last executing test programs:

10.43246738s ago: executing program 4 (id=7225):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

10.35115646s ago: executing program 2 (id=7227):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000240)=0xa, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x2}, 0x4, 0x9, 0x5, 0xf, 0x5, 'syz0\x00', "dbf6aca0dce26bad9a97e7d3e30ee5c4ba962acdaa4600a8f718a6b5957af54f", "2e04abd3543298d9f39a3d3454f676efe50aa8b27971cf952e3f639f55676c46", [{0x15, 0xf, {0x2, 0x8}}, {0x8, 0x3, {0x2, 0x10}}, {0x4, 0x3, {0x0, 0x6}}, {0x5, 0x376, {0x2, 0x7}}, {0xea5, 0x7, {0x3, 0x9}}, {0x8, 0xc, {0x1, 0x6}}, {0x6, 0x0, {0x0, 0x3}}, {0x9, 0x3, {0x3, 0x3}}, {0x2, 0x5, {0x3, 0x5}}, {0x6, 0x60, {0x3, 0x3}}, {0x858f, 0x8, {0x3, 0xf}}, {0x3, 0x2, {0x1, 0x7}}, {0x9, 0xfffd, {0x1, 0x5}}, {0x5, 0x9, {0x1, 0x80000000}}, {0x0, 0x662, {0x1, 0x1f}}, {0x7, 0x1, {0x1, 0x4}}, {0x6, 0xd7e9, {0x3}}, {0x6, 0x8, {0x1, 0x45d2}}, {0x7, 0x0, {0x2, 0x2}}, {0x5, 0x400, {0x2, 0x80}}, {0x9, 0xc0e, {0x3, 0xca09}}, {0xe83, 0x9, {0x2, 0xe}}, {0x7c, 0x81, {0x1, 0xff}}, {0xb, 0xe, {0x0, 0x8000}}, {0x2, 0x4, {0x1, 0x4}}, {0xfc01, 0x9, {0x3, 0x200}}, {0x2, 0x4, {0x2, 0xc3}}, {0x4, 0x400, {0x0, 0x2}}, {0x1, 0x8, {0x3}}, {0x2, 0x400, {0x2, 0x9}}, {0x8, 0x0, {0x0, 0x6}}, {0x7, 0x0, {0x1, 0x2}}, {0x8, 0x6b, {0x1, 0x9}}, {0x9, 0xc000, {0x1, 0x1ff}}, {0x40, 0x8, {0x1, 0x5}}, {0x1, 0xc6, {0x2, 0x7}}, {0x8, 0x7, {0x1, 0x5}}, {0x5, 0x6, {0x1}}, {0x3ff, 0x2, {0x1, 0x3}}, {0x0, 0xfff8, {0x0, 0x200}}]}}}]}, 0x268}}, 0x40)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x6001, 0x38, 0x2d}, 0x18)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c00098008"], 0x34}}, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
ioctl$KVM_ARM_VCPU_FINALIZE(r2, 0x4004aec2, &(0x7f0000000280))
syz_emit_ethernet(0xc6, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb88a80e0081"], 0x0)
recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

10.275523576s ago: executing program 4 (id=7228):
unshare(0x6a040000)
unshare(0x22010800)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000140)="3d7d8207106058d7e024664b2c4b0a80a7aed59b3aae33e7fca1df20d28f97627880af78d7d8d3e3c1823d2d28bd2f4f7814f8c4fcdf5852d3694ef459db4f28cd89de9a51729819b5a9c86acfd2946d097a18921e9f23d8ea007cf1f827b0f0300efa8184b20b5abc12a58d16096df156224b55bafaa22155256385bcd9261bd9b5797889fcc3faee972d4b8d3f0054578be298f1a2da1b8409b3d61dadffa78f1f94edae38147785bfaf13e0e23c1bf3e93c0780", 0xb5)
r1 = socket(0x0, 0x2, 0x0)
write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec090006f90d435ef8b29d3ef3d92c9417025bba2e17f7f33a0995c6ea7312f217b47811f119e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8361bcae5fa0fd51af51af850", 0xb5)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x8, @private0, 0xb6}, {0xa, 0x4e23, 0x3, @empty, 0x401}, 0xffffffffffffffff, 0x6}}, 0x48)
connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @loopback}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0xffffff8a}, 0xfffffdef}], 0x4000095, 0x20000040)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
pipe2(&(0x7f0000000000)={0x0, <r2=>0x0}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x3, 0x3, 0x2, {0x5, @raw_data="e41e79368dd377b3c4c2b4fb51b079ccd15ea691b5d5986c1ad4b64cf44b84befdb2ae619988645d62c401b21c9563578eefb99a6233256f239deadbf28cb5ac592ab10edc2cb6b7756210c0eb8ce5ede90f15d346d0630e6138a7777855c43b67b980e5afc2caaefe4b70adbb4b8bc22a63641958b18a574816e92391ce6df1fb3053123311217c68a0aa82589c21e1be92c56831e20a3e9a72eaf9cb1ff4ab36a27e209ae8b2eb88cd2cd8ee3acf0aa9b61c9753a46304e76fe41f0d266ae65536ed3f235a1c1e"}})
r4 = syz_open_dev$video4linux(0x0, 0x80000001, 0x169000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ptrace(0x10, 0x0)
mlockall(0x3)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect(0x1, 0x23e, &(0x7f0000000d00)=ANY=[@ANYBLOB="120110016a175cded10502802acc0102030109022c020100421009090421d804f505910306240600018005240000000d240f0104000000ff010101ff06241a00103d09050604ff030006040b0e5a56801da998e6017a0905010820000709070224d4289e50f96abb1d83f06ef8cacf162ae5e0a9486b102d6281ac651f2bc5a05055bd6b98d9cc1ac1b7b317e3c77a653b18a7afee0db63820d0cfbbd95c7143ef171836cecf693e139fa069112a55dad1e1da33b2701444368ae38c7a3efc4179805465c1a3cfde877b7a68ad6f4fb9eca3b06b344a65bb2593edc3ad0b07c5a3351c26220f00f40dedbc78007d42aa5e971ac273e33608631d5d914a6d394a11f979cfe1976523c5d0ba985d6712b787297140c51073831f25d6a8231cdc3d8542253fdf09dbfd64ec0deb7b34330d3d0b305c502ae5475d9349145af6f66c2f14e68c891f8a9784a9dad9e85e157323994bb79c30227d2cfed2354c282b5b0725018236080009050e0000040309050404477409050a02ff030a090cc0118f12472af5d3f4496ac6c99531e67e800159aa8f9e869c30272af118fedb21392a2b6a1f22e9bb967933ab10c7027444d7be6af1467d284db3e1a6d14d76531a8b2fce883ac26f08f7d95c72dc01e0063970d1b23f6faf80379e699f87eb163587b2f2e5b3d4a4ddadbd4fa1a578be6fad1b802ab2d109666a510944b09ead960893e1af78389601da8de98d4f985507a1ab301b7717bb95423b43a73f0718f635614d3ebbf34977631e4f38ec296f1b88d1c16cb19407a65d200831311c9d3fef40dea7f4c7c37ae9ea"], &(0x7f0000000a40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0x9, 0x18, 0x40, 0x2}, 0x5a, &(0x7f00000008c0)=ANY=[@ANYRESOCT], 0x3, [{0xe9, &(0x7f0000000940)=ANY=[@ANYBLOB="e903b092ba84c40ce22cbae2f598f4505d7186a0b824ff3d7a89b162cd8ebb0a253fa52adec7f0faaba6cdabd1a0d45f1548199df33baea86a8fcd70452b054647113bf79ba4dc4eca2328fbd0b74d9a73ad1fead97fbe3b9fcf8c8b11e03004f19a104695024cca7318fae9fe041fa4bbf545ea6692964763e4100cd74a2f7de5933b281d8dd7615d06b623e7fcc317e88299e5dd7f72fa779c1217e090c4e31c7aa57a2b48ed57829a747721284bf2fa53616927a7b2db8509929b5ced966b5b01356fbdaf19990e8244197a3f21478c90e1462142d9171f7dc7701cdde640946895b6c0bab7195f"]}, {0x2a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf0ff}}]})
setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xb8, 0x18c, 0x148, 0xb8, 0x0, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'macsec0\x00', 'vlan1\x00'}, 0xc6, 0x70, 0xb8, 0xc000000}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'bridge_slave_1\x00'}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
close_range(r2, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r4], 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r7, &(0x7f00000016c0)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c)

10.092443351s ago: executing program 1 (id=7230):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000300)=0x8281336)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x20000401)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f00000010c0)="aabf75aa76c3ada74bf44ac8955581057e1778604df77693559ffad6cc78741642e0f21c507a79c29daba641a268ce55abe36b0fa2268a6fffbb8016b62549418cd3f951d1850854ec210ea8034faf1626e616a36c6bc0c9b4372b0e28213019e3db182fd0858a17e87ff7a5dddc89594225d78441a533082ed3e8047f12269778c40721cacf71f32543874a345938224419dce2fd44b7a62c1d0d98a0cf23c2fc16894ba549a2edfb7e300f14c30f64429d25ea9b26b9fbf839fb039e46bc8dcf12d7ce62c8cbc9f0d5ffff56a577edd86949d10e6e37e31297ce4e5585bc3d3ac00acbeec51d8164359204a918b4d1de4514705d55e2105084aece8a83f28fb3e46eb4f24b966af622fcf31c4cb601f5a2b82d42a2172ad0b1939c585891940b81aa9c5c6cdb0676b998025ea4ac0fc18aa24fd5d562b1dd4f23e3ac63f0233fb4465c5e5a96599ecc0fd8dd7e7d48a8b96db03630613905fd610ceec2eb9b6962645bd959cb08493806bb6d0ccb067a048c7ec34cc3ab4aec1b8e4253de22949b0c9a9d1dec77d903d6018eafd0e81dc7090ea108057e631003da3104c2eb839bc8428be6a497a051b03b80c02d8f8efc20330853a81ba6e36c41fcbc63e2345075a99164f8108452c298a49da500c16ecd20fca9577814e657a767c5f310d0c8a71b134a995e40c7924ec6ffe956ab10ff39e3a07b28af2a668df944869bffd39494fa0150a7a46491659c0afb122c91a50d08bd50e014bc4c1f7c9ff3fd2d1d813cd0cdd381510380c967aed0133055370c29cbf1b3e5d10ed2ae103de7dfa77e76ff55f41f1e1804e4f06bd013ce28511e3469817b0154e58378345928071d63e474e4d8ac2d50c5f7626fc769b2e1c3b2534fec20a8440fd333e2220de76c21ddf83c0e6156f12dbef610a98a0500aaafc0278ceb32591a8c27d7f05cbb1718da94a95df19f72b8072ae01be8d19a3e34ae4cb059cecc5fd95cb1d9116ba62bf1b8926a919a9d88491e8516a5070cd5b74fc46d26e36c5742aaca351dc5c98f97f06e9d7cbc9c318b00a0e73829acaba560cbf0c67c4e60321eeac2e56d355ca483868e76a7e0397a5009a8c83825be2fbbb4fd48e1a0682fab5997ca24046008d5d48740b614bba2c4f48ccc6777ee90ab07b0e6181f52d64f24ec0ad43b2125d2464d55e977d6b7eb62e11c2cf418dccbe16644a3cce78f68e3fa83f73cdd4369cbd3789efe4802d02f364ecac04aa6868b0fa95ec1ed1d50f403d2ea5c7e201e2e5563d940466d77e0f1e3988abcf6b25aeeebb079d4da21e633e83e4b5c090957812ab84232f70ba420981628c74f0bf5e363ef017fa6c9157b844b36f6188e7955f992d587cde528b85315f825ee3d7c3db57db62bca9dfca8ab4014a672d43c3c462aba6de5f17ab252e5ced731a0f5ed018cbf766290c28b6ad4f1ef378c056291172c8ae0f24b7a50e28e6964f72ca1345a13223637b4ebdc19aecf4f93b4c4819ba4380ccd51595938f2255cb22d4d9b270ebb2367b8045d950e9201da4466f1adaa6d19d6387b971ad37505c64e6ffd7f4f04cffb72fde1f0c08912de1c890ba83532839963f527149d4ae501baabe834eb1dc4a2c42c646c4cfc1b735a0c60acdf8a54cc200733282169a8ec10e23b34e713f47eb5c8d18b1700bb4ca77a0c04b55ec546f1f90211906a90738bd3827e9ec5aa2b64cc28b67a0d3b33e4a210b3b4f9e115907f2e660ee849677a99fd3ea2a8bbaf07369fc036d51d2b4bdd94a6ab7421db4686aeabebc3679960286ea0444694bde2d76e69fda96bdbfde78d7345c7a143abab5d0412269d833c5e315d7705e691cc5ce6f70d7f22f762bd3cd2e25d40bc4e5af3e9ee651e1400daa8edf2e6e3d7026f1e22c88a15cb4fa909375999bcc34ef12d0a40b3f3cdcb0be3400edd8c04991ee8cd7778f88b54c517deb9c955d8a43a3606aeef44c6db656bab1164dddc312d1a2b74a520b988fb62fcf08de1b82e9093db5adca8222340257fffb5da79b82adb6f49473cef3a65cbb20a9ffe5760d1f4c6a3f3cc9db3eb1dd9eb44c6a84074f13feed4d45b47037280c7a096da61b397e8002093c6428d00d2a0d249d518636a8ae42f0778bddd723e8410209ca1ebce297d2d88781a378d0e7b8695080f2ec5f907f5cdbf1a8ae0b0d23b5239dd7bed96304cb561be61d68ff3ec90b6bf30f693fa2bb416d935f107e445eb0f492071df1cfcbc9e34173bf3feadfa3d64f99b078f603a5a504704625bd8d85e8a5454edfaf92b0ab95036c8aebc297f4fb8c51ff97740f82f5c220fcaeed0d77ee9007636dc70252d891f2a00ef010ac48153e5d5fd83f88b5c0010e41d312f368a660c50d1574d07242270b814f59abc8c25a26e5cb6ed8915eed0ed188c13f45045afe44e0d8a5e37e51bb7da9b715541c2b54fb5d2e827be94530b6fdd299d67898e89d3d68e0730375d9e8b425b06c61fe3e41b93eed3a239df5df59e6add4c8b8cf48c1b175bf9125a51798ed5647377e52a38792ff2263c426c40cc8602113f5664986858939d097f767d67b706053268a36c7f9903cf148a88d4012136ed96057c43922fafd67393afa0f4f245e9e1a8b53a27087bc8bde767208841c412a487cbf7fa9a83bee749a8f095bb35f8bd519766d428f246c47b8f50ffd52aacbdd84696fb7c5761b99a15b0809c3465e10ef658d3d2e26a5b018740ab4f64b76a414bf41184d3334af3f7c7f5349e55ad2e96669da6f6105b7c0a74d8448bea966656612982f86c55fcad791c2532dc1dbd27ddda624f75159ee40cb33fab8b4770a4947cad4d936aa5b7e94c0e57b793fe33aa8d5e896a2c28eb804471eb9aa17abf8c3eb72ef8223995376e5795b9bcd5d3307b557d27ab1cfa50d0eea759391ad9f6d62d1b1000278633e90cfbf3502e2a39f3b05b051ed1200d57c96a9eed32883733c22604a1b45dd2aa1a85a0777b3484bc500d2215f8a3d03c96de14125ed53db3413f08d7396dfd2897708a0cac7c98b61525646fb984fb2a7237238fee9e4cc7938ac8d5b7672007be062040b703fbadd4b249689edf00c0cabda644fd0ab2f608e91e5d59af827d0f48ffbffaa2854f62cbd895a6ccd0267f88f343a727c27156f72cd80a3834f327fd500a8fde965a59de1a7c1fea7d519b0e33535499970307eb6ea0158de51677c1ff711d6e288d070a4ea34fc3e9188398bdc4e4cf8bf79482acdae43ce11a01fd113c0fd67679c8cc1cc81051214a62a8da68a123e1bbda8d624262f795c1252f690e89d0abdefdecb0630b97635d87748581da0101c8fbe09362bc5d62685e8f8a81d24e1c25066460e4fea9fc3d8767112c6b084f9c17491f7d667132a5a00a55f93c974f6da6687b4b437a3a842aa9b0e07144e5f04ab32fe3e637ecb23078698b325b1de6ca629e535e8b69423dab9d25bcfb962b5dab26dc183ed4f305b39f4ef93832bb72d1a705c57937c34222ed878af19c20d220b2213e96618b5b784644da0dfceb639cbba8685a38091dd4ba285026d912b2ba97b592d06a1a8600f04149ac6c69e5714670275639357b2f2b40bc1180ac613a54429a17b81eb7d845ec5b4a6d31eea4de29e4591425a6ec94789370fff872352118768a6e477c3fc5978f7ffd430a50a201276faad56db177dab31e4d592c9156551bf4e472b43f0783b5848f5f51650dbc4e3da1d454f93004415f8dd454ff87997a351853d24123e6ff9c84a4193ef53c77b742204cf94370d3336d7c88b768a3d2766346801efade0baa37964c4fd10003f48fb51ccf669c146a8edf0ccf0353b0313684c7dd23185940b8e6387fc01e80e87a6bd219c5fd2437eb74fa7aa8e172c2a2cf33cc2e990323a8b14636906ca639c0d4c37f0735e227d48f752b72720f8961f60f3e14722b4cd3adc5fb233595929035d82d45ee4cfca3745303cea020aad4487e7bee26e34260e2783ad0fb0e6a3d38a6aa1ced141dbbc3291a7de961184c3c22f7f6235629cb59d68db14103f4db0956af921a312782052e79f0b88e0d8621966c229449dbac54637a34a519050d670b7203eb53407c24e2fe3ff2f82f57a3d266363fdab8d955a070c897eb9c807afcaca9c50ae0575e327c8158330c786750b608cd407e116b68391a743b36d3eabb05a0d4df0c723376dfb28e5d665cee44a75038ea309094446db302fcac6ebeebd8098f21a9dccf3058fc2790b28e1b752713029473a491dd76c6eb5bac47cc78e3aca0dde814f265751977a492ebf14c2c0b3a90000d9ff2137ed0fe79cc9fa2ac64d06dc1773058ebd83b746a8696e8777b3f267eb71545fb099419576d166b6b0279187f6233032b5c0e9170f699b1edeef6fa", 0xc21}], 0x1, 0x0, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x99, 0xff, 0x8000, 0x3, 0x69, 0x1, 0x1}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00')
read$hiddev(r4, &(0x7f0000000400)=""/37, 0x25)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000003c0)={0x2, "f3a1e87867bbb1b6ce403771404bf20dcf7b7ce4b97bfb336c0221ba6e428256"})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={<r6=>0x0, 0xcc, "848d49c4865b818d7b3c249b3c2b307634e01d6c01574f26a0d7636b183f8d30cebddc6c417c813886735d3f4d304bccf32e9c7078c84337a0eb7e1c6c9ad6b3027a54db0623b6a868da6544db6f397227c86921277a129cbb49760b88cf2e9f24940f9baa87ce899d110d89ccd14eadeffcb31b49d96522bff73c755d2feeb47ad9d8b4eab04057c30f09f900b30e1311561d0a5cf9538a3dd741629add1c938f990ccbeb138f756a4dc88bf3fb2b92e41a06b1c170d831655f1bc9ae01d764ec86e072d71c56a3604de0cd"}, &(0x7f0000000040)=0xd4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @remote}}, [0xe, 0x100, 0x5ba, 0xf, 0x8, 0x3, 0x1, 0x8, 0x8000, 0x8000, 0x0, 0x5, 0x5, 0x80000001, 0x81]}, &(0x7f0000000380)=0x100)
r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r7, 0x82, 0x5, &(0x7f0000002340)='hello')
socket(0x10, 0x803, 0x0)

7.512189301s ago: executing program 1 (id=7232):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000004e00), 0x81, 0x0)
writev(r1, &(0x7f0000007840)=[{&(0x7f0000005380)='F', 0x1}], 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f00000012c0)={'syztnl1\x00', r2, 0x4, 0x3c, 0x9, 0x101, 0x45, @loopback, @empty, 0x40, 0x700, 0x1, 0x4}})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c000000f248baba297069b1e4f5987448780ed12b329e335aec9ef6470a00864bdd3b161ae6e98850fa9009a7fa46640f06ceafb16974669377d60b3d6f32d3bebaff0e6c014ca6d506f9811af5fdf80b21ea09e3ae41da096e81f72c81", @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff18, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e002176820ecc76c0b0f938f1a2bd6fc37110017f"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)

7.153101876s ago: executing program 4 (id=7234):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1afc289e}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000010000000000", 0x58}], 0x1)
syz_open_procfs(0x0, 0x0)

6.333148755s ago: executing program 3 (id=7236):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x2}}}, 0x24}}, 0x8000)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
ioctl$USBDEVFS_CONTROL(r4, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x90)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r6, 0x0, 0x0)
sendto$inet(r6, &(0x7f0000000440)="abdb4be57a44953aa7d814e5cd7872787ef248346278329c136e5eceee23c7bdc6bcae641095389b1226fbe4f84f9170912e12b22c636e06d1f6b85e6c0bc4f77f0000004b6d72603de54b072ea06a12d125321575e57b213efb6b6ae60000000000", 0x62, 0xe61e2840a550f0d5, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r7 = userfaultfd(0x801)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0)

5.923968781s ago: executing program 1 (id=7237):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x100000000008)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x802)
ioctl$CEC_G_MODE(r1, 0x80046108, &(0x7f0000000040))

5.676106153s ago: executing program 1 (id=7238):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002b80), 0x0, 0x0)
shutdown(r0, 0x1)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000040)=0x80)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x202}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101401, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

4.861910242s ago: executing program 3 (id=7239):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c0100001600c7170000000000000000ff020000000000000000000000000001e000000100"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000033"], 0x10c}, 0x1, 0x0, 0x0, 0x20049080}, 0x880)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r1, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

4.773675248s ago: executing program 0 (id=7240):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x62, 0x8, 0xe6, 0x20, 0x525, 0x1080, 0x585f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x71, 0x0, 0x0, 0x4f, 0xe4, 0x3d}}]}}]}}, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x5, 0x7, 0x1, 0x11, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x80, 0x2, 0x24}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x81, 0xf}}]}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x113281, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="9900000000000000620a0c000000000007000000000000009500000000000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2480)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x44}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817008847", 0x33fe0}], 0x1}, 0x0)

4.727621719s ago: executing program 3 (id=7241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000d00)=[{0x2b}], r5, 0x1, 0x1, 0x48}}, 0x20)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000240)={&(0x7f0000000000), 0x10, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x79, &(0x7f0000000400)=ANY=[], 0x8)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r6, 0x0)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0)

4.568215078s ago: executing program 3 (id=7242):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_setup(0xc40, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x27)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
accept(r2, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000500))
r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0)
ioctl$TCSETAF(r6, 0x5408, 0x0)

4.019007008s ago: executing program 4 (id=7243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd0)
syz_usb_connect(0x2, 0x35, &(0x7f0000000080)=ANY=[], 0x0)

2.502921895s ago: executing program 1 (id=7244):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}})
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@RTM_GETNSID={0x14, 0x5a, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x2000c810) (fail_nth: 3)

2.01642568s ago: executing program 1 (id=7245):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='limits\x00')
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0xffffffed)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000004f00000066000000000000001600000000000000950000000000000018dd319ed9a5bec46d42ba8a215c4749074e08394de9a2765c2bece96e6db326cb4208d89426cb93c9511884f46cafdb732a27e078af70b2aa3503487bf19707f6955aa347e6e4"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000000)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.628354496s ago: executing program 0 (id=7247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@getlink={0x2c, 0x12, 0x2fa9ccd93d5c0297, 0x0, 0x0, {0x7}, [@IFLA_ADDRESS={0xa, 0x1, @random="4324a15b37da"}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800)
sendto(r1, &(0x7f00000002c0)="32cef8c00c110423dc2ca57ae3cef8af62de59559e799f121fe82a144c8a8d395c60f5f052d5c10defb50469a2a30a96600a3aca45e1a9713e8549bb6b49e632c523befee8cb9b893e3e15e3659934d09e4987c5e0302e9b27aca281371713dba32361e1c03d36c6bb18c2c8e519e7b2d9ab8925c4775abddf47976c2bc4fbdc04e475501ace7204904e2c8c1bb679d73641e3762e179e09c3d34c9b250eb25b158a9f4fa0c0fe1c5314d0bd80c6101ee5d7e857a3529fd1686264d177487e13b2d6", 0xc2, 0x845, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @loopback}, 0x3, 0x0, 0x4, 0x3}}, 0x80)

1.628121156s ago: executing program 2 (id=7229):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000000000000000100000000", @ANYBLOB="0300000000000000140012800b0001006d61637365630000040002800800", @ANYRES32=r2], 0x44}}, 0x0)

1.441333087s ago: executing program 0 (id=7248):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000180)=@fd={0x3, 0x1, 0x4, 0x400, 0x80000000, {0x77359400}, {0x7, 0x0, 0x7, 0x8, 0x4, 0x3, "4373e55c"}, 0x1, 0x4, {}, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x2000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.384197363s ago: executing program 2 (id=7249):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x4, 'a@ro'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$snddsp(r4, &(0x7f0000000200)="a38d", 0x2)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x7})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000300))
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x2b, 0x0, 0x4000, @void, @value}, 0x20)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2555cc93b245a776", "06a7758cddd1e7854dea36feabc4b02d", "a5a7691b", "480d9af15cd0bbe7"}, 0x28)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r7 = accept(r0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000011c40)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005f40)=""/4096, 0xc8}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES8, @ANYBLOB="00000000000004000000440000000c00990000004fc2ac0e018a2c325f1baa063b4e6071fcd25febcf1adf87289dc8961bd891f282f807b05afb85467d03a51cc717203c55c3d6a44f0c7f3eeff3818790b2ba8aede63c23a49a418a995f27168632108420bf95620ce3a400"/131], 0x24}}, 0xc001)
sendmmsg$alg(r7, &(0x7f0000003180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x0)

1.214240297s ago: executing program 0 (id=7250):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c0100001600c7170000000000000000ff020000000000000000000000000001e000000100"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000033"], 0x10c}, 0x1, 0x0, 0x0, 0x20049080}, 0x880)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r1, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

1.113808866s ago: executing program 3 (id=7251):
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0)
setxattr$incfs_size(&(0x7f00000023c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = io_uring_setup(0x1cd7, &(0x7f0000000400)={0x0, 0xa1a5, 0x400, 0x2, 0x354, 0x0, r0})
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000002b)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', <r6=>0x0, 0x7800, 0x7800, 0x2, 0xfffffff9, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x68, 0x0, 0x7, 0x0, 0x0, @loopback, @private=0x7, {[@rr={0x7, 0xb, 0xf7, [@remote, @broadcast]}, @timestamp={0x44, 0x18, 0x4c, 0x0, 0x4, [0x0, 0x100, 0x9, 0xe6, 0x2]}, @noop, @cipso={0x86, 0xc, 0x2, [{0x0, 0x6, "7904358b"}]}]}}}}})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='consume_skb\x00', r10}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000030c000000000000000000000000296abee23844c6ab4e3b0e5c682fab35c479f54a3be92c0542ab7263b61aa820cac65a04472bfc07000000000000004e721fe2700b12ac43e348eca8daa1de1190eaa798932276b807ff9aece04d552bcd072c9b0a6e2daa6880fa55804682dd5d", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010065727370616e0000240002800600"], 0x54}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb31c8534a3fe244d}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="040025bd7000ff010000020000000800020002000000280001800500020000000000050002000600000014000400200100000000000000000000000000004c000180140004000000000000000000000000000000000008000700", @ANYRES32=r6, @ANYBLOB="0800030000000000060001000a00000014000400fc02000000000000000000000000000008000700", @ANYRES32=r8, @ANYBLOB="050005000480060001baa3d64b7dda2fcb94e0000a00000014000400fee3927e752cdab3060000002bbbca41f785b178000000000000000000000000becddfe764a2ccd5d3dfe4182c49f6f7c1bec0e6e9ee14f3d3e9a4a2870b899bbe1f9f97305cf11941423ba68ee6e49252ee0f451253fca118bdae7959b124c69c5485a3162bcf4c19c7c68616be273f7bdc4cf282197215f242d86fa909899313c12a8021fc4aefc675103df03a1114de1b00"/184], 0xcc}}, 0x81)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x368, 0xd0, 0x0, 0x1b0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) (fail_nth: 3)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r11 = io_uring_setup(0x523a, &(0x7f0000000000)={0x0, 0x8f67, 0x0, 0x0, 0x0, 0x0, r2})
io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0)
close_range(r11, 0xffffffffffffffff, 0x0)

1.034544561s ago: executing program 0 (id=7252):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f000000be00)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fedb5f250c00000008000300ed0400792019b2caa97be6574b00c6d2e43c065f168d5ae9b0fdeba1bc6faa2eb0fded31bf403804bf436ff04d53f65d2cde202cb3a315e0368125651503393e1190cb68083eb139d5f1214ec2e86bc7dfe505b45e5703a0a59711f56fdcc6", @ANYRES32=r4, @ANYBLOB="0c009900010000804c000000040028000a00060008021100000100000500080004000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4890)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x200, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "d2c4924dc64c3b6e6f00", <r6=>0xffffffffffffffff})
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0))
ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000040)={0x1})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000040a00000000050000000000000000004e2cfe8aa655d48b12149f85582947903d50374e06b83eddc720fcbbfd6895deff3d9b73805bf3d3d1f9d0ea0bca744a7f0fd6d773e3d6524e73749eeb2364b3f2e0cd213030ace14d6ed687b9a36057135d64d66f0c020ae9fcf2d349c92ec2dfc55f38fe10c0d906e3d81b9d52"], 0x14}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x9}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8841}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'limit\x00'}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r12)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000390400000000000000", @ANYRES32, @ANYBLOB="030400ec1613b332ee998539259e0db13800000000001c0012800b00010062726964676500000c00028005002a000100db4ba8f23ae13f2265345d8cd2b5a3"], 0x3c}}, 0x24000004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @private1}}}}}}, 0x0)

574.989894ms ago: executing program 4 (id=7253):
r0 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0) (async)
landlock_restrict_self(r1, 0x0)
r2 = syz_pidfd_open(r0, 0x0)
setns(r2, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000260000000080000001000000c4350000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05005b220000000000000100"/28], 0x50)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x0, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x0, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
syz_io_uring_setup(0x31b2, &(0x7f0000000340)={0x0, 0xdab4, 0x200, 0x2, 0x2ab}, &(0x7f00000003c0), &(0x7f0000000400)) (async)
r6 = syz_io_uring_setup(0x31b2, &(0x7f0000000340)={0x0, 0xdab4, 0x200, 0x2, 0x2ab}, &(0x7f00000003c0), &(0x7f0000000400))
io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000300)={&(0x7f0000001000)={[{&(0x7f0000000280)="32c58388c9f8d2ded98f8ba7c558a810ba889541dd01ac54703c1e1595c14750056c15eb52797a58bcd022322bfb3b6c0e9c76cd9f1f24e5812beef58f4380b7526065740bda990c16cc178270b3a79fdb98701c2dd45c4e66ca2eae0755543ba1e26a284dcd9574686c2b651d15097d2ba25a15e0f49c655a42fc7331510d", 0x7f, 0x4}]}, 0x1, 0x4}, 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/savu', 0x0, 0x0) (async)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/savu', 0x0, 0x0)
getdents64(r7, &(0x7f00000000c0)=""/192, 0xe182) (async)
getdents64(r7, &(0x7f00000000c0)=""/192, 0xe182)
ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x7)
bind$tipc(r4, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10)
ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000004000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r9, &(0x7f00000021c0)={0x2020}, 0x2020) (async)
read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r9, &(0x7f0000000600)={0x50, 0x0, r10, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r9, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff0002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000acfb1bf200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079b1e5040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x18f850c3b9076dc2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
dup3(r8, r9, 0x0)
bind$tipc(r5, 0x0, 0x0) (async)
bind$tipc(r5, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000480), &(0x7f0000000180)='%+9llu \x00', 0x2}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000480), &(0x7f0000000180)='%+9llu \x00', 0x2}, 0x20)

517.477109ms ago: executing program 3 (id=7254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
r4 = dup(r2)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', <r5=>0x0})
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x80000020)
mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
rename(0x0, &(0x7f0000000100)='./bus\x00')
r7 = syz_open_procfs$userns(0x0, &(0x7f0000000400))
setns(r7, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000140)="d0b4163e96457321d877d01ac22c", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3c}, @fda={0x66646185, 0xa, 0x1, 0xf}, @flat=@handle={0x73682a85, 0x5, 0x3}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}}], 0x1e, 0x0, &(0x7f00000000c0)="85e3ec4156534010c174d1c903d5450141673220864a1d8831c37c1f54b9"})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
connect$inet(r9, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c200000000000000000008004d0000400000000000119078ac1414bbe0000001440c7733ac1e0101000003ff44142080000000800000000f000000050000001500004e20000c907801000000f715ec86dc65d8893dc81c772865b16f39ec8c49e4551869f3d46dad934663bab569d680d528142e30b6635bec0d0e1da506536e6b5297c16e673d25e643befa56f1072319e4408f15bc4907f1b21a129694355857190ce0de3baff41e78d3b78cd101d385740ac8bd9cbb83950379fcfff9eadd4651b474dd3d74b30e85fba09487590469a94b4ffe08"], 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r11, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c)
listen(r11, 0x100101)
r12 = accept4(r11, 0x0, 0x0, 0x0)
listen(r12, 0x7)

353.524522ms ago: executing program 2 (id=7255):
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4)
connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10)
write$binfmt_misc(r2, &(0x7f0000000080), 0x3a7)
sendto$inet(r2, 0x0, 0x0, 0x40080, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)='~', 0x1}], 0x1)
sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x1d4c, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r0, 0x0)

260.240857ms ago: executing program 4 (id=7256):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x62, 0x8, 0xe6, 0x20, 0x525, 0x1080, 0x585f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x71, 0x0, 0x0, 0x4f, 0xe4, 0x3d}}]}}]}}, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x5, 0x7, 0x1, 0x11, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x80, 0x2, 0x24}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x81, 0xf}}]}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x113281, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="9900000000000000620a0c000000000007000000000000009500000000000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2480)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x44}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817008847", 0x33fe0}], 0x1}, 0x0)

215.342591ms ago: executing program 2 (id=7257):
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000000340))
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffffffffffffffff, 0x200000)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x4, 0x0, 0x8})
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10)

92.27974ms ago: executing program 2 (id=7258):
r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2000)
ioctl$EVIOCGVERSION(r0, 0x5452, &(0x7f0000002200)=""/188)
socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x3, 0x84)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x3, 0xfffd, 0x0, 0x2, 0x7, 0x9]}, &(0x7f0000000040)=0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f000000ab40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8085}], 0x1, 0x0)
io_setup(0xff, &(0x7f0000000380)=<r7=>0x0)
io_submit(r7, 0x0, &(0x7f0000001440))
unshare(0x4000400)

0s ago: executing program 0 (id=7259):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES64], 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a02, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x22000, 0x0)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001b8600a65cfac83462"], 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0x3)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000000)={0x7, "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"})
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000400)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x9, 0x9, 0x4, 0xffffffff, 0x6, 0xda, 0x42ca6b21, 0x1b}, &(0x7f0000000480)={0x1, 0xb9c, 0xffffffff, 0x8, 0x6, 0x5, 0xd, 0x9}, &(0x7f0000000580)={0x5, 0x6, 0x400, 0x1ff, 0x9, 0x1a19, 0x10001, 0x6}, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000640)={&(0x7f0000000600)={[0x11d]}, 0x8})
bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x3}}, 0x10)
bind$tipc(r3, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[{0x1, 0x2, 0x9, 0xc}, {0x0, 0x3, 0x1, 0x4}, {0x2, 0x3, 0xd, 0x9}, {0x2, 0x3, 0x9, 0x8}, {0x0, 0x3, 0x3, 0x8}, {0x5, 0x5, 0xa, 0x3}, {0x4, 0x2, 0x4, 0xa}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xd6c9, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0)
splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0)

kernel console output (not intermixed with test programs):

7dff9
[ 2341.941393][ T3852] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007
[ 2341.949374][ T3852] RBP: 00007fb255cc5090 R08: 00000000000005b8 R09: 0000000000000000
[ 2341.957354][ T3852] R10: 00000000200006c0 R11: 0000000000000246 R12: 0000000000000001
[ 2341.965333][ T3852] R13: 0000000000000000 R14: 00007fb255135f80 R15: 00007fb25525fa28
[ 2341.973323][ T3852]  </TASK>
[ 2342.060348][ T3865] FAULT_INJECTION: forcing a failure.
[ 2342.060348][ T3865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2342.077484][ T3865] CPU: 0 UID: 0 PID: 3865 Comm: syz.3.6825 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2342.088217][ T3865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2342.098290][ T3865] Call Trace:
[ 2342.101583][ T3865]  <TASK>
[ 2342.104522][ T3865]  dump_stack_lvl+0x241/0x360
[ 2342.109210][ T3865]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2342.114421][ T3865]  ? __pfx__printk+0x10/0x10
[ 2342.119016][ T3865]  ? __pfx_lock_release+0x10/0x10
[ 2342.124060][ T3865]  should_fail_ex+0x3b0/0x4e0
[ 2342.128752][ T3865]  _copy_from_user+0x2f/0xe0
[ 2342.133350][ T3865]  copy_msghdr_from_user+0xae/0x680
[ 2342.138552][ T3865]  ? __pfx___might_resched+0x10/0x10
[ 2342.143841][ T3865]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2342.149675][ T3865]  ? rcu_is_watching+0x15/0xb0
[ 2342.154449][ T3865]  ? __might_fault+0xaa/0x120
[ 2342.159135][ T3865]  __sys_sendmmsg+0x36d/0x730
[ 2342.163823][ T3865]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2342.169037][ T3865]  ? __pfx_lock_release+0x10/0x10
[ 2342.174078][ T3865]  ? kstrtouint_from_user+0x128/0x190
[ 2342.179475][ T3865]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 2342.185377][ T3865]  ? ksys_write+0x229/0x2b0
[ 2342.189898][ T3865]  ? __pfx_lock_release+0x10/0x10
[ 2342.194933][ T3865]  ? vfs_write+0x7bf/0xc90
[ 2342.199352][ T3865]  ? kmem_cache_free+0x1a2/0x420
[ 2342.204297][ T3865]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 2342.209937][ T3865]  ? __fget_files+0x3f3/0x470
[ 2342.214624][ T3865]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 2342.220650][ T3865]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 2342.226985][ T3865]  ? do_syscall_64+0x100/0x230
[ 2342.231779][ T3865]  __x64_sys_sendmmsg+0xa0/0xb0
[ 2342.236656][ T3865]  do_syscall_64+0xf3/0x230
[ 2342.241194][ T3865]  ? clear_bhb_loop+0x35/0x90
[ 2342.245891][ T3865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2342.251807][ T3865] RIP: 0033:0x7ff77f37dff9
[ 2342.256229][ T3865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2342.275854][ T3865] RSP: 002b:00007ff780180038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2342.284322][ T3865] RAX: ffffffffffffffda RBX: 00007ff77f535f80 RCX: 00007ff77f37dff9
[ 2342.292306][ T3865] RDX: 0000000004000095 RSI: 0000000020005240 RDI: 0000000000000004
[ 2342.300281][ T3865] RBP: 00007ff780180090 R08: 0000000000000000 R09: 0000000000000000
[ 2342.308267][ T3865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2342.316244][ T3865] R13: 0000000000000000 R14: 00007ff77f535f80 R15: 00007ff77f65fa28
[ 2342.324237][ T3865]  </TASK>
[ 2342.695928][T20229] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 2342.711862][ T3878] netlink: 'syz.1.6874': attribute type 1 has an invalid length.
[ 2342.719867][ T3878] netlink: 71 bytes leftover after parsing attributes in process `syz.1.6874'.
[ 2342.755028][ T3878] openvswitch: netlink: Actions may not be safe on all matching packets
[ 2342.876476][T20229] usb 4-1: Using ep0 maxpacket: 8
[ 2342.887839][T20229] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2342.897147][T20229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2342.914625][T20229] usb 4-1: Product: syz
[ 2342.924958][T20229] usb 4-1: Manufacturer: syz
[ 2342.929833][T20229] usb 4-1: SerialNumber: syz
[ 2342.947531][T20229] usb 4-1: config 0 descriptor??
[ 2343.183474][T20229] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2343.828193][T20229] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2343.845651][T20229] usb 4-1: USB disconnect, device number 92
[ 2343.972774][ T3900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2343.991047][ T3900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2344.126808][ T3900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2344.175176][ T3900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2344.536071][T11986] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 2344.733968][T11986] usb 2-1: config 0 has no interfaces?
[ 2344.741760][T11986] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2344.760875][T11986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2344.777795][T11986] usb 2-1: Product: syz
[ 2344.784993][T11986] usb 2-1: Manufacturer: syz
[ 2344.795408][T11986] usb 2-1: SerialNumber: syz
[ 2344.796064][   T46] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 2344.893970][T11986] usb 2-1: config 0 descriptor??
[ 2344.967635][   T46] usb 4-1: Using ep0 maxpacket: 8
[ 2344.974802][   T46] usb 4-1: too many configurations: 9, using maximum allowed: 8
[ 2345.096101][   T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2345.107470][   T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2345.122222][   T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2345.156698][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[ 2345.163132][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.188064][   T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2345.203163][   T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2345.250319][   T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2345.261060][   T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2345.297417][   T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2345.315263][   T46] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[ 2345.332809][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=23
[ 2345.345926][   T46] usb 4-1: SerialNumber: syz
[ 2345.362978][   T46] usb 4-1: config 0 descriptor??
[ 2346.284510][ T3948] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2347.448118][ T1053] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2347.556954][ T5247] usb 2-1: USB disconnect, device number 93
[ 2347.577395][    T8] usb 4-1: USB disconnect, device number 93
[ 2347.633529][ T1053] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2347.813698][ T1053] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2347.874230][T17643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2347.886120][T17643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2347.896292][T17643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2347.907710][T17643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2347.931921][T17643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2347.933936][ T1053] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2347.950391][T17643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2348.105974][    T8] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 2348.169542][ T1053] bridge_slave_1: left allmulticast mode
[ 2348.175241][ T1053] bridge_slave_1: left promiscuous mode
[ 2348.185727][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2348.195043][ T1053] bridge_slave_0: left allmulticast mode
[ 2348.206233][ T1053] bridge_slave_0: left promiscuous mode
[ 2348.212099][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2348.247239][    T8] usb 4-1: device descriptor read/64, error -71
[ 2348.485975][    T8] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 2348.630195][    T8] usb 4-1: device descriptor read/64, error -71
[ 2348.712086][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2348.724813][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2348.736698][ T1053] bond0 (unregistering): Released all slaves
[ 2348.749987][ T3978] chnl_net:caif_netlink_parms(): no params data found
[ 2348.757681][    T8] usb usb4-port1: attempt power cycle
[ 2348.929022][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2348.937310][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2348.944553][ T3978] bridge_slave_0: entered allmulticast mode
[ 2348.955912][ T3978] bridge_slave_0: entered promiscuous mode
[ 2348.971286][ T3978] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2348.979219][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2348.986819][ T3978] bridge_slave_1: entered allmulticast mode
[ 2349.004658][ T3978] bridge_slave_1: entered promiscuous mode
[ 2349.104148][ T3978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2349.125991][    T8] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 2349.147483][ T3978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2349.162453][    T8] usb 4-1: device descriptor read/8, error -71
[ 2349.235923][T26444] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 2349.293453][ T1053] hsr_slave_0: left promiscuous mode
[ 2349.305680][ T1053] hsr_slave_1: left promiscuous mode
[ 2349.313268][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2349.328883][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2349.342560][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2349.352346][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2349.416202][    T8] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 2349.447620][T26444] usb 2-1: config 0 has no interfaces?
[ 2349.461194][ T1053] veth1_macvtap: left promiscuous mode
[ 2349.479398][ T1053] veth0_macvtap: left promiscuous mode
[ 2349.485858][ T1053] veth1_vlan: left promiscuous mode
[ 2349.501893][ T1053] veth0_vlan: left promiscuous mode
[ 2349.508190][    T8] usb 4-1: device descriptor read/8, error -71
[ 2349.515737][T26444] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2349.528487][T26444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2349.583479][T26444] usb 2-1: Product: syz
[ 2349.626467][    T8] usb usb4-port1: unable to enumerate USB device
[ 2349.652004][T26444] usb 2-1: Manufacturer: syz
[ 2349.698851][T26444] usb 2-1: SerialNumber: syz
[ 2349.756341][T26444] usb 2-1: config 0 descriptor??
[ 2350.005940][T13914] Bluetooth: hci2: command tx timeout
[ 2350.242805][ T3997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2351.311976][ T1053] team0 (unregistering): Port device team_slave_1 removed
[ 2351.453134][ T1053] team0 (unregistering): Port device team_slave_0 removed
[ 2352.076038][T13914] Bluetooth: hci2: command tx timeout
[ 2352.502945][T25140] usb 2-1: USB disconnect, device number 94
[ 2353.109334][ T3978] team0: Port device team_slave_0 added
[ 2353.189068][ T1572] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 2353.230361][ T3978] team0: Port device team_slave_1 added
[ 2353.337944][ T4046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6931'.
[ 2353.367319][ T1572] usb 2-1: Using ep0 maxpacket: 16
[ 2353.376957][ T1572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024
[ 2353.389406][ T1572] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 2353.401937][ T1572] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2353.411256][ T1572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2353.420561][ T3978] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2353.427732][ T3978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2353.457572][ T1572] usb 2-1: Product: syz
[ 2353.461791][ T1572] usb 2-1: Manufacturer: syz
[ 2353.466512][ T1572] usb 2-1: SerialNumber: syz
[ 2353.486421][ T3978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2353.499045][ T1572] usb 2-1: config 0 descriptor??
[ 2353.506204][ T4038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 2353.518204][ T1572] hub 2-1:0.0: bad descriptor, ignoring hub
[ 2353.525097][ T1572] hub 2-1:0.0: probe with driver hub failed with error -5
[ 2353.535371][ T1572] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input217
[ 2353.557106][ T4051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6931'.
[ 2353.621025][ T4051] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 2353.639284][ T4051] bond1: (slave batadv1): Enslaving as an active interface with an up link
[ 2353.695218][ T4046] bond1 (unregistering): (slave batadv1): Releasing backup interface
[ 2353.746714][ T4046] bond1 (unregistering): Released all slaves
[ 2353.831520][ T3978] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2353.845617][ T3978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2353.934611][ T3978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2354.062020][ T3978] hsr_slave_0: entered promiscuous mode
[ 2354.103085][ T3978] hsr_slave_1: entered promiscuous mode
[ 2354.117782][ T3978] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2354.159556][ T3978] Cannot create hsr debugfs directory
[ 2354.166014][T13914] Bluetooth: hci2: command tx timeout
[ 2354.972213][ T4095] FAULT_INJECTION: forcing a failure.
[ 2354.972213][ T4095] name failslab, interval 1, probability 0, space 0, times 0
[ 2354.985331][ T4095] CPU: 0 UID: 0 PID: 4095 Comm: syz.0.6941 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2354.996007][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2355.006074][ T4095] Call Trace:
[ 2355.009355][ T4095]  <TASK>
[ 2355.012296][ T4095]  dump_stack_lvl+0x241/0x360
[ 2355.016991][ T4095]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2355.022231][ T4095]  ? __pfx__printk+0x10/0x10
[ 2355.026870][ T4095]  ? __pfx_validate_chain+0x10/0x10
[ 2355.032116][ T4095]  should_fail_ex+0x3b0/0x4e0
[ 2355.036838][ T4095]  should_failslab+0xac/0x100
[ 2355.041528][ T4095]  ? __alloc_skb+0x1c3/0x440
[ 2355.046131][ T4095]  kmem_cache_alloc_node_noprof+0x71/0x320
[ 2355.051962][ T4095]  __alloc_skb+0x1c3/0x440
[ 2355.056392][ T4095]  ? __pfx___alloc_skb+0x10/0x10
[ 2355.061347][ T4095]  ? __pfx_validate_chain+0x10/0x10
[ 2355.066560][ T4095]  alloc_skb_with_frags+0xc3/0x820
[ 2355.071697][ T4095]  sock_alloc_send_pskb+0x91a/0xa60
[ 2355.076920][ T4095]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 2355.082652][ T4095]  ? __lock_acquire+0x1384/0x2050
[ 2355.087704][ T4095]  __ip6_append_data+0x2b06/0x40a0
[ 2355.092833][ T4095]  ? ip6_mtu+0x81/0x3f0
[ 2355.097007][ T4095]  ? __pfx_icmpv6_getfrag+0x10/0x10
[ 2355.102309][ T4095]  ? __pfx___ip6_append_data+0x10/0x10
[ 2355.107769][ T4095]  ? ip6_setup_cork+0x9fd/0xfb0
[ 2355.112623][ T4095]  ip6_append_data+0x264/0x3a0
[ 2355.117392][ T4095]  ? __pfx_icmpv6_getfrag+0x10/0x10
[ 2355.122603][ T4095]  ? icmp6_send+0xbb8/0x2220
[ 2355.127202][ T4095]  icmp6_send+0x1600/0x2220
[ 2355.131716][ T4095]  ? icmp6_send+0xbb8/0x2220
[ 2355.136332][ T4095]  ? __pfx_icmp6_send+0x10/0x10
[ 2355.141216][ T4095]  ? print_usage_bug+0x254/0x8b0
[ 2355.146176][ T4095]  ? ip6_neigh_lookup+0x13c/0x580
[ 2355.151230][ T4095]  ? ip6_neigh_lookup+0x13c/0x580
[ 2355.156268][ T4095]  ? ip6_neigh_lookup+0x13c/0x580
[ 2355.161324][ T4095]  ip6_link_failure+0x3c/0x4f0
[ 2355.166117][ T4095]  ? ip6_tnl_xmit+0xf7d/0x2970
[ 2355.170892][ T4095]  ? __pfx_ip6_link_failure+0x10/0x10
[ 2355.176279][ T4095]  ip6_tnl_xmit+0xf86/0x2970
[ 2355.180898][ T4095]  ? __pfx_ip6_tnl_xmit+0x10/0x10
[ 2355.185942][ T4095]  ? __pfx_make_kuid+0x10/0x10
[ 2355.190719][ T4095]  ? iptunnel_handle_offloads+0x31b/0x650
[ 2355.196456][ T4095]  ip6_tnl_start_xmit+0xb94/0x1430
[ 2355.201586][ T4095]  ? __pfx_ip6_tnl_start_xmit+0x10/0x10
[ 2355.207139][ T4095]  ? netif_skb_features+0x8b6/0xc90
[ 2355.212430][ T4095]  ? validate_xmit_skb+0x9f9/0x1120
[ 2355.217633][ T4095]  dev_hard_start_xmit+0x27a/0x7e0
[ 2355.222753][ T4095]  __dev_queue_xmit+0x1b11/0x3ed0
[ 2355.227788][ T4095]  ? __dev_queue_xmit+0x2da/0x3ed0
[ 2355.232899][ T4095]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 2355.238888][ T4095]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 2355.244267][ T4095]  ? neigh_connected_output+0x1d5/0x450
[ 2355.249842][ T4095]  ? read_seqbegin+0x157/0x2b0
[ 2355.254611][ T4095]  ? lockdep_hardirqs_on+0x99/0x150
[ 2355.259840][ T4095]  ? read_seqbegin+0x208/0x2b0
[ 2355.264623][ T4095]  ? __pfx_read_seqbegin+0x10/0x10
[ 2355.269760][ T4095]  ? __pfx_lock_acquire+0x10/0x10
[ 2355.274798][ T4095]  ? neigh_connected_output+0x3a7/0x450
[ 2355.280367][ T4095]  ip6_finish_output2+0x1001/0x1730
[ 2355.285639][ T4095]  ? ip6_finish_output2+0x75c/0x1730
[ 2355.290951][ T4095]  ? __pfx_ip6_finish_output2+0x10/0x10
[ 2355.296519][ T4095]  ip6_fragment+0x164e/0x22c0
[ 2355.301219][ T4095]  ? __pfx_ip6_finish_output2+0x10/0x10
[ 2355.306784][ T4095]  ? __pfx_ip6_fragment+0x10/0x10
[ 2355.311837][ T4095]  ? __ip6_local_out+0x7c1/0x800
[ 2355.316805][ T4095]  ? ip6_mtu+0x81/0x3f0
[ 2355.320985][ T4095]  ip6_finish_output+0x2b8/0x810
[ 2355.325947][ T4095]  ip6_send_skb+0x1b1/0x3b0
[ 2355.330460][ T4095]  ? ip6_send_skb+0xfd/0x3b0
[ 2355.335066][ T4095]  rawv6_push_pending_frames+0x75c/0x9e0
[ 2355.340715][ T4095]  ? __pfx_rawv6_push_pending_frames+0x10/0x10
[ 2355.346905][ T4095]  ? __pfx_raw6_getfrag+0x10/0x10
[ 2355.351937][ T4095]  rawv6_sendmsg+0x19c7/0x23c0
[ 2355.356728][ T4095]  ? __pfx_rawv6_sendmsg+0x10/0x10
[ 2355.361872][ T4095]  ? aa_sk_perm+0x96d/0xab0
[ 2355.366395][ T4095]  ? __pfx_aa_sk_perm+0x10/0x10
[ 2355.371259][ T4095]  ? inet_sendmsg+0x330/0x390
[ 2355.375954][ T4095]  __sock_sendmsg+0x1a6/0x270
[ 2355.380681][ T4095]  ____sys_sendmsg+0x52a/0x7e0
[ 2355.385455][ T4095]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2355.390753][ T4095]  __sys_sendmsg+0x292/0x380
[ 2355.395350][ T4095]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2355.400472][ T4095]  ? __pfx_vfs_write+0x10/0x10
[ 2355.405260][ T4095]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 2355.411617][ T4095]  ? do_syscall_64+0x100/0x230
[ 2355.416395][ T4095]  ? do_syscall_64+0xb6/0x230
[ 2355.421093][ T4095]  do_syscall_64+0xf3/0x230
[ 2355.425626][ T4095]  ? clear_bhb_loop+0x35/0x90
[ 2355.430312][ T4095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2355.436217][ T4095] RIP: 0033:0x7f9a1e37dff9
[ 2355.440640][ T4095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2355.460249][ T4095] RSP: 002b:00007f9a1f1ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2355.468669][ T4095] RAX: ffffffffffffffda RBX: 00007f9a1e535f80 RCX: 00007f9a1e37dff9
[ 2355.476649][ T4095] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000003
[ 2355.484626][ T4095] RBP: 00007f9a1f1ba090 R08: 0000000000000000 R09: 0000000000000000
[ 2355.492594][ T4095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2355.500564][ T4095] R13: 0000000000000000 R14: 00007f9a1e535f80 R15: 00007f9a1e65fa28
[ 2355.508549][ T4095]  </TASK>
[ 2355.513091][ T4032] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2355.552724][ T4032] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 2355.866834][ T4032] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2355.920786][ T4032] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 2356.085189][ T4032] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2356.111724][ T4032] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 2356.252224][T13914] Bluetooth: hci2: command tx timeout
[ 2356.305556][ T4032] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2356.325678][ T4032] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 2356.368794][ T3978] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2356.377803][ T3978] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2356.388720][ T3978] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2356.411099][ T3978] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2356.529544][ T3978] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2356.609064][ T3978] 8021q: adding VLAN 0 to HW filter on device team0
[ 2356.631124][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2356.638270][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2356.710807][T26416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2356.717948][T26416] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2356.880358][ T3978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2356.936097][ T3978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2357.063292][ T3978] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2357.096445][    T8] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 2357.168291][ T3978] veth0_vlan: entered promiscuous mode
[ 2357.203906][ T3978] veth1_vlan: entered promiscuous mode
[ 2357.246788][    T8] usb 4-1: Using ep0 maxpacket: 16
[ 2357.266697][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024
[ 2357.326142][    T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 2357.339043][ T3978] veth0_macvtap: entered promiscuous mode
[ 2357.362342][ T3978] veth1_macvtap: entered promiscuous mode
[ 2357.378696][    T8] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2357.395952][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2357.441294][    T8] usb 4-1: Product: syz
[ 2357.458266][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2357.468951][    T8] usb 4-1: Manufacturer: syz
[ 2357.473585][    T8] usb 4-1: SerialNumber: syz
[ 2357.495225][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2357.507216][    T8] usb 4-1: config 0 descriptor??
[ 2357.514901][ T4112] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 2357.527485][    T8] hub 4-1:0.0: bad descriptor, ignoring hub
[ 2357.533540][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2357.544448][    T8] hub 4-1:0.0: probe with driver hub failed with error -5
[ 2357.554563][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2357.564938][    T8] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input218
[ 2357.579496][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2357.596202][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2357.596702][ T5247] usb 2-1: reset high-speed USB device number 95 using dummy_hcd
[ 2357.645999][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2357.665901][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2357.705977][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2357.794094][ T4125] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 2357.803692][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2357.848498][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2357.882020][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2357.895324][ T3978] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2357.929335][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2357.942898][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2357.964367][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2357.987665][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2358.003627][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2358.014286][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2358.024584][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2358.035172][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2358.045077][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2358.055707][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2358.065884][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2358.078179][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2358.089475][ T3978] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2358.101080][ T3978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2358.109943][ T3978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2358.118742][ T3978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2358.127645][ T3978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2358.343296][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2358.407646][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2358.568019][T26416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2358.604610][T26416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2359.354878][ T1598] bridge_slave_1: left allmulticast mode
[ 2359.361731][ T1598] bridge_slave_1: left promiscuous mode
[ 2359.389762][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2359.456990][ T1598] bridge_slave_0: left allmulticast mode
[ 2359.534035][ T1598] bridge_slave_0: left promiscuous mode
[ 2359.545303][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2359.856837][T20229] usb 4-1: USB disconnect, device number 98
[ 2361.032342][ T4186] openvswitch: netlink: Actions may not be safe on all matching packets
[ 2361.596620][T11986] usb 2-1: USB disconnect, device number 95
[ 2361.773999][ T4197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2361.800106][ T4197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2361.813719][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2361.828658][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2361.854127][ T1598] bond0 (unregistering): Released all slaves
[ 2362.465932][   T29] audit: type=1326 audit(1729271926.190:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2362.570507][   T29] audit: type=1326 audit(1729271926.190:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2362.671882][   T29] audit: type=1326 audit(1729271926.230:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2362.724925][   T29] audit: type=1326 audit(1729271926.230:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2362.778366][ T4211] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2362.785846][ T4212] openvswitch: netlink: Actions may not be safe on all matching packets
[ 2362.798830][ T1598] hsr_slave_0: left promiscuous mode
[ 2362.832670][ T1598] hsr_slave_1: left promiscuous mode
[ 2362.847152][   T29] audit: type=1326 audit(1729271926.230:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2362.869881][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2362.889894][   T29] audit: type=1326 audit(1729271926.230:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2362.927693][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2362.943583][   T29] audit: type=1326 audit(1729271926.230:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2362.967122][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2362.987503][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2363.043425][ T1598] veth1_macvtap: left promiscuous mode
[ 2363.048370][   T29] audit: type=1326 audit(1729271926.230:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2363.096662][ T5247] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 2363.126084][ T1598] veth0_macvtap: left promiscuous mode
[ 2363.131688][ T1598] veth1_vlan: left promiscuous mode
[ 2363.137382][   T29] audit: type=1326 audit(1729271926.230:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2363.168821][ T1598] veth0_vlan: left promiscuous mode
[ 2363.205756][   T29] audit: type=1326 audit(1729271926.230:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4201 comm="syz.1.6957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9365b7dff9 code=0x7ffc0000
[ 2363.273493][ T5247] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2363.304237][ T5247] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2363.326663][ T5247] usb 4-1: can't read configurations, error -61
[ 2363.350645][ T4219] netlink: 'syz.2.6961': attribute type 16 has an invalid length.
[ 2363.468098][ T5247] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 2363.646914][ T5247] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2363.669403][ T5247] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2363.677481][ T5247] usb 4-1: can't read configurations, error -61
[ 2363.691861][ T5247] usb usb4-port1: attempt power cycle
[ 2364.055977][ T5247] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 2364.083305][ T5247] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2364.103167][ T5247] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2364.110935][ T5247] usb 4-1: can't read configurations, error -61
[ 2364.232303][ T1598] team0 (unregistering): Port device team_slave_1 removed
[ 2364.252167][ T5247] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 2364.287587][ T5247] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2364.307769][ T5247] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2364.317243][ T5247] usb 4-1: can't read configurations, error -61
[ 2364.334370][ T5247] usb usb4-port1: unable to enumerate USB device
[ 2364.680335][ T1598] team0 (unregistering): Port device team_slave_0 removed
[ 2365.847371][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6961'.
[ 2365.860346][ T4222] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 2366.267276][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2366.325085][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2366.338257][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2366.361708][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2366.377979][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2366.388785][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2366.561565][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6973'.
[ 2366.574093][ T4253] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2366.583132][ T4253] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2366.591937][ T4253] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2366.600709][ T4253] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2366.616252][ T4253] vxlan0: entered promiscuous mode
[ 2366.677594][ T5247] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 2366.741072][ T4253] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0
[ 2366.845916][ T5247] usb 2-1: Using ep0 maxpacket: 32
[ 2366.859371][ T5247] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[ 2366.867942][ T5247] usb 2-1: config 0 has no interface number 0
[ 2366.877761][ T5247] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f
[ 2366.887998][ T5247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2366.904218][ T5247] usb 2-1: Product: syz
[ 2366.908529][ T5247] usb 2-1: Manufacturer: syz
[ 2366.913226][ T5247] usb 2-1: SerialNumber: syz
[ 2366.931243][ T5247] usb 2-1: config 0 descriptor??
[ 2366.962036][ T5247] net1080 2-1:0.113: probe with driver net1080 failed with error -22
[ 2367.180124][ T4250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2367.231946][ T4250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2367.273219][ T4250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2367.309715][ T4250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2367.400951][ T4250] netlink: 'syz.1.6972': attribute type 9 has an invalid length.
[ 2367.413113][ T4250] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.6972'.
[ 2367.430558][ T5247] usb 2-1: USB disconnect, device number 96
[ 2367.743279][ T4273] FAULT_INJECTION: forcing a failure.
[ 2367.743279][ T4273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2367.774533][ T4273] CPU: 0 UID: 0 PID: 4273 Comm: syz.0.6981 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2367.785264][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2367.795347][ T4273] Call Trace:
[ 2367.798632][ T4273]  <TASK>
[ 2367.801567][ T4273]  dump_stack_lvl+0x241/0x360
[ 2367.806258][ T4273]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2367.811462][ T4273]  ? __pfx__printk+0x10/0x10
[ 2367.816086][ T4273]  ? __pfx_lock_release+0x10/0x10
[ 2367.821141][ T4273]  ? aa_file_perm+0x137/0xf50
[ 2367.825848][ T4273]  ? aa_file_perm+0x3ef/0xf50
[ 2367.830541][ T4273]  should_fail_ex+0x3b0/0x4e0
[ 2367.835231][ T4273]  _copy_from_user+0x2f/0xe0
[ 2367.839831][ T4273]  snd_seq_oss_write+0x5a9/0xbb0
[ 2367.844786][ T4273]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 2367.850257][ T4273]  ? common_file_perm+0x1a6/0x210
[ 2367.855286][ T4273]  ? bpf_lsm_file_permission+0x9/0x10
[ 2367.860661][ T4273]  ? security_file_permission+0x74/0x280
[ 2367.866314][ T4273]  odev_write+0x5b/0x80
[ 2367.870496][ T4273]  ? __pfx_odev_write+0x10/0x10
[ 2367.875356][ T4273]  vfs_write+0x29c/0xc90
[ 2367.879605][ T4273]  ? kmem_cache_free+0x1a2/0x420
[ 2367.884554][ T4273]  ? __pfx_vfs_write+0x10/0x10
[ 2367.889337][ T4273]  ? __fget_files+0x29/0x470
[ 2367.893933][ T4273]  ? __fget_files+0x3f3/0x470
[ 2367.898610][ T4273]  ? __fget_files+0x29/0x470
[ 2367.903228][ T4273]  ? fdget_pos+0x19a/0x320
[ 2367.907648][ T4273]  ksys_write+0x183/0x2b0
[ 2367.911979][ T4273]  ? __pfx_ksys_write+0x10/0x10
[ 2367.916848][ T4273]  ? do_syscall_64+0x100/0x230
[ 2367.921613][ T4273]  ? do_syscall_64+0xb6/0x230
[ 2367.926295][ T4273]  do_syscall_64+0xf3/0x230
[ 2367.930807][ T4273]  ? clear_bhb_loop+0x35/0x90
[ 2367.935500][ T4273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2367.941420][ T4273] RIP: 0033:0x7f9a1e37dff9
[ 2367.945861][ T4273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2367.965511][ T4273] RSP: 002b:00007f9a1f1ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2367.973986][ T4273] RAX: ffffffffffffffda RBX: 00007f9a1e535f80 RCX: 00007f9a1e37dff9
[ 2367.981968][ T4273] RDX: 000000000000021d RSI: 0000000020000080 RDI: 0000000000000003
[ 2367.989945][ T4273] RBP: 00007f9a1f1ba090 R08: 0000000000000000 R09: 0000000000000000
[ 2367.997923][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2368.005912][ T4273] R13: 0000000000000000 R14: 00007f9a1e535f80 R15: 00007f9a1e65fa28
[ 2368.013911][ T4273]  </TASK>
[ 2368.170727][   T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2368.262788][   T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2368.399684][ T4284] IPVS: length: 4096 != 8
[ 2368.518880][   T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2368.586307][   T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2368.770670][T17643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2368.785512][T17643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2368.800588][T17643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2368.837764][T17643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2368.876622][T17643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2368.885522][T17643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2368.937084][   T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2368.988055][   T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2369.096958][   T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2369.129819][   T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2369.313627][ T4284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2369.331553][ T4284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2369.512675][ T4290] chnl_net:caif_netlink_parms(): no params data found
[ 2369.648874][   T68] bridge_slave_1: left allmulticast mode
[ 2369.654675][   T68] bridge_slave_1: left promiscuous mode
[ 2369.660728][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2369.718251][   T68] bridge_slave_0: left allmulticast mode
[ 2369.724174][   T68] bridge_slave_0: left promiscuous mode
[ 2369.730470][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2369.877633][ T4307] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2370.186116][ T2482] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 2370.430861][ T2482] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2370.463036][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2370.496051][ T2482] usb 4-1: can't read configurations, error -61
[ 2370.637006][ T2482] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 2370.863728][ T2482] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2370.887625][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2370.899337][ T2482] usb 4-1: can't read configurations, error -61
[ 2370.917739][ T2482] usb usb4-port1: attempt power cycle
[ 2370.965175][T17643] Bluetooth: hci1: command tx timeout
[ 2371.286512][ T2482] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 2371.327623][ T2482] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2371.344126][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2371.359884][ T2482] usb 4-1: can't read configurations, error -61
[ 2371.513908][ T2482] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 2371.708517][ T2482] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2371.757889][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2371.765502][ T2482] usb 4-1: can't read configurations, error -61
[ 2371.794401][ T2482] usb usb4-port1: unable to enumerate USB device
[ 2371.863370][ T4318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2371.904226][ T4318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2372.039948][ T4326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2372.041903][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2372.153931][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2372.167356][   T68] bond0 (unregistering): Released all slaves
[ 2372.178645][   T68] bond1 (unregistering): Released all slaves
[ 2372.393804][ T1572] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 2372.449683][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2372.459468][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2372.472103][ T4290] bridge_slave_0: entered allmulticast mode
[ 2372.489836][ T4290] bridge_slave_0: entered promiscuous mode
[ 2372.539826][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2372.554899][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2372.569247][ T4290] bridge_slave_1: entered allmulticast mode
[ 2372.577772][ T1572] usb 2-1: too many configurations: 97, using maximum allowed: 8
[ 2372.590095][ T1572] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2372.600776][ T4290] bridge_slave_1: entered promiscuous mode
[ 2372.611005][ T1572] usb 2-1: can't read configurations, error -61
[ 2372.776543][ T1572] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 2372.868195][   T68] hsr_slave_0: left promiscuous mode
[ 2372.936141][   T68] hsr_slave_1: left promiscuous mode
[ 2372.958427][ T1572] usb 2-1: too many configurations: 97, using maximum allowed: 8
[ 2372.987671][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2373.007681][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2373.021870][ T1572] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2373.036048][T17643] Bluetooth: hci1: command tx timeout
[ 2373.066759][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2373.110577][ T1572] usb 2-1: can't read configurations, error -61
[ 2373.136064][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2373.184791][ T1572] usb usb2-port1: attempt power cycle
[ 2373.249740][   T68] veth1_macvtap: left promiscuous mode
[ 2373.264403][   T68] veth0_macvtap: left promiscuous mode
[ 2373.272516][   T68] veth1_vlan: left promiscuous mode
[ 2373.289147][   T68] veth0_vlan: left promiscuous mode
[ 2373.575968][ T1572] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 2373.675140][ T1572] usb 2-1: too many configurations: 97, using maximum allowed: 8
[ 2373.696910][ T1572] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2373.704702][ T1572] usb 2-1: can't read configurations, error -61
[ 2373.925958][ T1572] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 2373.965972][ T5247] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 2373.994568][ T1572] usb 2-1: too many configurations: 97, using maximum allowed: 8
[ 2374.013544][ T1572] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2374.026144][ T1572] usb 2-1: can't read configurations, error -61
[ 2374.046473][ T1572] usb usb2-port1: unable to enumerate USB device
[ 2374.156261][ T5247] usb 4-1: Using ep0 maxpacket: 32
[ 2374.174782][ T5247] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[ 2374.188586][ T5247] usb 4-1: config 0 has no interface number 0
[ 2374.202100][ T5247] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f
[ 2374.221602][ T5247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2374.230127][ T5247] usb 4-1: Product: syz
[ 2374.234503][ T5247] usb 4-1: Manufacturer: syz
[ 2374.250355][ T5247] usb 4-1: SerialNumber: syz
[ 2374.257876][ T5247] usb 4-1: config 0 descriptor??
[ 2374.269018][ T5247] net1080 4-1:0.113: probe with driver net1080 failed with error -22
[ 2374.479280][ T4353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2374.512376][ T4353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2374.522528][ T4353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2374.535764][ T4353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2374.588676][ T4353] netlink: 'syz.3.6995': attribute type 9 has an invalid length.
[ 2374.596820][ T4353] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.6995'.
[ 2374.621307][ T5287] usb 4-1: USB disconnect, device number 107
[ 2374.655246][   T68] team0 (unregistering): Port device team_slave_1 removed
[ 2374.733262][   T68] team0 (unregistering): Port device team_slave_0 removed
[ 2375.116873][T17643] Bluetooth: hci1: command tx timeout
[ 2375.691805][ T4290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2375.722507][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6999'.
[ 2375.751102][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6999'.
[ 2375.805337][ T4290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2375.927564][ T4290] team0: Port device team_slave_0 added
[ 2375.942848][ T4290] team0: Port device team_slave_1 added
[ 2376.013463][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2376.031541][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2376.118230][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2376.126851][ T4290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2376.158097][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2376.165670][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2376.240551][ T4290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2376.267881][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2376.285566][ T4379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2376.421618][ T4290] hsr_slave_0: entered promiscuous mode
[ 2376.443066][ T4290] hsr_slave_1: entered promiscuous mode
[ 2376.479819][ T4290] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2376.491675][ T4290] Cannot create hsr debugfs directory
[ 2376.547631][ T4395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7006'.
[ 2377.020894][ T1572] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 2377.176076][ T1572] usb 4-1: Using ep0 maxpacket: 32
[ 2377.195973][T17643] Bluetooth: hci1: command tx timeout
[ 2377.223339][ T1572] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[ 2377.232079][ T1572] usb 4-1: config 0 has no interface number 0
[ 2377.240851][ T1572] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f
[ 2377.250195][ T1572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2377.258328][ T1572] usb 4-1: Product: syz
[ 2377.262552][ T1572] usb 4-1: Manufacturer: syz
[ 2377.267232][ T1572] usb 4-1: SerialNumber: syz
[ 2377.273546][ T1572] usb 4-1: config 0 descriptor??
[ 2377.281229][ T1572] net1080 4-1:0.113: probe with driver net1080 failed with error -22
[ 2377.524798][ T4403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2377.576373][ T4403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2377.636867][ T4403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2377.680218][ T4403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2377.739737][ T4403] netlink: 'syz.3.7008': attribute type 9 has an invalid length.
[ 2377.781174][ T4403] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.7008'.
[ 2377.813173][T11986] usb 4-1: USB disconnect, device number 108
[ 2377.841561][ T4290] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2377.861213][ T4290] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2377.881595][ T4290] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2377.907704][ T4290] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2378.054533][ T4290] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2378.132380][ T4290] 8021q: adding VLAN 0 to HW filter on device team0
[ 2378.160912][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2378.168045][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2378.189733][T26416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2378.196899][T26416] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2378.404707][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2378.587214][ T4290] veth0_vlan: entered promiscuous mode
[ 2378.598204][ T4290] veth1_vlan: entered promiscuous mode
[ 2378.706100][ T4290] veth0_macvtap: entered promiscuous mode
[ 2378.738749][ T4290] veth1_macvtap: entered promiscuous mode
[ 2378.923664][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2378.953584][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2378.963895][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2378.974515][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2378.984464][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2378.994936][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2379.004821][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2379.015289][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2379.025209][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2379.036149][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2379.047231][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2379.057697][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2379.068201][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2379.078135][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2379.088639][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2379.104217][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2379.114757][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2379.125721][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2379.136915][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2379.147010][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2379.158266][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2379.169386][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2379.180792][ T4290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2379.189623][ T4290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2379.198657][ T4290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2379.207739][ T4290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2379.561922][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2379.570390][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2379.727389][ T1598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2379.737274][ T1598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2379.850680][ T4465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7017'.
[ 2380.126406][ T4487] random: crng reseeded on system resumption
[ 2380.265998][T11986] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 2380.436675][T11986] usb 4-1: config 36 has an invalid interface number: 49 but max is 0
[ 2380.445173][T11986] usb 4-1: config 36 has an invalid descriptor of length 52, skipping remainder of the config
[ 2380.476975][T11986] usb 4-1: config 36 has no interface number 0
[ 2380.493485][T11986] usb 4-1: too many endpoints for config 36 interface 49 altsetting 56: 52, using maximum allowed: 30
[ 2380.509272][T11986] usb 4-1: config 36 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52
[ 2380.533546][T11986] usb 4-1: config 36 interface 49 has no altsetting 0
[ 2380.542329][T11986] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[ 2380.551674][T11986] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2380.560900][T11986] usb 4-1: Manufacturer: syz
[ 2380.565685][T11986] usb 4-1: SerialNumber: syz
[ 2380.826518][T11986] usb 4-1: USB disconnect, device number 109
[ 2380.981475][T25140] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 2381.156017][T25140] usb 2-1: Using ep0 maxpacket: 16
[ 2381.168837][T25140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024
[ 2381.188651][T25140] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 2381.204164][T25140] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 2381.224599][T25140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2381.233057][T25140] usb 2-1: Product: syz
[ 2381.237504][T25140] usb 2-1: Manufacturer: syz
[ 2381.242234][T25140] usb 2-1: SerialNumber: syz
[ 2381.249122][T25140] usb 2-1: config 0 descriptor??
[ 2381.258097][ T4489] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 2381.273891][T25140] hub 2-1:0.0: bad descriptor, ignoring hub
[ 2381.295884][T25140] hub 2-1:0.0: probe with driver hub failed with error -5
[ 2381.304802][T25140] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input219
[ 2381.582861][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7021'.
[ 2381.689707][ T4546] wireguard0: entered promiscuous mode
[ 2381.695570][ T4546] wireguard0: entered allmulticast mode
[ 2382.225493][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2382.578231][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2382.612121][ T4565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2383.328240][ T4581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7032'.
[ 2383.866170][ T5247] usb 2-1: USB disconnect, device number 101
[ 2384.210430][ T1572] IPVS: starting estimator thread 0...
[ 2384.220478][ T4587] tipc: Started in network mode
[ 2384.253489][ T4587] tipc: Node identity ac1414aa, cluster identity 4711
[ 2384.283286][ T4587] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2384.291959][ T4587] tipc: Enabled bearer <udp:s>, priority 10
[ 2384.305977][ T4589] IPVS: using max 17 ests per chain, 40800 per kthread
[ 2384.336505][ T4583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7033'.
[ 2384.425972][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2384.565907][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2384.705863][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2384.779317][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7036'.
[ 2384.845927][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2384.855196][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7036'.
[ 2384.904457][ T4594] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 2384.935453][ T4594] bond1: (slave batadv1): Enslaving as an active interface with an up link
[ 2384.985886][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2385.105957][ T5247] usb 4-1: new full-speed USB device number 110 using dummy_hcd
[ 2385.125882][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2385.190766][ T4601] netlink: 'syz.1.7038': attribute type 9 has an invalid length.
[ 2385.216135][ T4601] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.7038'.
[ 2385.266064][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2385.277527][ T5247] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[ 2385.303283][ T5247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2385.328056][ T5247] usb 4-1: config 0 descriptor??
[ 2385.342409][ T5247] pwc: Samsung MPC-C10 USB webcam detected.
[ 2385.405919][T25140] tipc: Node number set to 2886997162
[ 2385.545881][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2385.596557][ T5247] pwc: send_video_command error -71
[ 2385.601906][ T5247] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 2385.619321][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2385.627816][ T5247] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[ 2385.639259][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2385.655716][ T5247] usb 4-1: USB disconnect, device number 110
[ 2385.688817][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2385.701508][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2385.716702][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2385.732156][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2385.747999][ T4608] netlink: 'syz.2.7041': attribute type 9 has an invalid length.
[ 2385.773532][ T4608] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.7041'.
[ 2385.816025][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2386.145940][ T5247] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 2386.308353][ T5247] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[ 2386.325092][ T5247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2386.335705][ T4619] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7044'.
[ 2386.338626][ T5247] usb 4-1: config 0 descriptor??
[ 2386.358153][ T5247] pwc: Samsung MPC-C10 USB webcam detected.
[ 2386.752458][ T5247] pwc: recv_control_msg error -32 req 02 val 2b00
[ 2386.759711][ T5247] pwc: recv_control_msg error -32 req 02 val 2700
[ 2386.783279][ T5247] pwc: recv_control_msg error -32 req 04 val 1700
[ 2386.815657][ T5247] pwc: recv_control_msg error -32 req 02 val 2c00
[ 2386.842840][ T5247] pwc: recv_control_msg error -32 req 04 val 1000
[ 2386.867953][ T5247] pwc: recv_control_msg error -32 req 04 val 1300
[ 2386.883976][ T5247] pwc: recv_control_msg error -32 req 04 val 1400
[ 2386.908534][ T5247] pwc: recv_control_msg error -32 req 02 val 2000
[ 2386.915599][ T5247] pwc: recv_control_msg error -32 req 02 val 2100
[ 2386.940175][ T5247] pwc: recv_control_msg error -32 req 02 val 2200
[ 2387.149183][ T4593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2387.161667][ T4593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2387.174507][ T5247] pwc: recv_control_msg error -71 req 04 val 1500
[ 2387.191449][ T5247] pwc: recv_control_msg error -71 req 02 val 2500
[ 2387.214504][ T5247] pwc: recv_control_msg error -71 req 02 val 2400
[ 2387.356336][T17643] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 2387.366992][T17643] Bluetooth: hci1: Injecting HCI hardware error event
[ 2387.376221][T13914] Bluetooth: hci1: hardware error 0x00
[ 2387.416378][ T5247] pwc: recv_control_msg error -71 req 02 val 2600
[ 2387.453906][ T5247] pwc: recv_control_msg error -71 req 02 val 2900
[ 2387.496090][ T5247] pwc: recv_control_msg error -71 req 02 val 2800
[ 2387.674499][ T5247] pwc: recv_control_msg error -71 req 04 val 1100
[ 2387.683444][ T5247] pwc: recv_control_msg error -71 req 04 val 1200
[ 2387.691432][ T5247] pwc: Registered as video71.
[ 2387.697355][ T5247] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input220
[ 2387.799641][ T5247] usb 4-1: USB disconnect, device number 111
[ 2387.856327][ T2482] usb 2-1: new full-speed USB device number 102 using dummy_hcd
[ 2388.017673][ T2482] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2388.036054][ T2482] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2388.073073][ T2482] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2388.084307][ T2482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2388.105894][ T2482] usb 2-1: SerialNumber: syz
[ 2388.905974][T11986] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 2389.070748][ T2482] usb 2-1: 0:2 : does not exist
[ 2389.091951][ T2482] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 2389.095945][T11986] usb 4-1: Using ep0 maxpacket: 32
[ 2389.140015][ T2482] usb 2-1: USB disconnect, device number 102
[ 2389.168309][T11986] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[ 2389.189857][T11986] usb 4-1: config 0 has no interface number 0
[ 2389.199524][T27592] udevd[27592]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2389.237757][T11986] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f
[ 2389.255960][T11986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2389.273492][T11986] usb 4-1: Product: syz
[ 2389.293722][T11986] usb 4-1: Manufacturer: syz
[ 2389.302911][T11986] usb 4-1: SerialNumber: syz
[ 2389.323001][T11986] usb 4-1: config 0 descriptor??
[ 2389.344098][T11986] net1080 4-1:0.113: probe with driver net1080 failed with error -22
[ 2389.436014][T13914] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 2389.445875][    C1] net_ratelimit: 3 callbacks suppressed
[ 2389.445896][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2389.578229][ T4662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2389.622270][ T4662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2389.649576][ T4662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2389.686397][ T4662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2389.765377][ T4662] netlink: 'syz.3.7055': attribute type 9 has an invalid length.
[ 2389.831753][ T4662] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.7055'.
[ 2389.880324][ T2482] usb 4-1: USB disconnect, device number 112
[ 2390.475895][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2391.217638][ T4686] FAULT_INJECTION: forcing a failure.
[ 2391.217638][ T4686] name failslab, interval 1, probability 0, space 0, times 0
[ 2391.236265][ T4686] CPU: 1 UID: 0 PID: 4686 Comm: syz.4.7063 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2391.246996][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2391.257079][ T4686] Call Trace:
[ 2391.260369][ T4686]  <TASK>
[ 2391.263297][ T4686]  dump_stack_lvl+0x241/0x360
[ 2391.267995][ T4686]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2391.273191][ T4686]  ? __pfx__printk+0x10/0x10
[ 2391.277777][ T4686]  ? fs_reclaim_acquire+0x93/0x130
[ 2391.282883][ T4686]  ? __pfx___might_resched+0x10/0x10
[ 2391.288168][ T4686]  should_fail_ex+0x3b0/0x4e0
[ 2391.292846][ T4686]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[ 2391.298561][ T4686]  should_failslab+0xac/0x100
[ 2391.303235][ T4686]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[ 2391.308955][ T4686]  __kmalloc_noprof+0xd8/0x400
[ 2391.313719][ T4686]  tomoyo_realpath_from_path+0xcf/0x5e0
[ 2391.319267][ T4686]  tomoyo_path_number_perm+0x23a/0x880
[ 2391.324736][ T4686]  ? rcu_read_lock_any_held+0xb7/0x160
[ 2391.330193][ T4686]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 2391.336090][ T4686]  ? tomoyo_path_number_perm+0x208/0x880
[ 2391.341732][ T4686]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2391.347727][ T4686]  ? sb_end_write+0xe9/0x1c0
[ 2391.352313][ T4686]  ? vfs_write+0x7bf/0xc90
[ 2391.356752][ T4686]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 2391.362755][ T4686]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 2391.369106][ T4686]  security_file_ioctl+0xc6/0x2a0
[ 2391.374127][ T4686]  __se_sys_ioctl+0x47/0x170
[ 2391.378724][ T4686]  do_syscall_64+0xf3/0x230
[ 2391.383220][ T4686]  ? clear_bhb_loop+0x35/0x90
[ 2391.387999][ T4686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2391.393894][ T4686] RIP: 0033:0x7f26b417dff9
[ 2391.398303][ T4686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2391.417912][ T4686] RSP: 002b:00007f26b5004038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2391.426335][ T4686] RAX: ffffffffffffffda RBX: 00007f26b4335f80 RCX: 00007f26b417dff9
[ 2391.434308][ T4686] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[ 2391.442288][ T4686] RBP: 00007f26b5004090 R08: 0000000000000000 R09: 0000000000000000
[ 2391.450255][ T4686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2391.458217][ T4686] R13: 0000000000000000 R14: 00007f26b4335f80 R15: 00007f26b445fa28
[ 2391.466200][ T4686]  </TASK>
[ 2391.504968][ T4686] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2391.515871][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2391.575951][ T4686] input: syz0 as /devices/virtual/input/input221
[ 2391.736028][T11986] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 2391.832735][ T4696] binder: 4692:4696 ioctl c01064c7 20000040 returned -22
[ 2392.044803][T11986] usb 2-1: config 0 has no interfaces?
[ 2392.070640][T11986] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2392.109866][T11986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2392.144543][T11986] usb 2-1: Product: syz
[ 2392.169641][T11986] usb 2-1: Manufacturer: syz
[ 2392.183012][T11986] usb 2-1: SerialNumber: syz
[ 2392.216006][T11986] usb 2-1: config 0 descriptor??
[ 2392.291447][ T4699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7066'.
[ 2392.555882][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2392.831400][ T4703] netlink: 'syz.0.7068': attribute type 10 has an invalid length.
[ 2392.856217][ T4703] 8021q: adding VLAN 0 to HW filter on device team0
[ 2392.869277][ T4703] bond0: (slave team0): Enslaving as an active interface with an up link
[ 2393.115035][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2393.186394][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2393.206030][T25140] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 2393.220326][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2393.358200][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2393.372245][T25140] usb 4-1: config 0 has no interfaces?
[ 2393.384477][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2393.397089][T25140] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2393.407104][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2393.434515][ T4713] netlink: 'syz.2.7071': attribute type 9 has an invalid length.
[ 2393.447992][ T4713] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.7071'.
[ 2393.522210][T25140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2393.548167][T25140] usb 4-1: Product: syz
[ 2393.595875][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2393.618493][T25140] usb 4-1: Manufacturer: syz
[ 2393.663287][T25140] usb 4-1: SerialNumber: syz
[ 2393.675750][T25140] usb 4-1: config 0 descriptor??
[ 2393.840086][ T4715] netlink: 'syz.0.7073': attribute type 27 has an invalid length.
[ 2393.952308][ T4711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2393.991542][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2393.998984][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2394.290565][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2394.309653][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2394.517762][ T4715] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2394.531241][ T4715] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2394.541171][ T4715] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2394.552495][ T4715] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2394.645860][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2394.992781][ T5287] usb 2-1: USB disconnect, device number 103
[ 2395.556611][ T4742] fuse: Bad value for 'fd'
[ 2395.676092][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2396.297941][ T4758] futex_wake_op: syz.1.7084 tries to shift op by 32; fix this program
[ 2396.324319][ T4731] delete_channel: no stack
[ 2396.570405][ T5287] usb 4-1: USB disconnect, device number 113
[ 2396.651410][ T4768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2396.665929][T25140] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 2396.711946][ T4768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2396.725865][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2396.874235][T25140] usb 2-1: Using ep0 maxpacket: 16
[ 2396.906524][T25140] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2396.972721][T25140] usb 2-1: config 0 has no interface number 0
[ 2397.006607][T25140] usb 2-1: too many endpoints for config 0 interface 1 altsetting 166: 208, using maximum allowed: 30
[ 2397.099111][T25140] usb 2-1: config 0 interface 1 altsetting 166 has 0 endpoint descriptors, different from the interface descriptor's value: 208
[ 2397.128593][T25140] usb 2-1: config 0 interface 1 has no altsetting 0
[ 2397.142272][T25140] usb 2-1: New USB device found, idVendor=04fc, idProduct=0040, bcdDevice=6d.5d
[ 2397.154192][T25140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2397.162784][T25140] usb 2-1: Product: syz
[ 2397.172640][T25140] usb 2-1: Manufacturer: syz
[ 2397.179880][T25140] usb 2-1: SerialNumber: syz
[ 2397.193927][T25140] usb 2-1: config 0 descriptor??
[ 2397.755889][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2398.795872][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2399.374563][T25140] usb 2-1: USB disconnect, device number 104
[ 2399.835894][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2400.491912][ T4816] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2400.875856][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2400.899111][ T2482] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 2400.978814][ T4826] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7105'.
[ 2401.162069][ T2482] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2401.173799][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2401.200766][ T2482] usb 4-1: can't read configurations, error -61
[ 2401.365993][ T2482] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 2401.525670][ T4835] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2401.550018][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2401.572505][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2401.618636][ T2482] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2401.629658][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2401.637946][ T2482] usb 4-1: can't read configurations, error -61
[ 2401.649031][ T2482] usb usb4-port1: attempt power cycle
[ 2401.915862][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2402.026024][ T2482] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 2402.069093][ T2482] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2402.092695][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2402.151921][ T2482] usb 4-1: can't read configurations, error -61
[ 2402.296059][ T2482] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 2402.332225][ T2482] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2402.343798][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2402.362103][ T2482] usb 4-1: can't read configurations, error -61
[ 2402.392033][ T2482] usb usb4-port1: unable to enumerate USB device
[ 2402.955852][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2403.996078][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2404.645108][ T4853] loop2: detected capacity change from 0 to 53
[ 2405.035929][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2405.089183][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7116'.
[ 2405.914333][ T4875] fuse: Bad value for 'group_id'
[ 2405.942637][ T4875] fuse: Bad value for 'group_id'
[ 2406.075873][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2406.080584][ T4884] fuse: Unknown parameter 'Fd9`�����y�}� ��G�6≝�W��'
[ 2406.563818][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.570494][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[ 2406.706018][ T2482] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 2406.866279][ T2482] usb 4-1: Using ep0 maxpacket: 16
[ 2406.874665][ T2482] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 2406.898898][ T2482] usb 4-1: config 0 has no interface number 0
[ 2406.910942][ T2482] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2406.933509][ T2482] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2406.949530][ T2482] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 2406.961942][ T2482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2406.972768][ T2482] usb 4-1: config 0 descriptor??
[ 2407.125840][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2407.191403][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7130'.
[ 2407.210939][ T4895] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7128'.
[ 2407.828798][ T2482] uclogic 0003:28BD:0071.006C: failed retrieving string descriptor #100: -71
[ 2407.886024][ T2482] uclogic 0003:28BD:0071.006C: failed retrieving pen parameters: -71
[ 2407.909820][ T2482] uclogic 0003:28BD:0071.006C: pen probing failed: -71
[ 2407.917185][ T2482] uclogic 0003:28BD:0071.006C: failed probing parameters: -71
[ 2407.924848][ T2482] uclogic 0003:28BD:0071.006C: probe with driver uclogic failed with error -71
[ 2407.970534][ T2482] usb 4-1: USB disconnect, device number 118
[ 2408.165858][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2408.514816][ T4923] fuse: Bad value for 'user_id'
[ 2408.523539][ T4923] fuse: Bad value for 'user_id'
[ 2408.538403][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2408.565251][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2408.591124][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2408.613043][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2408.706085][ T2482] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 2408.834045][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2408.842776][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2408.855986][ T2482] usb 4-1: Using ep0 maxpacket: 16
[ 2408.856762][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2408.864699][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2408.879055][ T2482] usb 4-1: can't read configurations, error -61
[ 2408.879502][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2409.026125][ T2482] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 2409.083146][ T4925] loop9: detected capacity change from 0 to 6
[ 2409.090413][ T4925] Dev loop9: unable to read RDB block 6
[ 2409.096268][ T4925]  loop9: unable to read partition table
[ 2409.102167][ T4925] loop9: partition table beyond EOD, truncated
[ 2409.120537][ T4925] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[ 2409.120537][ T4925] 
) failed (rc=-5)
[ 2409.176670][ T2482] usb 4-1: Using ep0 maxpacket: 16
[ 2409.191220][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2409.198893][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2409.208985][ T2482] usb 4-1: can't read configurations, error -61
[ 2409.216271][ T2482] usb usb4-port1: attempt power cycle
[ 2409.566054][ T2482] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 2409.587396][ T2482] usb 4-1: Using ep0 maxpacket: 16
[ 2409.594915][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2409.594948][ T2482] usb 4-1: can't read configurations, error -61
[ 2409.680230][ T4942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7145'.
[ 2409.726518][ T2482] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 2409.757199][ T2482] usb 4-1: Using ep0 maxpacket: 16
[ 2409.764402][ T2482] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2409.772662][ T2482] usb 4-1: can't read configurations, error -61
[ 2409.784117][ T2482] usb usb4-port1: unable to enumerate USB device
[ 2410.235912][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2410.253783][ T4947] openvswitch: netlink: Actions may not be safe on all matching packets
[ 2410.499470][ T4959] FAULT_INJECTION: forcing a failure.
[ 2410.499470][ T4959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2410.568563][ T4959] CPU: 0 UID: 0 PID: 4959 Comm: syz.1.7151 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2410.579311][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2410.589402][ T4959] Call Trace:
[ 2410.592683][ T4959]  <TASK>
[ 2410.595632][ T4959]  dump_stack_lvl+0x241/0x360
[ 2410.600340][ T4959]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2410.605558][ T4959]  ? __pfx__printk+0x10/0x10
[ 2410.610262][ T4959]  ? __pfx_lock_release+0x10/0x10
[ 2410.615314][ T4959]  ? __lock_acquire+0x1384/0x2050
[ 2410.620372][ T4959]  should_fail_ex+0x3b0/0x4e0
[ 2410.625066][ T4959]  _copy_from_user+0x2f/0xe0
[ 2410.629689][ T4959]  kstrtouint_from_user+0xc6/0x190
[ 2410.634837][ T4959]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2410.640566][ T4959]  ? __pfx_lock_acquire+0x10/0x10
[ 2410.645603][ T4959]  proc_fail_nth_write+0xaa/0x2d0
[ 2410.650658][ T4959]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 2410.656557][ T4959]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2410.662212][ T4959]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2410.667877][ T4959]  vfs_write+0x29c/0xc90
[ 2410.672123][ T4959]  ? __pfx_vfs_write+0x10/0x10
[ 2410.676890][ T4959]  ? __fget_files+0x3f3/0x470
[ 2410.681592][ T4959]  ? fdget_pos+0x24e/0x320
[ 2410.686012][ T4959]  ksys_write+0x183/0x2b0
[ 2410.690364][ T4959]  ? __pfx_ksys_write+0x10/0x10
[ 2410.695220][ T4959]  ? do_syscall_64+0x100/0x230
[ 2410.699985][ T4959]  ? do_syscall_64+0xb6/0x230
[ 2410.704663][ T4959]  do_syscall_64+0xf3/0x230
[ 2410.709167][ T4959]  ? clear_bhb_loop+0x35/0x90
[ 2410.713842][ T4959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2410.719760][ T4959] RIP: 0033:0x7f9365b7cadf
[ 2410.724172][ T4959] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[ 2410.743776][ T4959] RSP: 002b:00007f9366a15030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2410.752204][ T4959] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9365b7cadf
[ 2410.760175][ T4959] RDX: 0000000000000001 RSI: 00007f9366a150a0 RDI: 0000000000000005
[ 2410.768148][ T4959] RBP: 00007f9366a15090 R08: 0000000000000000 R09: 0000000000000000
[ 2410.776126][ T4959] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2410.784103][ T4959] R13: 0000000000000000 R14: 00007f9365d35f80 R15: 00007f9365e5fa28
[ 2410.792087][ T4959]  </TASK>
[ 2410.795222][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2410.914954][ T4964] futex_wake_op: syz.1.7153 tries to shift op by 32; fix this program
[ 2411.254508][ T4967] FAULT_INJECTION: forcing a failure.
[ 2411.254508][ T4967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2411.267955][ T4967] CPU: 1 UID: 0 PID: 4967 Comm: syz.4.7154 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2411.278652][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2411.288714][ T4967] Call Trace:
[ 2411.291998][ T4967]  <TASK>
[ 2411.294946][ T4967]  dump_stack_lvl+0x241/0x360
[ 2411.299637][ T4967]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2411.304838][ T4967]  ? __pfx__printk+0x10/0x10
[ 2411.309427][ T4967]  ? __pfx_lock_release+0x10/0x10
[ 2411.314463][ T4967]  should_fail_ex+0x3b0/0x4e0
[ 2411.319151][ T4967]  _copy_from_iter+0x1ed/0x1d60
[ 2411.324008][ T4967]  ? _copy_from_iter+0x257/0x1d60
[ 2411.329034][ T4967]  ? __virt_addr_valid+0x183/0x530
[ 2411.334146][ T4967]  ? skb_set_owner_w+0x238/0x3e0
[ 2411.339087][ T4967]  ? __pfx_lock_release+0x10/0x10
[ 2411.344121][ T4967]  ? __pfx__copy_from_iter+0x10/0x10
[ 2411.349407][ T4967]  ? __pfx__copy_from_iter+0x10/0x10
[ 2411.354695][ T4967]  ? page_copy_sane+0x154/0x260
[ 2411.359552][ T4967]  copy_page_from_iter+0x7a/0x100
[ 2411.364587][ T4967]  skb_copy_datagram_from_iter+0x2d9/0x6a0
[ 2411.370404][ T4967]  unix_dgram_sendmsg+0x7a7/0x1f80
[ 2411.375526][ T4967]  ? aa_sk_perm+0x96d/0xab0
[ 2411.380037][ T4967]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 2411.385591][ T4967]  ? __pfx_lock_release+0x10/0x10
[ 2411.390649][ T4967]  ? aa_sock_msg_perm+0x91/0x160
[ 2411.395591][ T4967]  ? unix_seqpacket_sendmsg+0x110/0x1e0
[ 2411.401159][ T4967]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[ 2411.407051][ T4967]  __sock_sendmsg+0x221/0x270
[ 2411.411745][ T4967]  ____sys_sendmsg+0x52a/0x7e0
[ 2411.416522][ T4967]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2411.421828][ T4967]  __sys_sendmmsg+0x3ab/0x730
[ 2411.426520][ T4967]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2411.431734][ T4967]  ? __pfx_lock_release+0x10/0x10
[ 2411.436775][ T4967]  ? kstrtouint_from_user+0x128/0x190
[ 2411.442182][ T4967]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 2411.448081][ T4967]  ? ksys_write+0x229/0x2b0
[ 2411.452583][ T4967]  ? __pfx_lock_release+0x10/0x10
[ 2411.457625][ T4967]  ? vfs_write+0x7bf/0xc90
[ 2411.462046][ T4967]  ? kmem_cache_free+0x1a2/0x420
[ 2411.466991][ T4967]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 2411.472630][ T4967]  ? __fget_files+0x3f3/0x470
[ 2411.477318][ T4967]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 2411.483309][ T4967]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 2411.489648][ T4967]  ? do_syscall_64+0x100/0x230
[ 2411.494414][ T4967]  __x64_sys_sendmmsg+0xa0/0xb0
[ 2411.499275][ T4967]  do_syscall_64+0xf3/0x230
[ 2411.503781][ T4967]  ? clear_bhb_loop+0x35/0x90
[ 2411.508473][ T4967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2411.514382][ T4967] RIP: 0033:0x7f26b417dff9
[ 2411.518816][ T4967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2411.538423][ T4967] RSP: 002b:00007f26b5004038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2411.546858][ T4967] RAX: ffffffffffffffda RBX: 00007f26b4335f80 RCX: 00007f26b417dff9
[ 2411.554829][ T4967] RDX: 0000000000000001 RSI: 00000000200026c0 RDI: 0000000000000003
[ 2411.562815][ T4967] RBP: 00007f26b5004090 R08: 0000000000000000 R09: 0000000000000000
[ 2411.570790][ T4967] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002
[ 2411.578800][ T4967] R13: 0000000000000000 R14: 00007f26b4335f80 R15: 00007f26b445fa28
[ 2411.586793][ T4967]  </TASK>
[ 2411.590044][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2412.041885][ T4977] fuse: Bad value for 'user_id'
[ 2412.051249][ T4977] fuse: Bad value for 'user_id'
[ 2412.152424][ T4983] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2412.168340][ T4983] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub
[ 2412.645986][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2413.195985][T25140] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 2413.443919][T25140] usb 4-1: Using ep0 maxpacket: 16
[ 2413.458338][T25140] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2413.470409][T25140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2413.486237][T25140] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2413.495435][T25140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2413.503531][T25140] usb 4-1: Product: syz
[ 2413.507788][T25140] usb 4-1: Manufacturer: syz
[ 2413.512670][T25140] usb 4-1: SerialNumber: syz
[ 2413.525875][T25140] usb 4-1: config 0 descriptor??
[ 2413.535492][T25140] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2413.544895][T25140] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 2413.685916][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2414.162920][T25140] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 2414.169712][T25140] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[ 2414.715938][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2414.988729][ T5001] netlink: 'syz.1.7165': attribute type 9 has an invalid length.
[ 2414.997124][ T5001] netlink: 'syz.1.7165': attribute type 7 has an invalid length.
[ 2415.004965][ T5001] netlink: 'syz.1.7165': attribute type 8 has an invalid length.
[ 2415.186419][T25140] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[ 2415.199330][T25140] em28xx 4-1:0.0: couldn't setup AC97 register 2
[ 2415.209018][T25140] em28xx 4-1:0.0: couldn't setup AC97 register 4
[ 2415.227004][T25140] em28xx 4-1:0.0: couldn't setup AC97 register 6
[ 2415.236371][T25140] em28xx 4-1:0.0: couldn't setup AC97 register 54
[ 2415.251174][T25140] em28xx 4-1:0.0: couldn't setup AC97 register 56
[ 2415.285865][T25140] usb 4-1: USB disconnect, device number 123
[ 2415.309151][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2415.337152][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2415.367347][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2415.382885][ T5013] netlink: 'syz.1.7170': attribute type 6 has an invalid length.
[ 2415.392213][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2415.765959][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2415.795035][T17643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2415.806025][T17643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2415.817770][T17643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2415.830633][T17643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2415.841444][T17643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2415.848908][T17643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2415.991701][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2416.213682][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2416.455432][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2416.637055][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2416.796444][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2416.850162][ T5025] chnl_net:caif_netlink_parms(): no params data found
[ 2417.124795][   T11] bridge_slave_1: left allmulticast mode
[ 2417.134134][   T11] bridge_slave_1: left promiscuous mode
[ 2417.145644][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2417.233509][   T11] bridge_slave_0: left allmulticast mode
[ 2417.239685][   T11] bridge_slave_0: left promiscuous mode
[ 2417.245526][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2417.837269][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2417.919001][T13914] Bluetooth: hci1: command tx timeout
[ 2418.013338][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2418.027483][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2418.067690][   T11] bond0 (unregistering): Released all slaves
[ 2418.122998][ T5025] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2418.135956][ T5025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2418.162335][ T5025] bridge_slave_0: entered allmulticast mode
[ 2418.180965][ T5025] bridge_slave_0: entered promiscuous mode
[ 2418.206732][ T5025] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2418.213848][ T5025] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2418.246186][ T5025] bridge_slave_1: entered allmulticast mode
[ 2418.253298][ T5025] bridge_slave_1: entered promiscuous mode
[ 2418.408426][ T5025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2418.513713][ T5025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2418.668644][ T5025] team0: Port device team_slave_0 added
[ 2418.698419][ T5025] team0: Port device team_slave_1 added
[ 2418.806754][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2418.831307][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2418.873516][ T5025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2418.885991][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2418.919282][   T11] hsr_slave_0: left promiscuous mode
[ 2418.944227][   T11] hsr_slave_1: left promiscuous mode
[ 2418.951709][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2418.980421][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2419.011486][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2419.035994][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2419.111381][   T11] veth1_macvtap: left promiscuous mode
[ 2419.135945][   T11] veth0_macvtap: left promiscuous mode
[ 2419.141677][   T11] veth1_vlan: left promiscuous mode
[ 2419.151779][   T11] veth0_vlan: left promiscuous mode
[ 2419.915920][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2420.006542][T13914] Bluetooth: hci1: command tx timeout
[ 2420.653219][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 2420.720626][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 2420.972865][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2421.403125][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2421.410530][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2421.436959][ T5025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2421.663836][ T5025] hsr_slave_0: entered promiscuous mode
[ 2421.686986][ T5025] hsr_slave_1: entered promiscuous mode
[ 2421.715666][ T5025] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2421.732220][ T5025] Cannot create hsr debugfs directory
[ 2421.995920][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[ 2422.016634][ T5108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7192'.
[ 2422.034345][ T5108] bond0: entered promiscuous mode
[ 2422.039953][ T5108] bond_slave_0: entered promiscuous mode
[ 2422.052133][ T5108] bond_slave_1: entered promiscuous mode
[ 2422.076075][T13914] Bluetooth: hci1: command tx timeout
[ 2422.659475][ T5025] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2422.682918][ T5025] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2422.706915][ T5025] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2422.728225][ T5025] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2422.901256][ T5130] binder: 5128:5130 ioctl c0306201 0 returned -14
[ 2422.905954][ T5025] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2422.921418][ T5130] binder: 5128:5130 ioctl 401054d5 20000240 returned -22
[ 2422.924085][ T5025] 8021q: adding VLAN 0 to HW filter on device team0
[ 2422.975876][ T5025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2422.986596][ T5025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2423.016084][ T5025] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2423.031601][ T5134] openvswitch: netlink: Actions may not be safe on all matching packets
[ 2423.041983][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2423.049173][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2423.064267][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2423.071465][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2423.276685][ T5025] veth0_vlan: entered promiscuous mode
[ 2423.308299][ T5025] veth1_vlan: entered promiscuous mode
[ 2423.417150][ T5025] veth0_macvtap: entered promiscuous mode
[ 2423.479569][ T5025] veth1_macvtap: entered promiscuous mode
[ 2423.529822][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2423.549473][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.573832][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2423.610936][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.652542][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2423.710579][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.730573][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2423.742175][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.767000][ T5025] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2423.820786][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2423.886157][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.933266][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2423.952924][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.973533][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2424.012092][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.040453][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2424.097474][ T5169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2424.106283][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.147788][ T5025] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2424.156419][T13914] Bluetooth: hci1: command tx timeout
[ 2424.172400][ T5169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2424.210053][ T5025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.245828][ T5025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.295721][ T5025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.314053][ T5025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.377317][ T5169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2424.692517][ T1598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2424.737339][ T1598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2424.750859][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2424.763344][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2424.826172][T26444] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 2424.985938][T26444] usb 4-1: Using ep0 maxpacket: 16
[ 2424.995412][T26444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2425.014324][T26444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2425.040665][T26444] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2425.084494][T26444] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2425.113944][T26444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2425.137593][T26444] usb 4-1: config 0 descriptor??
[ 2425.583652][ T5181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2425.608089][ T5181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2425.705660][T26444] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.006D/input/input222
[ 2426.082306][T26444] microsoft 0003:045E:07DA.006D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[ 2426.995639][ T5204] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 2427.030483][T26444] usb 4-1: reset high-speed USB device number 124 using dummy_hcd
[ 2427.134863][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2427.151497][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2427.232063][T17643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2427.243365][T17643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2427.253337][T17643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2427.263113][T17643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2427.286465][T17643] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2427.293872][T17643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2427.325547][ T5213] xt_cgroup: invalid path, errno=-2
[ 2427.755174][ T5220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2427.815590][ T5220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2427.882268][ T5214] chnl_net:caif_netlink_parms(): no params data found
[ 2427.906554][ T5220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2427.956004][ T5220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2428.054798][ T5232] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2428.248132][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2428.281570][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2428.315300][ T5214] bridge_slave_0: entered allmulticast mode
[ 2428.345691][ T5214] bridge_slave_0: entered promiscuous mode
[ 2428.391927][ T5235] IPVS: Error connecting to the multicast addr
[ 2428.398808][T26444] usb 4-1: device descriptor read/64, error -71
[ 2428.446035][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2428.453325][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2428.468026][ T5214] bridge_slave_1: entered allmulticast mode
[ 2428.474955][ T5214] bridge_slave_1: entered promiscuous mode
[ 2428.598385][ T5214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2428.619700][ T5238] program syz.2.7216 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2428.636420][T26444] usb 4-1: reset high-speed USB device number 124 using dummy_hcd
[ 2428.647862][T26444] usb 4-1: device reset changed ep0 maxpacket size!
[ 2428.650964][ T5214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2428.664983][T11986] usb 4-1: USB disconnect, device number 124
[ 2428.810723][ T5214] team0: Port device team_slave_0 added
[ 2428.836355][T11986] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 2428.868362][ T5214] team0: Port device team_slave_1 added
[ 2428.921831][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2428.930582][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2428.968904][ T5214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2428.982161][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2428.991346][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2429.018197][ T5214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2429.025121][T11986] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2429.050724][T11986] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2429.069415][T11986] usb 4-1: can't read configurations, error -61
[ 2429.087325][ T5214] hsr_slave_0: entered promiscuous mode
[ 2429.094176][ T5214] hsr_slave_1: entered promiscuous mode
[ 2429.100932][ T5214] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2429.108828][ T5214] Cannot create hsr debugfs directory
[ 2429.209200][T11986] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 2429.222203][ T5214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.312022][ T5214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.390539][ T5214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.394036][T11986] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2429.417280][T11986] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2429.424931][T11986] usb 4-1: can't read configurations, error -61
[ 2429.431467][T11986] usb usb4-port1: attempt power cycle
[ 2429.437013][T13914] Bluetooth: hci5: command tx timeout
[ 2429.463247][ T5214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.589217][ T5214] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2429.600693][ T5214] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2429.613988][ T5214] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2429.623330][ T5214] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2429.685211][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2429.703607][ T5214] 8021q: adding VLAN 0 to HW filter on device team0
[ 2429.717832][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2429.724984][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2429.738276][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2429.745429][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2429.786070][T11986] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 2429.809228][T11986] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2429.820128][ T5214] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2429.837208][T11986] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2429.857478][T11986] usb 4-1: can't read configurations, error -61
[ 2429.864298][ T5214] veth0_vlan: entered promiscuous mode
[ 2429.877224][ T5214] veth1_vlan: entered promiscuous mode
[ 2429.901357][ T5214] veth0_macvtap: entered promiscuous mode
[ 2429.910982][ T5214] veth1_macvtap: entered promiscuous mode
[ 2429.925258][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2429.936491][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2429.947537][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2429.958196][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2429.968296][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2429.978990][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2429.989215][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2429.996195][T11986] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 2430.000324][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2430.024814][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2430.035536][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2430.038611][T11986] usb 4-1: too many configurations: 97, using maximum allowed: 8
[ 2430.047623][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2430.071072][T11986] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 2430.071630][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2430.091517][T11986] usb 4-1: can't read configurations, error -61
[ 2430.098747][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2430.098844][T11986] usb usb4-port1: unable to enumerate USB device
[ 2430.119671][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2430.133455][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2430.144167][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2430.154886][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2430.164888][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2430.175583][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2430.185572][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2430.198470][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2430.209584][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2430.223926][ T5214] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2430.232830][ T5214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2430.242638][ T5214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2430.251645][ T5214] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2430.326232][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2430.334206][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2430.369065][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2430.377573][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2431.213504][ T5253] syz.1.7220 (5253): drop_caches: 1
[ 2431.436115][T26444] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 2431.526332][T13914] Bluetooth: hci5: command tx timeout
[ 2431.620795][T26444] usb 4-1: config 0 has no interfaces?
[ 2431.634188][T26444] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2431.650009][T26444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2431.661724][T26444] usb 4-1: Product: syz
[ 2431.670355][T26444] usb 4-1: Manufacturer: syz
[ 2431.675185][T26444] usb 4-1: SerialNumber: syz
[ 2431.685217][T26444] usb 4-1: config 0 descriptor??
[ 2431.994034][ T5260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2432.117037][ T5268] netlink: 'syz.1.7226': attribute type 3 has an invalid length.
[ 2432.270913][   T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2432.496670][   T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2432.584599][   T46] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 2432.692965][   T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2432.739788][   T46] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2432.754104][   T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2432.763890][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2432.772479][   T46] usb 2-1: Product: syz
[ 2432.777770][   T46] usb 2-1: Manufacturer: syz
[ 2432.782588][   T46] usb 2-1: SerialNumber: syz
[ 2432.863648][   T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2432.901020][T17643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2432.911953][T17643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2432.920406][T17643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2432.929295][T17643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2432.937350][T17643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2432.944953][T17643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2433.356752][   T52] bridge_slave_1: left allmulticast mode
[ 2433.362839][   T52] bridge_slave_1: left promiscuous mode
[ 2433.371319][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2433.384279][   T52] bridge_slave_0: left allmulticast mode
[ 2433.390633][   T52] bridge_slave_0: left promiscuous mode
[ 2433.404287][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2433.606224][T13914] Bluetooth: hci5: command tx timeout
[ 2433.824707][   T46] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2433.831389][   T46] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[ 2433.842348][   T46] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2434.026261][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2434.040375][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2434.052209][   T52] bond0 (unregistering): Released all slaves
[ 2434.167743][ T5280] chnl_net:caif_netlink_parms(): no params data found
[ 2434.227755][   T46] cdc_ncm 2-1:1.0: setting tx_max = 88
[ 2434.250366][   T46] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 2434.281754][   T46] usb 2-1: USB disconnect, device number 105
[ 2434.315130][   T46] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[ 2434.403546][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2434.432451][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2434.458316][ T5280] bridge_slave_0: entered allmulticast mode
[ 2434.479271][ T5280] bridge_slave_0: entered promiscuous mode
[ 2434.530711][   T52] hsr_slave_0: left promiscuous mode
[ 2434.545348][   T52] hsr_slave_1: left promiscuous mode
[ 2434.559980][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2434.573634][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2434.583563][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2434.599344][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2434.643270][   T52] veth1_macvtap: left promiscuous mode
[ 2434.654817][   T52] veth0_macvtap: left promiscuous mode
[ 2434.664677][   T52] veth1_vlan: left promiscuous mode
[ 2434.675320][   T52] veth0_vlan: left promiscuous mode
[ 2434.861034][ T5304] nvme_fabrics: unknown parameter or missing value 'F' in ctrl creation request
[ 2434.917330][   T46] usb 4-1: USB disconnect, device number 3
[ 2435.037319][T13914] Bluetooth: hci2: command tx timeout
[ 2435.474721][   T52] team0 (unregistering): Port device team_slave_1 removed
[ 2435.525175][   T52] team0 (unregistering): Port device team_slave_0 removed
[ 2435.677388][T13914] Bluetooth: hci5: command tx timeout
[ 2436.272535][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2436.290253][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2436.309835][ T5280] bridge_slave_1: entered allmulticast mode
[ 2436.324566][ T5280] bridge_slave_1: entered promiscuous mode
[ 2436.332028][ T5324] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 2436.379571][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7236'.
[ 2436.570522][ T5280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2436.607143][ T5280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2436.831616][ T5280] team0: Port device team_slave_0 added
[ 2436.840210][ T5280] team0: Port device team_slave_1 added
[ 2436.892192][ T5280] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2436.910429][ T5280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2436.941600][ T5247] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 2436.963878][ T5280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2436.978491][ T5280] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2436.985745][ T5280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2437.069405][ T5280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2437.121050][ T5247] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2437.136463][T13914] Bluetooth: hci2: command tx timeout
[ 2437.163920][ T5247] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2437.211456][ T5247] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2437.316400][ T5247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2437.328849][ T5280] hsr_slave_0: entered promiscuous mode
[ 2437.351569][ T5330] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 2437.374500][ T5280] hsr_slave_1: entered promiscuous mode
[ 2437.401684][ T5247] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 2437.416644][ T5280] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2437.434483][ T5280] Cannot create hsr debugfs directory
[ 2437.546059][ T5344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7239'.
[ 2438.108339][T11986] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 2438.282108][T11986] usb 4-1: config 0 has no interfaces?
[ 2438.338765][T11986] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2438.366147][T11986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2438.388210][T11986] usb 4-1: Product: syz
[ 2438.397590][T11986] usb 4-1: Manufacturer: syz
[ 2438.408379][T11986] usb 4-1: SerialNumber: syz
[ 2438.420459][T11986] usb 4-1: config 0 descriptor??
[ 2438.483522][ T5280] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2438.519259][ T5280] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2438.540799][ T5280] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2438.595608][ T5280] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2438.697028][ T5354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2438.784829][ T5280] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2438.851232][ T5280] 8021q: adding VLAN 0 to HW filter on device team0
[ 2438.864107][T26416] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2438.871275][T26416] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2438.903837][T26416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2438.911027][T26416] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2439.068484][ T5280] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2439.172316][ T5280] veth0_vlan: entered promiscuous mode
[ 2439.194676][ T5280] veth1_vlan: entered promiscuous mode
[ 2439.201708][T13914] Bluetooth: hci2: command tx timeout
[ 2439.354895][ T5280] veth0_macvtap: entered promiscuous mode
[ 2439.378431][ T5280] veth1_macvtap: entered promiscuous mode
[ 2439.405308][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2439.431199][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.455038][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2439.475453][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.488242][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2439.503480][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.513932][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2439.525243][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.535886][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2439.563547][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.592496][ T5280] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2439.626892][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2439.656815][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.682489][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2439.694318][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.704815][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2439.723537][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.755833][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2439.776911][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.789489][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2439.801387][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.813432][   T46] usb 2-1: USB disconnect, device number 106
[ 2439.839448][ T5280] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2439.894783][ T5280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2439.912988][ T5280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2439.939311][ T5280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2439.949490][ T5280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2440.123685][ T1598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2440.181516][ T1598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2440.226538][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2440.234722][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2440.489491][ T1598] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2440.745017][ T1598] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2441.065712][ T5407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2441.124337][ T5407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2441.161048][ T5410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7250'.
[ 2441.193046][ T5247] usb 4-1: USB disconnect, device number 4
[ 2441.260536][ T1598] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2441.277669][T13914] Bluetooth: hci2: command tx timeout
[ 2441.341598][ T5415] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7251'.
[ 2441.378493][T17643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2441.388301][ T5415] FAULT_INJECTION: forcing a failure.
[ 2441.388301][ T5415] name failslab, interval 1, probability 0, space 0, times 0
[ 2441.409327][T17643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2441.426196][T17643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2441.431410][ T5415] CPU: 0 UID: 0 PID: 5415 Comm: syz.3.7251 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2441.443913][ T5415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2441.454017][ T5415] Call Trace:
[ 2441.457316][ T5415]  <TASK>
[ 2441.460248][ T5415]  dump_stack_lvl+0x241/0x360
[ 2441.464934][ T5415]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2441.470150][ T5415]  ? __pfx__printk+0x10/0x10
[ 2441.474739][ T5415]  ? __kmalloc_node_noprof+0xb7/0x440
[ 2441.480113][ T5415]  ? __pfx___might_resched+0x10/0x10
[ 2441.485424][ T5415]  should_fail_ex+0x3b0/0x4e0
[ 2441.490136][ T5415]  should_failslab+0xac/0x100
[ 2441.494850][ T5415]  __kmalloc_node_noprof+0xdf/0x440
[ 2441.500083][ T5415]  ? __kvmalloc_node_noprof+0x72/0x190
[ 2441.505563][ T5415]  __kvmalloc_node_noprof+0x72/0x190
[ 2441.510869][ T5415]  xt_alloc_table_info+0x3d/0xa0
[ 2441.515832][ T5415]  do_ip6t_set_ctl+0xba0/0x1270
[ 2441.520723][ T5415]  ? __pfx___might_resched+0x10/0x10
[ 2441.526022][ T5415]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[ 2441.531322][ T5415]  ? __pfx_lock_release+0x10/0x10
[ 2441.536404][ T5415]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 2441.542101][ T5415]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2441.548117][ T5415]  ? aa_sk_perm+0x96d/0xab0
[ 2441.552663][ T5415]  ? __pfx_aa_sk_perm+0x10/0x10
[ 2441.557548][ T5415]  nf_setsockopt+0x295/0x2c0
[ 2441.561507][T17643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2441.562171][ T5415]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 2441.569869][T17643] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2441.574980][ T5415]  do_sock_setsockopt+0x3af/0x720
[ 2441.575019][ T5415]  ? __pfx_do_sock_setsockopt+0x10/0x10
[ 2441.582672][T17643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2441.586972][ T5415]  ? __fget_files+0x29/0x470
[ 2441.587007][ T5415]  ? __fget_files+0x3f3/0x470
[ 2441.587031][ T5415]  ? __fget_files+0x29/0x470
[ 2441.587066][ T5415]  __sys_setsockopt+0x1a2/0x250
[ 2441.587097][ T5415]  __x64_sys_setsockopt+0xb5/0xd0
[ 2441.587125][ T5415]  do_syscall_64+0xf3/0x230
[ 2441.587152][ T5415]  ? clear_bhb_loop+0x35/0x90
[ 2441.587180][ T5415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2441.587216][ T5415] RIP: 0033:0x7ff77f37dff9
[ 2441.587246][ T5415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2441.587266][ T5415] RSP: 002b:00007ff780180038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2441.587296][ T5415] RAX: ffffffffffffffda RBX: 00007ff77f535f80 RCX: 00007ff77f37dff9
[ 2441.587349][ T5415] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007
[ 2441.587365][ T5415] RBP: 00007ff780180090 R08: 00000000000005b8 R09: 0000000000000000
[ 2441.587382][ T5415] R10: 00000000200006c0 R11: 0000000000000246 R12: 0000000000000001
[ 2441.587398][ T5415] R13: 0000000000000000 R14: 00007ff77f535f80 R15: 00007ff77f65fa28
[ 2441.587430][ T5415]  </TASK>
[ 2441.831640][ T1598] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2441.879666][ T5429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7252'.
[ 2441.961668][ T5438] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2441.968834][ T5438] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2442.051809][ T5438] hsr_slave_0: left promiscuous mode
[ 2442.104689][ T5438] hsr_slave_1: left promiscuous mode
[ 2442.418158][   T30] INFO: task kworker/1:7:5857 blocked for more than 143 seconds.
[ 2442.426597][   T30]       Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2442.434270][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2442.443215][   T30] task:kworker/1:7     state:D stack:19760 pid:5857  tgid:5857  ppid:2      flags:0x00004000
[ 2442.453536][   T30] Workqueue: usb_hub_wq hub_event
[ 2442.458676][   T30] Call Trace:
[ 2442.461994][   T30]  <TASK>
[ 2442.464958][   T30]  __schedule+0x1895/0x4b30
[ 2442.469598][   T30]  ? __pfx___schedule+0x10/0x10
[ 2442.474494][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 2442.480624][   T30]  ? __pfx_lock_release+0x10/0x10
[ 2442.485702][   T30]  ? kick_pool+0x1bd/0x620
[ 2442.490277][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2442.495545][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 2442.500856][   T30]  ? schedule+0x90/0x320
[ 2442.505152][   T30]  schedule+0x14b/0x320
[ 2442.509713][   T30]  schedule_preempt_disabled+0x13/0x30
[ 2442.515218][   T30]  __mutex_lock+0x6a7/0xd70
[ 2442.520083][   T30]  ? __mutex_lock+0x52a/0xd70
[ 2442.524796][   T30]  ? adu_disconnect+0xca/0x2b0
[ 2442.529676][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 2442.534730][   T30]  ? usb_hcd_flush_endpoint+0x3d1/0x3f0
[ 2442.540368][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 2442.546918][   T30]  adu_disconnect+0xca/0x2b0
[ 2442.551558][   T30]  usb_unbind_interface+0x25e/0x940
[ 2442.557303][   T30]  ? kernfs_remove_by_name_ns+0x11b/0x160
[ 2442.563068][   T30]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 2442.568911][   T30]  device_release_driver_internal+0x503/0x7c0
[ 2442.575023][   T30]  bus_remove_device+0x34f/0x420
[ 2442.580049][   T30]  device_del+0x57a/0x9b0
[ 2442.584409][   T30]  ? kobject_put+0x272/0x480
[ 2442.589152][   T30]  ? __pfx_device_del+0x10/0x10
[ 2442.594033][   T30]  ? kobject_put+0x44d/0x480
[ 2442.598707][   T30]  usb_disable_device+0x3bf/0x850
[ 2442.603780][   T30]  usb_disconnect+0x340/0x950
[ 2442.608565][   T30]  hub_event+0x1ebc/0x5150
[ 2442.613581][   T30]  ? debug_object_deactivate+0x2d5/0x390
[ 2442.619341][   T30]  ? __pfx_hub_event+0x10/0x10
[ 2442.624158][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 2442.629289][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 2442.635318][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 2442.641930][   T30]  ? process_scheduled_works+0x976/0x1850
[ 2442.647794][   T30]  process_scheduled_works+0xa63/0x1850
[ 2442.653404][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2442.659480][   T30]  ? assign_work+0x364/0x3d0
[ 2442.664128][   T30]  worker_thread+0x870/0xd30
[ 2442.668860][   T30]  ? __kthread_parkme+0x169/0x1d0
[ 2442.673935][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 2442.679227][   T30]  kthread+0x2f0/0x390
[ 2442.683344][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 2442.688575][   T30]  ? __pfx_kthread+0x10/0x10
[ 2442.693199][   T30]  ret_from_fork+0x4b/0x80
[ 2442.697736][   T30]  ? __pfx_kthread+0x10/0x10
[ 2442.702380][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2442.704510][ T5428] chnl_net:caif_netlink_parms(): no params data found
[ 2442.707271][   T30]  </TASK>
[ 2442.707348][   T30] 
[ 2442.707348][   T30] Showing all locks held in the system:
[ 2442.707365][   T30] 1 lock held by khungtaskd/30:
[ 2442.707381][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[ 2442.707475][   T30] 4 locks held by kworker/u8:7/1598:
[ 2442.707490][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[ 2442.707557][   T30]  #1: ffffc90004a47d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[ 2442.768106][   T30]  #2: ffffffff8fcc6210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 2442.777614][   T30]  #3: ffffffff8fcd2d08 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0
[ 2442.784625][ T1598] bridge_slave_1: left allmulticast mode
[ 2442.786607][   T30] 2 locks held by getty/4993:
[ 2442.786627][   T30]  #0: ffff88802e74f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2442.786708][   T30]  #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[ 2442.786792][   T30] 3 locks held by kworker/0:4/5287:
[ 2442.786821][   T30] 6 locks held by kworker/1:7/5857:
[ 2442.786834][   T30]  #0: ffff888020eae948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}
[ 2442.801571][ T1598] bridge_slave_1: left promiscuous mode
[ 2442.807061][   T30] , at: process_scheduled_works+0x93b/0x1850
[ 2442.807098][   T30]  #1: ffffc90016b87d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[ 2442.807167][   T30]  #2: ffff888144ba5190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[ 2442.807230][   T30]  #3: ffff88805d90a190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950
[ 2442.807289][   T30]  #4: ffff888026ff7160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[ 2442.807349][   T30]  #5: ffffffff8f6862a8 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0
[ 2442.807421][   T30] 1 lock held by syz.2.6086/32529:
[ 2442.807436][   T30]  #0: ffffffff8f6862a8 (adutux_mutex
[ 2442.828804][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2442.836311][   T30] ){+.+.}-{3:3}, at: adu_release+0xbf/0x870
[ 2442.921661][   T30] 1 lock held by syz.1.7178/5035:
[ 2442.927117][   T30]  #0: ffff888144ba5190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x770
[ 2442.936254][   T30] 1 lock held by syz-executor/5428:
[ 2442.941487][   T30]  #0: ffffffff8fcd2d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[ 2442.951059][   T30] 2 locks held by syz.4.7253/5432:
[ 2442.956605][   T30] 2 locks held by syz.3.7254/5434:
[ 2442.961752][   T30]  #0: ffff88805e5b8208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[ 2442.972050][   T30]  #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[ 2442.983060][   T30] 1 lock held by syz.2.7258/5465:
[ 2442.988188][   T30]  #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[ 2442.999229][   T30] 4 locks held by dhcpcd-run-hook/5467:
[ 2443.004845][   T30] 
[ 2443.007313][   T30] =============================================
[ 2443.007313][   T30] 
[ 2443.015965][   T30] NMI backtrace for cpu 0
[ 2443.020325][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2443.030871][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2443.040949][   T30] Call Trace:
[ 2443.044256][   T30]  <TASK>
[ 2443.047208][   T30]  dump_stack_lvl+0x241/0x360
[ 2443.051926][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2443.057150][   T30]  ? __pfx__printk+0x10/0x10
[ 2443.061867][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[ 2443.066872][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 2443.072456][   T30]  ? _printk+0xd5/0x120
[ 2443.076642][   T30]  ? __pfx__printk+0x10/0x10
[ 2443.081260][   T30]  ? __wake_up_klogd+0xcc/0x110
[ 2443.086129][   T30]  ? __pfx__printk+0x10/0x10
[ 2443.090726][   T30]  ? __rcu_read_unlock+0xa1/0x110
[ 2443.095766][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2443.101791][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[ 2443.107791][   T30]  watchdog+0xff4/0x1040
[ 2443.112053][   T30]  ? watchdog+0x1ea/0x1040
[ 2443.116493][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2443.121214][   T30]  kthread+0x2f0/0x390
[ 2443.125287][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2443.129993][   T30]  ? __pfx_kthread+0x10/0x10
[ 2443.134616][   T30]  ret_from_fork+0x4b/0x80
[ 2443.139076][   T30]  ? __pfx_kthread+0x10/0x10
[ 2443.143667][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2443.148454][   T30]  </TASK>
[ 2443.153021][   T30] Sending NMI from CPU 0 to CPUs 1:
[ 2443.158988][    C1] NMI backtrace for cpu 1
[ 2443.159003][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2443.159022][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2443.159033][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[ 2443.159068][    C1] RIP: 0010:do_raw_spin_unlock+0x5f/0x8b0
[ 2443.159092][    C1] Code: 48 89 14 24 0f 85 34 04 00 00 81 3a ad 4e ad de 0f 85 05 01 00 00 4c 89 ff be 04 00 00 00 e8 68 dc 8c 00 4c 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 2a 04 00 00 41 83 3f 00 0f 84 9f 01 00 00
[ 2443.159107][    C1] RSP: 0018:ffffc90000117840 EFLAGS: 00000806
[ 2443.159121][    C1] RAX: 1ffffffff34bd611 RBX: dffffc0000000000 RCX: ffffffff8171c388
[ 2443.159134][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9a5eb088
[ 2443.159145][    C1] RBP: ffffc90000117930 R08: ffffffff9a5eb08b R09: 1ffffffff34bd611
[ 2443.159157][    C1] R10: dffffc0000000000 R11: fffffbfff34bd612 R12: dffffc0000000000
[ 2443.159170][    C1] R13: 1ffff92000022f14 R14: ffffc900001178c0 R15: ffffffff9a5eb088
[ 2443.159182][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 2443.159212][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2443.159224][    C1] CR2: 00007fcdd82fe270 CR3: 000000007f8a2000 CR4: 00000000003526f0
[ 2443.159239][    C1] Call Trace:
[ 2443.159246][    C1]  <NMI>
[ 2443.159253][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[ 2443.159275][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 2443.159302][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 2443.159322][    C1]  ? nmi_handle+0x2a/0x5a0
[ 2443.159347][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 2443.159370][    C1]  ? nmi_handle+0x14f/0x5a0
[ 2443.159398][    C1]  ? nmi_handle+0x2a/0x5a0
[ 2443.159414][    C1]  ? do_raw_spin_unlock+0x5f/0x8b0
[ 2443.159434][    C1]  ? default_do_nmi+0x63/0x160
[ 2443.159473][    C1]  ? exc_nmi+0x123/0x1f0
[ 2443.159494][    C1]  ? end_repeat_nmi+0xf/0x53
[ 2443.159514][    C1]  ? do_raw_spin_unlock+0x58/0x8b0
[ 2443.159535][    C1]  ? do_raw_spin_unlock+0x5f/0x8b0
[ 2443.159557][    C1]  ? do_raw_spin_unlock+0x5f/0x8b0
[ 2443.159580][    C1]  ? do_raw_spin_unlock+0x5f/0x8b0
[ 2443.159602][    C1]  </NMI>
[ 2443.159607][    C1]  <TASK>
[ 2443.159617][    C1]  _raw_spin_unlock_irqrestore+0x81/0x140
[ 2443.159644][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2443.159668][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 2443.159698][    C1]  debug_check_no_obj_freed+0x561/0x580
[ 2443.159731][    C1]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[ 2443.159762][    C1]  ? ieee80211_iface_work+0x272/0xf20
[ 2443.159787][    C1]  kmem_cache_free+0x11f/0x420
[ 2443.159815][    C1]  ieee80211_iface_work+0x272/0xf20
[ 2443.159843][    C1]  cfg80211_wiphy_work+0x2db/0x490
[ 2443.159866][    C1]  ? process_scheduled_works+0x976/0x1850
[ 2443.159890][    C1]  process_scheduled_works+0xa63/0x1850
[ 2443.159924][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2443.159951][    C1]  ? assign_work+0x364/0x3d0
[ 2443.159974][    C1]  worker_thread+0x870/0xd30
[ 2443.160004][    C1]  ? __kthread_parkme+0x169/0x1d0
[ 2443.160030][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 2443.160053][    C1]  kthread+0x2f0/0x390
[ 2443.160074][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 2443.160097][    C1]  ? __pfx_kthread+0x10/0x10
[ 2443.160113][    C1]  ret_from_fork+0x4b/0x80
[ 2443.160138][    C1]  ? __pfx_kthread+0x10/0x10
[ 2443.160154][    C1]  ret_from_fork_asm+0x1a/0x30
[ 2443.160184][    C1]  </TASK>
[ 2443.160991][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 2443.496367][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[ 2443.506887][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2443.516955][   T30] Call Trace:
[ 2443.520234][   T30]  <TASK>
[ 2443.523167][   T30]  dump_stack_lvl+0x241/0x360
[ 2443.527847][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2443.533049][   T30]  ? __pfx__printk+0x10/0x10
[ 2443.537638][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 2443.543627][   T30]  ? vscnprintf+0x5d/0x90
[ 2443.547957][   T30]  panic+0x349/0x880
[ 2443.551851][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 2443.558005][   T30]  ? __pfx_panic+0x10/0x10
[ 2443.562422][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[ 2443.567793][   T30]  ? __irq_work_queue_local+0x137/0x410
[ 2443.573342][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 2443.578712][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 2443.584867][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[ 2443.591021][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[ 2443.597183][   T30]  watchdog+0x1033/0x1040
[ 2443.601522][   T30]  ? watchdog+0x1ea/0x1040
[ 2443.605948][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2443.610635][   T30]  kthread+0x2f0/0x390
[ 2443.614701][   T30]  ? __pfx_watchdog+0x10/0x10
[ 2443.619378][   T30]  ? __pfx_kthread+0x10/0x10
[ 2443.623966][   T30]  ret_from_fork+0x4b/0x80
[ 2443.628385][   T30]  ? __pfx_kthread+0x10/0x10
[ 2443.632971][   T30]  ret_from_fork_asm+0x1a/0x30
[ 2443.637752][   T30]  </TASK>
[ 2443.641089][   T30] Kernel Offset: disabled
[ 2443.645418][   T30] Rebooting in 86400 seconds..