last executing test programs:

39.22052967s ago: executing program 1 (id=154):
io_setup(0x4, &(0x7f00000014c0)=<r0=>0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') (async)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x11f4, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x11c4, 0x2, [@TCA_TCINDEX_ACT={0x11c0, 0x7, [@m_xt={0x1ac, 0x17, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x5d, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8c193f3c7c09a5e9c"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x148, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcd9}]}, {0xe1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7c39dd9c924b24b96d151107ca9811f7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xec8, 0x1e, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xbc0a, 0xf, 0x2, 0x80, 0x3}, 0x3, 0x5, [{0x8, 0xbe4e, 0x7, 0x80000001, 0x9, 0xd}, {0x0, 0x1, 0x0, 0x0, 0x4, 0x9}, {0xfffffffb, 0xffffffff, 0x6, 0x40, 0x1, 0x1}, {0x401, 0x7, 0x0, 0x7, 0x8, 0xd}, {0x7, 0xfffffbff, 0xffffffff, 0x0, 0x3ff, 0x9}]}, [{0x0, 0x1, 0xffff, 0x7, 0xffffff50, 0x7}, {0x6, 0x5, 0x2, 0x401, 0xf, 0xd}, {0x8, 0x40, 0x1, 0x8, 0x0, 0x5}, {0x3, 0xc8, 0x2, 0x2, 0xa, 0xfff}, {0x3, 0xffffffff, 0x7, 0x9, 0x7, 0xbf16}, {0x3ff, 0xfffffffc, 0x7, 0x9, 0x2, 0x7}, {0x0, 0x1ff, 0x8, 0x4, 0x6, 0x5}, {0x6, 0x4, 0x9, 0x0, 0x9}, {0x7, 0x8001, 0x1000, 0x8, 0x9, 0x7ff}, {0x2, 0x5, 0x9, 0x802, 0x4, 0x5}, {0x8, 0xf, 0x3, 0x8, 0x8, 0xaa6}, {0x9, 0xe, 0x4, 0xf, 0xbec4, 0xf}, {0xfffffff7, 0x3, 0x8, 0x0, 0xffff, 0x2}, {0x98, 0x4, 0x4, 0x89, 0x8, 0x6}, {0x0, 0x10, 0xcfd7, 0x100, 0x7fffffff}, {0x8, 0x1000, 0x1, 0xd, 0x1, 0xa589}, {0x6, 0x3, 0x8, 0x5, 0x9, 0x2}, {0x1, 0x80, 0x9, 0x80000001, 0x9, 0x3}, {0x4, 0x7, 0xc, 0x200, 0x4}, {0x0, 0x400, 0x3, 0xdd74, 0x1}, {0x3, 0x6, 0x8, 0xffff8543, 0x3, 0xd2c}, {0x80, 0xffffffff, 0x101, 0x5, 0x7f, 0x300}, {0x4, 0x10, 0x8f, 0x4, 0xd1, 0x1}, {0xb6e0, 0xb9ba, 0x3, 0x17, 0x3, 0x7}, {0x8, 0x0, 0x7, 0x6, 0x7, 0xfffffffe}, {0x8, 0x200, 0xef0, 0x0, 0x6, 0xb4}, {0xae6f, 0x4, 0x2, 0x3, 0x7, 0x1}, {0x34, 0xffff, 0x2, 0x7, 0x2, 0x7fffffff}, {0x6, 0x10, 0x3, 0x6, 0x10000, 0x2}, {0x0, 0x8, 0xfffff34d, 0x80000000, 0xff, 0xfffffffb}, {0x94a, 0x5, 0x9, 0x0, 0x7, 0x6c241156}, {0x8, 0x5, 0x3, 0x5, 0x80000001, 0x1}, {0xffff, 0x4791, 0x5, 0x9, 0xa7, 0x6}, {0x0, 0x7, 0x0, 0xfd, 0x9, 0x6}, {0x400, 0xc577, 0x1000, 0x1, 0x3, 0x8}, {0xdaa5, 0x2, 0xfffffff9, 0x158, 0x6, 0x1d2}, {0x2d, 0x5, 0x400, 0x4, 0x2, 0x9}, {0xad08, 0x0, 0xa, 0x2, 0x36b, 0x63}, {0x6, 0x2, 0xb8, 0x2, 0x7, 0x6}, {0xd4e4, 0x2, 0x6, 0x8001, 0x8, 0x8}, {0x3, 0x4, 0x3ff, 0x81, 0x3, 0x4}, {0x1, 0x1, 0x401, 0x9, 0x8, 0xd4da}, {0xffffff15, 0x7f96, 0xae7, 0x8, 0x80000000}, {0x482f, 0xffffffc5, 0x1, 0x3, 0x2, 0x1}, {0x17, 0x100, 0x9, 0x200, 0x1, 0x5}, {0x1, 0x3a88, 0x9, 0xb50d, 0x0, 0x10000}, {0x80, 0xfd2, 0x6, 0x8, 0x7, 0x4}, {0x3eca, 0x0, 0xa, 0x1ff, 0xab0}, {0x5, 0x8, 0xfffffffd, 0x2, 0xe04b, 0x80000000}, {0x10, 0xffffffff, 0x1ff, 0x1, 0x9b38, 0x2463}, {0x8, 0x3, 0xb, 0xffffff68, 0x370, 0x401}, {0x5, 0x8, 0x4, 0x7, 0x3, 0x4b}, {0x4, 0x9, 0x8, 0x1, 0x800, 0xfffffffe}, {0x7, 0xfffffff9, 0x7fff, 0x9, 0x800000, 0x3}, {0x4, 0x6, 0xf96f, 0x8, 0x5, 0x6}, {0x20c, 0x800, 0x8, 0xfffffffd, 0x7, 0x1}, {0x2, 0x101, 0x0, 0x2, 0xf9, 0x7fffffff}, {0x5, 0x47, 0x100, 0x40, 0x8, 0xe}, {0xfff, 0x3, 0x100, 0xdf9, 0x6, 0x4}, {0x1, 0x8001, 0xff, 0x4, 0xa, 0x3}, {0x101, 0x8, 0x979, 0x6d, 0x6, 0x6}, {0xf, 0x9, 0xfffffff7, 0x1, 0x4, 0x3ff}, {0x10, 0x1, 0x148, 0x2, 0x0, 0x14e7}, {0x4, 0x9, 0x3, 0x6, 0x1590, 0x7}, {0x0, 0x7, 0x3821, 0x5, 0x2, 0x5}, {0x2, 0x9, 0x1, 0x9, 0x28dbd359, 0x6}, {0x10000, 0xc29, 0x5, 0x5, 0x36b9, 0x7f}, {0x2, 0xdb7, 0x842, 0x4b, 0xfffffff8, 0x9}, {0xe, 0x101, 0x400, 0x7, 0x3, 0x7ff}, {0x5, 0x5, 0x9, 0xffffffff, 0x4, 0x2}, {0x40, 0x4, 0x5, 0x3, 0x8, 0x6}, {0x7ff, 0x10000, 0x2, 0xf281, 0x9, 0x8000}, {0x6, 0x14c800, 0x100, 0x8, 0xd, 0x3}, {0x3, 0x8000, 0x3, 0x5, 0x5, 0xc}, {0x5, 0x8, 0x8, 0x6, 0x3ff, 0x2}, {0x5, 0x80000000, 0x1, 0x8, 0x1, 0xdea}, {0x926b, 0x80000000, 0x8, 0x1, 0x2, 0x10001}, {0x6, 0x2, 0x0, 0x7, 0x5, 0x10001}, {0x5, 0xfffffffd, 0x401, 0xa, 0x800, 0x7fff}, {0xa0, 0x7fff, 0x4, 0x7, 0xffffffff, 0x401}, {0xd7, 0xfc, 0x8, 0x4, 0x3ff, 0xc33}, {0x6, 0x19, 0x2, 0x2, 0x7, 0x8001}, {0x7f, 0xffff9dcb, 0x9, 0x1, 0x24000000, 0x7}, {0x5, 0x8, 0x9, 0x5, 0x80000001, 0x6}, {0x2, 0xaebf, 0x6, 0x7a, 0x8, 0x9}, {0x9e7, 0x3ff, 0x1, 0x2, 0x7fffffff, 0x3}, {0x2, 0x2, 0x1, 0x4, 0x0, 0xd5}, {0x6bd, 0x80, 0x7, 0x1, 0xffff, 0xfffffff1}, {0x7, 0x7ff, 0x7fff, 0x6, 0x7, 0xff}, {0x4800, 0x1, 0x2, 0xa131, 0x848, 0x6}, {0x5, 0x6, 0x2, 0x3, 0xffff, 0x3}, {0x6, 0x800, 0x8ce, 0x2, 0x1}, {0x9, 0xfffffff9, 0x1, 0x2, 0x20, 0x38000000}, {0x0, 0xffffffff, 0x7bf, 0x2, 0x5, 0x2}, {0x71d, 0x9, 0x7f, 0x79, 0x7, 0xfff}, {0x6, 0x0, 0x7, 0x4, 0xfffffffe, 0x9bc}, {0x9, 0xfffffffb, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x9, 0x7, 0xf, 0xc}, {0x9, 0xf, 0x4, 0x10, 0x8, 0x215}, {0xa944, 0x86, 0x51b, 0x10000, 0x80000000, 0x3}, {0x8, 0x0, 0x4, 0x7, 0xffffffff, 0x5165}, {0x4, 0x1, 0x4, 0x1, 0x9765}, {0x0, 0x6, 0x6, 0x8, 0x2, 0x2}, {0x3877ae68, 0x4, 0x9, 0xf, 0x2, 0x9}, {0x6, 0x7, 0xc, 0xfff, 0xdc, 0x3}, {0x8, 0x7fff, 0x10, 0xfffffe00, 0xd6, 0x8}, {0x100, 0x8, 0x5d7, 0xe8878000, 0x7, 0x9}, {0x3, 0x4, 0x83c6, 0x0, 0x1000, 0x7}, {0x401, 0x5, 0x9, 0x1186, 0xc0, 0x7f}, {0x7ff, 0xb3, 0x4, 0x0, 0xf, 0xd64}, {0x0, 0x7, 0x3, 0x7, 0x400, 0xffffffff}, {0x0, 0x6, 0x7fffffff, 0x8, 0x7, 0x9}, {0x8, 0x2, 0x101, 0x0, 0x7f}, {0x9, 0x4662, 0x70, 0x9, 0xce, 0x10001}, {0x4, 0xa, 0x3, 0x0, 0xf, 0x5}, {0xcc, 0x8, 0x5137, 0x2, 0x2e9a, 0xaf}, {0x789c, 0x5, 0x2, 0x7ff, 0xb67, 0x4}, {0x0, 0x91f, 0xb0e, 0xffff, 0x2, 0xffffffff}, {0xc7a, 0x6, 0xffffffc5, 0x9, 0x4, 0x7fff}, {0x21, 0x0, 0x7, 0x4, 0x80, 0x2800}, {0x3, 0x9, 0x0, 0x80, 0x6, 0x2}, {0x1, 0xc5, 0x0, 0x3, 0x2, 0x3}, {0x6, 0x4, 0x7ff, 0x8, 0x4, 0xb}, {0x4, 0x0, 0x5, 0x7fff, 0x5, 0x9}, {0x9, 0x4, 0x10, 0x3, 0x0, 0x8}, {0x7fffffff, 0x6, 0x8, 0x7, 0x7, 0x2}, {0x3, 0x5b8, 0x5, 0x6, 0x3d67, 0x3}, {0x4, 0x0, 0x9, 0x5, 0x80000000, 0x1}], [{0x4}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x3}, {0x1}, {0x2}, {0x7}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x501abeaffe19eb8}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x6}, {0x3}, {0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x8c8f22033c51199d}, {}, {0x4}, {0x5, 0xe909f12c5f33f997}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x7}, {}, {}, {0x3}, {0x2}, {0x3}, {0x5}, {0x2}, {0x4}, {0x654d41918ae72e00}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x810}, 0x41) (async)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x11f4, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x11c4, 0x2, [@TCA_TCINDEX_ACT={0x11c0, 0x7, [@m_xt={0x1ac, 0x17, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x5d, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8c193f3c7c09a5e9c"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x148, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcd9}]}, {0xe1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7c39dd9c924b24b96d151107ca9811f7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xec8, 0x1e, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xbc0a, 0xf, 0x2, 0x80, 0x3}, 0x3, 0x5, [{0x8, 0xbe4e, 0x7, 0x80000001, 0x9, 0xd}, {0x0, 0x1, 0x0, 0x0, 0x4, 0x9}, {0xfffffffb, 0xffffffff, 0x6, 0x40, 0x1, 0x1}, {0x401, 0x7, 0x0, 0x7, 0x8, 0xd}, {0x7, 0xfffffbff, 0xffffffff, 0x0, 0x3ff, 0x9}]}, [{0x0, 0x1, 0xffff, 0x7, 0xffffff50, 0x7}, {0x6, 0x5, 0x2, 0x401, 0xf, 0xd}, {0x8, 0x40, 0x1, 0x8, 0x0, 0x5}, {0x3, 0xc8, 0x2, 0x2, 0xa, 0xfff}, {0x3, 0xffffffff, 0x7, 0x9, 0x7, 0xbf16}, {0x3ff, 0xfffffffc, 0x7, 0x9, 0x2, 0x7}, {0x0, 0x1ff, 0x8, 0x4, 0x6, 0x5}, {0x6, 0x4, 0x9, 0x0, 0x9}, {0x7, 0x8001, 0x1000, 0x8, 0x9, 0x7ff}, {0x2, 0x5, 0x9, 0x802, 0x4, 0x5}, {0x8, 0xf, 0x3, 0x8, 0x8, 0xaa6}, {0x9, 0xe, 0x4, 0xf, 0xbec4, 0xf}, {0xfffffff7, 0x3, 0x8, 0x0, 0xffff, 0x2}, {0x98, 0x4, 0x4, 0x89, 0x8, 0x6}, {0x0, 0x10, 0xcfd7, 0x100, 0x7fffffff}, {0x8, 0x1000, 0x1, 0xd, 0x1, 0xa589}, {0x6, 0x3, 0x8, 0x5, 0x9, 0x2}, {0x1, 0x80, 0x9, 0x80000001, 0x9, 0x3}, {0x4, 0x7, 0xc, 0x200, 0x4}, {0x0, 0x400, 0x3, 0xdd74, 0x1}, {0x3, 0x6, 0x8, 0xffff8543, 0x3, 0xd2c}, {0x80, 0xffffffff, 0x101, 0x5, 0x7f, 0x300}, {0x4, 0x10, 0x8f, 0x4, 0xd1, 0x1}, {0xb6e0, 0xb9ba, 0x3, 0x17, 0x3, 0x7}, {0x8, 0x0, 0x7, 0x6, 0x7, 0xfffffffe}, {0x8, 0x200, 0xef0, 0x0, 0x6, 0xb4}, {0xae6f, 0x4, 0x2, 0x3, 0x7, 0x1}, {0x34, 0xffff, 0x2, 0x7, 0x2, 0x7fffffff}, {0x6, 0x10, 0x3, 0x6, 0x10000, 0x2}, {0x0, 0x8, 0xfffff34d, 0x80000000, 0xff, 0xfffffffb}, {0x94a, 0x5, 0x9, 0x0, 0x7, 0x6c241156}, {0x8, 0x5, 0x3, 0x5, 0x80000001, 0x1}, {0xffff, 0x4791, 0x5, 0x9, 0xa7, 0x6}, {0x0, 0x7, 0x0, 0xfd, 0x9, 0x6}, {0x400, 0xc577, 0x1000, 0x1, 0x3, 0x8}, {0xdaa5, 0x2, 0xfffffff9, 0x158, 0x6, 0x1d2}, {0x2d, 0x5, 0x400, 0x4, 0x2, 0x9}, {0xad08, 0x0, 0xa, 0x2, 0x36b, 0x63}, {0x6, 0x2, 0xb8, 0x2, 0x7, 0x6}, {0xd4e4, 0x2, 0x6, 0x8001, 0x8, 0x8}, {0x3, 0x4, 0x3ff, 0x81, 0x3, 0x4}, {0x1, 0x1, 0x401, 0x9, 0x8, 0xd4da}, {0xffffff15, 0x7f96, 0xae7, 0x8, 0x80000000}, {0x482f, 0xffffffc5, 0x1, 0x3, 0x2, 0x1}, {0x17, 0x100, 0x9, 0x200, 0x1, 0x5}, {0x1, 0x3a88, 0x9, 0xb50d, 0x0, 0x10000}, {0x80, 0xfd2, 0x6, 0x8, 0x7, 0x4}, {0x3eca, 0x0, 0xa, 0x1ff, 0xab0}, {0x5, 0x8, 0xfffffffd, 0x2, 0xe04b, 0x80000000}, {0x10, 0xffffffff, 0x1ff, 0x1, 0x9b38, 0x2463}, {0x8, 0x3, 0xb, 0xffffff68, 0x370, 0x401}, {0x5, 0x8, 0x4, 0x7, 0x3, 0x4b}, {0x4, 0x9, 0x8, 0x1, 0x800, 0xfffffffe}, {0x7, 0xfffffff9, 0x7fff, 0x9, 0x800000, 0x3}, {0x4, 0x6, 0xf96f, 0x8, 0x5, 0x6}, {0x20c, 0x800, 0x8, 0xfffffffd, 0x7, 0x1}, {0x2, 0x101, 0x0, 0x2, 0xf9, 0x7fffffff}, {0x5, 0x47, 0x100, 0x40, 0x8, 0xe}, {0xfff, 0x3, 0x100, 0xdf9, 0x6, 0x4}, {0x1, 0x8001, 0xff, 0x4, 0xa, 0x3}, {0x101, 0x8, 0x979, 0x6d, 0x6, 0x6}, {0xf, 0x9, 0xfffffff7, 0x1, 0x4, 0x3ff}, {0x10, 0x1, 0x148, 0x2, 0x0, 0x14e7}, {0x4, 0x9, 0x3, 0x6, 0x1590, 0x7}, {0x0, 0x7, 0x3821, 0x5, 0x2, 0x5}, {0x2, 0x9, 0x1, 0x9, 0x28dbd359, 0x6}, {0x10000, 0xc29, 0x5, 0x5, 0x36b9, 0x7f}, {0x2, 0xdb7, 0x842, 0x4b, 0xfffffff8, 0x9}, {0xe, 0x101, 0x400, 0x7, 0x3, 0x7ff}, {0x5, 0x5, 0x9, 0xffffffff, 0x4, 0x2}, {0x40, 0x4, 0x5, 0x3, 0x8, 0x6}, {0x7ff, 0x10000, 0x2, 0xf281, 0x9, 0x8000}, {0x6, 0x14c800, 0x100, 0x8, 0xd, 0x3}, {0x3, 0x8000, 0x3, 0x5, 0x5, 0xc}, {0x5, 0x8, 0x8, 0x6, 0x3ff, 0x2}, {0x5, 0x80000000, 0x1, 0x8, 0x1, 0xdea}, {0x926b, 0x80000000, 0x8, 0x1, 0x2, 0x10001}, {0x6, 0x2, 0x0, 0x7, 0x5, 0x10001}, {0x5, 0xfffffffd, 0x401, 0xa, 0x800, 0x7fff}, {0xa0, 0x7fff, 0x4, 0x7, 0xffffffff, 0x401}, {0xd7, 0xfc, 0x8, 0x4, 0x3ff, 0xc33}, {0x6, 0x19, 0x2, 0x2, 0x7, 0x8001}, {0x7f, 0xffff9dcb, 0x9, 0x1, 0x24000000, 0x7}, {0x5, 0x8, 0x9, 0x5, 0x80000001, 0x6}, {0x2, 0xaebf, 0x6, 0x7a, 0x8, 0x9}, {0x9e7, 0x3ff, 0x1, 0x2, 0x7fffffff, 0x3}, {0x2, 0x2, 0x1, 0x4, 0x0, 0xd5}, {0x6bd, 0x80, 0x7, 0x1, 0xffff, 0xfffffff1}, {0x7, 0x7ff, 0x7fff, 0x6, 0x7, 0xff}, {0x4800, 0x1, 0x2, 0xa131, 0x848, 0x6}, {0x5, 0x6, 0x2, 0x3, 0xffff, 0x3}, {0x6, 0x800, 0x8ce, 0x2, 0x1}, {0x9, 0xfffffff9, 0x1, 0x2, 0x20, 0x38000000}, {0x0, 0xffffffff, 0x7bf, 0x2, 0x5, 0x2}, {0x71d, 0x9, 0x7f, 0x79, 0x7, 0xfff}, {0x6, 0x0, 0x7, 0x4, 0xfffffffe, 0x9bc}, {0x9, 0xfffffffb, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x9, 0x7, 0xf, 0xc}, {0x9, 0xf, 0x4, 0x10, 0x8, 0x215}, {0xa944, 0x86, 0x51b, 0x10000, 0x80000000, 0x3}, {0x8, 0x0, 0x4, 0x7, 0xffffffff, 0x5165}, {0x4, 0x1, 0x4, 0x1, 0x9765}, {0x0, 0x6, 0x6, 0x8, 0x2, 0x2}, {0x3877ae68, 0x4, 0x9, 0xf, 0x2, 0x9}, {0x6, 0x7, 0xc, 0xfff, 0xdc, 0x3}, {0x8, 0x7fff, 0x10, 0xfffffe00, 0xd6, 0x8}, {0x100, 0x8, 0x5d7, 0xe8878000, 0x7, 0x9}, {0x3, 0x4, 0x83c6, 0x0, 0x1000, 0x7}, {0x401, 0x5, 0x9, 0x1186, 0xc0, 0x7f}, {0x7ff, 0xb3, 0x4, 0x0, 0xf, 0xd64}, {0x0, 0x7, 0x3, 0x7, 0x400, 0xffffffff}, {0x0, 0x6, 0x7fffffff, 0x8, 0x7, 0x9}, {0x8, 0x2, 0x101, 0x0, 0x7f}, {0x9, 0x4662, 0x70, 0x9, 0xce, 0x10001}, {0x4, 0xa, 0x3, 0x0, 0xf, 0x5}, {0xcc, 0x8, 0x5137, 0x2, 0x2e9a, 0xaf}, {0x789c, 0x5, 0x2, 0x7ff, 0xb67, 0x4}, {0x0, 0x91f, 0xb0e, 0xffff, 0x2, 0xffffffff}, {0xc7a, 0x6, 0xffffffc5, 0x9, 0x4, 0x7fff}, {0x21, 0x0, 0x7, 0x4, 0x80, 0x2800}, {0x3, 0x9, 0x0, 0x80, 0x6, 0x2}, {0x1, 0xc5, 0x0, 0x3, 0x2, 0x3}, {0x6, 0x4, 0x7ff, 0x8, 0x4, 0xb}, {0x4, 0x0, 0x5, 0x7fff, 0x5, 0x9}, {0x9, 0x4, 0x10, 0x3, 0x0, 0x8}, {0x7fffffff, 0x6, 0x8, 0x7, 0x7, 0x2}, {0x3, 0x5b8, 0x5, 0x6, 0x3d67, 0x3}, {0x4, 0x0, 0x9, 0x5, 0x80000000, 0x1}], [{0x4}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x3}, {0x1}, {0x2}, {0x7}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x501abeaffe19eb8}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x6}, {0x3}, {0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x8c8f22033c51199d}, {}, {0x4}, {0x5, 0xe909f12c5f33f997}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x7}, {}, {}, {0x3}, {0x2}, {0x3}, {0x5}, {0x2}, {0x4}, {0x654d41918ae72e00}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x810}, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x240200)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffe, r1, 0x0}])

38.941537168s ago: executing program 1 (id=158):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000002d1425d703e43404a3698709e1d80445257a5ea1a5fd7142db01759830dc3ec0c8b4", @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f0005000000000000000500050000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000c, 0x810, r5, 0x0)
ftruncate(r5, 0x80796c)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b5, 0x1, 0x77fe, 0x40024e}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1})
io_uring_enter(r7, 0xd44, 0x44c1, 0x7, 0x0, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000000)={0x0, 0xa4, 0x2})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
write$binfmt_script(r0, &(0x7f0000000180), 0xfefc)

38.664563895s ago: executing program 1 (id=163):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe9c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe70, 0x2, [@TCA_FW_ACT={0xe6c, 0x4, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x6000000, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0x80}, 0x800)

38.19705265s ago: executing program 1 (id=169):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x4, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x126)

38.091178817s ago: executing program 1 (id=172):
socket(0x10, 0x803, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0xff97, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

37.904563149s ago: executing program 1 (id=174):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socket(0xa, 0x1, 0x7a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
mlock(&(0x7f00007a9000/0x3000)=nil, 0x3000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYRES16=0x0, @ANYRES32=r5, @ANYBLOB="785d280e6e3c0ee34a3bf9885ac50d81607a27e859b469610adea3a0b8af0f0eeebc61a2f9def5912cd21e152573e8fb1b034b5d09d98132793666c69f0d1de772628c5be1012b662b86fa538eb15caa2a369b4caefa9cb3bc0f80611e9c26abaa23eb685da725b719a3b6a2c22afa7289c6ba86"], 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

37.283746675s ago: executing program 32 (id=174):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socket(0xa, 0x1, 0x7a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
mlock(&(0x7f00007a9000/0x3000)=nil, 0x3000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYRES16=0x0, @ANYRES32=r5, @ANYBLOB="785d280e6e3c0ee34a3bf9885ac50d81607a27e859b469610adea3a0b8af0f0eeebc61a2f9def5912cd21e152573e8fb1b034b5d09d98132793666c69f0d1de772628c5be1012b662b86fa538eb15caa2a369b4caefa9cb3bc0f80611e9c26abaa23eb685da725b719a3b6a2c22afa7289c6ba86"], 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

7.991877745s ago: executing program 3 (id=323):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x8, 0x5, 0xfffffffd, 0x3, 0xfffffffffffffffd, 0xffff, 0xfa11, 0x2}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x1c}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b000100", @ANYRES32=r2, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x14)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40884)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCGETA(r6, 0x5405, &(0x7f0000000280))
socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect(0x0, 0x38, &(0x7f0000000080)=ANY=[@ANYBLOB="120120020e13e5088d1a0d109e300102030109022600010755e001090406fe02ffff025c09050f070000020905021109"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})

7.608265331s ago: executing program 5 (id=325):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000680001000000000000000000000000000000000014000200020000130000000002000000000000ec060003000000000004000b"], 0x38}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r3, &(0x7f00000001c0)='\\', 0x1)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e)
ioctl$PPPIOCSMRU(r4, 0x40047452, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r5 = socket(0x2, 0x3, 0xff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001ff0300000000000000e00000020000000000000000000000006401010200000000800000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r5, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}], 0x1, 0x488c4)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x8080, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r8})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1})

5.472810939s ago: executing program 4 (id=332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000002c0)={0x0, <r6=>0x0})
timer_create(0x51f1f3eaeded6fcd, &(0x7f00000000c0)={0x0, 0xb, 0x0, @tid=r6}, &(0x7f00000001c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x4f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000440)="f3ab262e650f306766c7442400020000006766c74424028bed8e596766c744240600000000670f011c24660ff7cc0fc7b48000de16b564ba4000ed0f01df36dce567dc13", 0x44}], 0x1, 0x60, 0x0, 0x0)
clock_adjtime(0x5, &(0x7f0000004dc0)={0xe, 0x80000001, 0x8c, 0xff01, 0x800000000000009, 0x7cca, 0xa, 0xc632, 0x2, 0x4, 0x7c, 0x9, 0x1, 0x8c, 0xcfe, 0xfffffffffffffffd, 0x0, 0x4000007fffc, 0x7f0, 0x6, 0x0, 0x0, 0x1, 0x6, 0x3, 0x8000006})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0x48})
ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x6, 0x8d8, 0x0, 0xff, 0xfffffc01, 0x7fffc}]})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000000a00444360d83406f7749dc3cc6143d1880789969e486455f0e5877d3860d2c4d6550dc0df345e697e2afff65026586beb28d48972bd63f8264cf94bbf2ee8902479dff02d01a4151e808ce80051ca098185c8dfa3f0448be3dc3c23052ee39b703ea7566f8d8ea42a896f9a7754bf60210a7e894bc23a0f4b3f4b963116cdfc6c9500bff84e5aeb202471399f38cc1b397b2e72b7bc8a54690f3da9aeb9d3a9616242e4a1ae5d3f0cdb1bcba09ff", @ANYRES32=0x0, @ANYBLOB="000000000080000014001280090001007665746800000000040002800800200001000000"], 0x3c}}, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000001300000000000040030000000f00000003000000910e895104c7648cf76d20a9acc18c93845f23a2b16cb300000000e30800000000000006000000000000000900000000000000000000000000000000000000000000008000000000000000000000000000000081000000000000000100000000000000ff000000000000000000000000000000000000000000000001060000001500000000000000000000060000000000000004000000000000000000000000000000000000000000000000000000000000008418000000"])
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
request_key(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='*\x00', 0xfffffffffffffffe)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b0001000000000904000001031d02000905bb03"], 0x0)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x400)

5.105407299s ago: executing program 5 (id=333):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000040))
r2 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4091, 0x110c}, {&(0x7f0000001580)=""/238, 0xf0}, {&(0x7f0000000040)=""/98}, {&(0x7f0000001680)=""/4096}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x10002, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0)

4.893634393s ago: executing program 0 (id=334):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), 0x0}, 0x20)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb, 0x0, 0x0, 0x1000000}}], 0x2, 0x0)

4.756163464s ago: executing program 0 (id=335):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_VOLTAGE(r0, 0x6f43, 0x0)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
io_uring_setup(0x1504, &(0x7f0000000080)={0x0, 0x41ba, 0x2000, 0x1, 0x185})
r2 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206d}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)
capset(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x100005, 0x7ff, 0xfffffd1d})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x400, 0x5, 0x7f, 0x2c0000, 0x0, 0xfffffffa})

4.409689252s ago: executing program 0 (id=336):
socket$nl_netfilter(0x10, 0x3, 0xc)
memfd_create(0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0xfffffc3e)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x20000000)
write$tcp_mem(r4, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48)
fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0)
fsopen(0x0, 0x1)

4.159924562s ago: executing program 3 (id=337):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0fffa6}, 0x0)

3.797067758s ago: executing program 3 (id=339):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

3.732056352s ago: executing program 3 (id=341):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00@\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)

3.489126411s ago: executing program 3 (id=342):
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8041, 0x0, 0x5441, 0x0, 0xfffffe0000000001, 0x9, 0xf7ffffff}, 0x0)
fsopen(&(0x7f0000000040)='cgroup\x00', 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r3, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000780)={0x30, r4, 0x0, 0x0, 0x0, 0x84, 0xa9, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
socket$alg(0x26, 0x5, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x800007fc, 0x9141, 0x0, 0x0, 0x80f42, 0x5, 0x4}, {0x0, 0x2000000000000000, 0x0, 0xffffffffffffff85}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x4, 0x33}, 0xa, @in=@empty, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r9, 0xffffffffffffffff, 0x0)

3.334842061s ago: executing program 2 (id=343):
socket(0x10, 0x3, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000051e68b8c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000380a000000000000000000000000000000000000000000000000000000000000000000000000000500c00000000100000200000500000003000000fccf7c737b494c402b8822c02484acd0eb954c387e6b4cf70600000000000000b970a4b6eb5345ccb892f0b4628c40148119cce4ef0a64b4ccbc8d0000337dd04268fe91f89278fd548503e3bb90d6c7d9e5b0f29ad33f7a8b0f4cd09119ca"], 0x11d)
writev(r2, &(0x7f0000000780)=[{&(0x7f00000001c0)="0e000000", 0x4}], 0x1)
r3 = dup(r1)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r6, 0x8001}}, 0x48)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3.279589147s ago: executing program 4 (id=344):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff0200"/55], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={<r3=>0x0, 0x3}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r3, 0x7, 0x1ff, 0x1}, 0x10)
r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1", 0x2d, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xaa})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a40))
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

3.046553063s ago: executing program 2 (id=345):
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8041, 0x0, 0x5441, 0x0, 0xfffffe0000000001, 0x9, 0xf7ffffff}, 0x0)
fsopen(&(0x7f0000000040)='cgroup\x00', 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r3, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000780)={0x30, r4, 0x0, 0x0, 0x0, 0x84, 0xa9, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
socket$alg(0x26, 0x5, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x800007fc, 0x9141, 0x0, 0x0, 0x80f42, 0x5, 0x4}, {0x0, 0x2000000000000000, 0x0, 0xffffffffffffff85}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x4, 0x33}, 0xa, @in=@empty, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r10, 0xffffffffffffffff, 0x0)

2.786749232s ago: executing program 0 (id=346):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]})
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df000000000000010902"], 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00\x00\x00\x00\x00\a\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})

2.136935179s ago: executing program 3 (id=347):
rmdir(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x51)
copy_file_range(r0, 0x0, r0, 0x0, 0x863, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xfffffffd}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r6, 0x0, 0xffffffff00000000}, 0x38)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x2, 0xe3, &(0x7f0000000300)=""/227, 0x41100, 0x10, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000000440)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4)
bind$xdp(r3, 0x0, 0x0)

1.980893447s ago: executing program 5 (id=348):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x6, 0x504245f5, 0x1, @discrete={0x8001, 0x7}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c0000001200"})

1.505699646s ago: executing program 5 (id=349):
syz_usb_connect$uac1(0x3, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4141, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x9, 0x0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x49b, 0x1d}, [@processing_unit={0xa, 0x24, 0x7, 0x3, 0x180ed80525db195e, 0x3, "8bd664"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x305, 0x1, 0x3, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x1, 0x1, {0x7, 0x25, 0x1, 0x8, 0x71, 0x21}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x2, 0xa1, {0x7, 0x25, 0x1, 0x0, 0x8}}}}}}}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.45540728s ago: executing program 2 (id=350):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
futex_waitv(&(0x7f00000001c0)=[{0x6, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe)
connect$can_bcm(r0, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x32f, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "54d53db8fc80bb03"}}, 0x48}}, 0x0)

1.225472167s ago: executing program 0 (id=351):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @loopback, 0x201}, 0x1c)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604110, &(0x7f0000000bc0)={0x0, [[0x9, 0x0, 0x0, 0xc, 0x200, 0x0, 0x1, 0xfffffffd], [0x1000, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x6, 0x2], [0xfffffffd, 0xffffffff, 0x0, 0xffff, 0x1, 0x0, 0x8]], '\x00', [{}, {0xc5}, {0x6}, {0xffffffff}, {0x2000005}, {0x2, 0x22c685d7}, {}, {0x0, 0xfffffff8}, {0x0, 0x9}, {0x73344867}, {0x20000}, {0x0, 0x42}], '\x00', 0x0, 0x0, 0x0, 0x2})

1.173882131s ago: executing program 0 (id=352):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00')
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000016c0)={0x1}, 0x1)
syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r2)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000500)="00a6", 0x2}], 0x1)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b5128ed271c679583d00", 0x3f, 0x7})
readv(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/150, 0x96}], 0x1)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480)="aebdc02cf0e10c29d09161e375ed655bbdebde110290024e82b3c805805f85add0c4f48affeefb3a16d4fc3030ee06e07df90b6fa362255cb78dafb2597409ad7414df77dc1d39b5d2f2548fb3aa4deb6deb4f06023ccdd2e4c77ae8d9a6f82f10f136a34448451595c9b42ef5ac742f4f65f0be400291743ba0c64ff4149c3b3a75519e1a78e9f8e3405f200f982854eab7d03bc12e85c3e2976f5445279f8d5b1673206e3eddc8feeb7a", &(0x7f0000000140)="ecb18ef655b302c1ede88696c3d2cb1a553c2545b6efabacbae7c0e47f6f254a89a5b83865ddf16926702b887975e2bcb51c055a450008bb28771be1c708ae7b0d"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
read(r5, &(0x7f0000000080)=""/77, 0xffffff0f)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000001c0)={[], 0xf000}, 0x0)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086a050703000000000001090224000100000000090400000203000000092100000701110700090581"], 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b00"], 0x0)
syz_usb_disconnect(r6)
syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000ff6b1d010140000102030109025f000301a0c0680904000000010100000a2401000000000201020904010000010200800904010101010200000905010900000000000025010000000009040200000102000009040201010102000009058209000000000000250100000000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0)
ioctl$TIOCMBIC(r7, 0x5417, &(0x7f0000000040)=0x80000000)
unshare(0xe000480)

1.149795396s ago: executing program 4 (id=353):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)

796.734733ms ago: executing program 4 (id=354):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344)
ioctl$KVM_RUN(r2, 0xae80, 0xc680000)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x20000000000080, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x3, 0x2, 0x700000000000000, 0x9, 0x1ffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x9, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffff7fffff, 0x38c, 0x7, 0x7, 0xae8d, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0xae, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0xd9f1, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"})

600.896495ms ago: executing program 2 (id=355):
socket(0x10, 0x3, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000051e68b8c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000380a000000000000000000000000000000000000000000000000000000000000000000000000000500c00000000100000200000500000003000000fccf7c737b494c402b8822c02484acd0eb954c387e6b4cf70600000000000000b970a4b6eb5345ccb892f0b4628c40148119cce4ef0a64b4ccbc8d0000337dd04268fe91f89278fd548503e3bb90d6c7d9e5b0f29ad33f7a8b0f4cd09119ca"], 0x11d)
writev(r2, &(0x7f0000000780)=[{&(0x7f00000001c0)="0e000000", 0x4}], 0x1)
r3 = dup(r1)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r6, 0x8001}}, 0x48)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

491.423309ms ago: executing program 4 (id=356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

265.920415ms ago: executing program 2 (id=357):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x3, 0x100})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = fcntl$dupfd(r2, 0x406, r1)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x8, 0x4})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x101}, &(0x7f0000000140)=0x8)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=<r4=>0x0)
getresuid(&(0x7f0000000300)=<r5=>0x0, &(0x7f0000000340), &(0x7f0000000380))
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="efff172bb303612849a6f252e12363da6aed1302c6632a853ea2f00d5fe25f315d276ffd81672192debb2a252ffe622e5635522d1381e929e931c8efcd4e493a6b3d1dccb827d02dbb73ff9b8ae5e363c6d57fba0fe939f9547cfa72579527af0f3b65ba2d7327147d87eedb161c9c2085", 0x71}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x2004c000}, 0x4010)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000500)=0x20e)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000800)={&(0x7f0000000540)=[0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x7, 0x5, 0xa})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000880)={r7})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0x5, 0x4, 0x81, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x1, 0x700, 0xffff, 0x8}})
connect$packet(r2, &(0x7f0000000980)={0x11, 0x2, r8, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000009c0)={0x2, 0x1, 0x54000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000a00)={'macvlan1\x00', {0x2, 0x0, @initdev}})
setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000a40)=0x2, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000a80)=0x10, 0x4)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000ac0), 0x341801, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000b00), 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000b40)={0x41, 0x0, '\x00', [@ra={0x5, 0x2, 0x82}]}, 0x10)
write$binfmt_aout(r3, &(0x7f0000000b80)={{0xc0, 0x7, 0xc, 0x359, 0x165, 0x4, 0x159}, "2844ba6c834f96437717ea4928ec0614fa23c93efb607d39a3479542ceae38b5ddd802028eafee3d2e8ed34a099a2c7ca8bed92ccd8b6cadfdcc78808815a3b1942fda479a3efa1f7ad90036fb425badef5420dafdd2866af91f17816806adcb73d431b73af7ba3f957ac8cbfdbd302ca99e61319acddc9fb23cea4a7d630f95c7c6f40daf6faaa60ff4ed88b492e136d2bceb1cd859c1f111ae1691488681d10fe717a1fe249600c0c4834da6b4883e697a94b65876de70a23ab9544d6ec6ed3ac2b5b398cbe56afc78fe0ebfa0504393e885e12bbe2bcd1288e93444dd4cbc7188ee7ace2e5db02bc3b41281717c6d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x810)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x191000, 0x0)
fadvise64(r10, 0x2, 0x6, 0x2)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000001400)=0x8, 0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r0)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000001740)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000014c0)={0x20c, r11, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x1cc, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffff8b}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x450770ca}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}]}, {0x4}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x47}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe942}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7dcf325}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800000}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x890}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf11}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x21}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x11}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)

212.5875ms ago: executing program 4 (id=358):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000040))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4091, 0x110c}, {&(0x7f0000001580)=""/238, 0xf0}, {&(0x7f0000000040)=""/98}, {&(0x7f0000001680)=""/4096}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x10002, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0)

106.455396ms ago: executing program 2 (id=359):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_io_uring_setup(0x83a, &(0x7f00000000c0)={0x0, 0x3d06, 0x400, 0x2, 0x154}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x3}})
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
io_uring_enter(r1, 0x3516, 0x0, 0xfffffffffffffff5, 0x0, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x8})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)

78.277468ms ago: executing program 5 (id=360):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x6, 0x504245f5, 0x1, @discrete={0x8001, 0x7}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c0000001200"})

0s ago: executing program 5 (id=361):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r3], 0x20, 0x6044}, 0x6)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r3, 0x8}, &(0x7f0000000100)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x32600)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="174ba3b5cd56031a33aa7bdd79dfb99aa088867f5c81530806837b8f1801719c2aa63f0e7611db570a6997b0bd42cb49fc00a483c74796b6788486d63009640d1e8bf8a2aae9bcf51d65a9427714b4b9fe980af5f27ea850ec963b082d81f76ed4d9640d0543a005f2cd8b9a6eca832985349eb40617145869be6fe0f4cbba55db92e9755a84398bb2eb64287f85935304af3702addc0a8d1e7b9510d661643c29068a0a7ceaa2f9ea9cfb7773b3a8338fece07742657b0d96cf150b6fcde510419747a005", 0xc5, 0x811, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)

kernel console output (not intermixed with test programs):

m0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.144519][  T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.153904][  T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.186756][  T141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.314183][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.329411][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.339725][  T141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.351784][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.361314][  T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.376786][  T141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.416296][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.466074][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.474669][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.745151][  T141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.794023][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.832973][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.866017][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.876137][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   72.915509][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.946553][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.967173][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.978092][ T5828] Bluetooth: hci2: command tx timeout
[   72.986455][ T5828] Bluetooth: hci0: command tx timeout
[   73.016571][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.056568][ T5828] Bluetooth: hci4: command tx timeout
[   73.066621][ T5144] Bluetooth: hci3: command tx timeout
[   73.067118][ T5828] Bluetooth: hci1: command tx timeout
[   73.151520][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.167057][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.197315][ T5919] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   73.251786][ T5896] hid-generic 00C0:10000:0200.0001: item fetching failed at offset 0/5
[   73.322681][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.446165][ T5896] hid-generic 00C0:10000:0200.0001: probe with driver hid-generic failed with error -22
[   73.536795][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   73.545639][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.972169][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.981861][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.547691][ T5866] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   75.122392][ T5828] Bluetooth: hci0: command tx timeout
[   75.126618][ T5830] Bluetooth: hci2: command tx timeout
[   75.139074][ T5830] Bluetooth: hci1: command tx timeout
[   75.145407][ T5828] Bluetooth: hci3: command tx timeout
[   75.145473][ T5830] Bluetooth: hci4: command tx timeout
[   75.170986][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.201901][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   75.250664][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   75.281684][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   75.317967][ T5866] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   75.333947][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.343043][ T5866] usb 5-1: Product: syz
[   75.365092][ T5866] usb 5-1: Manufacturer: syz
[   75.371795][ T5866] usb 5-1: SerialNumber: syz
[   75.377192][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.385956][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[   75.395478][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   75.486710][ T5866] usb 5-1: config 0 descriptor??
[   75.525001][ T5866] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[   75.562143][ T5866] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[   75.696137][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   75.721045][ T5866] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[   75.803813][ T5866] usb 5-1: USB disconnect, device number 2
[   75.826233][ T5866] garmin_gps 5-1:0.0: device disconnected
[   75.936503][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.998648][   T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.350398][   T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.520840][   T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.653141][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.661794][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.673424][ T5971] Zero length message leads to an empty skb
[   76.692621][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.724071][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.734909][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.751526][ T5975] kernel profiling enabled (shift: 63)
[   76.811210][ T5975] profiling shift: 63 too large
[   76.924691][   T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.837580][   T78] bridge_slave_1: left allmulticast mode
[   77.861256][   T78] bridge_slave_1: left promiscuous mode
[   77.891030][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.060103][   T78] bridge_slave_0: left allmulticast mode
[   78.091702][   T78] bridge_slave_0: left promiscuous mode
[   78.133020][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.816696][ T5144] Bluetooth: hci2: command tx timeout
[   78.891667][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.934556][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.973898][   T78] bond0 (unregistering): Released all slaves
[   79.532158][ T5980] chnl_net:caif_netlink_parms(): no params data found
[   79.714543][   T78] hsr_slave_0: left promiscuous mode
[   79.813500][   T78] hsr_slave_1: left promiscuous mode
[   79.831703][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.855659][   T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.897609][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.916378][   T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.983042][   T78] veth1_macvtap: left promiscuous mode
[   80.010266][   T78] veth0_macvtap: left promiscuous mode
[   80.029849][   T78] veth1_vlan: left promiscuous mode
[   80.042437][   T78] veth0_vlan: left promiscuous mode
[   80.870292][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'.
[   80.879613][ T6095] openvswitch: netlink: Flow key attr not present in new flow.
[   80.905973][ T5144] Bluetooth: hci2: command tx timeout
[   81.253674][   T78] team0 (unregistering): Port device team_slave_1 removed
[   81.290582][   T78] team0 (unregistering): Port device team_slave_0 removed
[   81.603332][   T24] cfg80211: failed to load regulatory.db
[   81.624105][ T6068] dummy0: entered allmulticast mode
[   81.630097][ T6068] dummy0: left allmulticast mode
[   81.867290][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.874602][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.882361][ T5980] bridge_slave_0: entered allmulticast mode
[   81.890956][ T5980] bridge_slave_0: entered promiscuous mode
[   81.934184][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.981530][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.053258][ T6111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.22'.
[   82.062330][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'.
[   82.106240][ T5980] bridge_slave_1: entered allmulticast mode
[   82.136533][ T5980] bridge_slave_1: entered promiscuous mode
[   82.333701][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.520287][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.842090][ T5980] team0: Port device team_slave_0 added
[   82.861700][ T5980] team0: Port device team_slave_1 added
[   82.962226][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.985260][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.011957][ T5144] Bluetooth: hci2: command tx timeout
[   83.038235][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.077402][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.094646][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.323521][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.515636][ T5980] hsr_slave_0: entered promiscuous mode
[   83.536947][ T5980] hsr_slave_1: entered promiscuous mode
[   83.543889][ T5980] debugfs: 'hsr0' already exists in 'hsr'
[   83.558402][ T5980] Cannot create hsr debugfs directory
[   83.565903][ T5924] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   83.718667][ T5924] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[   83.845174][ T5924] usb 5-1: config 0 has no interface number 0
[   83.921310][ T5924] usb 5-1: config 0 interface 41 has no altsetting 0
[   83.950588][ T5924] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   83.960940][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.970709][ T5924] usb 5-1: Product: syz
[   83.978135][ T5924] usb 5-1: Manufacturer: syz
[   83.984857][ T5924] usb 5-1: SerialNumber: syz
[   84.005616][ T5924] usb 5-1: config 0 descriptor??
[   84.310925][ T5980] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.336492][ T5980] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.354815][ T5980] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.467452][ T5980] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   84.631063][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.658525][ T5980] 8021q: adding VLAN 0 to HW filter on device team0
[   84.674271][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.681476][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.704785][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.711978][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.763216][ T5980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   84.774440][ T5980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.787634][ T5896] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   84.843856][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.863316][ T5924] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   84.900105][ T5980] veth0_vlan: entered promiscuous mode
[   84.920791][ T5980] veth1_vlan: entered promiscuous mode
[   84.946635][ T5896] usb 4-1: Using ep0 maxpacket: 32
[   84.954191][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.965388][ T5896] usb 4-1: config 0 has no interfaces?
[   84.978218][ T5896] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6
[   85.003817][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.013561][ T5896] usb 4-1: Product: syz
[   85.022345][ T5896] usb 4-1: Manufacturer: syz
[   85.028700][ T5896] usb 4-1: SerialNumber: syz
[   85.058155][ T5144] Bluetooth: hci2: command tx timeout
[   85.070155][ T5896] usb 4-1: config 0 descriptor??
[   85.077075][ T5980] veth0_macvtap: entered promiscuous mode
[   85.142397][ T5980] veth1_macvtap: entered promiscuous mode
[   85.190867][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.221365][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.259378][   T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.394323][   T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.425534][   T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.471894][ T6176] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   85.503202][   T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.748076][ T6075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.768136][ T6075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.836580][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.237898][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.039772][ T6215] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.126164][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   87.316021][   T24] usb 2-1: Using ep0 maxpacket: 16
[   87.333764][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.360111][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.484249][ T5924] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   87.527113][ T5924] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[   87.527662][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   87.565415][ T5866] usb 4-1: USB disconnect, device number 2
[   87.617764][ T5924] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[   87.629919][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[   87.667815][ T5924] usb 5-1: USB disconnect, device number 3
[   87.685937][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.746633][   T24] usb 2-1: config 0 descriptor??
[   88.056330][ T6206] QAT: Invalid ioctl -2146937598
[   88.065931][ T5866] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   88.087162][ T6206] QAT: Invalid ioctl -2146937598
[   88.097846][ T6206] QAT: Device 8 not found
[   88.108470][ T6206] QAT: Device 8 not found
[   88.161013][   T24] usbhid 2-1:0.0: can't add hid device: -71
[   88.281656][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   88.323054][ T5866] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   88.340031][   T24] usb 2-1: USB disconnect, device number 2
[   88.358117][ T5866] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   88.391471][ T5866] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping
[   88.428311][ T5866] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   88.512447][ T5866] usb 4-1: config 220 has no interface number 2
[   88.532285][ T5866] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   88.611353][ T5866] usb 4-1: config 220 interface 0 has no altsetting 0
[   88.631479][ T5866] usb 4-1: config 220 interface 76 has no altsetting 0
[   88.648822][ T5866] usb 4-1: config 220 interface 1 has no altsetting 0
[   88.665023][ T5866] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   88.675238][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.696437][ T5866] usb 4-1: Product: syz
[   88.700671][ T5866] usb 4-1: Manufacturer: syz
[   88.705376][ T5866] usb 4-1: SerialNumber: syz
[   88.901017][ T6249] netlink: 76 bytes leftover after parsing attributes in process `syz.0.44'.
[   88.973980][ T6252] netlink: 'syz.4.45': attribute type 10 has an invalid length.
[   88.979718][ T5866] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   89.001557][ T5866] uvcvideo 4-1:220.0: No valid video chain found.
[   89.008533][ T6252] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.055115][ T5866] usb 4-1: selecting invalid altsetting 0
[   89.094357][ T5866] usb 4-1: selecting invalid altsetting 0
[   89.115763][ T5866] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[   89.145249][ T5866] usb 4-1: USB disconnect, device number 3
[   89.411115][ T6261] netlink: 'syz.0.48': attribute type 1 has an invalid length.
[   89.419433][ T6261] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.895876][ T5822] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   89.937261][ T6279] IPv4: Oversized IP packet from 127.202.26.0
[   90.016347][  T980] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   90.075917][ T5822] usb 3-1: Using ep0 maxpacket: 32
[   90.086725][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.110785][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.122323][ T5822] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   90.131883][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.145616][ T5822] usb 3-1: config 0 descriptor??
[   90.193369][  T980] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[   90.373921][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.385650][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.395273][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.459225][  T980] usb 4-1: Product: syz
[   90.477231][  T980] usb 4-1: Manufacturer: syz
[   90.482710][ T5822] usbhid 3-1:0.0: can't add hid device: -71
[   90.497371][ T5822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   90.511077][  T980] usb 4-1: SerialNumber: syz
[   90.537623][ T5822] usb 3-1: USB disconnect, device number 2
[   90.549444][  T980] usb 4-1: config 0 descriptor??
[   91.011984][ T6300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'.
[   91.020904][ T6300] openvswitch: netlink: Flow key attr not present in new flow.
[   91.767488][ T5924] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   91.775511][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[   91.905929][ T5924] usb 5-1: device descriptor read/64, error -32
[   92.164737][ T5924] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   92.254963][ T6314] vivid-000: disconnect
[   92.264226][ T6313] vivid-000: reconnect
[   92.325832][ T5924] usb 5-1: Using ep0 maxpacket: 16
[   92.333270][ T5924] usb 5-1: config 0 has no interfaces?
[   92.344795][ T5924] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[   92.365489][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.379121][ T6317] netlink: 32 bytes leftover after parsing attributes in process `syz.2.67'.
[   92.417444][ T5924] usb 5-1: config 0 descriptor??
[   92.628771][ T5866] usb 5-1: USB disconnect, device number 5
[   92.845407][  T980] mos7840 4-1:0.0: required endpoints missing
[   92.906751][  T980] usb 4-1: USB disconnect, device number 4
[   93.870100][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.878931][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.401789][ T6368] FAULT_INJECTION: forcing a failure.
[   94.401789][ T6368] name failslab, interval 1, probability 0, space 0, times 1
[   94.418891][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.0.82 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   94.418915][ T6368] Tainted: [L]=SOFTLOCKUP
[   94.418919][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   94.418933][ T6368] Call Trace:
[   94.418939][ T6368]  <TASK>
[   94.418946][ T6368]  dump_stack_lvl+0xe8/0x150
[   94.418975][ T6368]  should_fail_ex+0x412/0x560
[   94.419000][ T6368]  should_failslab+0xa8/0x100
[   94.419020][ T6368]  __kmalloc_cache_noprof+0x88/0x660
[   94.419036][ T6368]  ? nft_netdev_hook_alloc+0x220/0x570
[   94.419054][ T6368]  ? __kmalloc_cache_noprof+0x15b/0x660
[   94.419073][ T6368]  nft_netdev_hook_alloc+0x220/0x570
[   94.419098][ T6368]  nf_tables_parse_netdev_hooks+0x138/0x950
[   94.419125][ T6368]  nft_flowtable_parse_hook+0x46a/0x920
[   94.419152][ T6368]  ? __pfx_nft_flowtable_parse_hook+0x10/0x10
[   94.419168][ T6368]  ? nft_pernet+0x23/0x240
[   94.419183][ T6368]  nf_tables_newflowtable+0xc22/0x23d0
[   94.419204][ T6368]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[   94.419223][ T6368]  ? __nla_parse+0x40/0x60
[   94.419233][ T6368]  nfnetlink_rcv+0x1240/0x27b0
[   94.419266][ T6368]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   94.419289][ T6368]  ? ref_tracker_free+0x693/0x840
[   94.419319][ T6368]  ? __netlink_deliver_tap+0x807/0x850
[   94.419333][ T6368]  ? netlink_deliver_tap+0x2e/0x1b0
[   94.419353][ T6368]  netlink_unicast+0x80f/0x9b0
[   94.419369][ T6368]  ? __pfx_netlink_unicast+0x10/0x10
[   94.419382][ T6368]  ? netlink_sendmsg+0x650/0xb40
[   94.419394][ T6368]  ? skb_put+0x11b/0x210
[   94.419404][ T6368]  netlink_sendmsg+0x813/0xb40
[   94.419422][ T6368]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.419436][ T6368]  ? aa_sock_msg_perm+0xf1/0x1b0
[   94.419450][ T6368]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   94.419462][ T6368]  ____sys_sendmsg+0x972/0x9f0
[   94.419476][ T6368]  ? __pfx_____sys_sendmsg+0x10/0x10
[   94.419495][ T6368]  ? import_iovec+0x73/0xa0
[   94.419506][ T6368]  ___sys_sendmsg+0x2a5/0x360
[   94.419519][ T6368]  ? __pfx____sys_sendmsg+0x10/0x10
[   94.419544][ T6368]  ? __fget_files+0x2a/0x420
[   94.419557][ T6368]  ? __fget_files+0x3a0/0x420
[   94.419574][ T6368]  __x64_sys_sendmsg+0x1bd/0x2a0
[   94.419585][ T6368]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   94.419599][ T6368]  ? rcu_is_watching+0x15/0xb0
[   94.419617][ T6368]  do_syscall_64+0x14d/0xf80
[   94.419627][ T6368]  ? trace_irq_disable+0x3b/0x150
[   94.419640][ T6368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.419649][ T6368]  ? clear_bhb_loop+0x40/0x90
[   94.419660][ T6368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.419669][ T6368] RIP: 0033:0x7fe751b9c799
[   94.419682][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.419689][ T6368] RSP: 002b:00007fe752a9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.419701][ T6368] RAX: ffffffffffffffda RBX: 00007fe751e15fa0 RCX: 00007fe751b9c799
[   94.419707][ T6368] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[   94.419713][ T6368] RBP: 00007fe752a9b090 R08: 0000000000000000 R09: 0000000000000000
[   94.419718][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   94.419723][ T6368] R13: 00007fe751e16038 R14: 00007fe751e15fa0 R15: 00007fe751f3fa48
[   94.419737][ T6368]  </TASK>
[   94.886989][ T6373] bond_slave_0: entered promiscuous mode
[   94.892750][ T6373] bond_slave_1: entered promiscuous mode
[   94.898465][ T6373] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[   94.909886][ T6373] vlan2: entered promiscuous mode
[   94.914917][ T6373] bond0: entered promiscuous mode
[   95.058298][ T5924] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.071977][ T6378] fuse: Unknown parameter '0x0000000000000005'
[   95.225874][ T5924] usb 3-1: Using ep0 maxpacket: 16
[   95.232598][ T5924] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   95.241084][ T5924] usb 3-1: config 0 has no interface number 0
[   95.250174][ T5924] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   95.255886][ T5866] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   95.259779][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.277594][ T5924] usb 3-1: Product: syz
[   95.281783][ T5924] usb 3-1: Manufacturer: syz
[   95.286852][ T5924] usb 3-1: SerialNumber: syz
[   95.294046][ T5924] usb 3-1: config 0 descriptor??
[   95.302247][ T5924] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   95.447636][ T5866] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[   95.457279][ T5866] usb 4-1: config 0 has no interface number 0
[   95.487205][ T5866] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[   95.499292][ T5866] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   95.516712][ T5866] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   95.541331][ T5866] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   95.551113][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   95.561586][ T5866] usb 4-1: Product: syz
[   95.567070][ T5866] usb 4-1: SerialNumber: syz
[   95.577468][ T5866] usb 4-1: config 0 descriptor??
[   95.587367][ T5866] cm109 4-1:0.8: invalid payload size 0, expected 4
[   95.598862][ T5866] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5
[   95.745007][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.759137][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.947947][ T6386] binder: 6374:6386 ioctl c0306201 2000000003c0 returned -14
[   96.043086][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'.
[   96.068415][ T6390] erspan0: entered promiscuous mode
[   96.078882][ T6390] erspan0: left promiscuous mode
[   96.212886][ T6392] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   96.233097][ T6392] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   96.585920][ T5904] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   96.659154][ T5924] gspca_spca1528: reg_w err -71
[   96.665853][ T5924] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[   96.678304][ T5924] usb 3-1: USB disconnect, device number 3
[   96.741480][ T6394] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.91'.
[   96.753897][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short
[   96.767920][ T5904] usb 5-1: too many configurations: 225, using maximum allowed: 8
[   96.776964][ T5904] usb 5-1: unable to read config index 0 descriptor/start: -71
[   96.785090][ T5904] usb 5-1: can't read configurations, error -71
[   96.816396][   T78] wlan0: Trigger new scan to find an IBSS to join
[   97.322643][ T6402] syz.4.94 uses obsolete (PF_INET,SOCK_PACKET)
[   97.349432][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'.
[   97.390627][ T6402] veth0: entered promiscuous mode
[   97.400658][ T6402] macvlan2: entered promiscuous mode
[   97.408401][ T6402] veth0: left promiscuous mode
[   97.976160][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   97.985476][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[   97.993477][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[   97.993815][ T5924] usb 4-1: USB disconnect, device number 5
[   98.000439][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   98.130873][ T5924] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   98.355889][   T24] usb 3-1: Using ep0 maxpacket: 16
[   98.383297][   T24] usb 3-1: config 0 has no interfaces?
[   98.436301][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   98.539169][   T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   98.571916][   T24] usb 3-1: Manufacturer: syz
[   98.591231][   T24] usb 3-1: config 0 descriptor??
[   98.823692][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.831799][ T6430] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.991406][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.031625][ T6406] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   99.143434][ T6430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.008579][ T6437] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  100.315624][ T6442] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  100.738274][  T148] wlan0: Trigger new scan to find an IBSS to join
[  100.851695][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.107'.
[  101.180039][ T6457] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  101.286010][ T5822] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  101.555854][ T5822] usb 4-1: Using ep0 maxpacket: 16
[  101.648796][ T5822] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  101.682735][ T5822] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.786078][ T5822] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.815916][   T24] usb 3-1: USB disconnect, device number 4
[  101.824147][ T5822] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  101.852716][ T5822] usb 4-1: config 7 interface 0 has no altsetting 0
[  101.864655][ T5822] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  101.921083][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.132611][ T6465] netlink: 'syz.2.111': attribute type 3 has an invalid length.
[  102.146625][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.171523][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.207929][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.349315][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'.
[  102.546968][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  102.685594][ T6482] input: syz1 as /devices/virtual/input/input6
[  102.768116][   T24] usb 2-1: Using ep0 maxpacket: 32
[  102.791569][ T6482] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[  102.950608][   T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  102.964237][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.970161][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.036755][   T24] usb 2-1: Product: syz
[  103.041206][   T24] usb 2-1: Manufacturer: syz
[  103.046039][   T24] usb 2-1: SerialNumber: syz
[  103.054054][   T24] usb 2-1: config 0 descriptor??
[  103.339524][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.366235][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.472509][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.603845][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.611357][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.917085][ T5822] usbhid 4-1:7.0: can't add hid device: -71
[  103.953342][ T5822] usbhid 4-1:7.0: probe with driver usbhid failed with error -71
[  104.030394][ T5822] usb 4-1: USB disconnect, device number 6
[  104.097067][   T24] airspy 2-1:0.0: usb_control_msg() failed -110 request 09
[  104.109539][   T24] airspy 2-1:0.0: Could not detect board
[  104.123836][   T24] airspy 2-1:0.0: probe with driver airspy failed with error -110
[  104.166646][ T6498] capability: warning: `syz.3.119' uses deprecated v2 capabilities in a way that may be insecure
[  104.296376][  T980] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  104.458842][  T980] usb 5-1: not running at top speed; connect to a high speed hub
[  104.477314][  T980] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 29, changing to 4
[  104.504724][  T980] usb 5-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[  104.514773][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.570820][  T980] usb 5-1: Product: syz
[  104.575290][  T980] usb 5-1: Manufacturer: syz
[  104.608152][  T980] usb 5-1: SerialNumber: syz
[  104.929358][  T980] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  104.938722][  T980] usb 5-1: unit 16 not found!
[  104.980805][  T980] usb 5-1: unable to issue vendor read request (ret = -71)
[  104.997044][  T980] usb 5-1: unable to issue vendor read request (ret = -71)
[  105.003359][ T6504] loop5: detected capacity change from 0 to 7
[  105.012057][  T980] usb 5-1: unable to issue vendor read request (ret = -71)
[  105.020464][  T980] usb 5-1: unable to issue vendor read request (ret = -71)
[  105.032647][ T6504] Dev loop5: unable to read RDB block 7
[  105.043413][ T6504]  loop5: unable to read partition table
[  105.051319][ T6504] loop5: partition table beyond EOD, truncated
[  105.061435][ T6504] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  105.180495][  T980] usb 5-1: USB disconnect, device number 8
[  105.277520][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  105.321755][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'.
[  105.650077][  T980] usb 2-1: USB disconnect, device number 3
[  105.747465][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'.
[  106.055883][  T980] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  106.215963][  T980] usb 2-1: Using ep0 maxpacket: 16
[  106.325876][ T5822] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  106.659551][  T980] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  106.681389][  T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  106.694219][  T980] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  106.724144][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.738526][  T980] usb 2-1: Product: syz
[  106.756673][  T980] usb 2-1: Manufacturer: syz
[  106.764383][  T980] usb 2-1: SerialNumber: syz
[  106.778143][  T980] usb 2-1: config 0 descriptor??
[  106.793453][  T980] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  106.813677][  T980] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  106.821325][ T5822] usb 3-1: device descriptor read/64, error -71
[  107.065905][ T5822] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  107.553276][ T5822] usb 3-1: device descriptor read/64, error -71
[  107.666293][ T5822] usb usb3-port1: attempt power cycle
[  107.763442][  T980] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  107.770503][  T980] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  107.985272][ T6525] ip6tnl1: entered promiscuous mode
[  108.025938][ T5822] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  108.046577][ T5822] usb 3-1: device descriptor read/8, error -71
[  108.295956][ T5822] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  108.327780][ T5822] usb 3-1: device descriptor read/8, error -71
[  108.398472][  T980] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  108.423833][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'.
[  108.437614][ T5822] usb usb3-port1: unable to enumerate USB device
[  108.725854][ T5822] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  108.792658][ T6567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.144'.
[  108.915856][ T5822] usb 4-1: Using ep0 maxpacket: 32
[  108.927081][ T5822] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  108.940990][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.239806][ T5822] usb 4-1: config 0 descriptor??
[  109.258604][  T980] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  109.265661][  T980] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  109.281772][  T980] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  109.369239][  T980] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  109.377812][  T980] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  109.389592][  T980] usb 2-1: USB disconnect, device number 4
[  109.460551][ T5822] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  109.477657][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  109.534940][ T5822] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  109.537749][ T6576] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  109.547278][ T5822] usb 4-1: media controller created
[  109.570318][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.641814][ T5822] DVB: Unable to find symbol dib7000p_attach()
[  109.651924][ T5822] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  109.796091][ T5822] rc_core: IR keymap rc-dib0700-rc5 not found
[  109.805355][ T5822] Registered IR keymap rc-empty
[  109.820307][ T5822] dvb-usb: could not initialize remote control.
[  109.828830][ T5822] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  110.054239][ T5822] usb 4-1: USB disconnect, device number 7
[  110.143567][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[  110.166163][ T5822] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  110.198116][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.150'.
[  110.230740][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'.
[  110.245205][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'.
[  110.684663][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'.
[  111.026847][ T6629] netlink: 52 bytes leftover after parsing attributes in process `syz.0.165'.
[  111.266714][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'.
[  111.325870][   T24] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  111.498097][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  111.515559][   T24] usb 5-1: config 15 has an invalid interface number: 250 but max is 0
[  111.595897][ T5866] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  111.636718][   T24] usb 5-1: config 15 has no interface number 0
[  111.642951][   T24] usb 5-1: config 15 interface 250 has no altsetting 0
[  111.686170][   T24] usb 5-1: string descriptor 0 read error: -22
[  111.692485][   T24] usb 5-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  111.705856][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.724986][   T24] go7007 5-1:15.250: The Lifeview TV Walker Ultra is not supported. Sorry!
[  111.817225][ T5866] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  111.838661][   T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.839500][ T5866] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  111.868039][ T5866] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  111.885921][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.906210][ T6639] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  111.919594][ T5866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  111.945634][ T6631] netlink: 'syz.4.166': attribute type 11 has an invalid length.
[  111.965901][ T6631] netlink: 'syz.4.166': attribute type 6 has an invalid length.
[  111.975623][ T6631] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.166'.
[  112.029487][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.040160][   T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.045967][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.179195][ T5866] usb 5-1: USB disconnect, device number 9
[  112.271331][   T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.747034][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.756556][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.765886][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.902267][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.915983][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.026818][  T980] usb 1-1: USB disconnect, device number 2
[  113.050132][   T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.434651][   T78] bridge_slave_1: left allmulticast mode
[  113.453456][   T78] bridge_slave_1: left promiscuous mode
[  113.461827][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.477395][   T78] bridge_slave_0: left allmulticast mode
[  113.483180][   T78] bridge_slave_0: left promiscuous mode
[  113.491046][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.104776][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.170019][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.193600][   T78] bond0 (unregistering): Released all slaves
[  114.359131][ T5822] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  114.602130][ T5822] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  114.650550][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.709077][ T5822] usb 4-1: config 0 descriptor??
[  114.774906][ T6668] chnl_net:caif_netlink_parms(): no params data found
[  114.884401][   T78] hsr_slave_0: left promiscuous mode
[  114.896580][ T5866] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  114.904321][   T78] hsr_slave_1: left promiscuous mode
[  114.922014][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.955011][ T5822] ath6kl: Unsupported hardware version: 0x0
[  114.964276][   T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.976744][ T5830] Bluetooth: hci1: command tx timeout
[  114.988146][ T5822] ath6kl: Failed to init ath6kl core: -22
[  115.000702][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.025171][ T5822] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22
[  115.033926][   T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.069494][ T5866] usb 1-1: Using ep0 maxpacket: 32
[  115.078607][ T5822] usb 4-1: USB disconnect, device number 8
[  115.091813][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.104449][   T78] veth1_macvtap: left promiscuous mode
[  115.124539][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.134530][   T78] veth0_macvtap: left promiscuous mode
[  115.142383][   T78] veth1_vlan: left promiscuous mode
[  115.147947][ T5866] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  115.158952][   T78] veth0_vlan: left promiscuous mode
[  115.179578][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.198114][ T5866] usb 1-1: config 0 descriptor??
[  115.244789][ T6735] __nla_validate_parse: 2 callbacks suppressed
[  115.244807][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'.
[  115.352238][ T6741] netlink: 52 bytes leftover after parsing attributes in process `syz.4.198'.
[  115.423164][ T6711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.438719][ T6711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.828883][   T78] team0 (unregistering): Port device team_slave_1 removed
[  115.861365][   T78] team0 (unregistering): Port device team_slave_0 removed
[  115.869601][ T6711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.892559][ T6711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.147074][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.192'.
[  116.168576][ T6752] macvlan2: entered promiscuous mode
[  116.174749][ T5866] usbhid 1-1:0.0: can't add hid device: -71
[  116.182833][ T6752] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  116.192392][ T5866] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  116.221399][ T5866] usb 1-1: USB disconnect, device number 3
[  116.363742][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.371669][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.378998][ T6668] bridge_slave_0: entered allmulticast mode
[  116.394986][ T6668] bridge_slave_0: entered promiscuous mode
[  116.412696][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.430703][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.449510][ T6668] bridge_slave_1: entered allmulticast mode
[  116.483515][ T6668] bridge_slave_1: entered promiscuous mode
[  116.624335][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.660394][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.818126][ T6668] team0: Port device team_slave_0 added
[  116.838603][ T6668] team0: Port device team_slave_1 added
[  117.056548][ T5830] Bluetooth: hci1: command tx timeout
[  117.223956][ T6776] syzkaller0: entered promiscuous mode
[  117.231921][ T6776] syzkaller0: entered allmulticast mode
[  117.243874][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.254899][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.433118][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.498276][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.520293][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.625904][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.180971][ T6805] netlink: 52 bytes leftover after parsing attributes in process `syz.2.211'.
[  118.258612][ T6799] delete_channel: no stack
[  118.815651][ T6813] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  118.849925][ T6813] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  119.136682][ T5830] Bluetooth: hci1: command tx timeout
[  119.352809][ T6798] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.440733][ T6668] hsr_slave_0: entered promiscuous mode
[  119.452087][ T6668] hsr_slave_1: entered promiscuous mode
[  119.497335][ T5822] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  119.553404][ T5822] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  119.619473][ T6824] netlink: 'syz.2.217': attribute type 46 has an invalid length.
[  119.662648][ T6827] tipc: Started in network mode
[  119.689013][ T6827] tipc: Node identity 7f000001, cluster identity 4711
[  119.720474][ T6827] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  119.983748][ T6829] bond1: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms
[  120.090695][ T6829] bond1 (unregistering): Released all slaves
[  120.669054][ T6668] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  120.703990][ T6861] netlink: 52 bytes leftover after parsing attributes in process `syz.4.224'.
[  120.719060][ T6668] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  120.740324][ T6858] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  120.792735][ T6668] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  120.823390][ T6668] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  121.199010][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.217345][ T5830] Bluetooth: hci1: command tx timeout
[  121.254907][ T6668] 8021q: adding VLAN 0 to HW filter on device team0
[  121.279786][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.287009][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.347669][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.354924][ T6075] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.376296][ T5896] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  121.536335][ T5896] usb 5-1: Using ep0 maxpacket: 8
[  121.574650][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.577590][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  121.628415][ T5896] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  121.652988][ T5896] usb 5-1: Product: syz
[  121.673292][ T5896] usb 5-1: Manufacturer: syz
[  121.758274][ T5896] usb 5-1: SerialNumber: syz
[  121.784820][ T6882] FAULT_INJECTION: forcing a failure.
[  121.784820][ T6882] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  121.830683][ T6668] veth0_vlan: entered promiscuous mode
[  121.850056][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.2.229 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  121.850083][ T6882] Tainted: [L]=SOFTLOCKUP
[  121.850089][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  121.850097][ T6882] Call Trace:
[  121.850104][ T6882]  <TASK>
[  121.850111][ T6882]  dump_stack_lvl+0xe8/0x150
[  121.850144][ T6882]  should_fail_ex+0x412/0x560
[  121.850169][ T6882]  _copy_from_user+0x2d/0xb0
[  121.850186][ T6882]  get_timespec64+0x96/0x1b0
[  121.850203][ T6882]  ? __pfx_get_timespec64+0x10/0x10
[  121.850219][ T6882]  ? kmem_cache_free+0x187/0x630
[  121.850243][ T6882]  __se_sys_pselect6+0x13a/0x320
[  121.850269][ T6882]  ? __pfx___se_sys_pselect6+0x10/0x10
[  121.850288][ T6882]  ? __pfx_ksys_write+0x10/0x10
[  121.850309][ T6882]  ? __x64_sys_pselect6+0x21/0xf0
[  121.850331][ T6882]  do_syscall_64+0x14d/0xf80
[  121.850347][ T6882]  ? trace_irq_disable+0x3b/0x150
[  121.850366][ T6882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.850380][ T6882]  ? clear_bhb_loop+0x40/0x90
[  121.850398][ T6882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.850411][ T6882] RIP: 0033:0x7f0de4b9c799
[  121.850431][ T6882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.850442][ T6882] RSP: 002b:00007f0de59af028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  121.850465][ T6882] RAX: ffffffffffffffda RBX: 00007f0de4e15fa0 RCX: 00007f0de4b9c799
[  121.850476][ T6882] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040
[  121.850486][ T6882] RBP: 00007f0de59af090 R08: 0000200000000280 R09: 0000000000000000
[  121.850495][ T6882] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[  121.850504][ T6882] R13: 00007f0de4e16038 R14: 00007f0de4e15fa0 R15: 00007f0de4f3fa48
[  121.850528][ T6882]  </TASK>
[  121.850702][ T5896] usb 5-1: config 0 descriptor??
[  121.888477][ T6668] veth1_vlan: entered promiscuous mode
[  122.014728][ T5896] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  122.215042][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.226669][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.236427][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.249433][ T6896] tipc: Started in network mode
[  122.254495][ T6896] tipc: Node identity fa372c4700ef, cluster identity 4711
[  122.255498][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.270256][ T6896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.273206][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'.
[  122.307524][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'.
[  122.319179][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.328608][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.341897][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.351599][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.354814][ T6902] syzkaller0: entered promiscuous mode
[  122.361458][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.366535][ T6902] syzkaller0: entered allmulticast mode
[  122.374255][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.428071][ T6668] veth0_macvtap: entered promiscuous mode
[  122.470439][ T5896] gspca_zc3xx: reg_r err -71
[  122.475213][ T5896] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  122.493252][ T5896] usb 5-1: USB disconnect, device number 10
[  122.572136][ T6907] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  122.590135][ T6896] tipc: Resetting bearer <eth:syzkaller0>
[  122.602581][ T6668] veth1_macvtap: entered promiscuous mode
[  122.610146][ T6911] syz.0.237 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  122.704835][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.736198][ T5904] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  122.749802][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.800448][ T6083] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.810818][ T6083] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.826091][ T6083] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.834978][ T6083] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.866393][ T6904] ip6gretap0: entered promiscuous mode
[  122.872524][ T6904] macvtap1: entered promiscuous mode
[  122.885605][ T6904] ip6gretap0: left promiscuous mode
[  122.905931][ T5904] usb 4-1: Using ep0 maxpacket: 16
[  122.935943][ T5896] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  122.959709][ T5904] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  122.968340][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.007242][ T5904] usb 4-1: config 0 has no interface number 0
[  123.029226][ T5904] usb 4-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  123.053721][ T5904] usb 4-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  123.075003][ T5904] usb 4-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  123.119032][ T5904] usb 4-1: config 0 interface 223 has no altsetting 0
[  123.141564][ T5896] usb 5-1: config 0 has no interfaces?
[  123.150832][ T5896] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  123.164726][ T5904] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  123.186048][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.206920][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.223753][ T5896] usb 5-1: Product: syz
[  123.232921][ T5896] usb 5-1: Manufacturer: syz
[  123.242249][ T5904] usb 4-1: Product: syz
[  123.247865][ T5896] usb 5-1: SerialNumber: syz
[  123.258339][ T5904] usb 4-1: Manufacturer: syz
[  123.268155][ T5896] usb 5-1: config 0 descriptor??
[  123.315150][ T5904] usb 4-1: SerialNumber: syz
[  123.345934][ T5904] usb 4-1: config 0 descriptor??
[  123.370009][ T5866] tipc: Node number set to 4208471111
[  123.396598][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.409855][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.475917][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.500300][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.541486][ T5866] usb 5-1: USB disconnect, device number 11
[  123.567025][ T5904] usb 4-1: Can not set alternate setting to 1, error: -71
[  123.579602][ T6894] tipc: Resetting bearer <eth:syzkaller0>
[  123.593451][ T5904] synaptics_usb 4-1:0.223: probe with driver synaptics_usb failed with error -71
[  123.640368][ T6894] tipc: Disabling bearer <eth:syzkaller0>
[  123.746922][ T5904] usb 4-1: USB disconnect, device number 9
[  124.592770][ T6942] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  125.222091][ T6942] netdevsim netdevsim4: Direct firmware load for /
[  125.222091][ T6942]  failed with error -2
[  125.243757][ T6945] fuse: Unknown parameter 'group_i00000000000000000000'
[  125.275935][ T6942] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  125.275935][ T6942] 
[  125.332971][ T6949] netlink: 104 bytes leftover after parsing attributes in process `syz.2.246'.
[  125.525368][ T6953] netlink: 456 bytes leftover after parsing attributes in process `syz.0.242'.
[  126.067518][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'.
[  126.545892][ T5924] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  126.777643][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.798640][ T5924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  126.888121][ T5924] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  126.994007][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.055234][ T5924] usb 5-1: config 0 descriptor??
[  127.076687][ T6990] tipc: Started in network mode
[  127.085925][ T6990] tipc: Node identity 5e4fe13123a8, cluster identity 4711
[  127.121889][ T6990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.147064][ T5924] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  127.157703][ T6992] syzkaller0: entered promiscuous mode
[  127.172232][ T6992] syzkaller0: entered allmulticast mode
[  127.209892][ T5924] dvb-usb: bulk message failed: -22 (3/0)
[  127.250629][ T5924] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  127.294444][ T5924] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  127.312333][ T6992] tipc: Resetting bearer <eth:syzkaller0>
[  127.328921][ T5924] usb 5-1: media controller created
[  127.371604][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  127.472172][ T5924] dvb-usb: bulk message failed: -22 (6/0)
[  127.494760][ T5924] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  127.532107][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  127.573004][ T5924] dvb-usb: schedule remote query interval to 150 msecs.
[  127.585745][ T5924] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  127.622798][ T5924] usb 5-1: USB disconnect, device number 12
[  127.657369][ T5822] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  127.703341][ T5924] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  127.837856][ T5822] usb 6-1: Using ep0 maxpacket: 16
[  127.853520][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'.
[  127.857354][ T5822] usb 6-1: config 0 has an invalid interface number: 223 but max is 0
[  127.902009][ T5822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.907075][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.254'.
[  127.942428][ T5822] usb 6-1: config 0 has no interface number 0
[  127.962317][ T5822] usb 6-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  128.008402][ T5822] usb 6-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  128.051585][ T5822] usb 6-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.053575][ T7005] fuse: Unknown parameter 'group_i00000000000000000000'
[  128.095847][ T5822] usb 6-1: config 0 interface 223 has no altsetting 0
[  128.132650][ T5822] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  128.145015][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.165321][ T7010] capability: warning: `syz.0.258' uses 32-bit capabilities (legacy support in use)
[  128.175908][ T5822] usb 6-1: Product: syz
[  128.196943][ T5904] tipc: Node number set to 2112348465
[  128.201289][ T5822] usb 6-1: Manufacturer: syz
[  128.218618][ T5822] usb 6-1: SerialNumber: syz
[  128.235275][ T5822] usb 6-1: config 0 descriptor??
[  128.382970][ T7016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.257'.
[  128.404370][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'.
[  128.676091][ T7026] netlink: 'syz.0.262': attribute type 12 has an invalid length.
[  129.172522][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.266'.
[  129.194768][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[  129.387478][ T7039] mmap: syz.2.267 (7039) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  129.745484][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'.
[  129.881021][ T7039] IPv6: NLM_F_CREATE should be specified when creating new route
[  129.933971][ T7046] fuse: Unknown parameter 'group_id00000000000000000000'
[  130.034043][ T5822] usb 6-1: Can not set alternate setting to 1, error: -71
[  130.057581][ T5822] synaptics_usb 6-1:0.223: probe with driver synaptics_usb failed with error -71
[  130.097035][ T5822] usb 6-1: USB disconnect, device number 2
[  130.144613][ T6992] tipc: Resetting bearer <eth:syzkaller0>
[  130.247430][ T6992] tipc: Disabling bearer <eth:syzkaller0>
[  130.339896][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'.
[  130.450036][ T7054] Invalid logical block size (1437270015)
[  130.807357][ T7062] Cannot find set identified by id 0 to match
[  130.830512][ T7062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  130.844379][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.277'.
[  130.859749][ T5822] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  131.035945][ T5822] usb 1-1: Using ep0 maxpacket: 8
[  131.064929][ T5822] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  131.068896][ T7072] fuse: Unknown parameter 'group_id00000000000000000000'
[  131.102238][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.133259][ T5822] usb 1-1: Product: syz
[  131.143368][ T5822] usb 1-1: Manufacturer: syz
[  131.166451][ T5822] usb 1-1: SerialNumber: syz
[  131.184949][ T5822] usb 1-1: config 0 descriptor??
[  131.200597][ T7073] __nla_validate_parse: 1 callbacks suppressed
[  131.200615][ T7073] netlink: 132 bytes leftover after parsing attributes in process `syz.4.279'.
[  131.228281][ T7076] tipc: Started in network mode
[  131.235729][ T5822] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  131.236804][ T7076] tipc: Node identity b63dd5cfe9be, cluster identity 4711
[  131.250807][ T7076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.273087][ T7076] syzkaller0: entered promiscuous mode
[  131.280393][ T7076] syzkaller0: entered allmulticast mode
[  131.324128][ T7076] tipc: Resetting bearer <eth:syzkaller0>
[  131.619452][ T7093] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.286'.
[  131.626648][  T980] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  131.700938][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.288'.
[  131.718191][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'.
[  131.774317][ T7100] FAULT_INJECTION: forcing a failure.
[  131.774317][ T7100] name failslab, interval 1, probability 0, space 0, times 0
[  131.789250][ T7100] CPU: 1 UID: 0 PID: 7100 Comm: syz.5.289 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.789275][ T7100] Tainted: [L]=SOFTLOCKUP
[  131.789280][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  131.789289][ T7100] Call Trace:
[  131.789295][ T7100]  <TASK>
[  131.789302][ T7100]  dump_stack_lvl+0xe8/0x150
[  131.789328][ T7100]  should_fail_ex+0x412/0x560
[  131.789349][ T7100]  should_failslab+0xa8/0x100
[  131.789362][ T7100]  __kmalloc_cache_noprof+0x88/0x660
[  131.789372][ T7100]  ? __sctp_v6_cmp_addr+0x1dc/0x510
[  131.789386][ T7100]  ? sctp_v6_cmp_addr+0x15/0xd0
[  131.789398][ T7100]  ? sctp_add_bind_addr+0x8c/0x370
[  131.789420][ T7100]  sctp_add_bind_addr+0x8c/0x370
[  131.789443][ T7100]  sctp_copy_local_addr_list+0x314/0x4f0
[  131.789468][ T7100]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  131.789488][ T7100]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  131.789504][ T7100]  ? sctp_v6_is_any+0x64/0x80
[  131.789518][ T7100]  ? sctp_copy_one_addr+0x93/0x360
[  131.789531][ T7100]  sctp_bind_addr_copy+0xb3/0x3c0
[  131.789544][ T7100]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  131.789557][ T7100]  sctp_connect_new_asoc+0x2ff/0x6b0
[  131.789576][ T7100]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  131.789598][ T7100]  ? __local_bh_enable_ip+0xd0/0x130
[  131.789616][ T7100]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  131.789634][ T7100]  ? security_sctp_bind_connect+0x7e/0x2c0
[  131.789650][ T7100]  sctp_sendmsg+0x1528/0x2c10
[  131.789667][ T7100]  ? __pfx_sctp_sendmsg+0x10/0x10
[  131.789677][ T7100]  ? aa_sk_perm+0x6d5/0x900
[  131.789693][ T7100]  ? __pfx_aa_sk_perm+0x10/0x10
[  131.789708][ T7100]  ? sock_rps_record_flow+0x19/0x400
[  131.789724][ T7100]  ? __pfx_inet_sendmsg+0x10/0x10
[  131.789742][ T7100]  ? inet_sendmsg+0x2f4/0x370
[  131.789758][ T7100]  ? __pfx_inet_sendmsg+0x10/0x10
[  131.789775][ T7100]  __sys_sendto+0x5de/0x710
[  131.789792][ T7100]  ? __pfx___sys_sendto+0x10/0x10
[  131.789800][ T7100]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  131.789822][ T7100]  ? __fget_files+0x3a0/0x420
[  131.789840][ T7100]  ? ksys_write+0x242/0x270
[  131.789852][ T7100]  ? __pfx_ksys_write+0x10/0x10
[  131.789871][ T7100]  __x64_sys_sendto+0xde/0x100
[  131.789890][ T7100]  do_syscall_64+0x14d/0xf80
[  131.789911][ T7100]  ? trace_irq_disable+0x3b/0x150
[  131.789930][ T7100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.789944][ T7100]  ? clear_bhb_loop+0x40/0x90
[  131.789955][ T7100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.789964][ T7100] RIP: 0033:0x7f2a4819c799
[  131.789974][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.789981][ T7100] RSP: 002b:00007f2a4911e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  131.789992][ T7100] RAX: ffffffffffffffda RBX: 00007f2a48415fa0 RCX: 00007f2a4819c799
[  131.789999][ T7100] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[  131.790008][ T7100] RBP: 00007f2a4911e090 R08: 000020000005ffe4 R09: 000000000000001c
[  131.790018][ T7100] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  131.790026][ T7100] R13: 00007f2a48416038 R14: 00007f2a48415fa0 R15: 00007f2a4853fa48
[  131.790052][ T7100]  </TASK>
[  131.796659][  T980] usb 3-1: Using ep0 maxpacket: 16
[  132.127945][  T980] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  132.136963][  T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.155374][  T980] usb 3-1: config 0 has no interface number 0
[  132.169794][  T980] usb 3-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  132.195881][  T980] usb 3-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  132.215674][  T980] usb 3-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  132.229903][  T980] usb 3-1: config 0 interface 223 has no altsetting 0
[  132.240641][  T980] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  132.250092][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.258673][  T980] usb 3-1: Product: syz
[  132.262992][  T980] usb 3-1: Manufacturer: syz
[  132.266974][ T5904] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  132.268138][  T980] usb 3-1: SerialNumber: syz
[  132.284084][  T980] usb 3-1: config 0 descriptor??
[  132.318481][   T10] tipc: Node number set to 1602475471
[  132.448318][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.694766][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  132.713618][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  132.725829][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  132.742096][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  132.748743][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  132.780794][ T5904] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  132.790900][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.806268][ T5904] usb 4-1: Product: syz
[  132.818666][ T5904] usb 4-1: Manufacturer: syz
[  132.829455][ T5904] usb 4-1: SerialNumber: syz
[  132.894148][ T5904] usb 4-1: config 0 descriptor??
[  132.901742][ T5896] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  133.020145][ T5904] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected
[  133.033936][ T5904] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  133.075877][ T5896] usb 6-1: Using ep0 maxpacket: 32
[  133.092918][ T5904] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  133.104686][ T5896] usb 6-1: unable to get BOS descriptor or descriptor too short
[  133.181574][ T5896] usb 6-1: config 8 has an invalid interface number: 143 but max is 3
[  133.198892][ T5896] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  133.236959][ T5896] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4
[  133.272708][ T5896] usb 6-1: config 8 has no interface number 0
[  133.304972][ T5896] usb 6-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  133.352534][ T5896] usb 6-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0
[  133.379455][ T5896] usb 6-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0
[  133.402212][ T5896] usb 6-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  133.438546][ T5896] usb 6-1: config 8 interface 143 has no altsetting 0
[  133.459846][ T5896] usb 6-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4
[  133.469371][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.478116][ T5896] usb 6-1: Product: syz
[  133.482703][ T5896] usb 6-1: Manufacturer: syz
[  133.487815][ T5896] usb 6-1: SerialNumber: syz
[  133.560548][ T5822] gspca_m5602: Failed to find a sensor
[  133.566526][ T5822] ALi m5602 1-1:0.0: ALi m5602 webcam failed
[  133.646361][ T5822] usb 1-1: USB disconnect, device number 4
[  133.687351][ T7125] fuse: Unknown parameter 'group_id00000000000000000000'
[  134.204710][  T980] usb 3-1: Can not set alternate setting to 1, error: -71
[  134.215136][ T7085] tipc: Resetting bearer <eth:syzkaller0>
[  134.223751][  T980] synaptics_usb 3-1:0.223: probe with driver synaptics_usb failed with error -71
[  134.252742][  T980] usb 3-1: USB disconnect, device number 9
[  134.277264][ T7085] tipc: Disabling bearer <eth:syzkaller0>
[  134.586921][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'.
[  134.613439][ T7150] syzkaller0: entered promiscuous mode
[  134.629646][ T7150] syzkaller0: entered allmulticast mode
[  134.693808][ T7150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.710127][ T5866] usb 4-1: USB disconnect, device number 10
[  134.743045][ T5866] garmin_gps 4-1:0.0: device disconnected
[  134.752635][ T7149] tipc: Resetting bearer <eth:syzkaller0>
[  134.802257][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'.
[  134.831830][ T7149] tipc: Disabling bearer <eth:syzkaller0>
[  134.867905][ T7161] tipc: Can't bind to reserved service type 0
[  135.551492][ T5896] io_ti 6-1:8.143: required endpoints missing
[  135.598203][ T5896] usb 6-1: USB disconnect, device number 3
[  135.757404][ T7181] vlan2: entered promiscuous mode
[  135.803085][ T7181] hsr0: entered promiscuous mode
[  137.465867][ T7161] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  137.466013][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout
[  137.479429][ T7161] Bluetooth: hci0: Opcode 0x0406 failed: -110
[  137.794646][ T7161] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  137.803503][ T7161] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  137.810558][ T7161] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  137.820505][ T7161] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  137.829369][ T7161] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  137.835455][ T7161] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  137.844475][ T7161] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  137.852433][ T7161] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  137.860230][ T7161] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  137.878391][ T7161] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  137.889088][ T7161] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  137.906098][ T7161] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  137.918662][ T7161] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  138.170584][ T7219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.310'.
[  138.310050][ T7221] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  138.785865][ T5866] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  138.837481][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.312'.
[  138.957844][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.968221][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  139.183247][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  139.232483][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  139.288998][ T5866] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  139.305873][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.335815][ T5866] usb 4-1: Product: syz
[  139.340016][ T5866] usb 4-1: Manufacturer: syz
[  139.365130][ T5866] usb 4-1: SerialNumber: syz
[  139.382025][ T5866] usb 4-1: config 0 descriptor??
[  139.429127][ T5866] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected
[  139.447622][ T5866] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  139.529418][ T5866] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  139.556124][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout
[  139.803005][ T7243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.855884][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  139.865841][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout
[  139.865866][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout
[  139.955042][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout
[  140.030312][ T7250] Invalid logical block size (117440512)
[  140.143522][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.321'.
[  141.175844][ T5896] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  141.263446][ T7245] netlink: 'syz.2.318': attribute type 46 has an invalid length.
[  141.386346][ T5896] usb 1-1: Using ep0 maxpacket: 32
[  141.394323][ T5896] usb 1-1: config 0 has an invalid interface number: 111 but max is 1
[  141.407023][ T5924] usb 4-1: USB disconnect, device number 11
[  141.419662][ T5924] garmin_gps 4-1:0.0: device disconnected
[  141.435980][ T5896] usb 1-1: config 0 has no interface number 1
[  141.471654][ T5896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  141.481127][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.551787][ T5896] usb 1-1: Product: syz
[  141.556687][ T5896] usb 1-1: Manufacturer: syz
[  141.561513][ T5896] usb 1-1: SerialNumber: syz
[  141.581214][ T5896] usb 1-1: config 0 descriptor??
[  141.618765][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout
[  141.889363][ T7267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.896973][ T7267] IPv6: NLM_F_CREATE should be set when creating new route
[  141.904302][ T7267] IPv6: NLM_F_CREATE should be set when creating new route
[  141.911598][ T7267] IPv6: NLM_F_CREATE should be set when creating new route
[  141.944076][ T5144] Bluetooth: hci2: command 0x0c1a tx timeout
[  141.950284][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout
[  141.956435][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout
[  142.016582][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[  142.053522][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'.
[  142.087711][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.105669][ T7275] openvswitch: netlink: Flow key attr not present in new flow.
[  142.126162][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.183539][ T5896] snd-usb-6fire 1-1:0.111: unknown device firmware state received from device:
[  142.196138][ T5924] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  142.221925][ T5896] 31 db 99 aa dd 09 f1 37 
[  142.245362][   T30] audit: type=1326 audit(1773668784.524:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a4819c799 code=0x0
[  142.293131][ T5896] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -5
[  142.309496][  T148] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.340262][  T148] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.355889][ T5924] usb 4-1: Using ep0 maxpacket: 8
[  142.371897][  T148] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.380918][   T30] audit: type=1326 audit(1773668784.574:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819c799 code=0x7ffc0000
[  142.388748][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.451935][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short
[  142.453381][  T148] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.487668][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.518272][ T5924] usb 4-1: config 7 has an invalid interface number: 6 but max is 0
[  142.537256][   T30] audit: type=1326 audit(1773668784.574:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819c799 code=0x7ffc0000
[  142.575272][ T5924] usb 4-1: config 7 has no interface number 0
[  142.654565][ T5924] usb 4-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.686621][ T5896] usb 1-1: USB disconnect, device number 5
[  142.818612][  T148] wlan0: Trigger new scan to find an IBSS to join
[  142.834822][   T30] audit: type=1326 audit(1773668784.574:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819c799 code=0x7ffc0000
[  142.867427][ T5924] usb 4-1: config 7 interface 6 has no altsetting 0
[  142.902806][ T5924] usb 4-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  142.919898][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.935571][   T30] audit: type=1326 audit(1773668784.574:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a4819c799 code=0x7ffc0000
[  142.964133][ T5924] usb 4-1: Product: syz
[  142.972413][ T5924] usb 4-1: Manufacturer: syz
[  142.985648][ T5924] usb 4-1: SerialNumber: syz
[  143.004566][   T30] audit: type=1326 audit(1773668784.584:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819c799 code=0x7ffc0000
[  143.089931][   T30] audit: type=1326 audit(1773668784.584:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819c799 code=0x7ffc0000
[  143.165021][   T30] audit: type=1326 audit(1773668784.584:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819c799 code=0x7ffc0000
[  143.286638][   T30] audit: type=1326 audit(1773668784.584:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a4819c799 code=0x7ffc0000
[  143.355087][   T30] audit: type=1326 audit(1773668784.584:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.5.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4819c799 code=0x7ffc0000
[  144.046391][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout
[  144.052595][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout
[  144.052627][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout
[  144.111643][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[  144.386079][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  144.535862][ T5904] usb 5-1: Using ep0 maxpacket: 32
[  144.544706][ T5904] usb 5-1: config 0 has no interfaces?
[  144.555943][ T5904] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  144.567738][ T5904] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  144.584789][ T5904] usb 5-1: Product: syz
[  144.591211][ T5904] usb 5-1: Manufacturer: syz
[  144.598731][ T5904] usb 5-1: SerialNumber: syz
[  144.638468][ T5904] usb 5-1: config 0 descriptor??
[  144.705888][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  144.828454][ T7306] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.335'.
[  144.892264][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.919443][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  144.938185][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.332'.
[  144.949575][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  144.989362][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.998336][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.048852][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  145.094208][ T5896] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  145.108404][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.117243][ T5896] usb 6-1: Product: syz
[  145.145954][ T5896] usb 6-1: Manufacturer: syz
[  145.150589][ T5896] usb 6-1: SerialNumber: syz
[  145.186643][ T5896] usb 6-1: config 0 descriptor??
[  145.207443][ T5896] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected
[  145.207462][ T5924] option 4-1:7.6: GSM modem (1-port) converter detected
[  145.220234][ T5896] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  145.226833][ T7313] kernel profiling enabled (shift: 63)
[  145.238108][ T7313] profiling shift: 63 too large
[  145.293644][ T5896] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  145.322996][ T5924] usb 4-1: USB disconnect, device number 12
[  145.363179][ T5924] option 4-1:7.6: device disconnected
[  145.451950][ T5896] usb 5-1: USB disconnect, device number 13
[  146.069030][ T7328] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  146.190198][  T980] hid-generic 00C0:10000:0200.0003: item fetching failed at offset 0/5
[  146.292729][  T980] hid-generic 00C0:10000:0200.0003: probe with driver hid-generic failed with error -22
[  146.547604][ T7339] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  147.026427][ T5904] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  147.205869][ T5904] usb 1-1: Using ep0 maxpacket: 16
[  147.213528][ T5904] usb 1-1: config 0 has no interfaces?
[  147.224913][ T5904] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  147.275878][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.295480][ T5904] usb 1-1: config 0 descriptor??
[  147.382479][ T5904] usb 6-1: USB disconnect, device number 4
[  147.407776][ T5904] garmin_gps 6-1:0.0: device disconnected
[  147.542575][ T5866] usb 1-1: USB disconnect, device number 6
[  147.571056][ T7349] bridge0: port 3(veth0_to_bridge) entered blocking state
[  147.609630][ T7349] bridge0: port 3(veth0_to_bridge) entered disabled state
[  147.649879][ T7349] veth0_to_bridge: entered allmulticast mode
[  147.678725][ T7349] veth0_to_bridge: entered promiscuous mode
[  147.717242][ T7349] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  147.806364][ T7349] bridge0: port 3(veth0_to_bridge) entered blocking state
[  147.813954][ T7349] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  147.814767][ T6075] wlan0: Trigger new scan to find an IBSS to join
[  148.246058][ T5924] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  148.435846][ T5924] usb 6-1: Using ep0 maxpacket: 32
[  148.447305][ T5924] usb 6-1: New USB device found, idVendor=0e41, idProduct=4141, bcdDevice= 0.40
[  148.456752][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.464774][ T5924] usb 6-1: Product: syz
[  148.474712][ T5924] usb 6-1: Manufacturer: syz
[  148.479836][ T5924] usb 6-1: SerialNumber: syz
[  148.676873][ T5904] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  148.717604][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.743989][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.801556][ T5924] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  148.830832][ T5924] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  148.842881][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.881524][   T24] hid-generic 00C0:10000:0200.0004: item fetching failed at offset 0/5
[  148.905845][ T5904] usb 1-1: Using ep0 maxpacket: 8
[  148.916377][   T24] hid-generic 00C0:10000:0200.0004: probe with driver hid-generic failed with error -22
[  148.930967][ T5924] usb 6-1: USB disconnect, device number 5
[  148.937610][ T5904] usb 1-1: config index 0 descriptor too short (expected 64616, got 36)
[  148.957103][ T5904] usb 1-1: config 136 has an invalid descriptor of length 248, skipping remainder of the config
[  148.991598][ T5904] usb 1-1: config 136 has 0 interfaces, different from the descriptor's value: 9
[  149.042929][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.087288][ T5904] usb 1-1: config index 1 descriptor too short (expected 64616, got 36)
[  149.108914][ T5904] usb 1-1: config 136 has an invalid descriptor of length 248, skipping remainder of the config
[  149.149538][ T5904] usb 1-1: config 136 has 0 interfaces, different from the descriptor's value: 9
[  149.173675][ T5904] usb 1-1: config index 2 descriptor too short (expected 64616, got 36)
[  149.202161][ T5904] usb 1-1: config 136 has an invalid descriptor of length 248, skipping remainder of the config
[  149.236514][ T5904] usb 1-1: config 136 has 0 interfaces, different from the descriptor's value: 9
[  149.263765][ T5904] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  149.291752][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.310195][ T5904] usb 1-1: Product: syz
[  149.325379][ T5904] usb 1-1: Manufacturer: syz
[  149.335888][ T5904] usb 1-1: SerialNumber: syz
[  149.376845][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  149.389487][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  149.402048][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  149.414461][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  149.426848][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  149.439272][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  149.451648][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  149.464128][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  149.476533][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  149.488890][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  150.946630][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.987483][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  154.385866][    C1] net_ratelimit: 20641 callbacks suppressed
[  154.385887][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  154.386731][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  154.392181][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.405138][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  154.416520][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.429241][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  154.440416][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  154.453227][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  154.464454][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.477216][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  157.910936][    C0] sched: DL replenish lagged too much
[  158.544439][   T10] usb 5-1: unable to read config index 0 descriptor/start: -110
[  158.566169][   T10] usb 5-1: can't read configurations, error -110
[  159.396081][    C0] net_ratelimit: 18532 callbacks suppressed
[  159.396092][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.396101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  159.397140][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  159.402389][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  159.415234][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  159.426672][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.439538][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  159.450699][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.463648][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  159.474595][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  164.405932][    C1] net_ratelimit: 20423 callbacks suppressed
[  164.405953][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  164.406314][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  164.412198][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.424970][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  164.436171][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.448861][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  164.459980][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  164.476873][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  164.483976][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.496805][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  169.415912][    C1] net_ratelimit: 19419 callbacks suppressed
[  169.415932][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.416286][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  169.422209][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.434988][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  169.446137][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  169.459058][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  169.470123][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.482902][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  169.494031][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.506798][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  172.290865][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  174.425916][    C0] net_ratelimit: 19774 callbacks suppressed
[  174.425936][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  174.426029][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.433059][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  174.444595][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.457236][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  174.468834][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  174.481520][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  174.492966][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.505536][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  174.516890][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.435959][    C1] net_ratelimit: 20234 callbacks suppressed
[  179.435980][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.436387][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  179.442140][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  179.454548][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  179.466181][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.478509][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  179.490112][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.502357][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  179.513947][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  179.526400][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  184.445893][    C1] net_ratelimit: 19263 callbacks suppressed
[  184.445914][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.446088][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  184.452150][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.464515][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  184.476123][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.488341][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  184.500001][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.512312][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  184.523881][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.536458][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  189.455892][    C1] net_ratelimit: 15823 callbacks suppressed
[  189.455914][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.456549][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  189.462189][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.475915][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  189.487741][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.500713][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  189.511785][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.523974][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  189.535657][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.548637][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  194.465848][    C1] net_ratelimit: 15655 callbacks suppressed
[  194.465868][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.465987][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  194.472130][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.485144][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  194.496095][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.508248][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  194.519902][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.532884][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  194.543819][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.556147][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  199.475774][    C0] net_ratelimit: 15801 callbacks suppressed
[  199.475793][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  199.485909][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.495135][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  199.506150][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.518513][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  199.530216][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.543452][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  199.554231][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.566461][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  199.578143][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.485779][    C1] net_ratelimit: 16383 callbacks suppressed
[  204.485799][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.486717][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  204.492160][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.504308][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  204.515997][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.529060][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  204.540031][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.552319][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  204.563999][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.576944][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  209.495834][    C1] net_ratelimit: 16150 callbacks suppressed
[  209.495855][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  209.496243][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  209.502132][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.514340][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  209.526180][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.539235][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  209.550186][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  209.562498][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  209.574222][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.588885][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  214.505890][    C1] net_ratelimit: 16406 callbacks suppressed
[  214.505911][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.506360][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  214.512294][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.524426][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  214.536229][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.549307][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  214.560204][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.572917][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  214.585061][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.599285][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  219.515853][    C1] net_ratelimit: 16373 callbacks suppressed
[  219.515872][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.515886][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  219.516461][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  219.522094][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.535198][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  219.546082][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.558319][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  219.569894][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.582877][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  219.593820][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.525904][    C1] net_ratelimit: 15845 callbacks suppressed
[  224.525926][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.526715][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  224.532114][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.544519][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  224.556196][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.569151][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  224.580042][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.592232][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  224.603906][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.616840][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  229.536331][    C1] net_ratelimit: 16205 callbacks suppressed
[  229.536353][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.536850][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  229.542591][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.555019][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  229.567117][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  229.580181][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  229.591125][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.603354][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  229.615043][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.628320][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  234.545839][    C1] net_ratelimit: 15873 callbacks suppressed
[  234.545860][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  234.545934][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  234.552177][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.564293][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  234.576042][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.589096][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  234.600132][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  234.612606][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  234.624180][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.637206][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  239.555938][    C1] net_ratelimit: 18098 callbacks suppressed
[  239.555959][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.556203][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  239.562194][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.574224][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  239.586182][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  239.599238][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  239.610228][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.622464][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  239.634278][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.646194][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  244.566539][    C0] net_ratelimit: 18136 callbacks suppressed
[  244.566554][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  244.575820][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.585242][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  244.596758][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.608732][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  244.620663][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  244.633710][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  244.644582][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.656945][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  244.668560][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.575824][    C1] net_ratelimit: 17832 callbacks suppressed
[  249.575845][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.576650][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  249.582131][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.594301][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  249.606213][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  249.618452][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  249.630468][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.643476][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  249.654443][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.666689][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  254.585896][    C0] net_ratelimit: 15882 callbacks suppressed
[  254.585919][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  254.588325][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.594038][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  254.605086][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.616987][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  254.628954][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.642003][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  254.652993][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.666393][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  254.677241][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  259.595767][    C0] net_ratelimit: 15556 callbacks suppressed
[  259.595788][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  259.597034][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.603056][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  259.613977][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.627049][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  259.637989][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  259.649986][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  259.662075][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  259.674988][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  259.686088][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.606119][    C1] net_ratelimit: 15425 callbacks suppressed
[  264.606140][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.607285][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  264.612534][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.624656][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  264.636980][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  264.651082][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  264.662323][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  264.675506][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  264.688218][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  264.700233][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  269.615811][    C1] net_ratelimit: 15316 callbacks suppressed
[  269.615831][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.616404][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  269.622072][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.635019][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  269.646105][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  269.658283][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  269.670300][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.683380][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  269.694330][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  269.707423][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  274.625806][    C1] net_ratelimit: 15183 callbacks suppressed
[  274.625827][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.626248][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  274.632186][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.645068][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  274.655976][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.668216][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  274.680095][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  274.693086][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  274.703960][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  274.717164][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  277.165727][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  277.172724][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5808/1:b..l
[  277.181023][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=21525, q=1415 ncpus=2)
[  277.188845][    C0] task:udevd           state:R  running task     stack:23328 pid:5808  tgid:5808  ppid:5193   task_flags:0x400140 flags:0x00080000
[  277.203313][    C0] Call Trace:
[  277.206612][    C0]  <TASK>
[  277.209552][    C0]  __schedule+0x15dd/0x52d0
[  277.214073][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  277.219215][    C0]  ? __pfx___schedule+0x10/0x10
[  277.224245][    C0]  preempt_schedule_irq+0x4d/0xa0
[  277.229589][    C0]  irqentry_exit+0x599/0x620
[  277.234209][    C0]  ? trace_irq_disable+0x3b/0x150
[  277.239262][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  277.245257][    C0] RIP: 0010:lock_acquire+0x20b/0x2e0
[  277.250577][    C0] Code: e9 30 ff ff ff e8 95 b6 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 11 74 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 4e 62 73
[  277.270396][    C0] RSP: 0018:ffffc900039d7298 EFLAGS: 00000282
[  277.276483][    C0] RAX: e702b52546c0f500 RBX: 0000000000000246 RCX: 0000000000000046
[  277.284469][    C0] RDX: 00000000b4314ef2 RSI: ffffffff8e167641 RDI: ffffffff8c27be00
[  277.292454][    C0] RBP: 0000000000000000 R08: ffffffff81767e95 R09: ffffffff8e75e520
[  277.300446][    C0] R10: ffffc900039d73f8 R11: ffffffff81b0c240 R12: 0000000000000002
[  277.308430][    C0] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000
[  277.316422][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  277.322594][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  277.327735][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.333825][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  277.338956][    C0]  unwind_next_frame+0xc2/0x23c0
[  277.343914][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  277.349048][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  277.354183][    C0]  ? do_syscall_64+0x14d/0xf80
[  277.358969][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.365058][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  277.371411][    C0]  arch_stack_walk+0x11b/0x150
[  277.376201][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.382286][    C0]  stack_trace_save+0xa9/0x100
[  277.387076][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  277.392462][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  277.397509][    C0]  save_stack+0x122/0x230
[  277.402032][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  277.406985][    C0]  ? __pfx_save_stack+0x10/0x10
[  277.411843][    C0]  ? __free_frozen_pages+0xc2b/0xdb0
[  277.417135][    C0]  ? __slab_free+0x263/0x2b0
[  277.421731][    C0]  ? qlist_free_all+0x97/0x100
[  277.426505][    C0]  ? kasan_quarantine_reduce+0x148/0x160
[  277.432145][    C0]  ? __kasan_slab_alloc+0x22/0x80
[  277.437181][    C0]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  277.443259][    C0]  ? __alloc_skb+0x1d0/0x7d0
[  277.447858][    C0]  ? netlink_sendmsg+0x5d4/0xb40
[  277.452909][    C0]  ? ____sys_sendmsg+0x972/0x9f0
[  277.457859][    C0]  ? ___sys_sendmsg+0x2a5/0x360
[  277.462809][    C0]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  277.468017][    C0]  ? do_syscall_64+0x14d/0xf80
[  277.472800][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.478889][    C0]  __reset_page_owner+0x71/0x1f0
[  277.483866][    C0]  __free_frozen_pages+0xc2b/0xdb0
[  277.489005][    C0]  __slab_free+0x263/0x2b0
[  277.493441][    C0]  qlist_free_all+0x97/0x100
[  277.498127][    C0]  kasan_quarantine_reduce+0x148/0x160
[  277.503599][    C0]  __kasan_slab_alloc+0x22/0x80
[  277.508466][    C0]  kmem_cache_alloc_node_noprof+0x384/0x690
[  277.514375][    C0]  ? __alloc_skb+0x1d0/0x7d0
[  277.518968][    C0]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  277.525041][    C0]  __alloc_skb+0x1d0/0x7d0
[  277.529451][    C0]  netlink_sendmsg+0x5d4/0xb40
[  277.534238][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.539539][    C0]  ? aa_sock_msg_perm+0xf1/0x1b0
[  277.544493][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  277.549790][    C0]  ____sys_sendmsg+0x972/0x9f0
[  277.554574][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.559875][    C0]  ? import_iovec+0x73/0xa0
[  277.564399][    C0]  ___sys_sendmsg+0x2a5/0x360
[  277.569088][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  277.574310][    C0]  __x64_sys_sendmsg+0x1bd/0x2a0
[  277.579244][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  277.584724][    C0]  ? kmem_cache_free+0x187/0x630
[  277.589670][    C0]  ? __se_sys_rename+0x185/0x2c0
[  277.594629][    C0]  do_syscall_64+0x14d/0xf80
[  277.599228][    C0]  ? trace_irq_disable+0x3b/0x150
[  277.604263][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.610334][    C0]  ? clear_bhb_loop+0x40/0x90
[  277.615019][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.620922][    C0] RIP: 0033:0x7f8d60ca7407
[  277.625336][    C0] RSP: 002b:00007ffc01c7b720 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  277.633738][    C0] RAX: ffffffffffffffda RBX: 00007f8d61380880 RCX: 00007f8d60ca7407
[  277.641720][    C0] RDX: 0000000000000000 RSI: 00007ffc01c7b780 RDI: 000000000000000c
[  277.649701][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  277.657687][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000020d
[  277.665662][    C0] R13: 0000565521e6da50 R14: 0000000000000000 R15: 0000000000000000
[  277.673648][    C0]  </TASK>
[  277.676672][    C0] rcu: rcu_preempt kthread starved for 8464 jiffies! g21525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  277.687780][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  277.697758][    C0] rcu: RCU grace-period kthread stack dump:
[  277.703659][    C0] task:rcu_preempt     state:R  running task     stack:27744 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  277.717168][    C0] Call Trace:
[  277.720461][    C0]  <TASK>
[  277.723395][    C0]  __schedule+0x15dd/0x52d0
[  277.727916][    C0]  ? __pfx___schedule+0x10/0x10
[  277.732783][    C0]  ? schedule+0x90/0x360
[  277.737034][    C0]  schedule+0x164/0x360
[  277.741287][    C0]  schedule_timeout+0x158/0x2c0
[  277.746155][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  277.751553][    C0]  ? __pfx_process_timeout+0x10/0x10
[  277.756862][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  277.762695][    C0]  ? prepare_to_swait_event+0x340/0x370
[  277.768256][    C0]  rcu_gp_fqs_loop+0x312/0x11d0
[  277.773124][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  277.779271][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  277.784741][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  277.789955][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  277.795785][    C0]  rcu_gp_kthread+0x9e/0x2b0
[  277.800392][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  277.805612][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  277.811477][    C0]  ? __kthread_parkme+0x7a/0x1f0
[  277.816434][    C0]  ? __kthread_parkme+0x19c/0x1f0
[  277.821476][    C0]  kthread+0x388/0x470
[  277.825565][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  277.830776][    C0]  ? __pfx_kthread+0x10/0x10
[  277.835480][    C0]  ret_from_fork+0x51e/0xb90
[  277.840092][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  277.845216][    C0]  ? __switch_to+0xc7d/0x1450
[  277.849911][    C0]  ? __pfx_kthread+0x10/0x10
[  277.854514][    C0]  ret_from_fork_asm+0x1a/0x30
[  277.859307][    C0]  </TASK>
[  277.862596][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  277.868951][    C0] Sending NMI from CPU 0 to CPUs 1:
[  277.874194][    C1] NMI backtrace for cpu 1
[  277.874220][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  277.874241][    C1] Tainted: [L]=SOFTLOCKUP
[  277.874246][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  277.874256][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  277.874279][    C1] Code: be 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 22 1b 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  277.874292][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242
[  277.874307][    C1] RAX: 0000000000f66d13 RBX: ffffffff819a8e5a RCX: 0000000080000001
[  277.874318][    C1] RDX: 0000000000000001 RSI: ffffffff8def6aec RDI: ffffffff8c27be00
[  277.874329][    C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b
[  277.874340][    C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff90119ab0
[  277.874352][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad9000
[  277.874361][    C1] FS:  0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000
[  277.874374][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  277.874384][    C1] CR2: 00007ffd9d2a0310 CR3: 00000000118dc000 CR4: 00000000003526f0
[  277.874398][    C1] Call Trace:
[  277.874404][    C1]  <TASK>
[  277.874410][    C1]  default_idle+0x9/0x20
[  277.874428][    C1]  default_idle_call+0x72/0xb0
[  277.874447][    C1]  do_idle+0x1ba/0x5d0
[  277.874467][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  277.874486][    C1]  ? __pfx_do_idle+0x10/0x10
[  277.874509][    C1]  cpu_startup_entry+0x43/0x60
[  277.874529][    C1]  start_secondary+0x101/0x110
[  277.874547][    C1]  common_startup_64+0x13e/0x147
[  277.874567][    C1]  </TASK>
[  278.125926][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  278.142636][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  279.635812][    C1] net_ratelimit: 15848 callbacks suppressed
[  279.635834][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  279.636744][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  279.642088][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  279.654025][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  279.666269][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  279.679513][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  279.690511][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  279.703436][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  279.714697][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  279.726688][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  284.645878][    C0] net_ratelimit: 18318 callbacks suppressed
[  284.645899][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  284.646011][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  284.653173][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  284.664380][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  284.677389][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  284.688393][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  284.700326][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  284.712777][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  284.725991][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:9b:df:d1:ab:2f, vlan:0)
[  284.736866][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  286.086728][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  286.103076][ T1300] ieee802154 phy1 wpan1: encryption failed: -22