][ T8658] netlink: 'syz.4.867': attribute type 1 has an invalid length.
[  235.667475][ T8658] netlink: 9 bytes leftover after parsing attributes in process `syz.4.867'.
[  235.727458][ T8659] vlan2: entered promiscuous mode
[  235.727601][ T8659] vlan2: entered allmulticast mode
[  235.767694][  T937] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  235.923385][  T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.943559][  T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.943735][  T937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  235.944237][  T937] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  235.944438][  T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.953687][  T937] usb 1-1: config 0 descriptor??
[  235.994370][ T5289] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  236.143359][ T5289] usb 5-1: device descriptor read/64, error -71
[  236.333576][ T8671] lo: entered allmulticast mode
[  236.369565][ T8671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  236.391725][ T5289] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  236.463386][ T8671] netlink: 'syz.2.871': attribute type 17 has an invalid length.
[  236.499182][  T937] corsair-cpro 0003:1B1C:1D00.000A: unknown main item tag 0x0
[  236.522020][  T937] corsair-cpro 0003:1B1C:1D00.000A: unknown main item tag 0x0
[  236.531764][ T5289] usb 5-1: device descriptor read/64, error -71
[  236.564357][  T937] corsair-cpro 0003:1B1C:1D00.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.0-1/input0
[  236.653467][ T5289] usb usb5-port1: attempt power cycle
[  236.679647][  T937] corsair-cpro 0003:1B1C:1D00.000A: probe with driver corsair-cpro failed with error -38
[  236.689439][ T8651] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.020243][  T937] usb 1-1: USB disconnect, device number 38
[  237.021804][ T5289] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  237.052338][ T5289] usb 5-1: device descriptor read/8, error -71
[  237.302346][ T5289] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  237.342506][ T5289] usb 5-1: device descriptor read/8, error -71
[  237.377116][ T8675] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  237.391874][ T8675] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  237.423059][ T8675] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  237.446114][ T8675] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  237.462947][ T5289] usb usb5-port1: unable to enumerate USB device
[  237.463079][    T8] usb 4-1: USB disconnect, device number 56
[  237.474670][ T8675] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  237.497567][ T8675] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  237.545193][ T8675] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  237.551236][ T8675] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  237.561091][ T8675] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  237.679231][ T8686] netlink: 104 bytes leftover after parsing attributes in process `syz.1.876'.
[  237.961829][    T8] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[  238.021816][   T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  238.030991][ T8698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.881'.
[  238.043053][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  238.133631][    T8] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  238.146980][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.151790][   T25] usb 1-1: device descriptor read/64, error -71
[  238.159012][    T8] usb 4-1: config 0 descriptor??
[  238.181973][    T9] usb 3-1: device descriptor read/64, error -71
[  238.374490][    T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  238.387958][    T8] asix 4-1:0.0: probe with driver asix failed with error -71
[  238.401816][   T25] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  238.402619][    T8] usb 4-1: USB disconnect, device number 57
[  238.431917][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  238.531730][   T25] usb 1-1: device descriptor read/64, error -71
[  238.571666][    T9] usb 3-1: device descriptor read/64, error -71
[  238.642364][   T25] usb usb1-port1: attempt power cycle
[  238.661984][ T4623] Bluetooth: hci2: command 0x0c1a tx timeout
[  238.692177][    T9] usb usb3-port1: attempt power cycle
[  238.982146][   T25] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  239.012417][   T25] usb 1-1: device descriptor read/8, error -71
[  239.047393][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  239.092709][    T9] usb 3-1: device descriptor read/8, error -71
[  239.107351][ T8713] netlink: 'syz.3.886': attribute type 1 has an invalid length.
[  239.116038][ T8713] netlink: 9 bytes leftover after parsing attributes in process `syz.3.886'.
[  239.151821][ T5287] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  239.251863][   T25] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  239.286669][   T25] usb 1-1: device descriptor read/8, error -71
[  239.311775][ T5287] usb 5-1: Using ep0 maxpacket: 8
[  239.319633][ T5287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.330430][ T5287] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  239.339487][ T5287] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  239.341762][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  239.349027][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.371964][ T5287] usb 5-1: config 0 descriptor??
[  239.378906][    T9] usb 3-1: device descriptor read/8, error -71
[  239.379472][ T5289] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  239.402257][   T25] usb usb1-port1: unable to enumerate USB device
[  239.463330][ T4623] Bluetooth: hci1: command 0x0c1a tx timeout
[  239.503275][    T9] usb usb3-port1: unable to enumerate USB device
[  239.541777][ T5289] usb 2-1: Using ep0 maxpacket: 32
[  239.552977][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.564253][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.574177][ T5289] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  239.585379][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.596826][ T5289] usb 2-1: config 0 descriptor??
[  239.621737][ T4623] Bluetooth: hci3: command 0x041b tx timeout
[  239.811228][ T8715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.825218][ T8715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.041261][ T8715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.050390][ T8715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.277972][ T5289] belkin 0003:050D:3201.000B: item fetching failed at offset 5/7
[  240.295577][ T5289] belkin 0003:050D:3201.000B: parse failed
[  240.303050][ T5289] belkin 0003:050D:3201.000B: probe with driver belkin failed with error -22
[  240.371127][ T8724] netlink: 'syz.2.891': attribute type 10 has an invalid length.
[  240.414870][ T8724] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode
[  240.435430][ T8724] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode
[  240.450965][ T8724] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  240.479934][ T5290] usb 2-1: USB disconnect, device number 33
[  240.741864][ T4623] Bluetooth: hci2: command 0x0c1a tx timeout
[  240.805846][ T8737] bridge0: port 4(dummy0) entered blocking state
[  240.825116][ T8737] bridge0: port 4(dummy0) entered disabled state
[  240.838616][ T8737] dummy0: entered allmulticast mode
[  240.846555][ T8737] dummy0: entered promiscuous mode
[  240.851410][ T8739] FAULT_INJECTION: forcing a failure.
[  240.851410][ T8739] name failslab, interval 1, probability 0, space 0, times 0
[  240.877188][ T8737] bridge0: port 4(dummy0) entered blocking state
[  240.877226][ T8739] CPU: 0 UID: 0 PID: 8739 Comm: syz.3.895 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  240.883780][ T8737] bridge0: port 4(dummy0) entered forwarding state
[  240.893885][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  240.893910][ T8739] Call Trace:
[  240.893939][ T8739]  <TASK>
[  240.893949][ T8739]  dump_stack_lvl+0x241/0x360
[  240.921426][ T8739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.926658][ T8739]  ? __pfx__printk+0x10/0x10
[  240.931291][ T8739]  ? fs_reclaim_acquire+0x93/0x140
[  240.936423][ T8739]  ? __pfx___might_resched+0x10/0x10
[  240.941735][ T8739]  should_fail_ex+0x3b0/0x4e0
[  240.946429][ T8739]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  240.952167][ T8739]  should_failslab+0xac/0x100
[  240.956955][ T8739]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  240.962678][ T8739]  __kmalloc_noprof+0xd8/0x400
[  240.967452][ T8739]  tomoyo_realpath_from_path+0xcf/0x5e0
[  240.973013][ T8739]  tomoyo_path_number_perm+0x23a/0x880
[  240.978489][ T8739]  ? tomoyo_path_number_perm+0x208/0x880
[  240.984133][ T8739]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  240.990147][ T8739]  ? __fget_files+0x29/0x470
[  240.994762][ T8739]  ? __fget_files+0x3f3/0x470
[  240.999451][ T8739]  security_file_ioctl+0xc6/0x2a0
[  241.004507][ T8739]  __se_sys_ioctl+0x47/0x170
[  241.009106][ T8739]  do_syscall_64+0xf3/0x230
[  241.013619][ T8739]  ? clear_bhb_loop+0x35/0x90
[  241.018326][ T8739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.024330][ T8739] RIP: 0033:0x7f1833b7def9
[  241.028746][ T8739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  241.048359][ T8739] RSP: 002b:00007f18349f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  241.056783][ T8739] RAX: ffffffffffffffda RBX: 00007f1833d36130 RCX: 00007f1833b7def9
[  241.064781][ T8739] RDX: 00000000200001c0 RSI: 00000000c0306201 RDI: 000000000000000a
[  241.072754][ T8739] RBP: 00007f18349f9090 R08: 0000000000000000 R09: 0000000000000000
[  241.080738][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.088711][ T8739] R13: 0000000000000000 R14: 00007f1833d36130 R15: 00007f1833e5fa28
[  241.096710][ T8739]  </TASK>
[  241.103832][    T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  241.120242][ T8739] ERROR: Out of memory at tomoyo_realpath_from_path.
[  241.290430][    T8] usb 3-1: config 3 has an invalid interface number: 158 but max is 0
[  241.298834][    T8] usb 3-1: config 3 has no interface number 0
[  241.313879][    T8] usb 3-1: config 3 interface 158 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0
[  241.337744][    T8] usb 3-1: config 3 interface 158 altsetting 4 endpoint 0x2 has an invalid bInterval 80, changing to 10
[  241.352019][    T8] usb 3-1: config 3 interface 158 has no altsetting 0
[  241.370567][    T8] usb 3-1: New USB device found, idVendor=0499, idProduct=102e, bcdDevice=6a.77
[  241.383962][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.404342][    T8] usb 3-1: Product: syz
[  241.411268][    T8] usb 3-1: Manufacturer: syz
[  241.421391][    T8] usb 3-1: SerialNumber: syz
[  241.462369][ T8737] syz.3.895 (8737): drop_caches: 2
[  241.545464][ T4623] Bluetooth: hci1: command 0x0c1a tx timeout
[  241.702594][ T4623] Bluetooth: hci3: command 0x041b tx timeout
[  241.728489][ T8755] netlink: 'syz.3.900': attribute type 1 has an invalid length.
[  241.737549][ T8755] netlink: 9 bytes leftover after parsing attributes in process `syz.3.900'.
[  241.776495][    T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  241.823848][    T8] usb 3-1: invalid MIDI in EP 0
[  241.861798][ T5290] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  241.925446][    T8] snd-usb-audio 3-1:3.158: probe with driver snd-usb-audio failed with error -22
[  241.944931][ T5287] usb 5-1: USB disconnect, device number 43
[  241.949548][    T8] usb 3-1: USB disconnect, device number 31
[  241.994190][ T5256] udevd[5256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.158/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  242.072941][ T5290] usb 1-1: Using ep0 maxpacket: 8
[  242.085554][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.097438][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.108050][ T5290] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  242.119365][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.132619][ T5290] usb 1-1: config 0 descriptor??
[  242.278154][ T2551] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.370427][ T8751] vlan3: entered promiscuous mode
[  242.396461][ T8751] bond0: (slave vlan3): Error -34 calling dev_set_mtu
[  242.541229][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  242.550810][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  242.559762][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  242.568920][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  242.593980][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  242.601392][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  242.681136][ T5244] Bluetooth: hci3: unexpected subevent 0x01 length: 78 > 18
[  242.714266][ T2551] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.731566][ T5290] usbhid 1-1:0.0: can't add hid device: -71
[  242.737724][ T5290] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  242.748824][ T5290] usb 1-1: USB disconnect, device number 43
[  242.813307][ T2551] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.833101][ T5244] Bluetooth: hci2: command 0x0c1a tx timeout
[  242.841801][  T937] usb 4-1: new low-speed USB device number 58 using dummy_hcd
[  242.850185][ T8778] vlan2: entered promiscuous mode
[  242.904475][ T8778] vlan2: entered allmulticast mode
[  242.971654][   T29] audit: type=1326 audit(1726979413.502:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.3.911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1833b7def9 code=0x0
[  243.017165][ T2551] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.313921][ T8788] bridge0: port 4(dummy0) entered blocking state
[  243.345585][ T8788] bridge0: port 4(dummy0) entered disabled state
[  243.368452][ T8788] dummy0: entered allmulticast mode
[  243.500189][ T8788] dummy0: entered promiscuous mode
[  243.507554][ T8788] bridge0: port 4(dummy0) entered blocking state
[  243.514035][ T8788] bridge0: port 4(dummy0) entered forwarding state
[  243.621804][ T5244] Bluetooth: hci1: command 0x0c1a tx timeout
[  243.664953][ T8786] syz.1.912 (8786): drop_caches: 2
[  243.715381][ T8794] syz.0.913 (8794): drop_caches: 2
[  243.733412][ T2551] bond0: left allmulticast mode
[  243.739667][ T2551] bond_slave_0: left allmulticast mode
[  243.748082][ T2551] bond_slave_1: left allmulticast mode
[  243.759700][ T2551] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  243.778242][ T2551] bond0: left promiscuous mode
[  243.784120][ T5244] Bluetooth: hci3: command 0x041b tx timeout
[  243.800281][ T2551] bond_slave_0: left promiscuous mode
[  243.816099][ T2551] bond_slave_1: left promiscuous mode
[  243.838034][ T2551] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
[  243.865744][ T2551] bridge0: port 4(bond0) entered disabled state
[  243.909836][ T2551] dummy0: left allmulticast mode
[  243.923028][ T2551] dummy0: left promiscuous mode
[  243.928595][ T2551] bridge0: port 3(dummy0) entered disabled state
[  243.959749][ T2551] bridge_slave_1: left allmulticast mode
[  243.971919][ T2551] bridge_slave_1: left promiscuous mode
[  243.982330][ T2551] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.017446][ T2551] bridge_slave_0: left allmulticast mode
[  244.038017][ T2551] bridge_slave_0: left promiscuous mode
[  244.057918][ T2551] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.498939][ T8814] netlink: 104 bytes leftover after parsing attributes in process `syz.3.919'.
[  244.601496][ T8817] loop4: detected capacity change from 0 to 7
[  244.612564][ T8817] Dev loop4: unable to read RDB block 7
[  244.618240][ T8817]  loop4: unable to read partition table
[  244.671978][ T8817] loop4: partition table beyond EOD, truncated
[  244.680726][ T8817] loop_reread_partitions: partition scan of loop4 (�被x������ڬ��dƤ����ݡ�����
[  244.680726][ T8817] 
) failed (rc=-5)
[  244.761978][ T5244] Bluetooth: hci4: command tx timeout
[  245.024788][ T2551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.038701][ T2551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.064654][ T2551] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  245.076569][ T2551] bond0 (unregistering): Released all slaves
[  245.141277][ T8772] chnl_net:caif_netlink_parms(): no params data found
[  245.380339][ T5244] Bluetooth: hci3: unexpected subevent 0x01 length: 78 > 18
[  245.390146][ T5244] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  245.726674][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.753892][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.761168][ T8772] bridge_slave_0: entered allmulticast mode
[  245.809457][ T8772] bridge_slave_0: entered promiscuous mode
[  245.915208][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.929894][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.940528][ T8772] bridge_slave_1: entered allmulticast mode
[  245.957307][ T8772] bridge_slave_1: entered promiscuous mode
[  246.044717][ T8847] loop0: detected capacity change from 0 to 7
[  246.080661][ T8847] Dev loop0: unable to read RDB block 7
[  246.095854][ T8849] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.926'.
[  246.149193][ T8847]  loop0: AHDI p2
[  246.191679][ T2551] hsr_slave_0: left promiscuous mode
[  246.193863][ T8847] loop0: partition table partially beyond EOD, truncated
[  246.218685][ T2551] hsr_slave_1: left promiscuous mode
[  246.379333][ T2551] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.398939][ T2551] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.408701][ T2551] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.501365][ T2551] veth1_macvtap: left promiscuous mode
[  246.510566][ T2551] veth0_macvtap: left promiscuous mode
[  246.526868][ T2551] veth1_vlan: left promiscuous mode
[  246.536788][ T2551] veth0_vlan: left promiscuous mode
[  246.821810][ T4623] Bluetooth: hci4: command tx timeout
[  246.864052][ T8859] syz.3.928 (8859): drop_caches: 2
[  247.461731][  T937] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  247.531353][ T8818] syz.2.915 (8818) used greatest stack depth: 18200 bytes left
[  247.601811][  T937] usb 1-1: device descriptor read/64, error -71
[  247.819630][ T8872] netlink: 104 bytes leftover after parsing attributes in process `syz.2.933'.
[  247.859558][  T937] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  247.930152][ T2551] team0 (unregistering): Port device team_slave_1 removed
[  247.976325][ T2551] team0 (unregistering): Port device team_slave_0 removed
[  248.001844][  T937] usb 1-1: device descriptor read/64, error -71
[  248.123149][  T937] usb usb1-port1: attempt power cycle
[  248.410298][ T8772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.457985][ T8874] netlink: 'syz.2.934': attribute type 1 has an invalid length.
[  248.471961][ T8874] netlink: 9 bytes leftover after parsing attributes in process `syz.2.934'.
[  248.495300][  T937] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  248.513463][ T8772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.532183][  T937] usb 1-1: device descriptor read/8, error -71
[  248.629262][ T8772] team0: Port device team_slave_0 added
[  248.647935][ T8876] loop8: detected capacity change from 0 to 7
[  248.669740][ T8772] team0: Port device team_slave_1 added
[  248.696198][ T8876] Dev loop8: unable to read RDB block 7
[  248.714973][ T8876]  loop8: unable to read partition table
[  248.720842][ T8876] loop8: partition table beyond EOD, truncated
[  248.772015][  T937] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  248.787462][ T8876] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  248.787462][ T8876] 
) failed (rc=-5)
[  248.807377][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.812645][  T937] usb 1-1: device descriptor read/8, error -71
[  248.832169][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.891804][ T8772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.911815][ T4623] Bluetooth: hci4: command tx timeout
[  248.922433][  T937] usb usb1-port1: unable to enumerate USB device
[  248.934982][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.944541][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.991798][ T8772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.215236][ T8772] hsr_slave_0: entered promiscuous mode
[  249.238601][ T8772] hsr_slave_1: entered promiscuous mode
[  249.291932][ T8772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.308517][ T8772] Cannot create hsr debugfs directory
[  249.337478][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.941'.
[  249.367498][ T8902] netlink: 'syz.3.941': attribute type 18 has an invalid length.
[  249.393076][ T4623] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  249.760415][ T2551] IPVS: stop unused estimator thread 0...
[  249.776769][ T8911] vlan2: entered promiscuous mode
[  249.777053][ T8911] vlan2: entered allmulticast mode
[  250.104804][ T8917] syz.3.944 (8917): drop_caches: 2
[  250.368682][ T8931] netlink: 104 bytes leftover after parsing attributes in process `syz.2.948'.
[  250.473186][ T8929] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256
[  250.512382][ T8929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.949'.
[  250.741918][ T4623] Bluetooth: hci1: unexpected subevent 0x01 length: 78 > 18
[  250.984209][ T4623] Bluetooth: hci4: command tx timeout
[  251.018259][ T8951] netlink: 25 bytes leftover after parsing attributes in process `syz.3.952'.
[  251.146456][ T8772] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  251.193513][ T8772] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  251.242841][ T8772] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  251.264680][ T8772] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  251.441770][    T8] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  251.448290][ T8772] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.489789][ T8772] 8021q: adding VLAN 0 to HW filter on device team0
[  251.491865][  T937] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  251.511084][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.518386][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.552954][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.560165][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.635291][    T8] usb 4-1: not running at top speed; connect to a high speed hub
[  251.641329][ T8772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  251.653882][    T8] usb 4-1: config 4 has an invalid interface number: 44 but max is 1
[  251.653917][    T8] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  251.653941][    T8] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 2
[  251.666641][ T8772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  251.716768][ T8772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.741598][    T8] usb 4-1: config 4 has no interface number 0
[  251.747800][    T8] usb 4-1: config 4 interface 44 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  251.753179][ T8772] veth0_vlan: entered promiscuous mode
[  251.774814][ T8772] veth1_vlan: entered promiscuous mode
[  251.791658][    T8] usb 4-1: config 4 interface 44 has no altsetting 0
[  251.802352][ T8772] veth0_macvtap: entered promiscuous mode
[  251.814904][  T937] usb 1-1: Using ep0 maxpacket: 8
[  251.845779][ T8772] veth1_macvtap: entered promiscuous mode
[  251.869777][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.901726][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.931719][  T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.940712][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.943070][  T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.963326][  T937] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  251.972634][  T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.001829][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.023652][  T937] usb 1-1: config 0 descriptor??
[  252.032653][    T8] usb 4-1: New USB device found, idVendor=1608, idProduct=0244, bcdDevice=ad.a0
[  252.042306][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.050432][    T8] usb 4-1: Product: ᠁
[  252.053657][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.054766][    T8] usb 4-1: Manufacturer: п
[  252.066460][    T8] usb 4-1: SerialNumber: ᐄ
[  252.125236][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.182937][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.252921][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.306806][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.341345][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.396968][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.422856][    T8] io_ti 4-1:4.44: required endpoints missing
[  252.424722][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.452104][    T8] usb 4-1: USB disconnect, device number 59
[  252.511208][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.541394][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.621268][ T8954] vlan3: entered promiscuous mode
[  252.631974][ T8954] bond0: (slave vlan3): Error -34 calling dev_set_mtu
[  252.704582][ T8772] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.742187][ T8772] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.785816][ T8772] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.825435][ T8772] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.045560][  T937] usbhid 1-1:0.0: can't add hid device: -71
[  253.051795][  T937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  253.091805][ T5287] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  253.112113][  T937] usb 1-1: USB disconnect, device number 48
[  253.123166][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.159544][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.199493][ T8943] coredump: 212(syz.2.951): written to core: VMAs: 39, size 97550336; core: 60043910 bytes, pos 97562624
[  253.242483][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.250369][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.303392][ T5287] usb 2-1: Using ep0 maxpacket: 32
[  253.327147][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.364067][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  253.392922][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  253.443957][ T5287] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  253.467884][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.513416][ T5287] usb 2-1: config 0 descriptor??
[  253.522114][ T8989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.531882][   T25] usb 4-1: new low-speed USB device number 60 using dummy_hcd
[  253.553972][ T8978] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  253.570928][ T5287] hub 2-1:0.0: USB hub found
[  253.714616][   T25] usb 4-1: Invalid ep0 maxpacket: 32
[  253.791489][ T5287] hub 2-1:0.0: 2 ports detected
[  253.857154][ T9002] netlink: 104 bytes leftover after parsing attributes in process `syz.4.964'.
[  253.871779][   T25] usb 4-1: new low-speed USB device number 61 using dummy_hcd
[  254.051786][   T25] usb 4-1: Invalid ep0 maxpacket: 32
[  254.057828][   T25] usb usb4-port1: attempt power cycle
[  254.321997][ T5286] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  254.354064][ T9017] xt_hashlimit: overflow, try lower: 3/0
[  254.413538][   T25] usb 4-1: new low-speed USB device number 62 using dummy_hcd
[  254.452741][   T25] usb 4-1: Invalid ep0 maxpacket: 32
[  254.491852][ T5286] usb 1-1: Using ep0 maxpacket: 8
[  254.538509][ T5286] usb 1-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0
[  254.549132][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.571862][ T5286] usb 1-1: Product: syz
[  254.582501][   T25] usb 4-1: new low-speed USB device number 63 using dummy_hcd
[  254.601855][ T5286] usb 1-1: Manufacturer: syz
[  254.606528][ T5286] usb 1-1: SerialNumber: syz
[  254.644277][   T25] usb 4-1: Invalid ep0 maxpacket: 32
[  254.649863][ T5286] usb 1-1: config 0 descriptor??
[  254.655955][   T25] usb usb4-port1: unable to enumerate USB device
[  254.888826][ T5286] kaweth 1-1:0.0: Firmware present in device.
[  255.086902][ T5286] kaweth 1-1:0.0: Statistics collection: 0
[  255.106443][ T5286] kaweth 1-1:0.0: Multicast filter limit: 0
[  255.125642][ T5286] kaweth 1-1:0.0: MTU: 0
[  255.130156][ T5286] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[  255.143425][ T4623] Bluetooth: hci4: unexpected subevent 0x01 length: 78 > 18
[  255.202045][  T937] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  255.365507][  T937] usb 3-1: Using ep0 maxpacket: 16
[  255.380073][  T937] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  255.420578][  T937] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  255.446447][  T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.462731][  T937] usb 3-1: config 0 descriptor??
[  255.480330][  T937] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  255.580550][ T5286] kaweth 1-1:0.0: Error setting SOFS wait
[  255.597553][ T5286] kaweth 1-1:0.0: probe with driver kaweth failed with error -5
[  255.611396][ T5286] usb 1-1: USB disconnect, device number 49
[  255.732496][    T8] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  255.870938][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  255.877896][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  255.891896][    T8] usb 5-1: device descriptor read/64, error -71
[  256.142013][    T8] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  256.301710][    T8] usb 5-1: device descriptor read/64, error -71
[  256.443760][    T8] usb usb5-port1: attempt power cycle
[  256.641965][  T937] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  256.651987][   T25] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  256.685759][   T25] usb 2-1-port2: config error
[  256.702006][ T5286] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  256.714608][   T25] usb 2-1-port2: cannot warm reset (err = -71)
[  256.724109][   T25] usb 2-1-port2: cannot warm reset (err = -71)
[  256.730813][   T25] usb 2-1-port2: Cannot enable. Maybe the USB cable is bad?
[  256.745944][   T25] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  256.757663][   T25] usb 2-1-port2: connect-debounce failed
[  256.815277][    T8] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  256.841804][  T937] usb 1-1: Using ep0 maxpacket: 32
[  256.852534][    T8] usb 5-1: device descriptor read/8, error -71
[  256.877590][  T937] usb 1-1: New USB device found, idVendor=042c, idProduct=7505, bcdDevice=32.a8
[  256.887160][ T5286] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  256.889843][  T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.911486][  T937] usb 1-1: config 0 descriptor??
[  256.932842][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.959888][ T5286] usb 4-1: config 0 descriptor??
[  256.975227][ T5286] cp210x 4-1:0.0: cp210x converter detected
[  257.111682][    T8] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  257.144058][    T8] usb 5-1: device descriptor read/8, error -71
[  257.153602][  T937] usb 1-1: USB disconnect, device number 50
[  257.208915][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.242772][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.269237][    T8] usb usb5-port1: unable to enumerate USB device
[  257.517171][ T5286] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  257.542778][   T25] hub 2-1:0.0: set hub depth failed
[  257.543048][    T9] usb 2-1: USB disconnect, device number 34
[  257.575605][ T5286] usb 4-1: cp210x converter now attached to ttyUSB0
[  257.770930][   T25] usb 4-1: USB disconnect, device number 64
[  257.795787][   T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  257.836988][   T25] cp210x 4-1:0.0: device disconnected
[  257.940413][  T937] usb 3-1: USB disconnect, device number 32
[  257.991698][    T9] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  258.061729][    T8] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  258.067928][ T9080] vlan2: entered promiscuous mode
[  258.085152][ T9080] vlan2: entered allmulticast mode
[  258.156673][    T9] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  258.170198][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.189825][    T9] usb 2-1: config 0 descriptor??
[  258.211791][    T8] usb 1-1: Using ep0 maxpacket: 8
[  258.220373][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.239052][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.251280][    T8] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  258.267452][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.278086][ T5244] Bluetooth: hci1: unexpected subevent 0x01 length: 78 > 18
[  258.286078][ T5244] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  258.307985][    T8] usb 1-1: config 0 descriptor??
[  258.400794][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  258.415340][    T9] asix 2-1:0.0: probe with driver asix failed with error -71
[  258.428174][    T9] usb 2-1: USB disconnect, device number 35
[  258.565948][ T9077] vlan3: entered promiscuous mode
[  258.610183][ T9077] bond0: (slave vlan3): Error -34 calling dev_set_mtu
[  258.675280][   T29] audit: type=1326 audit(1726979429.212:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6bd7def9 code=0x7ffc0000
[  258.738435][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  258.746960][   T29] audit: type=1326 audit(1726979429.212:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fbc6bd7def9 code=0x7ffc0000
[  258.769248][    C0] vkms_vblank_simulate: vblank timer overrun
[  258.777895][    T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  258.789709][   T29] audit: type=1326 audit(1726979429.212:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6bd7def9 code=0x7ffc0000
[  258.813190][    T8] usb 1-1: USB disconnect, device number 51
[  258.844989][   T29] audit: type=1326 audit(1726979429.212:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbc6bd7def9 code=0x7ffc0000
[  258.868672][   T29] audit: type=1326 audit(1726979429.212:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6bd7def9 code=0x7ffc0000
[  258.897523][   T29] audit: type=1326 audit(1726979429.212:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fbc6bd7def9 code=0x7ffc0000
[  258.919707][    C0] vkms_vblank_simulate: vblank timer overrun
[  258.926102][  T937] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  258.976972][   T29] audit: type=1326 audit(1726979429.212:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6bd7def9 code=0x7ffc0000
[  259.060217][   T29] audit: type=1326 audit(1726979429.212:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fbc6bd7def9 code=0x7ffc0000
[  259.111748][   T29] audit: type=1326 audit(1726979429.212:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.4.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6bd7def9 code=0x7ffc0000
[  259.138228][  T937] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  259.151267][  T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  259.171429][  T937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0
[  259.191740][  T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  259.211626][  T937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  259.235870][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'.
[  259.244903][  T937] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[  259.244940][  T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.244964][  T937] usb 4-1: Product: syz
[  259.244983][  T937] usb 4-1: Manufacturer: syz
[  259.245001][  T937] usb 4-1: SerialNumber: syz
[  259.247150][  T937] usb 4-1: config 0 descriptor??
[  259.296915][ T9101] bridge0: entered promiscuous mode
[  259.307544][  T937] option 4-1:0.0: GSM modem (1-port) converter detected
[  259.334896][ T9101] macvtap1: entered promiscuous mode
[  259.422667][ T9106] netlink: 528 bytes leftover after parsing attributes in process `syz.0.990'.
[  259.442005][ T9106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.990'.
[  259.519005][   T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.546294][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.587383][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.693435][   T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.866563][   T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.041354][   T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.187553][  T937] usb 4-1: USB disconnect, device number 65
[  260.197304][  T937] option 4-1:0.0: device disconnected
[  260.297458][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  260.299957][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  260.301035][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  260.302732][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  260.303363][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  260.303660][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  260.400704][ T9112] syz.1.994 (9112): drop_caches: 2
[  260.463636][   T53] bridge_slave_1: left allmulticast mode
[  260.463669][   T53] bridge_slave_1: left promiscuous mode
[  260.463858][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.487925][   T53] bridge_slave_0: left allmulticast mode
[  260.487960][   T53] bridge_slave_0: left promiscuous mode
[  260.488186][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.839207][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  260.850004][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  260.861863][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  260.871014][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  260.872746][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  260.880792][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  260.933535][  T937] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  261.115339][  T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.128931][  T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.161876][  T937] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  261.171045][  T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.209742][  T937] usb 4-1: config 0 descriptor??
[  261.511511][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.525149][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.537679][   T53] bond0 (unregistering): Released all slaves
[  261.562358][ T9124] vlan3: entered promiscuous mode
[  261.567681][ T9124] vlan3: entered allmulticast mode
[  261.594263][ T5286] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  261.786348][ T5286] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  261.820265][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.841010][ T5286] usb 2-1: config 0 descriptor??
[  261.853943][ T5286] cp210x 2-1:0.0: cp210x converter detected
[  262.065255][   T53] hsr_slave_0: left promiscuous mode
[  262.072563][   T53] hsr_slave_1: left promiscuous mode
[  262.078995][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.089203][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.096934][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.127521][   T53] veth1_macvtap: left promiscuous mode
[  262.131858][ T5289] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  262.133382][   T53] veth0_macvtap: left promiscuous mode
[  262.147480][   T53] veth1_vlan: left promiscuous mode
[  262.153320][   T53] veth0_vlan: left promiscuous mode
[  262.182350][  T937] usbhid 4-1:0.0: can't add hid device: -71
[  262.188650][  T937] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  262.208274][  T937] usb 4-1: USB disconnect, device number 66
[  262.258553][ T5286] usb 2-1: cp210x converter now attached to ttyUSB0
[  262.315851][ T5289] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  262.331923][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.352428][ T5244] Bluetooth: hci1: command tx timeout
[  262.363086][ T5289] usb 1-1: config 0 descriptor??
[  262.574680][ T5289] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  262.611501][ T5289] asix 1-1:0.0: probe with driver asix failed with error -71
[  262.650397][ T5289] usb 1-1: USB disconnect, device number 52
[  262.702988][ T9169] loop8: detected capacity change from 0 to 7
[  262.710490][ T9169] Dev loop8: unable to read RDB block 7
[  262.721674][ T9169]  loop8: unable to read partition table
[  262.740143][ T9169] loop8: partition table beyond EOD, truncated
[  262.747325][ T9169] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  262.747325][ T9169] 
) failed (rc=-5)
[  262.800221][ T5286] usb 2-1: USB disconnect, device number 36
[  262.831378][ T5286] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  262.867344][ T5286] cp210x 2-1:0.0: device disconnected
[  262.986552][ T4623] Bluetooth: hci4: command tx timeout
[  263.118145][   T53] team0 (unregistering): Port device team_slave_1 removed
[  263.161833][ T5289] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  263.200414][   T53] team0 (unregistering): Port device team_slave_0 removed
[  263.331936][ T5289] usb 4-1: Using ep0 maxpacket: 8
[  263.353267][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.375245][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.394401][ T5289] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  263.407384][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.443106][ T5289] usb 4-1: config 0 descriptor??
[  264.091465][ T9171] vlan2: entered promiscuous mode
[  264.119402][ T9171] bond0: (slave vlan2): Error -34 calling dev_set_mtu
[  264.230089][ T5289] usbhid 4-1:0.0: can't add hid device: -71
[  264.236476][ T5289] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  264.258537][ T9126] chnl_net:caif_netlink_parms(): no params data found
[  264.265113][ T5289] usb 4-1: USB disconnect, device number 67
[  264.316934][ T9144] chnl_net:caif_netlink_parms(): no params data found
[  264.422564][ T4623] Bluetooth: hci1: command tx timeout
[  264.745453][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.753200][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.764292][ T9144] bridge_slave_0: entered allmulticast mode
[  264.772051][ T9144] bridge_slave_0: entered promiscuous mode
[  264.816024][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.834861][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.861845][ T9144] bridge_slave_1: entered allmulticast mode
[  264.869051][ T9144] bridge_slave_1: entered promiscuous mode
[  265.061869][ T4623] Bluetooth: hci4: command tx timeout
[  265.085504][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.122650][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  265.132971][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  265.141454][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  265.146153][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.172990][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  265.180687][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  265.189549][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  265.211223][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.221452][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.252027][ T9126] bridge_slave_0: entered allmulticast mode
[  265.259211][ T9126] bridge_slave_0: entered promiscuous mode
[  265.294527][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.321831][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.323894][ T9175] coredump: 670(syz.0.1009): written to core: VMAs: 38, size 93618176; core: 56042030 bytes, pos 93630464
[  265.341816][ T9126] bridge_slave_1: entered allmulticast mode
[  265.367144][ T9126] bridge_slave_1: entered promiscuous mode
[  265.453181][ T9144] team0: Port device team_slave_0 added
[  265.461446][ T9144] team0: Port device team_slave_1 added
[  265.530287][ T9214] netlink: 'syz.3.1016': attribute type 30 has an invalid length.
[  265.549154][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'.
[  265.568283][ T9214] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  265.589594][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.611666][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.637595][    C0] vkms_vblank_simulate: vblank timer overrun
[  265.701634][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.749259][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.776746][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.802707][    C0] vkms_vblank_simulate: vblank timer overrun
[  265.841705][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.903897][ T9126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.940864][ T9126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.025256][ T9229] syz.3.1018 (9229): drop_caches: 2
[  266.103397][ T9126] team0: Port device team_slave_0 added
[  266.124306][ T9126] team0: Port device team_slave_1 added
[  266.378589][   T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.502210][ T5244] Bluetooth: hci1: command tx timeout
[  266.525341][ T9144] hsr_slave_0: entered promiscuous mode
[  266.542232][ T9144] hsr_slave_1: entered promiscuous mode
[  266.555376][ T9144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.580390][ T9144] Cannot create hsr debugfs directory
[  266.861767][ T5286] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  267.000031][   T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.031803][ T5286] usb 1-1: Using ep0 maxpacket: 8
[  267.047526][ T5286] usb 1-1: config 0 interface 0 altsetting 146 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.076826][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.093661][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0
[  267.100465][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.126789][ T5286] usb 1-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[  267.142155][ T5244] Bluetooth: hci4: command tx timeout
[  267.148629][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.163672][ T9126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.181141][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.190124][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.221298][ T9126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.242548][ T5286] usb 1-1: config 0 descriptor??
[  267.301818][ T5244] Bluetooth: hci3: command tx timeout
[  267.358625][   T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.447677][ T9126] hsr_slave_0: entered promiscuous mode
[  267.534519][ T9126] hsr_slave_1: entered promiscuous mode
[  267.549021][ T9126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.559712][ T9126] Cannot create hsr debugfs directory
[  267.603865][   T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.840998][ T9211] chnl_net:caif_netlink_parms(): no params data found
[  267.978054][ T9144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.134267][ T9144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.146874][ T5286] usbhid 1-1:0.0: can't add hid device: -71
[  268.153949][ T5286] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  268.165429][ T5286] usb 1-1: USB disconnect, device number 53
[  268.271920][ T9144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.390234][ T9144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.427448][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.436062][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.444097][ T9211] bridge_slave_0: entered allmulticast mode
[  268.451285][ T9211] bridge_slave_0: entered promiscuous mode
[  268.470068][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.478442][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.491861][ T9211] bridge_slave_1: entered allmulticast mode
[  268.499037][ T9211] bridge_slave_1: entered promiscuous mode
[  268.559568][   T53] dummy0: left allmulticast mode
[  268.582481][ T5244] Bluetooth: hci1: command tx timeout
[  268.587948][   T53] dummy0: left promiscuous mode
[  268.602354][   T53] bridge0: port 4(dummy0) entered disabled state
[  268.622408][   T53] bond0: left allmulticast mode
[  268.648471][   T53] bond_slave_0: left allmulticast mode
[  268.667957][ T9274] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1024'.
[  268.680369][   T53] bond_slave_1: left allmulticast mode
[  268.687755][   T53] bond0: left promiscuous mode
[  268.693216][   T53] bond_slave_0: left promiscuous mode
[  268.698795][   T53] bond_slave_1: left promiscuous mode
[  268.732408][   T53] bridge0: port 3(bond0) entered disabled state
[  268.751337][   T53] bridge_slave_1: left allmulticast mode
[  268.760279][   T53] bridge_slave_1: left promiscuous mode
[  268.767645][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.781036][   T53] bridge_slave_0: left allmulticast mode
[  268.787292][   T53] bridge_slave_0: left promiscuous mode
[  268.793996][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.831499][   T53] bond0: left allmulticast mode
[  268.837465][   T53] bond_slave_0: left allmulticast mode
[  268.843097][   T53] bond_slave_1: left allmulticast mode
[  268.848608][   T53] mac80211_hwsim hwsim26 wlan1: left allmulticast mode
[  268.855761][   T53] bond0: left promiscuous mode
[  268.860571][   T53] bond_slave_0: left promiscuous mode
[  268.866231][   T53] bond_slave_1: left promiscuous mode
[  268.874701][   T53] mac80211_hwsim hwsim26 wlan1: left promiscuous mode
[  268.881949][   T53] bridge0: port 3(bond0) entered disabled state
[  268.901450][   T53] bridge_slave_1: left allmulticast mode
[  268.907645][   T53] bridge_slave_1: left promiscuous mode
[  268.913496][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.932519][   T53] bridge_slave_0: left allmulticast mode
[  268.938281][   T53] bridge_slave_0: left promiscuous mode
[  268.945266][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.052314][    T8] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  269.223584][ T5244] Bluetooth: hci4: command tx timeout
[  269.231823][    T8] usb 4-1: Using ep0 maxpacket: 8
[  269.257010][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.269283][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.287869][    T8] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  269.297529][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.316871][    T8] usb 4-1: config 0 descriptor??
[  269.385426][ T5244] Bluetooth: hci3: command tx timeout
[  269.737864][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.750520][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.763922][   T53] bond0 (unregistering): Released all slaves
[  269.922537][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.935030][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.949480][   T53] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  269.964908][   T53] bond0 (unregistering): Released all slaves
[  269.980307][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.004104][ T9282] netlink: 'syz.0.1028': attribute type 10 has an invalid length.
[  270.035895][ T9278] vlan2: entered promiscuous mode
[  270.041278][ T9278] bond0: (slave vlan2): Error -34 calling dev_set_mtu
[  270.116819][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.167863][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  270.177088][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  270.188000][    T8] usb 4-1: USB disconnect, device number 68
[  270.252265][ T9211] team0: Port device team_slave_0 added
[  270.324084][ T9211] team0: Port device team_slave_1 added
[  270.424814][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.433136][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.460011][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.498237][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.507059][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.564054][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.747084][ T9144] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  270.888280][ T9211] hsr_slave_0: entered promiscuous mode
[  270.895161][ T9211] hsr_slave_1: entered promiscuous mode
[  270.923368][ T9211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  270.930972][ T9211] Cannot create hsr debugfs directory
[  270.951790][ T9144] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  270.966552][ T9296] netlink: 'syz.3.1032': attribute type 1 has an invalid length.
[  270.978713][ T9296] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1032'.
[  271.195261][ T9144] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  271.467938][ T5244] Bluetooth: hci3: command tx timeout
[  271.480892][ T9311] loop8: detected capacity change from 0 to 7
[  271.488239][ T9311] Dev loop8: unable to read RDB block 7
[  271.494082][ T9311]  loop8: unable to read partition table
[  271.499989][ T9311] loop8: partition table beyond EOD, truncated
[  271.506284][ T9311] loop_reread_partitions: partition scan of loop8 (�被x������ڬ��dƤ����ݡ�����
[  271.506284][ T9311] 
) failed (rc=-5)
[  271.615013][ T9144] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  271.822876][    T8] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  271.864945][   T53] hsr_slave_0: left promiscuous mode
[  271.874268][   T53] hsr_slave_1: left promiscuous mode
[  271.880952][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.889445][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.898115][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.905832][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.928510][   T53] hsr_slave_0: left promiscuous mode
[  271.952995][   T53] hsr_slave_1: left promiscuous mode
[  271.965312][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.975603][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.983834][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.997631][    T8] usb 1-1: not running at top speed; connect to a high speed hub
[  272.013268][    T8] usb 1-1: config 7 has an invalid interface number: 140 but max is 3
[  272.031414][    T8] usb 1-1: config 7 has an invalid interface number: 36 but max is 3
[  272.040605][    T8] usb 1-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config
[  272.052056][    T8] usb 1-1: config 7 has 2 interfaces, different from the descriptor's value: 4
[  272.066731][    T8] usb 1-1: config 7 has no interface number 0
[  272.073403][    T8] usb 1-1: config 7 has no interface number 1
[  272.079646][    T8] usb 1-1: config 7 interface 140 altsetting 17 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  272.097084][    T8] usb 1-1: config 7 interface 140 altsetting 17 has a duplicate endpoint with address 0xD, skipping
[  272.104932][   T53] veth1_macvtap: left promiscuous mode
[  272.113721][   T53] veth0_macvtap: left promiscuous mode
[  272.119371][   T53] veth1_vlan: left promiscuous mode
[  272.132858][   T53] veth0_vlan: left promiscuous mode
[  272.138911][    T8] usb 1-1: config 7 interface 140 altsetting 17 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  272.153583][   T53] veth1_macvtap: left promiscuous mode
[  272.159154][   T53] veth0_macvtap: left promiscuous mode
[  272.171736][    T8] usb 1-1: config 7 interface 36 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  272.173191][   T53] veth1_vlan: left promiscuous mode
[  272.183286][    T8] usb 1-1: config 7 interface 36 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  272.208605][ T9326] syz.3.1038 (9326): drop_caches: 2
[  272.208898][   T53] veth0_vlan: left promiscuous mode
[  272.228974][    T8] usb 1-1: config 7 interface 36 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  272.252950][    T8] usb 1-1: config 7 interface 140 has no altsetting 0
[  272.265216][    T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice=de.07
[  272.327785][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.341066][    T8] usb 1-1: Product: 顷毃讥譺諸൲ꪦ됕Ⓨ铃㩪
[  272.350446][    T8] usb 1-1: Manufacturer: Ⰱ
[  272.358323][    T8] usb 1-1: SerialNumber: 茁䖗螀㶄Ἡ䥜ꢨ鴈쇞ፉ獰㾉盩
[  272.617896][    T8] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.140/input/input24
[  272.689892][ T4670] bcm5974 1-1:7.140: could not read from device
[  272.702890][    T8] usb 1-1: USB disconnect, device number 54
[  273.123769][   T53] team0 (unregistering): Port device team_slave_1 removed
[  273.200753][   T53] team0 (unregistering): Port device team_slave_0 removed
[  273.551712][ T5244] Bluetooth: hci3: command tx timeout
[  273.621795][    T8] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  273.802024][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.821050][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.831331][    T8] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  273.849231][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.868089][    T8] usb 1-1: config 0 descriptor??
[  274.159308][   T53] team0 (unregistering): Port device team_slave_1 removed
[  274.210742][   T53] team0 (unregistering): Port device team_slave_0 removed
[  274.717245][    T8] hid-led 0003:27B8:01ED.000C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0
[  274.756950][    T8] hid-led 0003:27B8:01ED.000C: ThingM blink(1) v1 initialized
[  274.968026][  T937] usb 1-1: USB disconnect, device number 55
[  275.152833][ T9126] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  275.169649][ T9126] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  275.188941][ T9126] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  275.207880][ T9126] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  275.381952][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.471156][ T9144] 8021q: adding VLAN 0 to HW filter on device team0
[  275.573044][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.580206][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.616650][ T9126] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.660789][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.667983][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.788981][ T9126] 8021q: adding VLAN 0 to HW filter on device team0
[  275.847215][ T9144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  275.883954][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.891088][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.931917][ T5287] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  275.968238][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.975507][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.991405][ T9211] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  276.018439][ T9211] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  276.050805][ T9211] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  276.075060][ T9144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.104768][ T5287] usb 1-1: Using ep0 maxpacket: 8
[  276.125468][ T9211] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  276.135839][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.150465][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.202727][ T5287] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  276.221777][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.258200][ T5287] usb 1-1: config 0 descriptor??
[  276.336776][ T9126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.368556][ T9144] veth0_vlan: entered promiscuous mode
[  276.445649][ T9126] veth0_vlan: entered promiscuous mode
[  276.468701][ T9144] veth1_vlan: entered promiscuous mode
[  276.486925][ T9126] veth1_vlan: entered promiscuous mode
[  276.520380][ T9345] vlan3: entered promiscuous mode
[  276.533165][ T9345] bond0: (slave vlan3): Error -34 calling dev_set_mtu
[  276.595453][ T5287] usbhid 1-1:0.0: can't add hid device: -71
[  276.606865][ T5287] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  276.630505][ T5287] usb 1-1: USB disconnect, device number 56
[  276.633333][ T9144] veth0_macvtap: entered promiscuous mode
[  276.662522][  T937] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  276.674385][ T9144] veth1_macvtap: entered promiscuous mode
[  276.693016][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.703508][ T9126] veth0_macvtap: entered promiscuous mode
[  276.723900][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.734719][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.748337][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.773198][ T9126] veth1_macvtap: entered promiscuous mode
[  276.787143][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.799979][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.810777][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.822015][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.833113][  T937] usb 4-1: Using ep0 maxpacket: 32
[  276.834694][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.848201][  T937] usb 4-1: config 0 has an invalid interface number: 82 but max is 0
[  276.861180][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.862069][  T937] usb 4-1: config 0 has no interface number 0
[  276.872742][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.888043][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.898668][  T937] usb 4-1: config 0 interface 82 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  276.899943][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.923864][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.931228][  T937] usb 4-1: config 0 interface 82 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  276.940089][ T9144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.953151][  T937] usb 4-1: New USB device found, idVendor=1bad, idProduct=bcf9, bcdDevice=ba.4a
[  276.958601][ T9144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.963463][  T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.978396][ T9144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.979791][  T937] usb 4-1: Product: syz
[  276.988461][ T9144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.000876][  T937] usb 4-1: Manufacturer: syz
[  277.006312][  T937] usb 4-1: SerialNumber: syz
[  277.014214][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.019290][  T937] usb 4-1: config 0 descriptor??
[  277.035338][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.049956][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.050770][ T9355] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  277.067612][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.067641][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.094948][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.098700][ T9355] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  277.109555][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.133453][ T9211] 8021q: adding VLAN 0 to HW filter on device team0
[  277.170245][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.177435][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.208452][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.215669][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.252766][ T9126] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.261679][ T9126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.271160][ T9126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.280707][ T9126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.404213][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.413240][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.464503][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.469633][ T9211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  277.473230][  T937] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  277.493257][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.502753][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.510599][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.563569][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.571449][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.589672][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.663701][  T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.698141][  T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.729787][  T937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  277.763797][  T937] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  277.795438][  T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.820751][ T9211] veth0_vlan: entered promiscuous mode
[  277.828031][  T937] usb 1-1: config 0 descriptor??
[  277.865291][ T9211] veth1_vlan: entered promiscuous mode
[  277.931933][ T5286] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  277.969370][ T9211] veth0_macvtap: entered promiscuous mode
[  277.988796][ T9211] veth1_macvtap: entered promiscuous mode
[  278.029420][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.041883][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.054220][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.070634][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.087558][  T937] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max
[  278.091864][ T5286] usb 3-1: Using ep0 maxpacket: 16
[  278.105396][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.119433][  T937] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  278.121228][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  278.139037][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.168797][  T937] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  278.184040][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.215326][ T5286] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  278.230202][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.241821][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.253872][ T5286] usb 3-1: config 0 descriptor??
[  278.273653][ T5286] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  278.311857][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.330681][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.349909][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.370989][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.398376][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.421944][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.439863][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.452381][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.484951][ T9211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.527846][ T9211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.534972][    T8] usb 1-1: USB disconnect, device number 57
[  278.553865][ T9211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.563591][ T9211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.791874][  T937] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  278.874111][ T8266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.902400][ T8266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.945870][ T3049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.960068][ T3049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.052507][  T937] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  279.072797][  T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.080948][  T937] usb 5-1: Product: syz
[  279.100910][  T937] usb 5-1: Manufacturer: syz
[  279.113981][  T937] usb 5-1: SerialNumber: syz
[  279.120333][ T9402] netlink: 'syz.1.1013': attribute type 1 has an invalid length.
[  279.131190][  T937] usb 5-1: config 0 descriptor??
[  279.167243][  T937] usb 5-1: interface 1 not found
[  279.331763][ T5286] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  279.443691][ T5289] usb 4-1: USB disconnect, device number 69
[  279.501709][ T5286] usb 1-1: device descriptor read/64, error -71
[  279.743681][ T5286] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  279.784677][ T3049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.886828][ T5234] usb 5-1: USB disconnect, device number 48
[  279.891641][ T5286] usb 1-1: device descriptor read/64, error -71
[  280.049425][ T5286] usb usb1-port1: attempt power cycle
[  280.125577][ T3049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.422050][ T5286] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  280.455838][ T3049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.506877][ T5286] usb 1-1: device descriptor read/8, error -71
[  280.766452][ T5347] usb 3-1: USB disconnect, device number 33
[  280.773092][ T5286] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  280.835640][ T5286] usb 1-1: device descriptor read/8, error -71
[  280.914133][ T3049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.985564][ T5286] usb usb1-port1: unable to enumerate USB device
[  281.048439][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  281.061797][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  281.076386][    T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  281.087872][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  281.116005][ T4623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  281.125416][ T4623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  281.136663][ T4623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  281.206993][ T3049] bridge_slave_1: left allmulticast mode
[  281.213081][    T9] usb 5-1: device descriptor read/64, error -71
[  281.248453][ T3049] bridge_slave_1: left promiscuous mode
[  281.261047][ T3049] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.287711][ T3049] bridge_slave_0: left allmulticast mode
[  281.308118][ T3049] bridge_slave_0: left promiscuous mode
[  281.320834][ T3049] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.469344][    T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  281.628872][    T9] usb 5-1: device descriptor read/64, error -71
[  281.745776][    T9] usb usb5-port1: attempt power cycle
[  282.061153][ T9480] fuse: Bad value for 'fd'
[  282.103689][    T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  282.134235][    T9] usb 5-1: device descriptor read/8, error -71
[  282.368351][ T3049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.381852][    T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  282.395620][ T3049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  282.410986][ T3049] bond0 (unregistering): Released all slaves
[  282.441228][ T9466] netlink: 'syz.3.1061': attribute type 10 has an invalid length.
[  282.452460][    T9] usb 5-1: device descriptor read/8, error -71
[  282.455755][ T9467] macvlan0: entered promiscuous mode
[  282.480125][ T9467] macvlan0: left promiscuous mode
[  282.573949][    T9] usb usb5-port1: unable to enumerate USB device
[  282.622076][ T5234] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  282.814498][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  282.847842][ T9498] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1065'.
[  282.871899][ T5234] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  282.897941][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  282.934133][ T5234] usb 1-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2
[  282.961855][ T5234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.981853][ T5234] usb 1-1: Product: syz
[  282.986124][ T5234] usb 1-1: Manufacturer: syz
[  282.990755][ T5234] usb 1-1: SerialNumber: syz
[  283.016659][ T5234] usb 1-1: config 0 descriptor??
[  283.156582][ T3049] hsr_slave_0: left promiscuous mode
[  283.164676][ T3049] hsr_slave_1: left promiscuous mode
[  283.171001][ T3049] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.178914][ T3049] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.187069][ T3049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.195168][ T3049] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.219472][ T3049] veth1_macvtap: left promiscuous mode
[  283.226020][ T3049] veth0_macvtap: left promiscuous mode
[  283.231808][ T3049] veth1_vlan: left promiscuous mode
[  283.232380][ T5244] Bluetooth: hci3: command tx timeout
[  283.237304][ T3049] veth0_vlan: left promiscuous mode
[  283.268908][  T937] usb 1-1: USB disconnect, device number 62
[  283.341781][ T5234] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  283.381742][ T5291] usb 4-1: new low-speed USB device number 70 using dummy_hcd
[  283.531601][ T5234] usb 3-1: Using ep0 maxpacket: 8
[  283.539111][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.554563][ T5291] usb 4-1: device descriptor read/64, error -71
[  283.583734][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.596328][ T5234] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  283.617160][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.641474][ T5234] usb 3-1: config 0 descriptor??
[  283.823376][ T5291] usb 4-1: new low-speed USB device number 71 using dummy_hcd
[  283.971857][ T5291] usb 4-1: device descriptor read/64, error -71
[  284.103832][ T5291] usb usb4-port1: attempt power cycle
[  284.257308][ T3049] team0 (unregistering): Port device team_slave_1 removed
[  284.318145][ T3049] team0 (unregistering): Port device team_slave_0 removed
[  284.478047][ T5291] usb 4-1: new low-speed USB device number 72 using dummy_hcd
[  284.514213][ T5291] usb 4-1: device descriptor read/8, error -71
[  284.754389][ T5291] usb 4-1: new low-speed USB device number 73 using dummy_hcd
[  284.793298][ T5291] usb 4-1: device descriptor read/8, error -71
[  284.899319][ T9506] vlan2: entered promiscuous mode
[  284.907322][ T9506] bond0: (slave vlan2): Error -34 calling dev_set_mtu
[  284.915544][ T5291] usb usb4-port1: unable to enumerate USB device
[  284.927079][ T9529] tunl0: entered promiscuous mode
[  284.954432][ T9529] netlink: 'syz.4.1069': attribute type 1 has an invalid length.
[  284.967700][ T9529] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1069'.
[  284.988427][ T5234] usbhid 3-1:0.0: can't add hid device: -71
[  284.994666][ T5234] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  285.018324][ T5234] usb 3-1: USB disconnect, device number 34
[  285.030113][ T9459] chnl_net:caif_netlink_parms(): no params data found
[  285.301869][ T5244] Bluetooth: hci3: command tx timeout
[  285.449152][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.501047][ T9459] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.527475][ T9459] bridge_slave_0: entered allmulticast mode
[  285.535925][ T9459] bridge_slave_0: entered promiscuous mode
[  285.545176][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.553514][ T9459] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.561213][ T9459] bridge_slave_1: entered allmulticast mode
[  285.569119][ T9459] bridge_slave_1: entered promiscuous mode
[  285.631720][ T5347] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  285.676186][ T9459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.703571][ T9459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.751678][ T5286] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  285.815829][ T5347] usb 1-1: Using ep0 maxpacket: 16
[  285.832819][ T9579] bridge0: port 3(bond0) entered blocking state
[  285.839801][ T5347] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  285.858657][ T5347] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  285.869519][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.871388][ T9579] bridge0: port 3(bond0) entered disabled state
[  285.886760][ T5347] usb 1-1: config 0 descriptor??
[  285.902872][ T9579] bond0: entered allmulticast mode
[  285.916169][ T5347] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  285.917347][ T9579] bond_slave_0: entered allmulticast mode
[  285.937588][ T9579] bond_slave_1: entered allmulticast mode
[  285.945769][ T9579] bond0: entered promiscuous mode
[  285.950916][ T9579] bond_slave_0: entered promiscuous mode
[  285.957418][ T9579] bond_slave_1: entered promiscuous mode
[  285.962424][ T5286] usb 5-1: Using ep0 maxpacket: 8
[  285.963844][ T9579] bridge0: port 3(bond0) entered blocking state
[  285.974537][ T9579] bridge0: port 3(bond0) entered forwarding state
[  285.979434][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  286.000194][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  286.008216][ T9459] team0: Port device team_slave_0 added
[  286.018587][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[  286.031313][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[  286.033363][ T9459] team0: Port device team_slave_1 added
[  286.045287][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  286.074754][ T5286] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  286.103536][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.111718][ T5286] usb 5-1: Product: syz
[  286.115931][ T5286] usb 5-1: Manufacturer: syz
[  286.120552][ T5286] usb 5-1: SerialNumber: syz
[  286.135813][ T5286] usb 5-1: config 0 descriptor??
[  286.151727][ T5234] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  286.153672][ T5286] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25
[  286.172368][ T9459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.183275][ T9459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.209749][ T9459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.222604][ T9459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.229605][ T9459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.255686][ T9459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.292437][ T5234] usb 3-1: device descriptor read/64, error -71
[  286.381758][ T9459] hsr_slave_0: entered promiscuous mode
[  286.388938][ T9459] hsr_slave_1: entered promiscuous mode
[  286.408871][ T9459] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  286.427648][ T9459] Cannot create hsr debugfs directory
[  286.438475][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1075'.
[  286.450134][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.479067][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.479195][ T9569] vlan2: entered promiscuous mode
[  286.499220][ T9569] gretap0: entered promiscuous mode
[  286.505005][ T9569] vlan2: entered allmulticast mode
[  286.510246][ T9569] gretap0: entered allmulticast mode
[  286.531874][ T5291] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  286.535807][ T5286] usb 5-1: USB disconnect, device number 53
[  286.539769][ T5234] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  286.691627][ T5291] usb 4-1: device descriptor read/64, error -71
[  286.699219][ T5234] usb 3-1: device descriptor read/64, error -71
[  286.823769][ T5234] usb usb3-port1: attempt power cycle
[  286.972315][ T5291] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  287.113796][ T5291] usb 4-1: device descriptor read/64, error -71
[  287.201863][ T5234] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  287.242807][ T5291] usb usb4-port1: attempt power cycle
[  287.255570][ T9459] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  287.264669][ T5234] usb 3-1: device descriptor read/8, error -71
[  287.280008][ T9459] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  287.305799][ T9459] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  287.333744][ T9459] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  287.381827][ T5244] Bluetooth: hci3: command tx timeout
[  287.562183][ T5234] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  287.573283][ T9459] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.602795][ T5234] usb 3-1: device descriptor read/8, error -71
[  287.631675][ T5291] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  287.662498][ T5291] usb 4-1: device descriptor read/8, error -71
[  287.672965][ T9459] 8021q: adding VLAN 0 to HW filter on device team0
[  287.708761][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.715936][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.757063][ T5234] usb usb3-port1: unable to enumerate USB device
[  287.770965][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.778266][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.818060][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'.
[  287.856254][ T9619] bridge0: port 3(dummy0) entered blocking state
[  287.868747][ T9619] bridge0: port 3(dummy0) entered disabled state
[  287.880864][ T9619] dummy0: entered allmulticast mode
[  287.901501][ T9619] dummy0: entered promiscuous mode
[  287.910569][ T9619] bridge0: port 3(dummy0) entered blocking state
[  287.917226][ T9619] bridge0: port 3(dummy0) entered forwarding state
[  287.931781][ T5291] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  287.970474][ T5291] usb 4-1: device descriptor read/8, error -71
[  288.051624][ T9459] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.092755][ T5291] usb usb4-port1: unable to enumerate USB device
[  288.114635][ T9619] syz.4.1080 (9619): drop_caches: 2
[  288.207499][ T9459] veth0_vlan: entered promiscuous mode
[  288.218572][ T9459] veth1_vlan: entered promiscuous mode
[  288.243210][ T9459] veth0_macvtap: entered promiscuous mode
[  288.252708][ T9459] veth1_macvtap: entered promiscuous mode
[  288.270365][ T9459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.281175][ T9459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.291272][ T9459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.302677][ T9459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.312575][ T9459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.323357][ T9459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.335359][ T9459] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.368975][ T9459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.382339][ T9459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.425427][ T9459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.454968][ T5347] usb 1-1: USB disconnect, device number 63
[  288.462526][ T9459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.500806][ T9459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.551128][ T9459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.567198][ T9459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.580071][ T9459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.613258][ T9459] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.626167][ T9459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.656341][ T9459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.674723][ T9459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.685472][ T9459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.973172][ T9644] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1082'.
[  289.104434][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.125776][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.242164][ T5347] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  289.401734][ T5347] usb 3-1: Using ep0 maxpacket: 32
[  289.415413][ T5347] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  289.473512][ T5244] Bluetooth: hci3: command tx timeout
[  289.563703][ T5347] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  289.572544][ T5347] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  289.581630][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  289.591313][ T5347] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  289.601103][ T5347] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  289.614334][ T5347] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  289.623637][ T5347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.822612][ T3049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.831950][ T3049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.003538][ T5347] usb 3-1: config 0 descriptor??
[  290.225085][ T5347] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  290.488337][ T9664] loop4: detected capacity change from 0 to 7
[  290.524729][ T9664] Dev loop4: unable to read RDB block 7
[  290.533472][ T9659] tunl0: entered promiscuous mode
[  290.550002][ T9659] netlink: 'syz.0.1087': attribute type 1 has an invalid length.
[  290.575211][ T9659] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1087'.
[  290.722550][ T9664]  loop4: unable to read partition table
[  290.728710][ T9664] loop4: partition table beyond EOD, truncated
[  290.751934][ T9664] loop_reread_partitions: partition scan of loop4 (�被x������ڬ��dƤ����ݡ�����
[  290.751934][ T9664] 
) failed (rc=-5)
[  290.921746][ T5347] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  291.116125][ T5347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.146438][ T5347] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  291.171732][ T5347] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  291.201676][ T5347] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  291.249688][ T5347] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  291.274939][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.309391][ T5347] usb 5-1: Product: syz
[  291.317063][ T5347] usb 5-1: Manufacturer: syz
[  291.333813][ T5347] usb 5-1: SerialNumber: syz
[  291.414639][ T9678] batman_adv: batadv0: Adding interface: vlan3
[  291.429440][ T9678] batman_adv: batadv0: The MTU of interface vlan3 is too small (1420) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.480333][ T9678] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  292.000488][ T5347] usb 5-1: USB disconnect, device number 54
[  292.081884][ T5289] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  292.241798][ T5289] usb 1-1: Using ep0 maxpacket: 8
[  292.259509][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.290423][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.316871][ T5289] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  292.337861][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.355686][ T5289] usb 1-1: config 0 descriptor??
[  292.595754][ T9681] vlan4: entered promiscuous mode
[  292.601326][ T9681] bond0: (slave vlan4): Error -34 calling dev_set_mtu
[  295.807057][ T4685] Dev loop4: unable to read RDB block 7
[  295.835199][ T4685]  loop4: unable to read partition table
[  295.841139][ T4685] loop4: partition table beyond EOD, truncated
[  295.867833][   T25] usb 3-1: USB disconnect, device number 39
[  295.925255][   T25] usblp0: removed
[  296.236956][ T5233] udevd[5233]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  296.365065][ T9697] ipt_REJECT: TCP_RESET invalid for non-tcp
[  296.433552][ T9697] ipt_REJECT: TCP_RESET invalid for non-tcp
[  296.809441][ T5244] Bluetooth: hci1: unexpected subevent 0x01 length: 78 > 18
[  297.411878][ T4623] Bluetooth: hci2: unexpected subevent 0x01 length: 78 > 18
[  297.477705][ T5238] Bluetooth: hci3: unexpected subevent 0x01 length: 78 > 18
[  297.523556][ T9705] FAULT_INJECTION: forcing a failure.
[  297.523556][ T9705] name failslab, interval 1, probability 0, space 0, times 0
[  297.547862][ T9705] CPU: 0 UID: 0 PID: 9705 Comm: syz.3.1096 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  297.558264][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  297.568464][ T9705] Call Trace:
[  297.571814][ T9705]  <TASK>
[  297.574785][ T9705]  dump_stack_lvl+0x241/0x360
[  297.579600][ T9705]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.584859][ T9705]  ? __pfx__printk+0x10/0x10
[  297.589504][ T9705]  ? __kmalloc_cache_noprof+0x44/0x2c0
[  297.595101][ T9705]  ? __pfx___might_resched+0x10/0x10
[  297.600453][ T9705]  should_fail_ex+0x3b0/0x4e0
[  297.605205][ T9705]  should_failslab+0xac/0x100
[  297.609944][ T9705]  ? madvise_collapse+0x208/0xd30
[  297.615124][ T9705]  __kmalloc_cache_noprof+0x6c/0x2c0
[  297.620570][ T9705]  madvise_collapse+0x208/0xd30
[  297.625660][ T9705]  ? find_vma_prev+0x1a1/0x270
[  297.630716][ T9705]  ? __lock_acquire+0x1384/0x2050
[  297.635829][ T9705]  ? __pfx_madvise_collapse+0x10/0x10
[  297.641276][ T9705]  do_madvise+0xcb1/0x4720
[  297.645797][ T9705]  ? __pfx_do_madvise+0x10/0x10
[  297.650778][ T9705]  ? __pfx_lock_release+0x10/0x10
[  297.655856][ T9705]  ? kstrtouint_from_user+0x128/0x190
[  297.661623][ T9705]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  297.667579][ T9705]  ? ksys_write+0x23e/0x2c0
[  297.672143][ T9705]  ? __pfx_lock_release+0x10/0x10
[  297.677232][ T9705]  ? vfs_write+0x7bf/0xc90
[  297.681719][ T9705]  ? __mutex_unlock_slowpath+0x21d/0x750
[  297.687427][ T9705]  ? __pfx_vfs_write+0x10/0x10
[  297.692251][ T9705]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  297.698284][ T9705]  ? __fget_files+0x3f3/0x470
[  297.703032][ T9705]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  297.709420][ T9705]  ? do_syscall_64+0x100/0x230
[  297.714244][ T9705]  __x64_sys_madvise+0xa6/0xc0
[  297.719065][ T9705]  do_syscall_64+0xf3/0x230
[  297.723627][ T9705]  ? clear_bhb_loop+0x35/0x90
[  297.728363][ T9705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.734302][ T9705] RIP: 0033:0x7f1833b7def9
[  297.738758][ T9705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.758422][ T9705] RSP: 002b:00007f1834a3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  297.766900][ T9705] RAX: ffffffffffffffda RBX: 00007f1833d35f80 RCX: 00007f1833b7def9
[  297.774923][ T9705] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000000020000000
[  297.782992][ T9705] RBP: 00007f1834a3b090 R08: 0000000000000000 R09: 0000000000000000
[  297.791014][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.799029][ T9705] R13: 0000000000000000 R14: 00007f1833d35f80 R15: 00007f1833e5fa28
[  297.807107][ T9705]  </TASK>
[  297.810211][    C0] vkms_vblank_simulate: vblank timer overrun
[  297.961667][ T5234] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  298.274879][ T5234] usb 3-1: Using ep0 maxpacket: 16
[  298.292763][ T5234] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  298.310546][ T5234] usb 3-1: config 0 has no interface number 0
[  298.328590][ T5234] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  298.357368][ T5234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.372706][ T5234] usb 3-1: Product: syz
[  298.391062][ T5234] usb 3-1: Manufacturer: syz
[  298.398568][ T5234] usb 3-1: SerialNumber: syz
[  298.453240][ T5234] usb 3-1: config 0 descriptor??
[  298.490664][ T5234] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  299.041938][ T5234] gspca_spca1528: reg_w err -110
[  300.619360][ T9703] coredump: 34(syz.4.1095): interrupted: fatal signal pending
[  300.627202][ T5234] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110
[  300.648392][   T24] sched: DL replenish lagged too much
[  300.669520][ T9703] coredump: 34(syz.4.1095): Error writing out the process memory
[  302.652119][ T5291] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  313.166031][    C0] raw-gadget.2 gadget.3: ignoring, device is not running
[  313.404135][ T9703] coredump: 34(syz.4.1095): written to core: VMAs: 38, size 107962368; core: 152142 bytes, pos 663552
[  313.708051][ T5291] usb 4-1: device descriptor read/64, error -32
[  316.157048][ T5234] usb 3-1: USB disconnect, device number 40
[  317.362069][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  317.368479][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  356.364950][ T5289] usbhid 1-1:0.0: can't add hid device: -71
[  356.371022][ T5289] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  357.487114][ T5289] usb 1-1: USB disconnect, device number 64
[  363.952526][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.969991][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.018635][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.026468][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  364.062727][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  364.092591][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  364.099835][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.108530][ T5242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  364.116830][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  364.127090][ T5242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  364.135375][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.146781][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  364.155816][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  364.163698][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.188426][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  364.196169][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.206711][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  364.222987][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.412387][ T5242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  364.437958][ T5242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  364.448586][ T5242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  364.463541][ T5242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  364.500288][ T5242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  364.511930][ T5242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.345086][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  365.364547][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  365.375431][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  365.388038][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  365.406860][   T55] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  365.419877][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  378.000439][ T5240] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  378.017533][ T5240] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  378.026247][ T5240] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  378.041949][ T5240] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  378.051899][ T5240] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  378.061551][ T5240] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  378.442723][ T9758] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  378.468976][ T9758] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  378.487314][ T9758] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  378.495823][ T9758] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  378.504222][ T9758] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  378.512243][ T9758] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  378.750905][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  378.757631][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  380.405522][   T55] Bluetooth: hci8: command tx timeout
[  380.538167][ T5248] syz_tun (unregistering): left allmulticast mode
[  380.575179][ T5248] syz_tun (unregistering): left promiscuous mode
[  380.589402][ T9758] Bluetooth: hci10: command tx timeout
[  380.614000][ T5248] bridge0: port 3(syz_tun) entered disabled state
[  381.229995][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  381.240096][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  381.249436][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  381.257855][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  381.276928][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  381.284932][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.421858][ T9758] Bluetooth: hci0: command tx timeout
[  382.428282][ T9758] Bluetooth: hci8: command tx timeout
[  382.434787][ T5244] Bluetooth: hci6: command tx timeout
[  382.441258][ T5244] Bluetooth: hci7: command tx timeout
[  382.457573][ T5240] Bluetooth: hci5: command tx timeout
[  382.661785][ T5240] Bluetooth: hci10: command tx timeout
[  382.668049][ T5240] Bluetooth: hci9: command tx timeout
[  383.227747][ T9758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.243732][ T9758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.255555][ T9758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.267224][ T9758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.278367][ T9758] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  383.286565][ T9758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.382383][ T9758] Bluetooth: hci1: command tx timeout
[  384.501775][ T5240] Bluetooth: hci8: command tx timeout
[  384.507273][ T5240] Bluetooth: hci7: command tx timeout
[  384.518715][ T5244] Bluetooth: hci6: command tx timeout
[  384.524339][   T55] Bluetooth: hci0: command tx timeout
[  384.533557][ T9758] Bluetooth: hci5: command tx timeout
[  384.741844][ T5240] Bluetooth: hci9: command tx timeout
[  384.747331][ T5240] Bluetooth: hci10: command tx timeout
[  385.302848][ T5240] Bluetooth: hci2: command tx timeout
[  385.461803][ T5240] Bluetooth: hci1: command tx timeout
[  386.581910][ T9758] Bluetooth: hci6: command tx timeout
[  386.587397][ T9758] Bluetooth: hci0: command tx timeout
[  386.592991][ T5244] Bluetooth: hci8: command tx timeout
[  386.600634][ T5240] Bluetooth: hci5: command tx timeout
[  386.662026][ T5240] Bluetooth: hci7: command tx timeout
[  386.821840][ T5240] Bluetooth: hci10: command tx timeout
[  386.827413][ T5240] Bluetooth: hci9: command tx timeout
[  387.381791][ T5240] Bluetooth: hci2: command tx timeout
[  387.541811][ T5240] Bluetooth: hci1: command tx timeout
[  388.661772][ T9758] Bluetooth: hci0: command tx timeout
[  388.667334][   T55] Bluetooth: hci6: command tx timeout
[  388.673038][ T5240] Bluetooth: hci5: command tx timeout
[  388.742129][   T55] Bluetooth: hci7: command tx timeout
[  388.901926][   T55] Bluetooth: hci9: command tx timeout
[  389.461711][   T55] Bluetooth: hci2: command tx timeout
[  389.621763][   T55] Bluetooth: hci1: command tx timeout
[  391.541652][   T55] Bluetooth: hci2: command tx timeout
[  478.557776][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  478.591906][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  533.214185][    C0] vkms_vblank_simulate: vblank timer overrun
[  534.348380][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  534.355351][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  555.836933][   T30] INFO: task kworker/u8:0:11 blocked for more than 160 seconds.
[  555.940132][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  556.017649][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  556.065842][   T30] task:kworker/u8:0    state:D stack:21504 pid:11    tgid:11    ppid:2      flags:0x00004000
[  556.101211][   T30] Workqueue: netns cleanup_net
[  556.111166][   T30] Call Trace:
[  556.131561][   T30]  <TASK>
[  556.134615][   T30]  __schedule+0x1895/0x4b30
[  556.139249][   T30]  ? __pfx___schedule+0x10/0x10
[  556.181790][   T30]  ? __pfx_lock_release+0x10/0x10
[  556.186974][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  556.219773][   T30]  ? kthread_data+0x52/0xd0
[  556.239797][   T30]  ? schedule+0x90/0x320
[  556.261519][   T30]  ? wq_worker_sleeping+0x66/0x240
[  556.267811][   T30]  ? schedule+0x90/0x320
[  556.301491][   T30]  schedule+0x14b/0x320
[  556.306704][   T30]  schedule_preempt_disabled+0x13/0x30
[  556.347043][   T30]  __mutex_lock+0x6a7/0xd70
[  556.367346][   T30]  ? __mutex_lock+0x52a/0xd70
[  556.387143][   T30]  ? wg_netns_pre_exit+0x1f/0x1e0
[  556.407283][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  556.431746][   T30]  wg_netns_pre_exit+0x1f/0x1e0
[  556.436742][   T30]  cleanup_net+0x615/0xcc0
[  556.441228][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  556.517976][   T30]  ? process_scheduled_works+0x976/0x1850
[  556.537902][   T30]  process_scheduled_works+0xa63/0x1850
[  556.551911][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  556.561476][   T30]  ? assign_work+0x364/0x3d0
[  556.566190][   T30]  worker_thread+0x870/0xd30
[  556.570849][   T30]  ? __kthread_parkme+0x169/0x1d0
[  556.617187][   T30]  ? __pfx_worker_thread+0x10/0x10
[  556.636638][   T30]  kthread+0x2f0/0x390
[  556.640880][   T30]  ? __pfx_worker_thread+0x10/0x10
[  556.682768][   T30]  ? __pfx_kthread+0x10/0x10
[  556.687460][   T30]  ret_from_fork+0x4b/0x80
[  556.721593][   T30]  ? __pfx_kthread+0x10/0x10
[  556.726275][   T30]  ret_from_fork_asm+0x1a/0x30
[  556.731200][   T30]  </TASK>
[  556.771601][   T30] INFO: task kworker/u8:1:12 blocked for more than 161 seconds.
[  556.781307][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  556.811486][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  556.821254][   T30] task:kworker/u8:1    state:D stack:19896 pid:12    tgid:12    ppid:2      flags:0x00004000
[  556.937738][   T30] Workqueue: ipv6_addrconf addrconf_verify_work
[  556.961476][   T30] Call Trace:
[  556.964839][   T30]  <TASK>
[  556.967807][   T30]  __schedule+0x1895/0x4b30
[  557.026973][   T30]  ? __pfx___schedule+0x10/0x10
[  557.051590][   T30]  ? __pfx_lock_release+0x10/0x10
[  557.056726][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  557.101536][   T30]  ? kthread_data+0x52/0xd0
[  557.106142][   T30]  ? schedule+0x90/0x320
[  557.110432][   T30]  ? wq_worker_sleeping+0x66/0x240
[  557.151458][   T30]  ? schedule+0x90/0x320
[  557.155791][   T30]  schedule+0x14b/0x320
[  557.160103][   T30]  schedule_preempt_disabled+0x13/0x30
[  557.211490][   T30]  __mutex_lock+0x6a7/0xd70
[  557.216137][   T30]  ? __mutex_lock+0x52a/0xd70
[  557.220872][   T30]  ? addrconf_verify_work+0x19/0x30
[  557.271588][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  557.276705][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  557.311473][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  557.317951][   T30]  ? process_scheduled_works+0x976/0x1850
[  557.351506][   T30]  addrconf_verify_work+0x19/0x30
[  557.356627][   T30]  process_scheduled_works+0xa63/0x1850
[  557.381614][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  557.387738][   T30]  ? assign_work+0x364/0x3d0
[  557.432143][   T30]  worker_thread+0x870/0xd30
[  557.436868][   T30]  ? __kthread_parkme+0x169/0x1d0
[  557.467505][   T30]  ? __pfx_worker_thread+0x10/0x10
[  557.481746][   T30]  kthread+0x2f0/0x390
[  557.485897][   T30]  ? __pfx_worker_thread+0x10/0x10
[  557.491071][   T30]  ? __pfx_kthread+0x10/0x10
[  557.526947][   T30]  ret_from_fork+0x4b/0x80
[  557.547118][   T30]  ? __pfx_kthread+0x10/0x10
[  557.571510][   T30]  ret_from_fork_asm+0x1a/0x30
[  557.576478][   T30]  </TASK>
[  557.610144][   T30] INFO: task kworker/u8:7:1132 blocked for more than 162 seconds.
[  557.643469][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  557.650822][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  557.753204][   T30] task:kworker/u8:7    state:D stack:20952 pid:1132  tgid:1132  ppid:2      flags:0x00004000
[  557.821544][   T30] Workqueue: events_unbound linkwatch_event
[  557.827566][   T30] Call Trace:
[  557.830961][   T30]  <TASK>
[  557.853884][   T30]  __schedule+0x1895/0x4b30
[  557.858510][   T30]  ? __pfx___schedule+0x10/0x10
[  557.864486][   T55] Bluetooth: hci2: command tx timeout
[  557.864508][ T9758] Bluetooth: hci0: command tx timeout
[  557.869906][   T55] Bluetooth: hci5: command tx timeout
[  557.875348][ T9770] Bluetooth: hci8: command tx timeout
[  557.875395][ T9770] Bluetooth: hci7: command tx timeout
[  557.880759][   T55] Bluetooth: hci6: command tx timeout
[  557.900197][   T55] Bluetooth: hci10: command tx timeout
[  557.901564][ T9770] Bluetooth: hci9: command tx timeout
[  557.905853][   T55] Bluetooth: hci1: command tx timeout
[  557.981523][   T30]  ? __pfx_lock_release+0x10/0x10
[  557.986650][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  558.041502][   T30]  ? kthread_data+0x52/0xd0
[  558.046701][   T30]  ? schedule+0x90/0x320
[  558.051010][   T30]  ? wq_worker_sleeping+0x66/0x240
[  558.107164][   T30]  ? schedule+0x90/0x320
[  558.111611][   T30]  schedule+0x14b/0x320
[  558.115857][   T30]  schedule_preempt_disabled+0x13/0x30
[  558.131505][   T30]  __mutex_lock+0x6a7/0xd70
[  558.136179][   T30]  ? __mutex_lock+0x52a/0xd70
[  558.140912][   T30]  ? linkwatch_event+0xe/0x60
[  558.161540][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  558.166723][   T30]  ? process_scheduled_works+0x976/0x1850
[  558.181610][   T30]  linkwatch_event+0xe/0x60
[  558.186407][   T30]  process_scheduled_works+0xa63/0x1850
[  558.201557][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  558.207629][   T30]  ? assign_work+0x364/0x3d0
[  558.241581][   T30]  worker_thread+0x870/0xd30
[  558.246305][   T30]  ? __kthread_parkme+0x169/0x1d0
[  558.281582][   T30]  ? __pfx_worker_thread+0x10/0x10
[  558.286914][   T30]  kthread+0x2f0/0x390
[  558.291046][   T30]  ? __pfx_worker_thread+0x10/0x10
[  558.347326][   T30]  ? __pfx_kthread+0x10/0x10
[  558.371497][   T30]  ret_from_fork+0x4b/0x80
[  558.376026][   T30]  ? __pfx_kthread+0x10/0x10
[  558.380678][   T30]  ret_from_fork_asm+0x1a/0x30
[  558.421681][   T30]  </TASK>
[  558.424890][   T30] INFO: task syz-executor:9737 blocked for more than 163 seconds.
[  558.461562][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  558.468926][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  558.557315][   T30] task:syz-executor    state:D stack:26032 pid:9737  tgid:9737  ppid:1      flags:0x00004006
[  558.568733][   T30] Call Trace:
[  558.572158][   T30]  <TASK>
[  558.575215][   T30]  __schedule+0x1895/0x4b30
[  558.579882][   T30]  ? __pfx___schedule+0x10/0x10
[  558.585206][   T30]  ? __pfx_lock_release+0x10/0x10
[  558.590291][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  558.595988][   T30]  ? schedule+0x90/0x320
[  558.600311][   T30]  schedule+0x14b/0x320
[  558.604655][   T30]  schedule_preempt_disabled+0x13/0x30
[  558.610160][   T30]  __mutex_lock+0x6a7/0xd70
[  558.614758][   T30]  ? __mutex_lock+0x52a/0xd70
[  558.619602][   T30]  ? ip_tunnel_init_net+0x20e/0x720
[  558.624971][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  558.630075][   T30]  ip_tunnel_init_net+0x20e/0x720
[  558.635210][   T30]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  558.640812][   T30]  ? ops_init+0x75/0x590
[  558.663165][   T30]  ops_init+0x31e/0x590
[  558.667626][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  558.691505][   T30]  setup_net+0x287/0x9e0
[  558.695847][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  558.731606][   T30]  ? __pfx_setup_net+0x10/0x10
[  558.736544][   T30]  copy_net_ns+0x33f/0x570
[  558.741014][   T30]  create_new_namespaces+0x425/0x7b0
[  558.791631][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  558.797545][   T30]  ksys_unshare+0x619/0xc10
[  558.816436][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  558.841622][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  558.847710][   T30]  ? do_syscall_64+0x100/0x230
[  558.861469][   T30]  __x64_sys_unshare+0x38/0x40
[  558.881511][   T30]  do_syscall_64+0xf3/0x230
[  558.891612][   T30]  ? clear_bhb_loop+0x35/0x90
[  558.896384][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.941505][   T30] RIP: 0033:0x7f8da4b7f6f7
[  558.946034][   T30] RSP: 002b:00007f8da4e5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  558.981507][   T30] RAX: ffffffffffffffda RBX: 00007f8da4bf22ec RCX: 00007f8da4b7f6f7
[  558.989744][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  559.033103][   T30] RBP: 0000000000000000 R08: 00007f8da5867d60 R09: 0000000000000000
[  559.041169][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  559.091490][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  559.099716][   T30]  </TASK>
[  559.131514][   T30] INFO: task syz-executor:9743 blocked for more than 163 seconds.
[  559.139471][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  559.182881][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  559.234958][   T30] task:syz-executor    state:D stack:25712 pid:9743  tgid:9743  ppid:1      flags:0x00004006
[  559.271573][   T30] Call Trace:
[  559.275510][   T30]  <TASK>
[  559.278494][   T30]  __schedule+0x1895/0x4b30
[  559.321498][   T30]  ? __pfx___schedule+0x10/0x10
[  559.326452][   T30]  ? __pfx_lock_release+0x10/0x10
[  559.354721][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  559.360285][   T30]  ? schedule+0x90/0x320
[  559.381609][   T30]  schedule+0x14b/0x320
[  559.385866][   T30]  schedule_preempt_disabled+0x13/0x30
[  559.391368][   T30]  __mutex_lock+0x6a7/0xd70
[  559.416228][   T30]  ? __mutex_lock+0x52a/0xd70
[  559.421048][   T30]  ? ip_tunnel_init_net+0x20e/0x720
[  559.451482][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  559.480140][   T30]  ? read_word_at_a_time+0xe/0x20
[  559.501651][   T30]  ? sized_strscpy+0x8d/0x220
[  559.506525][   T30]  ip_tunnel_init_net+0x20e/0x720
[  559.531612][   T30]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  559.537267][   T30]  ? ops_init+0x75/0x590
[  559.562112][   T30]  ops_init+0x31e/0x590
[  559.566358][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  559.601565][   T30]  setup_net+0x287/0x9e0
[  559.605922][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  559.647423][   T30]  ? __pfx_setup_net+0x10/0x10
[  559.652364][   T30]  copy_net_ns+0x33f/0x570
[  559.656835][   T30]  create_new_namespaces+0x425/0x7b0
[  559.701822][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  559.707646][   T30]  ksys_unshare+0x619/0xc10
[  559.741808][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  559.746930][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  559.781529][   T30]  ? do_syscall_64+0x100/0x230
[  559.786393][   T30]  __x64_sys_unshare+0x38/0x40
[  559.811657][   T30]  do_syscall_64+0xf3/0x230
[  559.816342][   T30]  ? clear_bhb_loop+0x35/0x90
[  559.821109][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.869281][   T30] RIP: 0033:0x7f2dfed7f6f7
[  559.914932][   T30] RSP: 002b:00007f2dff05ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  559.931553][   T30] RAX: ffffffffffffffda RBX: 00007f2dfedf22ec RCX: 00007f2dfed7f6f7
[  559.939599][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  559.981677][   T30] RBP: 0000000000000000 R08: 00007f2dffa67d60 R09: 0000000000000000
[  559.989737][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  560.049277][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  560.087471][   T30]  </TASK>
[  560.090676][   T30] INFO: task syz-executor:9746 blocked for more than 164 seconds.
[  560.121481][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  560.129028][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  560.201522][   T30] task:syz-executor    state:D stack:26048 pid:9746  tgid:9746  ppid:1      flags:0x00004006
[  560.237221][   T30] Call Trace:
[  560.240585][   T30]  <TASK>
[  560.261496][   T30]  __schedule+0x1895/0x4b30
[  560.266100][   T30]  ? __pfx___schedule+0x10/0x10
[  560.270999][   T30]  ? __pfx_lock_release+0x10/0x10
[  560.321472][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  560.327029][   T30]  ? schedule+0x90/0x320
[  560.331315][   T30]  schedule+0x14b/0x320
[  560.377124][   T30]  schedule_preempt_disabled+0x13/0x30
[  560.382754][   T30]  __mutex_lock+0x6a7/0xd70
[  560.387321][   T30]  ? __mutex_lock+0x52a/0xd70
[  560.408769][   T30]  ? ip_tunnel_init_net+0x20e/0x720
[  560.427139][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  560.441639][   T30]  ip_tunnel_init_net+0x20e/0x720
[  560.446769][   T30]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  560.471630][   T30]  ? ops_init+0x75/0x590
[  560.476071][   T30]  ops_init+0x31e/0x590
[  560.480277][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  560.531609][   T30]  setup_net+0x287/0x9e0
[  560.536032][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  560.571687][   T30]  ? __pfx_setup_net+0x10/0x10
[  560.576558][   T30]  copy_net_ns+0x33f/0x570
[  560.581026][   T30]  create_new_namespaces+0x425/0x7b0
[  560.631550][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  560.637374][   T30]  ksys_unshare+0x619/0xc10
[  560.671527][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  560.676657][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  560.721541][   T30]  ? do_syscall_64+0x100/0x230
[  560.726406][   T30]  __x64_sys_unshare+0x38/0x40
[  560.731234][   T30]  do_syscall_64+0xf3/0x230
[  560.767711][   T30]  ? clear_bhb_loop+0x35/0x90
[  560.781607][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.787585][   T30] RIP: 0033:0x7fabdfb7f6f7
[  560.821510][   T30] RSP: 002b:00007fabdfe5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  560.830018][   T30] RAX: ffffffffffffffda RBX: 00007fabdfbf22ec RCX: 00007fabdfb7f6f7
[  560.887433][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  560.910420][   T30] RBP: 0000000000000000 R08: 00007fabe0867d60 R09: 0000000000000000
[  560.944588][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  560.971499][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  560.979572][   T30]  </TASK>
[  561.011561][   T30] INFO: task syz-executor:9748 blocked for more than 165 seconds.
[  561.019994][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  561.081500][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  561.090256][   T30] task:syz-executor    state:D stack:26048 pid:9748  tgid:9748  ppid:1      flags:0x00004004
[  561.151037][   T30] Call Trace:
[  561.161550][   T30]  <TASK>
[  561.164563][   T30]  __schedule+0x1895/0x4b30
[  561.169178][   T30]  ? __pfx___schedule+0x10/0x10
[  561.201523][   T30]  ? __pfx_lock_release+0x10/0x10
[  561.206672][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  561.249605][   T30]  ? schedule+0x90/0x320
[  561.254074][   T30]  schedule+0x14b/0x320
[  561.258389][   T30]  schedule_preempt_disabled+0x13/0x30
[  561.291545][   T30]  ? alloc_netdev_mqs+0xcda/0x1000
[  561.296752][   T30]  ? __ip_tunnel_create+0x282/0x380
[  561.321505][   T30]  ? __ip_tunnel_create+0x2b4/0x380
[  561.351563][   T30]  ? read_word_at_a_time+0xe/0x20
[  561.356689][   T30]  ? sized_strscpy+0x8d/0x220
[  561.381558][   T30]  ? ip_tunnel_init_net+0x20e/0x720
[  561.386901][   T30]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  561.411554][   T30]  ? vti_init_net+0x2e/0xf0
[  561.416275][   T30]  ? ops_init+0x31e/0x590
[  561.420668][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  561.471536][   T30]  ? setup_net+0x287/0x9e0
[  561.476042][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  561.501520][   T30]  ? __pfx_setup_net+0x10/0x10
[  561.506426][   T30]  ? copy_net_ns+0x33f/0x570
[  561.511074][   T30]  ? create_new_namespaces+0x425/0x7b0
[  561.551503][   T30]  ? unshare_nsproxy_namespaces+0x124/0x180
[  561.557498][   T30]  ? ksys_unshare+0x619/0xc10
[  561.591490][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  561.596701][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  561.611832][   T30]  ? do_syscall_64+0x100/0x230
[  561.616749][   T30]  ? __x64_sys_unshare+0x38/0x40
[  561.651610][   T30]  ? do_syscall_64+0xf3/0x230
[  561.656393][   T30]  ? clear_bhb_loop+0x35/0x90
[  561.661124][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.701533][   T30]  </TASK>
[  561.704815][   T30] INFO: task syz-executor:9767 blocked for more than 166 seconds.
[  561.721493][   T30]       Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  561.728915][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  561.761566][   T30] task:syz-executor    state:D stack:26608 pid:9767  tgid:9767  ppid:9765   flags:0x00004000
[  561.807199][   T30] Call Trace:
[  561.810561][   T30]  <TASK>
[  561.821643][   T30]  __schedule+0x1895/0x4b30
[  561.826340][   T30]  ? __pfx___schedule+0x10/0x10
[  561.870671][   T30]  ? __pfx_lock_release+0x10/0x10
[  561.881789][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  561.887342][   T30]  ? schedule+0x90/0x320
[  561.917132][   T30]  schedule+0x14b/0x320
[  561.941592][   T30]  schedule_preempt_disabled+0x13/0x30
[  561.947141][   T30]  __mutex_lock+0x6a7/0xd70
[  561.981632][   T30]  ? __mutex_lock+0x52a/0xd70
[  561.986448][   T30]  ? register_nexthop_notifier+0x84/0x290
[  562.011467][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  562.016639][   T30]  ? __asan_memset+0x23/0x50
[  562.021299][   T30]  register_nexthop_notifier+0x84/0x290
[  562.061535][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  562.067474][   T30]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  562.101680][   T30]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  562.107940][   T30]  ? __asan_memset+0x23/0x50
[  562.135297][   T30]  ops_init+0x31e/0x590
[  562.139553][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  562.164026][   T30]  setup_net+0x287/0x9e0
[  562.168388][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  562.181729][   T30]  ? __pfx_setup_net+0x10/0x10
[  562.186844][   T30]  copy_net_ns+0x33f/0x570
[  562.191315][   T30]  create_new_namespaces+0x425/0x7b0
[  562.211496][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  562.217352][   T30]  ksys_unshare+0x619/0xc10
[  562.231511][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  562.236667][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  562.251511][   T30]  ? do_syscall_64+0x100/0x230
[  562.256361][   T30]  __x64_sys_unshare+0x38/0x40
[  562.261175][   T30]  do_syscall_64+0xf3/0x230
[  562.291566][   T30]  ? clear_bhb_loop+0x35/0x90
[  562.296344][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.311468][   T30] RIP: 0033:0x7f79c737f6f7
[  562.315987][   T30] RSP: 002b:00007f79c765ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  562.341528][   T30] RAX: ffffffffffffffda RBX: 00007f79c73f22ec RCX: 00007f79c737f6f7
[  562.361499][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  562.369614][   T30] RBP: 0000000000000000 R08: 00007f79c8067d60 R09: 0000000000000000
[  562.391462][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  562.399552][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  562.421698][   T30]  </TASK>
[  562.424855][   T30] 
[  562.424855][   T30] Showing all locks held in the system:
[  562.461848][   T30] 6 locks held by kworker/u8:0/11:
[  562.467071][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  562.531672][   T30]  #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  562.582606][   T30]  #2: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  562.605171][   T30]  #3: ffff8880302a20e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440
[  562.631540][   T30]  #4: ffff8880302a3250 (&devlink->lock_key#2){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440
[  562.651451][   T30]  #5: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0
[  562.661162][   T30] 1 lock held by khungtaskd/30:
[  562.681641][   T30]  #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  562.701508][   T30] 3 locks held by kworker/u8:8/2551:
[  562.706873][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  562.741729][   T30]  #1: ffffc900099e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  562.768185][   T30]  #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  562.791637][   T30] 2 locks held by getty/4986:
[  562.796391][   T30]  #0: ffff8880324620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  562.821506][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  562.851670][   T30] 2 locks held by syz-executor/5223:
[  562.857119][   T30] 4 locks held by kworker/u9:5/5242:
[  562.871548][   T30]  #0: ffff8880414a8148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  562.901878][   T30]  #1: ffffc90003a9fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  562.921470][   T30]  #2: ffff888028b44d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  562.931935][   T30]  #3: ffff888028b44078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  562.944521][   T30] 2 locks held by syz-executor/9737:
[  562.949900][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  562.967047][   T30]  #1: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  562.979835][   T30] 2 locks held by syz-executor/9743:
[  563.017169][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  563.052197][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720
[  563.079305][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  563.081537][   T30] 2 locks held by syz-executor/9746:
[  563.090952][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  563.091092][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  563.141568][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0
[  563.151055][   T30] 2 locks held by syz-executor/9748:
[  563.191537][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  563.201098][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0
[  563.251476][   T30] 2 locks held by syz-executor/9751:
[  563.260984][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  563.262640][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  563.289607][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  563.297763][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720
[  563.307900][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  563.315146][   T30] 1 lock held by syz-executor/9756:
[  563.320724][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}
[  563.321295][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  563.351892][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  563.365858][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  563.374028][   T30] , at: copy_net_ns+0x328/0x570
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  563.407860][   T30] 2 locks held by syz-executor/9760:
[  563.446086][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  563.491600][   T30]  #1: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  563.528272][   T30] 2 locks held by syz-executor/9764:
[  563.561671][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  563.571247][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0
[  563.613622][   T30] 2 locks held by syz-executor/9767:
[  563.619069][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  563.635127][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720
[  563.646342][   T30] 1 lock held by syz-executor/9778:
[  563.656732][   T30] 2 locks held by syz-executor/9779:
[  563.663879][   T30]  #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  563.680556][   T30]  #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  563.707565][   T30] 
[  563.715277][   T30] =============================================
[  563.715277][   T30] 
[  563.741028][   T30] NMI backtrace for cpu 1
[  563.745516][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  563.755717][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  563.765821][   T30] Call Trace:
[  563.769131][   T30]  <TASK>
[  563.772098][   T30]  dump_stack_lvl+0x241/0x360
[  563.776823][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  563.782068][   T30]  ? __pfx__printk+0x10/0x10
[  563.786707][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  563.791693][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  563.797212][   T30]  ? _printk+0xd5/0x120
[  563.802045][   T30]  ? __pfx__printk+0x10/0x10
[  563.806679][   T30]  ? __wake_up_klogd+0xcc/0x110
[  563.811573][   T30]  ? __pfx__printk+0x10/0x10
[  563.816284][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  563.821320][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  563.827311][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  563.833316][   T30]  watchdog+0xff4/0x1040
[  563.837578][   T30]  ? watchdog+0x1ea/0x1040
[  563.842018][   T30]  ? __pfx_watchdog+0x10/0x10
[  563.846708][   T30]  kthread+0x2f0/0x390
[  563.850786][   T30]  ? __pfx_watchdog+0x10/0x10
[  563.855480][   T30]  ? __pfx_kthread+0x10/0x10
[  563.860079][   T30]  ret_from_fork+0x4b/0x80
[  563.864516][   T30]  ? __pfx_kthread+0x10/0x10
[  563.869118][   T30]  ret_from_fork_asm+0x1a/0x30
[  563.873912][   T30]  </TASK>
[  563.877819][   T30] Sending NMI from CPU 1 to CPUs 0:
[  563.883431][    C0] NMI backtrace for cpu 0
[  563.883445][    C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  563.883467][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  563.883480][    C0] Workqueue: events_unbound toggle_allocation_gate
[  563.883505][    C0] RIP: 0010:__lock_acquire+0x1369/0x2050
[  563.883536][    C0] Code: 00 00 fc ff df 90 0f 0b 90 90 90 31 db 48 83 c3 40 48 89 d8 48 c1 e8 03 80 3c 10 00 74 08 48 89 df e8 ab dd 8d 00 48 83 3b 00 <0f> 84 98 02 00 00 48 8b 7c 24 30 48 8b 74 24 40 44 89 e2 48 89 e9
[  563.883552][    C0] RSP: 0018:ffffc90000007070 EFLAGS: 00000082
[  563.883568][    C0] RAX: 1ffffffff278fe54 RBX: ffffffff93c7f2a0 RCX: ffffffff81703481
[  563.883583][    C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff942588b0
[  563.883596][    C0] RBP: a08d77218cad1a44 R08: ffffffff942588b7 R09: 1ffffffff284b116
[  563.883610][    C0] R10: dffffc0000000000 R11: fffffbfff284b117 R12: 0000000000000000
[  563.883628][    C0] R13: ffff88801de9e4d8 R14: 1ffff11003bd3cc3 R15: ffff88801de9e618
[  563.883642][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  563.883658][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  563.883671][    C0] CR2: 000055e62c21e058 CR3: 000000000e734000 CR4: 00000000003506f0
[  563.883687][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  563.883698][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  563.883710][    C0] Call Trace:
[  563.883717][    C0]  <NMI>
[  563.883724][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  563.883751][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  563.883777][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  563.883814][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  563.883839][    C0]  ? nmi_handle+0x14f/0x5a0
[  563.883856][    C0]  ? nmi_handle+0x2a/0x5a0
[  563.883874][    C0]  ? __lock_acquire+0x1369/0x2050
[  563.883899][    C0]  ? default_do_nmi+0x63/0x160
[  563.883926][    C0]  ? exc_nmi+0x123/0x1f0
[  563.883952][    C0]  ? end_repeat_nmi+0xf/0x53
[  563.883976][    C0]  ? __lock_acquire+0x12a1/0x2050
[  563.884002][    C0]  ? __lock_acquire+0x1369/0x2050
[  563.884027][    C0]  ? __lock_acquire+0x1369/0x2050
[  563.884054][    C0]  ? __lock_acquire+0x1369/0x2050
[  563.884079][    C0]  </NMI>
[  563.884085][    C0]  <IRQ>
[  563.884098][    C0]  lock_acquire+0x1ed/0x550
[  563.884122][    C0]  ? skb_queue_tail+0x36/0x120
[  563.884144][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  563.884179][    C0]  _raw_spin_lock_irqsave+0xd5/0x120
[  563.884198][    C0]  ? skb_queue_tail+0x36/0x120
[  563.884216][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  563.884239][    C0]  skb_queue_tail+0x36/0x120
[  563.884257][    C0]  ? trace_cfg80211_return_bool+0x86/0x210
[  563.884280][    C0]  ieee80211_rx_h_mgmt+0x4c3/0x710
[  563.884299][    C0]  ? ieee80211_rx_h_action_return+0x149/0x560
[  563.884320][    C0]  ieee80211_rx_handlers+0x67fc/0xb830
[  563.884364][    C0]  ? __pfx_ieee80211_rx_handlers+0x10/0x10
[  563.884396][    C0]  ? mark_lock+0x9a/0x360
[  563.884414][    C0]  ? __lock_acquire+0x1384/0x2050
[  563.884451][    C0]  ieee80211_prepare_and_rx_handle+0x31ab/0x6360
[  563.884480][    C0]  ? __pfx_lock_release+0x10/0x10
[  563.884508][    C0]  ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10
[  563.884535][    C0]  ? ieee80211_rx_for_interface+0x304/0x3d0
[  563.884559][    C0]  ieee80211_rx_list+0x2ce0/0x3780
[  563.884576][    C0]  ? __lock_acquire+0x1384/0x2050
[  563.884610][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  563.884632][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  563.884659][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  563.884685][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  563.884715][    C0]  ? ieee80211_rx_napi+0xd6/0x3c0
[  563.884732][    C0]  ieee80211_rx_napi+0x18a/0x3c0
[  563.884749][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  563.884770][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  563.884790][    C0]  ? skb_dequeue+0x113/0x150
[  563.884808][    C0]  ieee80211_handle_queued_frames+0xe7/0x1e0
[  563.884839][    C0]  tasklet_action_common+0x321/0x4d0
[  563.884867][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  563.884893][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  563.884921][    C0]  ? workqueue_softirq_action+0xce/0x140
[  563.884948][    C0]  handle_softirqs+0x2c5/0x980
[  563.884973][    C0]  ? __irq_exit_rcu+0xf4/0x1c0
[  563.884997][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  563.885021][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  563.885054][    C0]  __irq_exit_rcu+0xf4/0x1c0
[  563.885076][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  563.885102][    C0]  irq_exit_rcu+0x9/0x30
[  563.885123][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  563.885143][    C0]  </IRQ>
[  563.885149][    C0]  <TASK>
[  563.885155][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  563.885178][    C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0
[  563.885208][    C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 96 f9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 41 f5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 25 f5
[  563.885223][    C0] RSP: 0018:ffffc90000ab76e0 EFLAGS: 00000293
[  563.885238][    C0] RAX: ffffffff8188c48b RBX: 1ffff110170e8919 RCX: ffff88801de9da00
[  563.885252][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  563.885263][    C0] RBP: ffffc90000ab78e0 R08: ffffffff8188c45a R09: 1ffffffff284b0f8
[  563.885277][    C0] R10: dffffc0000000000 R11: fffffbfff284b0f9 R12: dffffc0000000000
[  563.885291][    C0] R13: ffff8880b87448c8 R14: ffff8880b863fc80 R15: 0000000000000001
[  563.885307][    C0]  ? smp_call_function_many_cond+0x19da/0x2ca0
[  563.885335][    C0]  ? smp_call_function_many_cond+0x1a0b/0x2ca0
[  563.885373][    C0]  ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0
[  563.885398][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  563.885427][    C0]  ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0
[  563.885453][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  563.885481][    C0]  ? __pfx_perf_event_text_poke+0x10/0x10
[  563.885500][    C0]  ? __mutex_trylock_common+0x183/0x2e0
[  563.885521][    C0]  ? preempt_schedule_thunk+0x1a/0x30
[  563.885540][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  563.885561][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  563.885590][    C0]  text_poke_bp_batch+0x726/0xb30
[  563.885614][    C0]  ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0
[  563.885638][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  563.885662][    C0]  ? arch_jump_label_transform_queue+0x9b/0x100
[  563.885688][    C0]  ? process_scheduled_works+0x976/0x1850
[  563.885712][    C0]  text_poke_finish+0x30/0x50
[  563.885733][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  563.885757][    C0]  static_key_enable_cpuslocked+0x136/0x260
[  563.885781][    C0]  static_key_enable+0x1a/0x20
[  563.885803][    C0]  toggle_allocation_gate+0xbc/0x260
[  563.885822][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  563.885841][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  563.885872][    C0]  process_scheduled_works+0xa63/0x1850
[  563.885910][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  563.885938][    C0]  ? assign_work+0x364/0x3d0
[  563.885962][    C0]  worker_thread+0x870/0xd30
[  563.885989][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  563.886010][    C0]  ? __kthread_parkme+0x169/0x1d0
[  563.886036][    C0]  ? __pfx_worker_thread+0x10/0x10
[  563.886060][    C0]  kthread+0x2f0/0x390
[  563.886075][    C0]  ? __pfx_worker_thread+0x10/0x10
[  563.886099][    C0]  ? __pfx_kthread+0x10/0x10
[  563.886115][    C0]  ret_from_fork+0x4b/0x80
[  563.886140][    C0]  ? __pfx_kthread+0x10/0x10
[  563.886156][    C0]  ret_from_fork_asm+0x1a/0x30
[  563.886187][    C0]  </TASK>
[  564.640851][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  564.647847][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0
[  564.658038][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  564.668123][   T30] Call Trace:
[  564.671408][   T30]  <TASK>
[  564.674349][   T30]  dump_stack_lvl+0x241/0x360
[  564.679046][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.684259][   T30]  ? __pfx__printk+0x10/0x10
[  564.688856][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  564.694863][   T30]  ? vscnprintf+0x5d/0x90
[  564.699210][   T30]  panic+0x349/0x880
[  564.703117][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  564.709289][   T30]  ? __pfx_panic+0x10/0x10
[  564.713713][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  564.719111][   T30]  ? __irq_work_queue_local+0x137/0x410
[  564.724670][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  564.730048][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  564.736220][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  564.742390][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  564.748559][   T30]  watchdog+0x1033/0x1040
[  564.752936][   T30]  ? watchdog+0x1ea/0x1040
[  564.757367][   T30]  ? __pfx_watchdog+0x10/0x10
[  564.762055][   T30]  kthread+0x2f0/0x390
[  564.766307][   T30]  ? __pfx_watchdog+0x10/0x10
[  564.770997][   T30]  ? __pfx_kthread+0x10/0x10
[  564.775593][   T30]  ret_from_fork+0x4b/0x80
[  564.780024][   T30]  ? __pfx_kthread+0x10/0x10
[  564.784622][   T30]  ret_from_fork_asm+0x1a/0x30
[  564.789417][   T30]  </TASK>
[  564.792768][   T30] Kernel Offset: disabled
[  564.797102][   T30] Rebooting in 86400 seconds..