last executing test programs:

27.605992956s ago: executing program 4 (id=1432):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xe8}}, 0x0) (fail_nth: 1)

27.475241065s ago: executing program 4 (id=1433):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x2)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
alarm(0x3ce)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x6, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x2, 0xc})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
alarm(0x0)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc3, 0xa1, 0xd7, 0x8, 0xccd, 0x99, 0x950d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0x71, 0xf9}}]}}]}}, 0x0)

23.405799426s ago: executing program 4 (id=1449):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) (async, rerun: 32)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
preadv(r3, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0x0, 0x5) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) (async)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044dff, &(0x7f00000000c0)) (async)
r5 = openat$cgroup_ro(r3, &(0x7f0000000440)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8001) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) (async, rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
socket$can_j1939(0x1d, 0x2, 0x7)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x100, 0x200, 0x100, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4, {0x8000}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
syz_usb_connect(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x27, 0x6c, 0xa6, 0x40, 0xbb4, 0xa04, 0xa391, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x10, 0x33, 0x70, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) (async, rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64)
write(r9, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

23.080098893s ago: executing program 4 (id=1451):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x38}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x91020, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000000899500000000001800000000000000100100000d00000027"], 0x28, 0x500}}], 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

22.524691975s ago: executing program 4 (id=1454):
r0 = syz_clone(0xa0004080, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x9})
ptrace$getsig(0x4202, r0, 0xa50, &(0x7f0000000000))

22.066086787s ago: executing program 4 (id=1457):
socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private1}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000000, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)

19.493637038s ago: executing program 1 (id=1468):
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x88100)
syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)})
r2 = getpid()
syz_pidfd_open(r2, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000340)={0x8, 0x8, 0x4, 0x7ff, 0x4, "5de475ce4c097094e881f22ce4873ce59da3d9"})
sched_setscheduler(r2, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
socket(0x80000000000000a, 0x2, 0x0)
r4 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
dup2(r4, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10)
connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_elf64(r6, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000001840), 0x27148e3ad6f70ee, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x28, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x10, 0x0, 0x0)

18.593058601s ago: executing program 0 (id=1473):
r0 = socket$netlink(0x10, 0x3, 0xf)
write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x0, 0x47, 0x9, 0x1, 0x3, 0x80000001, 0x1eb, 0x40, 0x2a3, 0x1ff, 0x8, 0x38, 0x2, 0x1ff, 0x800, 0x8}, [{0x70000000, 0x8, 0x53, 0x100000000, 0x6, 0x40000004, 0x4, 0x1ff}], "32f82922d8bc560de561db1fdd2662f511d03b1c6bc5fd9c9599d3ffb6df5fbb5c060ae5ccb2e28377ae63285aee5daaeed792e9c9d8f2c2762ebdcfa9d81c62c19b18a15ed52ee680cbeee6f6e70b5d5a8ce2013ba6444d468a8e365f83902f8d49798838dd8be4cfd5b775bcdf50d4bbf42688af2514651506a097a68dd73f6002c442de1f5a4f09d944a6ef700457efba66fe1ce69d7ee4eb12159dc039c17175374ff183db8d6c0bc2526f5698172b42c63629b3738a4ac9b926d771cd31d93ef8d91e73f0189c823732248e4b8b4b51086828984cd604ba", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x852)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
unshare(0x4040600)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='setgroups\x00')
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000002c00)={'nr0\x00'})
write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0)
syz_emit_vhci(0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc080)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x1c)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200))
socket$unix(0x1, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x11c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0xc8, 0x8, 0x0, 0x1, [{0x68, 0x1e02, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x11c}, 0x1, 0x600, 0x0, 0x814}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)="9e", 0x1}], 0x1)

18.178858651s ago: executing program 1 (id=1474):
add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, &(0x7f0000000240)="c06740a3bd052f6f0eea6cf2d1cb49b4c99b62c5c56635c7172a8a13e7", 0x1d, 0xffffffffffffffff) (fail_nth: 2)

17.753643382s ago: executing program 1 (id=1476):
getresgid(&(0x7f0000001fc0), &(0x7f0000002000), &(0x7f0000002040)) (async)
getresgid(&(0x7f0000001fc0)=<r0=>0x0, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000002040))
r2 = socket(0x11, 0xa, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2={0xff, 0x5}}})
socket$kcm(0x11, 0x3, 0x0) (async)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @value64=0x2}})
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180060001"], 0x74}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r8=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r8, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) (async)
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[<r10=>0x0], 0x1})
r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
linkat(r11, &(0x7f0000000600)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) (async)
linkat(r11, &(0x7f0000000600)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400)
ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r10, r9})
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r3, &(0x7f0000000b00)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f000001f4c0)="550c6d32758c9c16ffa4f109b112c633892f8bee461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006ca", 0x37}, {&(0x7f0000000340)="87a3ec9a1f2c062344c32d723e509529b7d74109fc61f9db8b0cba55c7d4924c795715c66ce41fc8cad02e9542c6d8cbad891da12ba8837e5c65977e46c4dbec1bd1bbe39159d298ab", 0x49}, {&(0x7f0000001580)="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", 0x930}], 0x8}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000b00)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f000001f4c0)="550c6d32758c9c16ffa4f109b112c633892f8bee461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006ca", 0x37}, {&(0x7f0000000340)="87a3ec9a1f2c062344c32d723e509529b7d74109fc61f9db8b0cba55c7d4924c795715c66ce41fc8cad02e9542c6d8cbad891da12ba8837e5c65977e46c4dbec1bd1bbe39159d298ab", 0x49}, {&(0x7f0000001580)="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", 0x930}], 0x8}, 0x0)
setregid(r1, r0)

16.510932978s ago: executing program 1 (id=1479):
pipe2(&(0x7f0000000300), 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_pidfd_open(r1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_pidfd_open(0x0, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fanotify_init(0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x7, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xa5, 0xaf, 0x5f, 0x20, 0xe8d, 0x23, 0x3aab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xa}}]}}]}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001100028005000100030000000500150000000000"], 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r5 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)=<r6=>0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
r8 = syz_io_uring_setup(0x1fbf, &(0x7f0000000040)={0x0, 0x0, 0x140}, &(0x7f00000000c0), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000140), 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0)
syz_io_uring_setup(0xbdb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000)=<r9=>0x0, &(0x7f00000003c0))
syz_io_uring_submit(r9, r6, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}})
io_uring_enter(r5, 0x5b43, 0x0, 0x0, 0x0, 0x0)
shutdown(r7, 0x1)

16.16026123s ago: executing program 2 (id=1482):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
read$FUSE(r0, 0x0, 0x0)
unshare(0x20040600)
socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0x1b3f, 0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0)

15.465910756s ago: executing program 2 (id=1484):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000002c0)={0x28, 0x0, r3, r4, 0x5, 0xff, 0xfff})
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000540)={0x2, r2})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000008000"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000005893df66bf3ce816"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0], 0x48}}, 0x20000090)
ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f00000004c0)=0x2)
clock_gettime(0x0, &(0x7f0000000000)={<r5=>0x0, <r6=>0x0})
ioctl$KDSETMODE(r2, 0x4b3a, 0x1)
clock_gettime(0x0, &(0x7f0000000500)={<r7=>0x0, <r8=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x5, 0x402, 0x0, {r7, r8/1000+10000}, {r5, r6/1000+10000}, {0x0, 0x0, 0x1}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)

15.451798461s ago: executing program 0 (id=1485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18120000000000000000000000000000852000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$packet(0x11, 0x2, 0x300)
eventfd2(0x0, 0x0)
fsopen(&(0x7f0000000080)='pipefs\x00', 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)={0x7f}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x2, 0x3, 0x2)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000200)=0x12)
ioctl$SNDCTL_DSP_SYNC(r4, 0x5008, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10)
r5 = socket(0x2, 0x3, 0x2)
dup3(0xffffffffffffffff, r5, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r6, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})

15.258237558s ago: executing program 2 (id=1486):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}], 0x2, 0x16da)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1)
sendto$inet(r0, &(0x7f00000002c0)="1e777778b5", 0x5, 0x50, 0x0, 0x0)

14.921791769s ago: executing program 2 (id=1487):
syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1f0a5fc9000400ffffffffffffffffffffffff000000000000ff07858aff01052b0f3e8c3d4171530f92ec681e1437eeb604f9d255e5dfb5e9d7cbc94dd4d5f8b8ffd9a6dc3f291a9e48710fca8f86399ca81f60b08b84"], 0x22)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0604ea00000000000054679202"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0407c6cfd5c975a6953c1ef20562db3a0c08038800188100d30d"], 0xb)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="03c90058cd294fbcedc17ccfa4025a1e5777b4814b0663f4852deb97559d7624bd505e611ef8a55937ffffffffffffff7f293408287051702a79e7442da8de9e11bf6e9357e6edea2d50e82f055f6f923cd4e59e223193d487cfa619"], 0x5c)
write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
ftruncate(r0, 0x4)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000200)=""/121, 0x79})
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="030f0404000000000000001620"], 0x7)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x1608d87, 0x6, 0x10001, 0x4, 0x8000, 0x0, 0x5, 0x7, 0x7b7, 0x0, 0x414, 0x7, 0x10001, 0xfffffffffffff924, 0xffffffff7fffffff], 0x10000, 0x286381})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x80984120, &(0x7f0000000080))
mlock(&(0x7f0000001000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000ab9000/0x1000)=nil, 0x1000, 0x1)
syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYRESDEC=r1], 0xb)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
msync(&(0x7f0000377000/0x4000)=nil, 0x4000, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="044206000000000000"], 0x9)
socket$xdp(0x2c, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04050400c80068391518fdbdcdd11003308f6b065807aa1c3b63f1eb7eb367b98191bc2c6007e487ddd63ea3ad9a88d4d1fd1bfa75a3ee74307023824097ac84330397e0865f2e434d01813df8ab63480c6d8946e4b6ecb097e923a4fae9133963bf83c991149758cb799dee1911826a24e8c410cf297d1dd90e4726b4af1afd91f6ba47d5b081ab3e90b4ad2fdf5e57433d0e2e7b50b0d07d05f2440d84d7f186da859c2139ff416d28e611acb005db18408fbc1e7beee708395a446cec2458"], 0x7)
r2 = socket$xdp(0x2c, 0x3, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000, 0x2}, 0x1c)

14.63305611s ago: executing program 3 (id=1488):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r1 = memfd_create(&(0x7f0000000000)='secer\x03\x00\x00\x00selin\x8cB\xabl\xa6e\x15ux\x00\xab', 0x0)
pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @remote}}}})
unshare(0x2c020400)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
dup(r1)
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x2000, 0x0, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100))
r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000300), &(0x7f0000000040)=<r5=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0)

14.384473967s ago: executing program 0 (id=1489):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0x4000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000500)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil})

14.269687128s ago: executing program 3 (id=1490):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14.05640259s ago: executing program 0 (id=1491):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x82f42, 0x0)
r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0xa94, &(0x7f00000005c0), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
r3 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000300"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000200012800f000100626f6e645f736c61766500000c0005"], 0x40}}, 0x0)
r6 = io_uring_setup(0x3e79, &(0x7f0000000000))
dup2(r3, r6)
write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12)
io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000280), &(0x7f00000001c0))
io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0)

13.901243834s ago: executing program 2 (id=1492):
mlock(&(0x7f0000073000/0x4000)=nil, 0x4000)
mremap(&(0x7f00001ed000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000535000/0x4000)=nil)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = gettid()
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
write$rfkill(r2, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000600)=@urb_type_control={0x2, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x52800, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000180)={&(0x7f00001f5000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0xd1, 0x1, &(0x7f0000000100)=""/113, 0x71}, &(0x7f0000000200)=0x40)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000080)={0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7d12391a}, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8})

13.679510482s ago: executing program 0 (id=1493):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffde0}, 0x90)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0xffc, &(0x7f0000000740)=""/4092, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x80)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000070250000000000bfa100000000000007010000f8ffffffb7020067a8804a440000000000b703005cc0a217fb234d69eac3627dbd4d38710000f7ff008500000000000000000000000000000000000000009d75b5d8aa3b084e7c6892140ef6683c95398ff0174e4019bf1788b52f4da53fa8b8831fc271e21ba4cab175b3de513060a95cbaafe38f9cdd41b7c1db3d18f82ff2c7f3115c2b030546d64db0893c9363f96c35bcc42c98ac7379aec4a4a9ec20952cd114fb3567b49df6a69e2bbc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x9, 0x10}, 0xc)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x8000000000000002})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0)
r10 = dup3(r9, r8, 0x0)
syz_kvm_setup_cpu$x86(r10, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg2\x00'})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4008, r1}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000005e000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf090000000000005509010000000000950091000000000000b702000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x29, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x14}, {0x18, 0x8, 0x2, 0x0, r12}, {}, {0x15, 0x0, 0x0, 0x76}}, @snprintf={{0x7, 0x0, 0xb, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {}, {0x85, 0x0, 0x0, 0xa4}}], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001740)=@generic={&(0x7f0000000700)='.\x00'}, 0x18)

13.373159659s ago: executing program 1 (id=1494):
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e25, 0xffff, @mcast2, 0x5}, 0x1c)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000003080)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x240000c0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xa4}, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x20)

13.249392637s ago: executing program 0 (id=1495):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000004e00), 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3}}]}}]}}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e2b}, 0x6e)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x11a, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x1, 0x1, 0x1, 0xd0, 0x7, [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0xff, {{0xa, 0x24, 0x6, 0x0, 0x0, "f84a30258e"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0xf, 0xc8}, [@network_terminal={0x7, 0x24, 0xa, 0x77, 0x9, 0x2, 0xb}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @mdlm_detail={0xb5, 0x24, 0x13, 0x7, "3e415a01523ed32eadb2314ec925676a9392622b61762c11935620418eab1a69e06e0d06a4272b9adbdd0231327bb881f4d805bcfc0b5fddb3896b8aa081046ef1769b40c6038a3ac80c3a3733624bbf17e7887627a786a9460191fa026f682dc833dbb2fa7b7f1cc2db306e64e176b307cf714a0a64b11f9f3e4c19a57b7f737450b5d7fcfd09d65e416b8784d153cf1ba8920e380cd8421d21a8a1095c574f51aa705168ae3f9328a49066e7fd65de98"}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x3, 0x79, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6d, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x640, 0x8, 0x10, 0x1}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0xd, 0xd, 0x0, 0x40, 0x80}, 0x68, &(0x7f0000000680)={0x5, 0xf, 0x68, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x4, 0x5, 0x7ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x10, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "32b838ed01ad160f3c0de919b56d9eeb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x3, 0x200, 0xff}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x3ff, 0xf000, 0x9, [0xcf, 0xe040, 0xc0cf, 0x9f3f, 0xffc0, 0xff00ff]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x9, 0xc9, 0x3, 0x6e}]}, 0x6, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1004}}, {0xc3, &(0x7f0000000780)=@string={0xc3, 0x3, "a9ade74622bca71e6059e2c8b6fbc6eaf662b15989128b526534f16ef5851ccc391949f769f70a76aa3c55e140ef9c21328c3311b5e92f38c34e5600c2f6d72cea56cac37c1abf9c3a0975a58d9546bf54389e73f8fd3a76b3ce6a1a4976d8d89954f26846f9020daf47524ac33e18f6ad28f48f8b09f8d108279a25d8b4c848fae18f0ae14865979447fa09f785512a05f8d3e605c783d9baba27142dd4861ad54f965f3281c32a6f3f6e7d8af8170009f51997ca09a63e8bcd0dcf4df63a0010"}}, {0x4a, &(0x7f0000000a80)=@string={0x4a, 0x3, "c0ee0b555d08d47000d72e8eaac4285c2a650af8fb994669c29f028b1038bd9d0eac85f804b7a2c11db6d8808403b460507ccaf08a72ca22955a59b19251e275606d33063cf262cc"}}, {0xdb, &(0x7f0000000b80)=@string={0xdb, 0x3, "802310f070184c2cb5a10d3373c964c0f78571cd95d5d7fc8a2e2b78447a6f024e0baad19e59cfe447a8efed4bd4d51ce0c8e87b2d5c4654d25d6c3e0ee61fe5304959eb6d6399df015e71e6804512e5d4fb182ff3aea1cf183158b3e6c2b30a60073202bd5e2296cc4ca4aaa09f8415d2848c99e3dc49d2a8738d77778c1417a8388280ffa40c0c5b7404df0e495b2ef4f00d1670cd21fcce7bbb63775b1ef65015278b90fd468e5ce0aaa942ecc322e124148dfd86e08b190587b910b7d850cefb1a56ac91c5fb39e9ad0d4a6b826aceb79b2fe627418c3e"}}, {0xf3, &(0x7f0000000c80)=@string={0xf3, 0x3, "f3bbab0948c3f3ca4a59b9d5e49cdd610e9d7633318e9ccbf54517427e11ad8bdb46d6941f68aed2494334ac50d8db358e2c2b7018c3bdc708c700bd6f608d7eba4445ffab7e91deb8680976c736e2e36ca5cd7e11cbb1076432ca7acaa03d385aa75b40b168d651e734ede11c41e8bbcd6508edf1784cc6466196fc245cdde2f66c6fe7876b94279f0fc59e4d24edff0caa745712a8adfab403d7bbe9c6dc2cd295cabcb4c55d323249959e4ab961ce56d793c2f71eba0919b299f0bac33447e8cf27f22a83ca3e373b45455494fdcc4e873c4917353bd74f91529af8a1576ae052adeb1ce69525200563cececfb3f147"}}]})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000c400)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xfd885f51ea8e4c7, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1d0000000000000000004100000008000300", @ANYRES32=r8], 0x2c}}, 0x0)
getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000480), &(0x7f00000004c0)=0x4)

13.202774549s ago: executing program 2 (id=1496):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3)

13.089820859s ago: executing program 3 (id=1497):
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x88100)
syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@buf={0x0, &(0x7f0000000240)})
r2 = getpid()
syz_pidfd_open(r2, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000340)={0x8, 0x8, 0x4, 0x7ff, 0x4, "5de475ce4c097094e881f22ce4873ce59da3d9"})
sched_setscheduler(r2, 0x3, &(0x7f0000000280))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
socket(0x80000000000000a, 0x2, 0x0)
r4 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
dup2(r4, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10)
connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_elf64(r6, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000001840), 0x27148e3ad6f70ee, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x28, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x10, 0x0, 0x0)

6.908897817s ago: executing program 3 (id=1498):
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x3d)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1}}], 0x1, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
syz_emit_vhci(0x0, 0x22)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd)
syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(r3, 0x4, 0x0)
getdents(r3, 0x0, 0x48)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffbc, 0xffffdfffffffffe1, 0xff, 0x0, 0x10001, 0x7], 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close_range(r6, r3, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000040a01040000000000000000020000000900010073797a300000000008000a4000000003100008800c00014000000000ffffffff0900030073797a31000000000800054000000000d1a33ea3db306d057801737f97839c50db8676ef5534a9d50a53104dd77926"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008800)
unshare(0x40040000)
syz_clone(0x42020100, &(0x7f0000002300)="215da9eb4fe8b0dabb18bfb5ec780000d6c3108825741dfdf2d47ad279f8aad709e824d0dafad038daf8efbb673f323244056a405ee08fc7177652ae8a549c637d483b3fd0445087eecceba035ceef", 0x4f, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)="976b6469995d4e15c3e0fcff35bdba90cfe1d2d09d05ba1c16aabe5198879e70be37d9e6350c4876c8ef4cf28364c647203872047e35b910b6b083cd8f9646e6c38f82c5e58bd06b82edb943d7e5fad541affe7431bf9f8fb8383932b058969b8f1e788924cfb78e78ef075ccc2eccee5870a1bdd1b2")

6.869788706s ago: executing program 1 (id=1499):
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)={0x40, 0xa, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_USERDATA={0x29, 0xd, 0x1, 0x0, "2d9be364991181e7a6fa8f0d377fcc74a75b985b02ccc33f7d0be51f5ab4d5c93aba7b2c61"}]}, 0x40}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="d48a747bbd0977ea55bea644a3797cd4bd60faef2cacc01e4d7e7b27f8b0f4dbc1fd513569687c1c859ded3ac9d62cc263b3bddeea11b645c450d9efc7049a7a7763491a79e31b799fea3c2176deb4", 0x4f}, {&(0x7f0000001100)='1', 0x1}], 0x2}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/132, 0x84}], 0x1}}], 0x1, 0x140, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x2c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x25}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa2e0ff7f}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.349818616s ago: executing program 3 (id=1502):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r4, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@sndrcv={0x30}, @dstaddrv4={0x18, 0x84, 0x7, @dev}], 0x48}], 0x1, 0x0) (async)
sendmmsg$inet_sctp(r4, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@sndrcv={0x30}, @dstaddrv4={0x18, 0x84, 0x7, @dev}], 0x48}], 0x1, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001880)={0x50, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x50}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'gre0\x00', {0x2, 0x4e21, @private=0xa010101}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e67e338bb0d3f13bdd43a383b21c8a60c039ad143e65", 0x16, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05"], 0x0)

0s ago: executing program 3 (id=1503):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x500, &(0x7f00000002c0)={&(0x7f00000007c0)={0x30, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

tlink: Unexpected mask (mask=440, allowed=10048)
[  382.837998][T10901] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  383.132312][  T143] hsr_slave_0: left promiscuous mode
[  383.142363][  T143] hsr_slave_1: left promiscuous mode
[  383.150428][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.158666][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.170003][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.173096][ T5177] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  383.178629][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.196608][ T5094] Bluetooth: hci2: command tx timeout
[  383.216659][  T143] veth1_macvtap: left promiscuous mode
[  383.222196][  T143] veth0_macvtap: left promiscuous mode
[  383.253334][  T143] veth1_vlan: left promiscuous mode
[  383.261330][  T143] veth0_vlan: left promiscuous mode
[  383.371518][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.400226][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  383.418131][ T5177] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  383.443358][ T5177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.465404][ T5177] usb 4-1: config 0 descriptor??
[  383.906911][ T5177] lenovo 0003:17EF:6067.0025: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0
[  384.106602][ T5177] usb 4-1: USB disconnect, device number 34
[  384.199988][  T143] team0 (unregistering): Port device team_slave_1 removed
[  384.247629][  T143] team0 (unregistering): Port device team_slave_0 removed
[  384.320182][ T5094] Bluetooth: hci1: command tx timeout
[  384.916321][T10748] veth0_macvtap: entered promiscuous mode
[  384.975620][T10748] veth1_macvtap: entered promiscuous mode
[  385.066557][T10871] chnl_net:caif_netlink_parms(): no params data found
[  385.263223][ T5094] Bluetooth: hci2: command tx timeout
[  385.549620][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.568123][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.587629][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.611628][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.637854][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.658242][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.688794][T10748] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.801435][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.813335][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.827754][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.838581][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.848823][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.861398][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.873367][T10748] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.893362][ T5143] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  385.905105][T10894] chnl_net:caif_netlink_parms(): no params data found
[  385.988511][T10748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.998586][T10748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.010555][T10748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.020799][T10748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.085061][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.111149][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.130729][ T5143] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  386.140879][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.171784][ T5143] usb 4-1: config 0 descriptor??
[  386.181478][T10871] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.189767][T10871] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.199744][T10871] bridge_slave_0: entered allmulticast mode
[  386.209381][T10871] bridge_slave_0: entered promiscuous mode
[  386.242105][T10871] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.253876][T10871] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.261110][T10871] bridge_slave_1: entered allmulticast mode
[  386.269824][T10871] bridge_slave_1: entered promiscuous mode
[  386.365203][T10894] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.373217][T10894] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.380501][T10894] bridge_slave_0: entered allmulticast mode
[  386.392927][ T5094] Bluetooth: hci1: command tx timeout
[  386.402835][T10894] bridge_slave_0: entered promiscuous mode
[  386.416694][T10871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.438718][T10871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.460255][T10894] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.484377][T10894] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.491716][T10894] bridge_slave_1: entered allmulticast mode
[  386.504857][T10894] bridge_slave_1: entered promiscuous mode
[  386.600233][  T143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.608572][ T5143] lenovo 0003:17EF:6067.0026: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0
[  386.649303][T10894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.679179][T10871] team0: Port device team_slave_0 added
[  386.708572][T10871] team0: Port device team_slave_1 added
[  386.717031][T10894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.783263][ T5094] Bluetooth: hci3: command tx timeout
[  386.812602][ T5143] usb 4-1: USB disconnect, device number 35
[  386.812918][  T143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.962186][T10894] team0: Port device team_slave_0 added
[  386.977537][T10894] team0: Port device team_slave_1 added
[  387.048223][  T143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.070119][T10871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.099371][T10871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.169499][T10871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.287424][  T143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.312151][T10871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.319506][T10871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.346158][ T5094] Bluetooth: hci2: command tx timeout
[  387.356276][T10871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.407533][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.443314][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.593617][T10894] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.601847][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.691050][T10894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.736154][T10894] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.744220][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.780752][T10894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.851655][ T2798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.866454][T10871] hsr_slave_0: entered promiscuous mode
[  387.884383][T10871] hsr_slave_1: entered promiscuous mode
[  387.893968][ T2798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.128105][T10894] hsr_slave_0: entered promiscuous mode
[  388.173443][T10894] hsr_slave_1: entered promiscuous mode
[  388.183540][T10894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  388.191134][T10894] Cannot create hsr debugfs directory
[  388.457530][  T143] bridge_slave_1: left allmulticast mode
[  388.471887][ T5094] Bluetooth: hci1: command tx timeout
[  388.493269][  T143] bridge_slave_1: left promiscuous mode
[  388.510106][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.536259][  T143] bridge_slave_0: left allmulticast mode
[  388.562080][  T143] bridge_slave_0: left promiscuous mode
[  388.582854][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.426961][ T5094] Bluetooth: hci2: command tx timeout
[  389.553507][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.575727][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.588707][  T143] bond0 (unregistering): Released all slaves
[  389.744170][ T5177] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  389.850070][   T45] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  389.966105][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.978617][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.988925][ T5177] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  390.003357][ T5177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.032493][ T5177] usb 4-1: config 0 descriptor??
[  390.043146][   T45] usb 2-1: Using ep0 maxpacket: 8
[  390.068162][   T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  390.092638][   T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  390.117353][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  390.141948][   T45] usb 2-1: SerialNumber: syz
[  390.150008][   T45] usb 2-1: config 0 descriptor??
[  390.331475][  T143] hsr_slave_0: left promiscuous mode
[  390.379699][  T143] hsr_slave_1: left promiscuous mode
[  390.389917][   T45] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  390.405817][   T45] usb 2-1: No valid video chain found.
[  390.414598][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.422058][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.471212][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.479566][ T5177] lenovo 0003:17EF:6067.0027: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0
[  390.503119][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.545668][ T5094] Bluetooth: hci1: command tx timeout
[  390.607834][  T143] veth1_macvtap: left promiscuous mode
[  390.651251][  T143] veth0_macvtap: left promiscuous mode
[  390.683647][  T143] veth1_vlan: left promiscuous mode
[  390.685449][   T45] usb 4-1: USB disconnect, device number 36
[  390.708992][  T143] veth0_vlan: left promiscuous mode
[  390.972428][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.983732][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.502164][T11047] openvswitch: netlink: Message has 4 unknown bytes.
[  391.688409][  T143] team0 (unregistering): Port device team_slave_1 removed
[  391.804513][  T143] team0 (unregistering): Port device team_slave_0 removed
[  392.741208][T11021] netlink: 'syz.1.1231': attribute type 8 has an invalid length.
[  392.777733][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'.
[  392.818566][T11052] tipc: Started in network mode
[  392.828110][T11052] tipc: Node identity , cluster identity 8
[  392.842369][    T8] usb 2-1: USB disconnect, device number 43
[  392.911491][   T29] audit: type=1400 audit(1720252438.805:111): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F269BF7B1F61C pid=11054 comm="syz.0.1235"
[  393.371079][ T5094] Bluetooth: hci0: Malformed HCI Event: 0x22
[  393.929617][ T5139] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  393.950829][T10894] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  393.981766][T10894] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  394.044800][T10894] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  394.176506][ T5139] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  394.213221][T10894] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  394.225888][ T5139] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  394.273005][ T5139] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  394.336601][ T5139] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  394.384892][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.393116][T10871] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  394.428993][T10871] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  394.479902][T10871] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  394.489423][ T5139] usb 1-1: invalid MIDI out EP 0
[  394.567551][T10871] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  394.633746][ T5139] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  394.819301][ T5092] udevd[5092]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  395.033080][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  395.065242][T10894] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.238066][T10894] 8021q: adding VLAN 0 to HW filter on device team0
[  395.263643][    T9] usb 2-1: Using ep0 maxpacket: 32
[  395.279193][    T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  395.289919][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.297053][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.309177][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  395.359959][    T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  395.386844][    T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  395.402613][T10871] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.415943][    T9] usb 2-1: Product: syz
[  395.421480][    T9] usb 2-1: Manufacturer: syz
[  395.434968][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.442093][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.459411][    T9] usb 2-1: SerialNumber: syz
[  395.499918][    T9] usb 2-1: config 0 descriptor??
[  395.520476][T10871] 8021q: adding VLAN 0 to HW filter on device team0
[  395.564287][    T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  395.584576][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.591726][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.633479][    T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  395.640209][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.648627][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.850612][T10894] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.123771][T10871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.148559][T10894] veth0_vlan: entered promiscuous mode
[  396.189582][    T9] usb 2-1: USB disconnect, device number 44
[  396.195541][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  396.219286][T11108] pim6reg: entered allmulticast mode
[  396.261656][T11110] pim6reg: left allmulticast mode
[  396.271235][    T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  396.399069][T10894] veth1_vlan: entered promiscuous mode
[  396.491810][T10871] veth0_vlan: entered promiscuous mode
[  396.582991][ T5139] usb 1-1: USB disconnect, device number 38
[  396.667265][T10871] veth1_vlan: entered promiscuous mode
[  396.710667][T10894] veth0_macvtap: entered promiscuous mode
[  396.718843][T11085] ldusb: No device or device unplugged -19
[  396.740863][T10894] veth1_macvtap: entered promiscuous mode
[  396.802481][T10871] veth0_macvtap: entered promiscuous mode
[  396.899556][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.945335][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.975853][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  396.991495][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.003901][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.020175][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.039545][T11085] input: syz0 as /devices/virtual/input/input39
[  397.070392][T10894] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.094001][T10871] veth1_macvtap: entered promiscuous mode
[  397.124864][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.163086][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.193989][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.239936][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.260206][T10894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.285286][T10894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.319235][T10894] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.371284][T10894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.380790][T10894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.391933][T10894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.402058][T10894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.437703][T10871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.455471][T10871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.477555][T10871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.512596][T10871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.556840][T10871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.596270][T10871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.619819][T10871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.645481][T10871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.672068][T10871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.749810][T11152] syzkaller1: entered promiscuous mode
[  397.795312][T11152] syzkaller1: entered allmulticast mode
[  397.802782][T10871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.818243][T10871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.856720][T10871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.877629][T10871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.898097][T10871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.946554][T10871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.968611][T10871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.990590][T10871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.015358][T10871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.218337][T10871] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.262949][T10871] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.271691][T10871] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.321398][T10871] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.622986][ T8517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.630859][ T8517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.728822][T11176] FAULT_INJECTION: forcing a failure.
[  398.728822][T11176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  398.774205][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.800504][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.813478][T11176] CPU: 0 PID: 11176 Comm: syz.3.1254 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0
[  398.823665][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  398.833461][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.833712][T11176] Call Trace:
[  398.833724][T11176]  <TASK>
[  398.833733][T11176]  dump_stack_lvl+0x241/0x360
[  398.844823][T11176]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.854443][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.857585][T11176]  ? __pfx__printk+0x10/0x10
[  398.857619][T11176]  ? __pfx_lock_release+0x10/0x10
[  398.874532][T11176]  should_fail_ex+0x3b0/0x4e0
[  398.879247][T11176]  _copy_from_iter+0x1f6/0x1960
[  398.884127][T11176]  ? __virt_addr_valid+0x183/0x520
[  398.889265][T11176]  ? __pfx_lock_release+0x10/0x10
[  398.894323][T11176]  ? __alloc_skb+0x28f/0x440
[  398.898933][T11176]  ? __pfx__copy_from_iter+0x10/0x10
[  398.904256][T11176]  ? __virt_addr_valid+0x183/0x520
[  398.909390][T11176]  ? __virt_addr_valid+0x183/0x520
[  398.914520][T11176]  ? __virt_addr_valid+0x44e/0x520
[  398.919745][T11176]  ? __check_object_size+0x49c/0x900
[  398.925058][T11176]  netlink_sendmsg+0x743/0xcb0
[  398.929941][T11176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  398.935233][T11176]  ? __import_iovec+0x536/0x820
[  398.940076][T11176]  ? aa_sock_msg_perm+0x91/0x160
[  398.945017][T11176]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  398.950292][T11176]  ? security_socket_sendmsg+0x87/0xb0
[  398.955749][T11176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  398.961030][T11176]  __sock_sendmsg+0x221/0x270
[  398.965725][T11176]  ____sys_sendmsg+0x525/0x7d0
[  398.970498][T11176]  ? __pfx_____sys_sendmsg+0x10/0x10
[  398.975792][T11176]  __sys_sendmsg+0x2b0/0x3a0
[  398.980385][T11176]  ? __pfx___sys_sendmsg+0x10/0x10
[  398.985495][T11176]  ? vfs_write+0x7c4/0xc90
[  398.989931][T11176]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  398.996339][T11176]  ? do_syscall_64+0x100/0x230
[  399.001109][T11176]  ? do_syscall_64+0xb6/0x230
[  399.005780][T11176]  do_syscall_64+0xf3/0x230
[  399.010279][T11176]  ? clear_bhb_loop+0x35/0x90
[  399.014943][T11176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.020831][T11176] RIP: 0033:0x7fd8acb75bd9
[  399.025241][T11176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  399.044837][T11176] RSP: 002b:00007fd8ad975048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  399.053240][T11176] RAX: ffffffffffffffda RBX: 00007fd8acd03f60 RCX: 00007fd8acb75bd9
[  399.061286][T11176] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  399.069254][T11176] RBP: 00007fd8ad9750a0 R08: 0000000000000000 R09: 0000000000000000
[  399.077221][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.085179][T11176] R13: 000000000000000b R14: 00007fd8acd03f60 R15: 00007fd8ace2fa68
[  399.093150][T11176]  </TASK>
[  399.130644][ T8517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.145197][ T8517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.487025][T11195] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1209'.
[  399.618188][T11202] netlink: 'syz.1.1260': attribute type 4 has an invalid length.
[  399.914343][T11211] kvm: kvm [11210]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000a)
[  400.093390][ T5142] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  400.207816][ T5139] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  400.305179][ T5142] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  400.331593][ T5142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.371570][ T5142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.398720][ T5139] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  400.419153][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.443390][ T5142] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  400.491915][ T5139] usb 2-1: config 0 descriptor??
[  400.503727][ T5142] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  400.526830][ T5139] cp210x 2-1:0.0: cp210x converter detected
[  400.543508][ T5142] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  400.593824][ T5142] usb 1-1: Manufacturer: syz
[  400.610202][ T5142] usb 1-1: config 0 descriptor??
[  400.933816][ T5139] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  401.022466][ T5139] usb 2-1: cp210x converter now attached to ttyUSB0
[  401.047832][ T5142] appleir 0003:05AC:8243.0028: unknown main item tag 0x0
[  401.066017][ T5142] appleir 0003:05AC:8243.0028: No inputs registered, leaving
[  401.174128][ T5142] appleir 0003:05AC:8243.0028: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  401.213688][T11241] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1265'.
[  402.866517][ T5139] usb 2-1: USB disconnect, device number 45
[  402.922472][ T5139] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  402.999814][T11315] FAULT_INJECTION: forcing a failure.
[  402.999814][T11315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  403.073944][T11315] CPU: 0 PID: 11315 Comm: syz.1.1273 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0
[  403.084112][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  403.094152][T11315] Call Trace:
[  403.097419][T11315]  <TASK>
[  403.100331][T11315]  dump_stack_lvl+0x241/0x360
[  403.105001][T11315]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.110184][T11315]  ? __pfx__printk+0x10/0x10
[  403.114761][T11315]  ? snprintf+0xda/0x120
[  403.118991][T11315]  should_fail_ex+0x3b0/0x4e0
[  403.123689][T11315]  _copy_to_user+0x2f/0xb0
[  403.128091][T11315]  simple_read_from_buffer+0xca/0x150
[  403.133466][T11315]  proc_fail_nth_read+0x1e9/0x250
[  403.138514][T11315]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  403.144072][T11315]  ? rw_verify_area+0x520/0x6b0
[  403.148908][T11315]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  403.154448][T11315]  vfs_read+0x204/0xbc0
[  403.158585][T11315]  ? __pfx_lock_release+0x10/0x10
[  403.163598][T11315]  ? __pfx_vfs_read+0x10/0x10
[  403.168261][T11315]  ? __fget_files+0x29/0x470
[  403.172834][T11315]  ? __fget_files+0x3f6/0x470
[  403.177506][T11315]  ksys_read+0x1a0/0x2c0
[  403.181742][T11315]  ? __pfx_ksys_read+0x10/0x10
[  403.186497][T11315]  ? do_syscall_64+0x100/0x230
[  403.191277][T11315]  ? do_syscall_64+0xb6/0x230
[  403.195965][T11315]  do_syscall_64+0xf3/0x230
[  403.200535][T11315]  ? clear_bhb_loop+0x35/0x90
[  403.205248][T11315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.211156][T11315] RIP: 0033:0x7faffc5746bc
[  403.215556][T11315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48
[  403.235156][T11315] RSP: 002b:00007faffd34e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  403.243562][T11315] RAX: ffffffffffffffda RBX: 00007faffc703f60 RCX: 00007faffc5746bc
[  403.251524][T11315] RDX: 000000000000000f RSI: 00007faffd34e0b0 RDI: 0000000000000004
[  403.259485][T11315] RBP: 00007faffd34e0a0 R08: 0000000000000000 R09: 0000000000000000
[  403.267454][T11315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  403.275410][T11315] R13: 000000000000000b R14: 00007faffc703f60 R15: 00007faffc82fa68
[  403.283394][T11315]  </TASK>
[  403.299290][T11313] netlink: 'syz.0.1274': attribute type 4 has an invalid length.
[  403.301618][    T9] usb 1-1: USB disconnect, device number 39
[  403.382597][ T5139] cp210x 2-1:0.0: device disconnected
[  403.503590][ T5094] Bluetooth: hci2: command tx timeout
[  404.161233][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.393245][ T5139] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  404.403102][    T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  404.490224][    T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  404.604914][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  404.604926][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  404.604954][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  404.641777][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  404.677776][    T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  404.682043][ T5139] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  404.688075][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.733083][    T8] usb 4-1: Using ep0 maxpacket: 16
[  404.743547][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  404.746928][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.764235][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  404.793054][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  404.801216][ T5139] usb 2-1: config 0 descriptor??
[  404.808715][    T9] usb 1-1: config 0 descriptor??
[  404.875994][    T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  404.890352][    T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  404.925503][    T8] usb 4-1: Manufacturer: syz
[  404.940214][    T8] usb 4-1: config 0 descriptor??
[  404.965833][T11374] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1284'.
[  405.284807][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  405.291715][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  405.298722][ T5139] usbhid 2-1:0.0: can't add hid device: -71
[  405.320930][ T5139] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  405.336393][    T9] usb 1-1: USB disconnect, device number 40
[  405.338330][ T5139] usb 2-1: USB disconnect, device number 46
[  405.367317][T11379] netlink: 'syz.2.1286': attribute type 4 has an invalid length.
[  405.560772][   T45] usb 4-1: USB disconnect, device number 37
[  405.797992][T11385] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  405.813679][T11385] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  405.912238][T11385] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  405.966041][T11385] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  406.019084][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'.
[  406.056107][T11385] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  406.117298][T11385] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  406.164358][T11405] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  406.235269][T11397] program syz.4.1290 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  406.399991][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'.
[  406.480017][T11385] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  406.523092][T11385] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  406.683435][ T5095] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  406.739457][   T29] audit: type=1326 audit(1720252452.645:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11430 comm="syz.4.1296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7597f75bd9 code=0x0
[  406.821831][T11385] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  406.849088][T11385] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  406.945280][ T5095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.965269][ T5095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.989059][ T5095] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  407.008353][ T5095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.040867][ T5095] usb 2-1: config 0 descriptor??
[  407.092998][ T5142] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  407.298371][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.314810][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.329431][ T5142] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  407.342614][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.362540][ T5142] usb 4-1: config 0 descriptor??
[  407.452871][    C1] hrtimer: interrupt took 58318 ns
[  407.478854][ T5095] lenovo 0003:17EF:6067.0029: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.1-1/input0
[  407.688418][ T5095] usb 2-1: USB disconnect, device number 47
[  407.831050][ T5142] lenovo 0003:17EF:6067.002A: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0
[  408.028380][    T8] usb 4-1: USB disconnect, device number 38
[  408.153440][ T5143] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  408.341267][T11478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.351269][T11478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.354877][ T5143] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  408.372546][ T5143] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  408.381666][ T5143] usb 5-1: config 1 has no interface number 0
[  408.391431][ T5143] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  408.408534][ T5143] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  408.425146][ T5143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.433375][ T5143] usb 5-1: Product: syz
[  408.437536][ T5143] usb 5-1: Manufacturer: syz
[  408.442112][ T5143] usb 5-1: SerialNumber: syz
[  408.450939][ T5143] usb 5-1: selecting invalid altsetting 1
[  408.593044][ T5095] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  408.786999][ T5095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  408.800040][ T5095] usb 2-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=96.8d
[  408.814875][ T5095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.826730][ T5095] usb 2-1: Product: syz
[  408.830961][ T5095] usb 2-1: Manufacturer: syz
[  408.842909][ T5095] usb 2-1: SerialNumber: syz
[  408.852195][ T5095] usb 2-1: config 0 descriptor??
[  408.866700][ T5095] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (3275:0085, interface 0, class 0)
[  408.895747][ T5095] em28xx 2-1:0.0: Device initialization failed.
[  408.902436][ T5095] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  409.089395][    T8] usb 2-1: USB disconnect, device number 48
[  409.153242][ T5139] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  409.235228][T11491] x_tables: duplicate underflow at hook 1
[  409.243484][T11493] x_tables: duplicate underflow at hook 1
[  409.296238][T11495] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  409.354998][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.366133][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.376009][ T5139] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  409.385492][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.396751][ T5139] usb 4-1: config 0 descriptor??
[  409.403186][ T5144] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  409.593046][ T5144] usb 3-1: Using ep0 maxpacket: 32
[  409.619467][T11499] netlink: 'syz.0.1308': attribute type 3 has an invalid length.
[  409.633429][T11499] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1308'.
[  409.643468][ T5144] usb 3-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=80.89
[  409.667224][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.689256][ T5144] usb 3-1: Product: syz
[  409.699432][ T5144] usb 3-1: Manufacturer: syz
[  409.711404][ T5144] usb 3-1: SerialNumber: syz
[  409.729455][ T5144] usb 3-1: config 0 descriptor??
[  409.746418][ T5144] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  409.839706][ T5139] usbhid 4-1:0.0: can't add hid device: -71
[  409.867529][ T5139] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  409.910867][ T5139] usb 4-1: USB disconnect, device number 39
[  409.949022][T11489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.000692][T11489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.658063][T11502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.675413][ T5139] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  410.915099][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.980012][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.061293][ T5139] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  411.081269][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.119699][ T5139] usb 2-1: config 0 descriptor??
[  411.222158][ T5177] IPVS: starting estimator thread 0...
[  411.234022][ T5143] cdc_ncm 5-1:1.1: bind() failure
[  411.287217][ T5143] usb 5-1: USB disconnect, device number 36
[  411.374063][T11533] IPVS: using max 25 ests per chain, 60000 per kthread
[  411.569463][T11537] dccp_invalid_packet: P.Data Offset(172) too large
[  411.584526][ T5139] lenovo 0003:17EF:6067.002B: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.1-1/input0
[  411.891833][ T5177] usb 2-1: USB disconnect, device number 49
[  412.116475][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.255167][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.387611][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.479270][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.494496][    T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  412.556905][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  412.632588][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  412.643280][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  412.652392][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  412.664684][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  412.674010][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  412.727377][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  412.735427][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  412.756098][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  412.765934][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  412.776577][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  412.793296][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  412.800891][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  412.801070][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  412.887644][    T9] usb 4-1: config 1 has no interface number 0
[  412.908697][    T9] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  412.956189][T11563] syzkaller0: entered promiscuous mode
[  412.970241][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  412.990706][T11563] syzkaller0: entered allmulticast mode
[  412.997087][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.009672][    T9] usb 4-1: Product: syz
[  413.014473][ T5139] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  413.022812][    T9] usb 4-1: Manufacturer: syz
[  413.044600][    T9] usb 4-1: SerialNumber: syz
[  413.076509][    T9] usb 4-1: selecting invalid altsetting 1
[  413.215748][ T5139] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  413.233030][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.274288][ T5139] usb 2-1: config 0 descriptor??
[  413.705844][ T5139] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  414.785704][ T5144] usb 3-1: qt2_attach - failed to power on unit: -110
[  414.803641][ T5144] quatech2 3-1:0.0: probe with driver quatech2 failed with error -110
[  414.866383][ T5094] Bluetooth: hci2: command tx timeout
[  415.195664][ T5139] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT)
[  415.445333][    T9] cdc_ncm 4-1:1.1: bind() failure
[  415.460769][    T9] usb 4-1: USB disconnect, device number 40
[  415.500200][   T11] bridge_slave_1: left allmulticast mode
[  415.521631][   T11] bridge_slave_1: left promiscuous mode
[  415.529728][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.563649][   T11] bridge_slave_0: left allmulticast mode
[  415.569311][   T11] bridge_slave_0: left promiscuous mode
[  415.580030][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.901313][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.912240][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.923293][   T11] bond0 (unregistering): Released all slaves
[  415.935379][   T11] bond1 (unregistering): Released all slaves
[  416.377136][   T45] usb 2-1: USB disconnect, device number 50
[  416.607207][   T11] hsr_slave_0: left promiscuous mode
[  416.614666][   T29] audit: type=1326 audit(1720252462.525:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  416.659257][   T11] hsr_slave_1: left promiscuous mode
[  416.659938][   T29] audit: type=1326 audit(1720252462.545:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  416.694536][   T29] audit: type=1326 audit(1720252462.545:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  416.719738][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  416.738870][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'.
[  416.747163][   T29] audit: type=1326 audit(1720252462.545:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  416.748383][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  416.806616][   T29] audit: type=1326 audit(1720252462.545:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  416.832206][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  416.855045][   T29] audit: type=1326 audit(1720252462.545:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  416.866838][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  416.892515][T11606] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1337'.
[  416.906452][   T29] audit: type=1326 audit(1720252462.545:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  416.946469][ T5094] Bluetooth: hci2: command tx timeout
[  416.963819][   T29] audit: type=1326 audit(1720252462.545:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  416.988835][   T29] audit: type=1326 audit(1720252462.545:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  417.011590][   T11] veth1_macvtap: left promiscuous mode
[  417.011690][   T29] audit: type=1326 audit(1720252462.555:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11600 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faffc575bd9 code=0x7ffc0000
[  417.031305][   T11] veth0_macvtap: left promiscuous mode
[  417.055101][   T11] veth1_vlan: left promiscuous mode
[  417.061000][ T5091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  417.073641][   T11] veth0_vlan: left promiscuous mode
[  417.079755][ T5091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  417.095134][ T5091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  417.106856][ T5091] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  417.114870][ T5091] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  417.124424][ T5091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  417.556093][   T11] team0 (unregistering): Port device team_slave_1 removed
[  417.597012][   T11] team0 (unregistering): Port device team_slave_0 removed
[  417.977317][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'.
[  418.041551][T11571] chnl_net:caif_netlink_parms(): no params data found
[  418.107377][T11566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.194157][T11618] FAULT_INJECTION: forcing a failure.
[  418.194157][T11618] name failslab, interval 1, probability 0, space 0, times 0
[  418.235994][T11618] CPU: 0 PID: 11618 Comm: syz.1.1339 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0
[  418.246189][T11618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  418.256229][T11618] Call Trace:
[  418.259490][T11618]  <TASK>
[  418.262405][T11618]  dump_stack_lvl+0x241/0x360
[  418.267074][T11618]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.272277][T11618]  ? __pfx__printk+0x10/0x10
[  418.276892][T11618]  should_fail_ex+0x3b0/0x4e0
[  418.281558][T11618]  ? sctp_add_bind_addr+0x89/0x3a0
[  418.286657][T11618]  should_failslab+0x9/0x20
[  418.291160][T11618]  kmalloc_trace_noprof+0x6c/0x2c0
[  418.296305][T11618]  sctp_add_bind_addr+0x89/0x3a0
[  418.301256][T11618]  sctp_copy_local_addr_list+0x311/0x500
[  418.306877][T11618]  ? sctp_copy_local_addr_list+0xab/0x500
[  418.312579][T11618]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  418.318715][T11618]  ? sctp_v6_is_any+0x60/0x70
[  418.323383][T11618]  sctp_bind_addr_copy+0xad/0x3b0
[  418.328398][T11618]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[  418.334717][T11618]  sctp_connect_new_asoc+0x2f3/0x6c0
[  418.340074][T11618]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  418.345881][T11618]  ? sctp_endpoint_lookup_assoc+0x7c/0x250
[  418.351690][T11618]  ? sctp_endpoint_lookup_assoc+0x217/0x250
[  418.357576][T11618]  ? sctp_endpoint_lookup_assoc+0x7c/0x250
[  418.363373][T11618]  __sctp_connect+0x66d/0xe30
[  418.368047][T11618]  ? __local_bh_enable_ip+0x168/0x200
[  418.373412][T11618]  ? __pfx___sctp_connect+0x10/0x10
[  418.378596][T11618]  ? sctp_inet_connect+0xa7/0x1f0
[  418.383616][T11618]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  418.389325][T11618]  ? do_raw_spin_unlock+0x13c/0x8b0
[  418.394527][T11618]  sctp_inet_connect+0x149/0x1f0
[  418.399463][T11618]  __sys_connect+0x2df/0x310
[  418.404053][T11618]  ? __pfx___sys_connect+0x10/0x10
[  418.409165][T11618]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  418.415484][T11618]  ? do_syscall_64+0x100/0x230
[  418.420246][T11618]  __x64_sys_connect+0x7a/0x90
[  418.425002][T11618]  do_syscall_64+0xf3/0x230
[  418.429498][T11618]  ? clear_bhb_loop+0x35/0x90
[  418.434165][T11618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.440055][T11618] RIP: 0033:0x7faffc575bd9
[  418.444462][T11618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.464057][T11618] RSP: 002b:00007faffd32d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  418.472462][T11618] RAX: ffffffffffffffda RBX: 00007faffc704038 RCX: 00007faffc575bd9
[  418.480424][T11618] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000004
[  418.488388][T11618] RBP: 00007faffd32d0a0 R08: 0000000000000000 R09: 0000000000000000
[  418.496351][T11618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  418.504310][T11618] R13: 000000000000006e R14: 00007faffc704038 R15: 00007faffc82fa68
[  418.512283][T11618]  </TASK>
[  418.610243][T11617] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  418.638112][T11617] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  418.760625][T11617] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  418.797098][T11617] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  418.828654][T11571] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.854999][T11571] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.862276][T11571] bridge_slave_0: entered allmulticast mode
[  418.883721][T11571] bridge_slave_0: entered promiscuous mode
[  418.901797][T11571] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.909107][T11571] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.922025][T11571] bridge_slave_1: entered allmulticast mode
[  418.928322][T11640] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  418.929599][T11571] bridge_slave_1: entered promiscuous mode
[  418.934839][T11640] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  418.962382][T11640] vhci_hcd vhci_hcd.0: Device attached
[  419.003443][T11644] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8)
[  419.010178][T11644] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  419.029826][T11644] vhci_hcd vhci_hcd.0: Device attached
[  419.163547][T11571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  419.173183][ T5144] vhci_hcd: vhci_device speed not set
[  419.203382][T11571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.263250][ T5144] usb 9-1: new full-speed USB device number 8 using vhci_hcd
[  419.291601][T11571] team0: Port device team_slave_0 added
[  419.304496][T11609] chnl_net:caif_netlink_parms(): no params data found
[  419.320758][T11571] team0: Port device team_slave_1 added
[  419.408647][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.426555][T11571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.434391][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.460389][T11571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.471011][    T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  419.607870][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.622459][T11571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.629692][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.656061][T11571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.656272][T11668] xt_nfacct: accounting object `syz1' does not exists
[  419.684768][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.708094][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.718765][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  419.729392][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.740339][T11645] vhci_hcd: connection closed
[  419.740575][T11285] vhci_hcd: stop threads
[  419.741463][    T9] usb 2-1: config 0 descriptor??
[  419.755326][T11285] vhci_hcd: release socket
[  419.760582][T11641] vhci_hcd: connection reset by peer
[  419.766967][T11285] vhci_hcd: disconnect device
[  419.772037][T11285] vhci_hcd: stop threads
[  419.776953][T11285] vhci_hcd: release socket
[  419.781469][T11285] vhci_hcd: disconnect device
[  419.804647][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.845359][T11571] hsr_slave_0: entered promiscuous mode
[  419.858824][T11571] hsr_slave_1: entered promiscuous mode
[  419.891245][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.911781][T11609] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.920559][T11609] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.933343][T11609] bridge_slave_0: entered allmulticast mode
[  419.941102][T11609] bridge_slave_0: entered promiscuous mode
[  419.972414][T11609] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.980016][T11609] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.987522][T11609] bridge_slave_1: entered allmulticast mode
[  419.995562][T11609] bridge_slave_1: entered promiscuous mode
[  420.044718][T11609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.083878][T11609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.178307][    T9] lenovo 0003:17EF:6067.002C: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.1-1/input0
[  420.227153][T11609] team0: Port device team_slave_0 added
[  420.275418][T11609] team0: Port device team_slave_1 added
[  420.331070][   T11] bridge_slave_1: left allmulticast mode
[  420.338057][   T11] bridge_slave_1: left promiscuous mode
[  420.351691][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.377884][    T9] usb 2-1: USB disconnect, device number 51
[  420.385204][   T11] bridge_slave_0: left allmulticast mode
[  420.410055][   T11] bridge_slave_0: left promiscuous mode
[  420.416652][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.618842][T11684] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  420.651176][T11684] program syz.2.1349 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  421.090372][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.107210][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.119759][   T11] bond0 (unregistering): Released all slaves
[  421.152538][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'.
[  421.398038][T11609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.405646][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.434527][    T8] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  421.437986][T11609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.480015][T11609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.488028][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.519022][T11609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.625403][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.642986][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.652763][    T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  421.678836][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.709766][    T8] usb 2-1: config 0 descriptor??
[  421.754183][   T11] hsr_slave_0: left promiscuous mode
[  421.761590][   T11] hsr_slave_1: left promiscuous mode
[  421.768855][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.777868][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.787030][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.807346][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.811128][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.816635][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.878608][   T11] veth1_macvtap: left promiscuous mode
[  421.887171][   T11] veth0_macvtap: left promiscuous mode
[  421.893070][   T11] veth1_vlan: left promiscuous mode
[  421.903217][   T11] veth0_vlan: left promiscuous mode
[  422.151580][    T8] lenovo 0003:17EF:6067.002D: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.1-1/input0
[  422.360269][   T45] usb 2-1: USB disconnect, device number 52
[  422.720526][   T11] team0 (unregistering): Port device team_slave_1 removed
[  422.801051][   T11] team0 (unregistering): Port device team_slave_0 removed
[  423.150380][T11716] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  423.156948][T11716] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  423.169916][T11716] vhci_hcd vhci_hcd.0: Device attached
[  423.187021][T11716] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7)
[  423.193561][T11716] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  423.201798][T11716] vhci_hcd vhci_hcd.0: Device attached
[  423.366832][ T5177] vhci_hcd: vhci_device speed not set
[  423.443542][ T5177] usb 11-1: new full-speed USB device number 7 using vhci_hcd
[  423.456199][T11609] hsr_slave_0: entered promiscuous mode
[  423.471838][T11609] hsr_slave_1: entered promiscuous mode
[  423.481044][T11609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  423.488722][T11609] Cannot create hsr debugfs directory
[  423.918177][T11571] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  423.948044][T11717] vhci_hcd: connection reset by peer
[  423.948215][T11719] vhci_hcd: connection closed
[  423.961993][  T143] vhci_hcd: stop threads
[  423.973767][  T143] vhci_hcd: release socket
[  423.978685][  T143] vhci_hcd: disconnect device
[  423.991538][  T143] vhci_hcd: stop threads
[  423.996452][  T143] vhci_hcd: release socket
[  424.000979][  T143] vhci_hcd: disconnect device
[  424.018058][T11571] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  424.044714][T11571] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  424.057196][T11571] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  424.147084][T11710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.284732][T11571] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.314404][T11729] xt_nfacct: accounting object `syz1' does not exists
[  424.357420][T11571] 8021q: adding VLAN 0 to HW filter on device team0
[  424.384020][ T5144] vhci_hcd: vhci_device speed not set
[  424.411706][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.418895][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.456594][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.463783][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.569752][T11734] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  424.588349][T11609] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  424.632629][T11609] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  424.671945][T11609] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  424.704390][T11609] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  424.783909][T11571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.966486][T11609] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.032175][T11609] 8021q: adding VLAN 0 to HW filter on device team0
[  425.045624][T11571] veth0_vlan: entered promiscuous mode
[  425.066133][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.073338][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.098359][   T25] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  425.118252][T11571] veth1_vlan: entered promiscuous mode
[  425.191445][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.198653][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.343310][   T25] usb 1-1: Using ep0 maxpacket: 16
[  425.360412][   T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  425.405089][   T25] usb 1-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2
[  425.416244][T11571] veth0_macvtap: entered promiscuous mode
[  425.433252][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.453084][ T5095] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  425.460869][   T25] usb 1-1: Product: syz
[  425.466345][   T25] usb 1-1: Manufacturer: syz
[  425.480783][T11571] veth1_macvtap: entered promiscuous mode
[  425.486961][   T25] usb 1-1: SerialNumber: syz
[  425.501677][   T25] usb 1-1: config 0 descriptor??
[  425.517909][   T25] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state.
[  425.540630][   T25] dw2102: su3000_power_ctrl: 1, initialized 0
[  425.549550][   T25] dvb-usb: bulk message failed: -22 (2/0)
[  425.561509][   T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  425.573273][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.589996][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.600188][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.601178][   T25] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI)
[  425.616176][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.625035][   T25] usb 1-1: media controller created
[  425.638160][   T25] dvb-usb: bulk message failed: -22 (6/0)
[  425.638219][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.638238][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.640547][T11571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.662963][   T25] dw2102: i2c transfer failed.
[  425.679501][ T5095] usb 2-1: Using ep0 maxpacket: 8
[  425.699651][ T5095] usb 2-1: config 0 has an invalid interface number: 3 but max is 0
[  425.708394][ T5095] usb 2-1: config 0 has no interface number 0
[  425.717674][   T25] dvb-usb: bulk message failed: -22 (6/0)
[  425.727367][ T5095] usb 2-1: config 0 interface 3 has no altsetting 0
[  425.738197][   T25] dw2102: i2c transfer failed.
[  425.752757][ T5095] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  425.755387][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.774445][   T25] dvb-usb: bulk message failed: -22 (6/0)
[  425.780324][ T5095] usb 2-1: New USB device strings: Mfr=0, Product=247, SerialNumber=255
[  425.784381][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.800758][   T25] dw2102: i2c transfer failed.
[  425.809573][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.809629][ T5095] usb 2-1: Product: syz
[  425.825850][T11769] Invalid option length (0) for dns_resolver key
[  425.833242][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.835297][   T25] dvb-usb: bulk message failed: -22 (6/0)
[  425.858504][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.859126][ T5095] usb 2-1: SerialNumber: syz
[  425.874666][   T25] dw2102: i2c transfer failed.
[  425.879475][   T25] dvb-usb: bulk message failed: -22 (6/0)
[  425.889685][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.905576][   T25] dw2102: i2c transfer failed.
[  425.910395][   T25] dvb-usb: bulk message failed: -22 (6/0)
[  425.922604][T11571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.928319][ T5095] usb 2-1: config 0 descriptor??
[  425.945261][   T25] dw2102: i2c transfer failed.
[  425.952522][ T5095] hso 2-1:0.3: Not our interface
[  425.961569][   T25] dvb-usb: MAC address: 02:02:02:02:02:02
[  425.978999][T11609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.017825][T11571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.024813][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  426.051970][T11571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.084786][T11571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.093412][   T25] dvb-usb: bulk message failed: -22 (3/0)
[  426.107774][   T25] dw2102: command 0x0e transfer failed.
[  426.113996][T11571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.118191][   T25] dvb-usb: bulk message failed: -22 (3/0)
[  426.132058][   T25] dw2102: command 0x0e transfer failed.
[  426.364767][T11609] veth0_vlan: entered promiscuous mode
[  426.365636][T11786] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  426.376786][T11786] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  426.399862][T11786] vhci_hcd vhci_hcd.0: Device attached
[  426.419545][T11786] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7)
[  426.426098][T11786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  426.454709][T11609] veth1_vlan: entered promiscuous mode
[  426.483764][   T25] dvb-usb: bulk message failed: -22 (3/0)
[  426.491677][ T8517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.497652][   T25] dw2102: command 0x0e transfer failed.
[  426.499755][T11786] vhci_hcd vhci_hcd.0: Device attached
[  426.515295][ T8517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.524124][   T25] dvb-usb: bulk message failed: -22 (3/0)
[  426.531203][   T25] dw2102: command 0x0e transfer failed.
[  426.570594][   T25] dvb-usb: bulk message failed: -22 (1/0)
[  426.588864][   T25] dw2102: command 0x51 transfer failed.
[  426.595021][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.595044][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.612147][ T5095] vhci_hcd: vhci_device speed not set
[  426.656854][T11609] veth0_macvtap: entered promiscuous mode
[  426.703061][ T5095] usb 13-1: new full-speed USB device number 7 using vhci_hcd
[  426.716518][T11609] veth1_macvtap: entered promiscuous mode
[  426.735866][   T25] DVB: Unable to find symbol ds3000_attach()
[  426.777134][   T25] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI'
[  426.784573][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.831880][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.852238][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.867417][   T25] rc_core: IR keymap rc-su3000 not found
[  426.875843][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.882257][   T25] Registered IR keymap rc-empty
[  426.895680][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.906769][   T25] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  426.916279][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.936131][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.943712][   T25] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input42
[  426.963192][   T25] dvb-usb: schedule remote query interval to 150 msecs.
[  426.970309][   T25] dw2102: su3000_power_ctrl: 0, initialized 1
[  426.971558][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.985356][   T25] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected.
[  427.011603][T11609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.098979][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.126247][   T25] dvb-usb: bulk message failed: -22 (1/0)
[  427.136347][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.137406][   T25] dw2102: i2c transfer failed.
[  427.180221][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.217851][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.240915][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.269369][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.293038][T11609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.305512][T11609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.326723][T11790] vhci_hcd: connection closed
[  427.326911][T11787] vhci_hcd: connection reset by peer
[  427.335054][T11609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.350628][T11285] vhci_hcd: stop threads
[  427.360890][T11285] vhci_hcd: release socket
[  427.363119][   T45] dvb-usb: bulk message failed: -22 (1/0)
[  427.370546][T11285] vhci_hcd: disconnect device
[  427.371290][   T45] dw2102: i2c transfer failed.
[  427.380574][T11609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.393564][T11285] vhci_hcd: stop threads
[  427.410110][T11285] vhci_hcd: release socket
[  427.419387][T11285] vhci_hcd: disconnect device
[  427.427008][T11609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.445815][   T45] usb 2-1: USB disconnect, device number 53
[  427.450085][T11609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.517531][ T5144] usb 1-1: USB disconnect, device number 41
[  427.528972][T11609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.674207][ T5144] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected.
[  427.830127][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.858554][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.879414][T11832] xt_nfacct: accounting object `syz1' does not exists
[  427.996513][T11294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.012713][T11294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.193419][T11842] Cannot find add_set index 0 as target
[  428.218577][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'.
[  428.239018][T11842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.261721][T11842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.383466][   T25] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  428.543534][ T5177] vhci_hcd: vhci_device speed not set
[  428.598067][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.616905][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.639156][   T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  428.660804][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.694966][   T25] usb 1-1: config 0 descriptor??
[  428.933650][ T5139] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  429.129250][T11869] netlink: 'syz.2.1379': attribute type 6 has an invalid length.
[  429.170105][ T5139] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  429.224405][   T25] lenovo 0003:17EF:6067.002E: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0
[  429.248421][ T5139] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  429.259033][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.299854][ T5139] usb 2-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  429.333172][ T5139] usb 2-1: No valid video chain found.
[  429.424633][ T5138] usb 1-1: USB disconnect, device number 42
[  429.508996][ T5139] usb 2-1: USB disconnect, device number 54
[  429.619874][T11886] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  429.626429][T11886] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  429.644173][T11886] vhci_hcd vhci_hcd.0: Device attached
[  429.662743][T11886] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7)
[  429.669290][T11886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  429.687434][T11886] vhci_hcd vhci_hcd.0: Device attached
[  429.793019][T11896] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1378'.
[  429.843075][    T8] vhci_hcd: vhci_device speed not set
[  429.913288][    T8] usb 15-1: new full-speed USB device number 7 using vhci_hcd
[  430.132108][T11901] netlink: 'syz.0.1385': attribute type 1 has an invalid length.
[  430.292633][T11912] Cannot find add_set index 0 as target
[  430.405119][T11917] Cannot find add_set index 0 as target
[  430.439585][T11891] vhci_hcd: connection closed
[  430.441830][T11285] vhci_hcd: stop threads
[  430.458446][T11889] vhci_hcd: connection reset by peer
[  430.462194][T11285] vhci_hcd: release socket
[  430.468912][T11285] vhci_hcd: disconnect device
[  430.505630][T11285] vhci_hcd: stop threads
[  430.568992][T11285] vhci_hcd: release socket
[  430.590725][T11285] vhci_hcd: disconnect device
[  430.762993][ T5177] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  430.953211][ T5177] usb 5-1: Using ep0 maxpacket: 8
[  430.969607][ T5177] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  431.002098][ T5177] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  431.059633][T11903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.061026][ T5177] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[  431.086495][ T5177] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  431.153040][ T5177] usb 5-1: Manufacturer: syz
[  431.198932][ T5177] usb 5-1: config 0 descriptor??
[  431.213091][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'.
[  431.215262][ T5177] appledisplay 5-1:0.0: Could not find int-in endpoint
[  431.286669][ T5177] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  431.299544][T11933] netlink: 'syz.3.1393': attribute type 63 has an invalid length.
[  431.340392][T11933] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1393'.
[  431.743465][T11941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.796858][T11941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.859160][ T5095] vhci_hcd: vhci_device speed not set
[  432.113079][ T5142] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  432.122099][ T5177] usb 5-1: USB disconnect, device number 37
[  432.313020][ T5142] usb 2-1: Using ep0 maxpacket: 16
[  432.320028][ T5142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.332937][ T5142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.342693][ T5142] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  432.352981][ T5138] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  432.355777][ T5142] usb 2-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00
[  432.372174][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.385912][ T5142] usb 2-1: config 0 descriptor??
[  432.419335][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'.
[  432.575124][ T5138] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  432.585561][ T5138] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  432.629670][ T5138] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  432.639003][ T5138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.659413][ T5138] usb 4-1: Product: syz
[  432.663770][ T5138] usb 4-1: Manufacturer: syz
[  432.668394][ T5138] usb 4-1: SerialNumber: syz
[  432.687600][ T5138] cdc_ncm 4-1:1.0: skipping garbage
[  432.878884][ T5142] hid (null): unknown global tag 0xc
[  432.879415][T11964] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.896653][T11964] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  432.915392][ T5142] wacom 0003:056A:0323.002F: unknown global tag 0xc
[  432.922054][ T5142] wacom 0003:056A:0323.002F: item 0 2 1 12 parsing failed
[  432.955860][ T5142] wacom 0003:056A:0323.002F: parse failed
[  432.961821][ T5142] wacom 0003:056A:0323.002F: probe with driver wacom failed with error -22
[  433.002130][T11967] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  433.008696][T11967] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  433.052245][T11972] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8)
[  433.058904][T11972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  433.085359][T11967] vhci_hcd vhci_hcd.0: Device attached
[  433.118933][T11972] vhci_hcd vhci_hcd.0: Device attached
[  433.131241][T11975] Cannot find add_set index 0 as target
[  433.243168][ T5177] vhci_hcd: vhci_device speed not set
[  433.333123][ T5177] usb 9-1: new full-speed USB device number 9 using vhci_hcd
[  433.546474][ T5138] cdc_ncm 4-1:1.0: bind() failure
[  433.569248][ T5138] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  433.579858][ T5138] cdc_ncm 4-1:1.1: bind() failure
[  433.608656][ T5138] usb 4-1: USB disconnect, device number 41
[  433.736131][T11973] vhci_hcd: connection closed
[  433.736422][   T11] vhci_hcd: stop threads
[  433.748341][T11968] vhci_hcd: connection reset by peer
[  433.756889][   T11] vhci_hcd: release socket
[  433.762136][   T11] vhci_hcd: disconnect device
[  433.769501][   T11] vhci_hcd: stop threads
[  433.780579][   T11] vhci_hcd: release socket
[  433.790854][   T11] vhci_hcd: disconnect device
[  434.173102][ T5138] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  434.352958][ T5138] usb 5-1: Using ep0 maxpacket: 32
[  434.379615][ T5138] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  434.409840][ T5138] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  434.428511][ T5138] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  434.455982][ T5138] usb 5-1: config 1 interface 0 has no altsetting 0
[  434.486632][ T5138] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  434.506687][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.521458][ T5138] usb 5-1: Product: syz
[  434.530237][ T5138] usb 5-1: Manufacturer: syz
[  434.541906][ T5138] usb 5-1: SerialNumber: syz
[  434.576385][T11982] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  434.589282][T11982] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  434.710086][T11992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.726433][T11992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.793234][ T5144] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  434.838047][ T5138] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  434.855082][ T5138] usb 5-1: USB disconnect, device number 38
[  434.998641][ T5144] usb 1-1: Using ep0 maxpacket: 8
[  435.005695][ T5144] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.023415][    T8] vhci_hcd: vhci_device speed not set
[  435.038111][ T5144] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  435.054004][ T5144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.062127][ T5144] usb 1-1: Product: syz
[  435.067019][ T5144] usb 1-1: Manufacturer: syz
[  435.071643][ T5144] usb 1-1: SerialNumber: syz
[  435.083694][ T5144] usb 1-1: config 0 descriptor??
[  435.092391][ T5144] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22
[  435.296828][   T25] usb 1-1: USB disconnect, device number 43
[  435.360743][T12000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.370378][T12000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.423060][ T5142] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  435.558771][T12007] Cannot find add_set index 0 as target
[  435.570233][T12007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.579745][T12007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.626853][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.655830][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.687680][ T5142] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  435.703589][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.718108][ T5142] usb 4-1: config 0 descriptor??
[  435.955511][T12021] Cannot find add_set index 0 as target
[  436.148790][ T5142] lenovo 0003:17EF:6067.0030: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0
[  436.412972][ T5142] usb 4-1: USB disconnect, device number 42
[  437.221106][T12040] program syz.3.1423 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  437.273018][ T5138] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  437.476526][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.490565][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.502776][ T5138] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  437.512768][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.549328][ T5138] usb 5-1: config 0 descriptor??
[  437.672973][ T5142] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  437.867645][ T5142] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  437.881296][ T5142] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.893018][ T5142] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.904066][ T5142] usb 4-1: config 0 interface 0 has no altsetting 0
[  437.911585][ T5142] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.920641][ T5142] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.933150][ T5142] usb 4-1: config 0 interface 0 has no altsetting 0
[  437.941198][ T5142] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.950223][ T5142] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.961162][ T5142] usb 4-1: config 0 interface 0 has no altsetting 0
[  437.972337][ T5142] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.977973][    T8] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  437.981412][ T5142] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  438.014375][ T5138] lenovo 0003:17EF:6067.0031: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.4-1/input0
[  438.024969][ T5142] usb 4-1: config 0 interface 0 has no altsetting 0
[  438.039383][ T5142] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  438.051633][ T5142] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  438.063800][ T5142] usb 4-1: config 0 interface 0 has no altsetting 0
[  438.072091][ T5142] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  438.084780][ T5142] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  438.096234][ T5142] usb 4-1: config 0 interface 0 has no altsetting 0
[  438.104464][ T5142] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  438.113467][ T5142] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  438.124741][ T5142] usb 4-1: config 0 interface 0 has no altsetting 0
[  438.132244][ T5142] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  438.141267][ T5142] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  438.154504][ T5142] usb 4-1: config 0 interface 0 has no altsetting 0
[  438.163144][ T5142] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  438.174533][ T5142] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  438.181758][ T5138] usb 5-1: USB disconnect, device number 39
[  438.183860][ T5142] usb 4-1: Product: syz
[  438.194918][ T5142] usb 4-1: Manufacturer: syz
[  438.199563][ T5142] usb 4-1: SerialNumber: syz
[  438.206403][ T5142] usb 4-1: config 0 descriptor??
[  438.207473][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.215407][ T5142] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  438.244729][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.256791][    T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  438.272333][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.299369][    T8] usb 1-1: config 0 descriptor??
[  438.463277][ T5177] vhci_hcd: vhci_device speed not set
[  438.818634][T12061] Cannot find add_set index 0 as target
[  438.857810][T12061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.876930][T12061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.017366][T12068] FAULT_INJECTION: forcing a failure.
[  439.017366][T12068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  439.017502][T12068] CPU: 1 PID: 12068 Comm: syz.4.1432 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0
[  439.017526][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  439.017542][T12068] Call Trace:
[  439.017551][T12068]  <TASK>
[  439.017561][T12068]  dump_stack_lvl+0x241/0x360
[  439.017594][T12068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.017628][T12068]  ? dump_stack+0x9/0x20
[  439.017657][T12068]  should_fail_ex+0x3b0/0x4e0
[  439.017688][T12068]  _copy_from_user+0x2f/0xe0
[  439.017711][T12068]  copy_msghdr_from_user+0xae/0x680
[  439.017745][T12068]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  439.017787][T12068]  __sys_sendmsg+0x23d/0x3a0
[  439.017813][T12068]  ? __pfx___sys_sendmsg+0x10/0x10
[  439.017834][T12068]  ? vfs_write+0x7c4/0xc90
[  439.017897][T12068]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  439.017920][T12068]  ? do_syscall_64+0x100/0x230
[  439.017947][T12068]  ? do_syscall_64+0xb6/0x230
[  439.017974][T12068]  do_syscall_64+0xf3/0x230
[  439.017998][T12068]  ? clear_bhb_loop+0x35/0x90
[  439.018019][T12068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.018045][T12068] RIP: 0033:0x7f67e6575bd9
[  439.018062][T12068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  439.018078][T12068] RSP: 002b:00007f67e731e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  439.018107][T12068] RAX: ffffffffffffffda RBX: 00007f67e6703f60 RCX: 00007f67e6575bd9
[  439.018122][T12068] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  439.018136][T12068] RBP: 00007f67e731e0a0 R08: 0000000000000000 R09: 0000000000000000
[  439.018150][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.018163][T12068] R13: 000000000000000b R14: 00007f67e6703f60 R15: 00007f67e682fa68
[  439.018193][T12068]  </TASK>
[  439.446872][ T5095] usb 1-1: USB disconnect, device number 44
[  439.489624][T12072] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1433'.
[  439.604737][ T5142] usb 2-1: USB disconnect, device number 55
[  439.773853][ T5138] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  439.985822][ T5138] usb 5-1: Using ep0 maxpacket: 8
[  440.013500][ T5138] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  440.022586][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.057072][ T5138] usb 5-1: Product: syz
[  440.078992][ T5138] usb 5-1: Manufacturer: syz
[  440.096343][ T5138] usb 5-1: SerialNumber: syz
[  440.129699][ T5138] usb 5-1: config 0 descriptor??
[  440.263281][ T5177] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  440.306841][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  440.320512][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[  440.350360][    C1] usb 4-1: yurex_control_callback - control failed: -2
[  440.422157][ T5142] usb 4-1: USB disconnect, device number 43
[  440.474390][ T5142] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  440.512964][ T5177] usb 2-1: Using ep0 maxpacket: 32
[  440.562829][ T5177] usb 2-1: config 0 has an invalid interface number: 86 but max is 0
[  440.614866][ T5177] usb 2-1: config 0 has no interface number 0
[  440.663716][ T5177] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab
[  440.746027][ T5177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.790742][ T5177] usb 2-1: Product: syz
[  440.860750][ T5177] usb 2-1: Manufacturer: syz
[  440.881461][ T5177] usb 2-1: SerialNumber: syz
[  440.910699][ T5177] usb 2-1: config 0 descriptor??
[  440.924146][ T5142] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  440.942760][ T5177] option 2-1:0.86: GSM modem (1-port) converter detected
[  441.123127][ T5139] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  441.153075][ T5142] usb 4-1: Using ep0 maxpacket: 32
[  441.172547][ T5142] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.232497][ T5142] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.256118][ T5142] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  441.280577][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.326682][ T5142] hub 4-1:4.0: USB hub found
[  441.345162][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.386193][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.415414][ T5139] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  441.460973][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.473012][T12105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.486264][ T5139] usb 1-1: config 0 descriptor??
[  441.504056][T12105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.542949][ T5142] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  441.890600][ T5142] usb 4-1: USB disconnect, device number 44
[  441.923338][ T5139] lenovo 0003:17EF:6067.0033: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0
[  442.131345][ T5139] usb 1-1: USB disconnect, device number 45
[  442.300951][T12107] bridge0: port 2(bridge_slave_1) entered listening state
[  442.539182][T12113] Cannot find add_set index 0 as target
[  442.769964][ T5138] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  442.810860][ T5138] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  442.839336][ T5139] usb 2-1: USB disconnect, device number 56
[  442.857940][ T5138] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  442.870095][ T5138] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  442.890111][ T5139] option 2-1:0.86: device disconnected
[  442.898916][ T5138] usb 5-1: USB disconnect, device number 40
[  442.925624][ T5143] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  443.133957][ T5143] usb 4-1: Using ep0 maxpacket: 8
[  443.151576][ T5143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  443.186303][ T5143] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  443.244088][ T5143] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[  443.273365][ T5143] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  443.296151][ T5143] usb 4-1: Manufacturer: syz
[  443.319346][ T5143] usb 4-1: config 0 descriptor??
[  443.351535][ T5143] appledisplay 4-1:0.0: Could not find int-in endpoint
[  443.375758][ T5143] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  443.731323][T12130] kvm: kvm [12128]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x14e27000000
[  444.362457][    T8] usb 4-1: USB disconnect, device number 45
[  444.413153][ T5142] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  444.496158][T12151] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1456'.
[  444.545751][T12151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.556218][T12151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.599630][  T143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.730401][  T143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.734985][ T5142] usb 2-1: Using ep0 maxpacket: 32
[  444.794755][ T5142] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  444.827463][ T5142] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.853085][ T5142] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  444.872700][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.899004][  T143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.911624][ T5142] hub 2-1:4.0: USB hub found
[  445.015355][  T143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.118726][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  445.128552][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  445.130512][ T5142] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  445.145758][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  445.157477][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  445.167600][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  445.177137][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  445.473319][  T143] bridge_slave_1: left allmulticast mode
[  445.479034][  T143] bridge_slave_1: left promiscuous mode
[  445.514645][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.523836][ T5142] usb 2-1: USB disconnect, device number 57
[  445.550778][  T143] bridge_slave_0: left allmulticast mode
[  445.576492][  T143] bridge_slave_0: left promiscuous mode
[  445.596724][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.279721][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'.
[  446.389713][T12194] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1460'.
[  446.703973][ T5143] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  446.717205][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.809008][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.825056][  T143] bond0 (unregistering): Released all slaves
[  446.933279][T12158] chnl_net:caif_netlink_parms(): no params data found
[  446.962969][ T5143] usb 4-1: Using ep0 maxpacket: 8
[  447.013571][ T5143] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  447.049687][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.088439][ T5143] usb 4-1: Product: syz
[  447.102029][ T5143] usb 4-1: Manufacturer: syz
[  447.120399][ T5143] usb 4-1: SerialNumber: syz
[  447.141408][ T5143] usb 4-1: config 0 descriptor??
[  447.263448][ T5094] Bluetooth: hci2: command tx timeout
[  447.517777][T12158] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.561083][T12158] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.596984][T12158] bridge_slave_0: entered allmulticast mode
[  447.634972][T12158] bridge_slave_0: entered promiscuous mode
[  447.756961][T12158] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.787215][T12158] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.844527][T12158] bridge_slave_1: entered allmulticast mode
[  447.882087][T12158] bridge_slave_1: entered promiscuous mode
[  448.009733][T12231] FAULT_INJECTION: forcing a failure.
[  448.009733][T12231] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.033006][  T143] hsr_slave_0: left promiscuous mode
[  448.055863][  T143] hsr_slave_1: left promiscuous mode
[  448.065372][T12231] CPU: 0 PID: 12231 Comm: syz.2.1472 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0
[  448.075560][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  448.085609][T12231] Call Trace:
[  448.088900][T12231]  <TASK>
[  448.091816][T12231]  dump_stack_lvl+0x241/0x360
[  448.096493][T12231]  ? __pfx_dump_stack_lvl+0x10/0x10
[  448.101771][T12231]  ? __pfx__printk+0x10/0x10
[  448.106349][T12231]  ? __pfx_lock_release+0x10/0x10
[  448.111362][T12231]  should_fail_ex+0x3b0/0x4e0
[  448.116049][T12231]  _copy_from_iter+0x1f6/0x1960
[  448.120917][T12231]  ? __virt_addr_valid+0x183/0x520
[  448.126035][T12231]  ? __pfx_lock_release+0x10/0x10
[  448.131045][T12231]  ? __alloc_skb+0x28f/0x440
[  448.135615][T12231]  ? __pfx__copy_from_iter+0x10/0x10
[  448.140887][T12231]  ? __virt_addr_valid+0x183/0x520
[  448.145987][T12231]  ? __virt_addr_valid+0x183/0x520
[  448.151079][T12231]  ? __virt_addr_valid+0x44e/0x520
[  448.156172][T12231]  ? __check_object_size+0x49c/0x900
[  448.161445][T12231]  netlink_sendmsg+0x743/0xcb0
[  448.166209][T12231]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.171480][T12231]  ? __import_iovec+0x536/0x820
[  448.176315][T12231]  ? aa_sock_msg_perm+0x91/0x160
[  448.181238][T12231]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  448.186504][T12231]  ? security_socket_sendmsg+0x87/0xb0
[  448.191943][T12231]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.197209][T12231]  __sock_sendmsg+0x221/0x270
[  448.201873][T12231]  ____sys_sendmsg+0x525/0x7d0
[  448.206623][T12231]  ? __pfx_____sys_sendmsg+0x10/0x10
[  448.211894][T12231]  __sys_sendmsg+0x2b0/0x3a0
[  448.216468][T12231]  ? __pfx___sys_sendmsg+0x10/0x10
[  448.221555][T12231]  ? vfs_write+0x7c4/0xc90
[  448.225972][T12231]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  448.232369][T12231]  ? do_syscall_64+0x100/0x230
[  448.237117][T12231]  ? do_syscall_64+0xb6/0x230
[  448.241803][T12231]  do_syscall_64+0xf3/0x230
[  448.246299][T12231]  ? clear_bhb_loop+0x35/0x90
[  448.250954][T12231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.256852][T12231] RIP: 0033:0x7f2715575bd9
[  448.261247][T12231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.280840][T12231] RSP: 002b:00007f27163fe048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.289347][T12231] RAX: ffffffffffffffda RBX: 00007f2715703f60 RCX: 00007f2715575bd9
[  448.297303][T12231] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  448.305358][T12231] RBP: 00007f27163fe0a0 R08: 0000000000000000 R09: 0000000000000000
[  448.313311][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.321259][T12231] R13: 000000000000000b R14: 00007f2715703f60 R15: 00007f271582fa68
[  448.329392][T12231]  </TASK>
[  448.343424][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.359737][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.380458][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.399450][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.417179][T12238] FAULT_INJECTION: forcing a failure.
[  448.417179][T12238] name failslab, interval 1, probability 0, space 0, times 0
[  448.434952][T12238] CPU: 0 PID: 12238 Comm: syz.1.1474 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0
[  448.445105][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  448.455153][T12238] Call Trace:
[  448.458434][T12238]  <TASK>
[  448.461359][T12238]  dump_stack_lvl+0x241/0x360
[  448.466042][T12238]  ? __pfx_dump_stack_lvl+0x10/0x10
[  448.471233][T12238]  ? __pfx__printk+0x10/0x10
[  448.475836][T12238]  ? __pfx___might_resched+0x10/0x10
[  448.481106][T12238]  ? __mutex_unlock_slowpath+0x21d/0x750
[  448.486731][T12238]  should_fail_ex+0x3b0/0x4e0
[  448.491402][T12238]  should_failslab+0x9/0x20
[  448.495909][T12238]  __kmalloc_node_noprof+0xdf/0x440
[  448.501094][T12238]  ? kvmalloc_node_noprof+0x72/0x190
[  448.506380][T12238]  kvmalloc_node_noprof+0x72/0x190
[  448.511494][T12238]  __se_sys_add_key+0x270/0x490
[  448.516346][T12238]  ? __pfx___se_sys_add_key+0x10/0x10
[  448.521727][T12238]  ? do_syscall_64+0x100/0x230
[  448.526480][T12238]  ? __x64_sys_add_key+0x20/0xc0
[  448.531404][T12238]  do_syscall_64+0xf3/0x230
[  448.535911][T12238]  ? clear_bhb_loop+0x35/0x90
[  448.540603][T12238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.546521][T12238] RIP: 0033:0x7faffc575bd9
[  448.550950][T12238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.570577][T12238] RSP: 002b:00007faffd34e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  448.579019][T12238] RAX: ffffffffffffffda RBX: 00007faffc703f60 RCX: 00007faffc575bd9
[  448.587010][T12238] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000020000140
[  448.594999][T12238] RBP: 00007faffd34e0a0 R08: ffffffffffffffff R09: 0000000000000000
[  448.602988][T12238] R10: 000000000000001d R11: 0000000000000246 R12: 0000000000000001
[  448.610979][T12238] R13: 000000000000000b R14: 00007faffc703f60 R15: 00007faffc82fa68
[  448.618984][T12238]  </TASK>
[  448.757763][  T143] veth1_macvtap: left promiscuous mode
[  448.791212][ T5143] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  448.801979][  T143] veth0_macvtap: left promiscuous mode
[  448.821814][  T143] veth1_vlan: left promiscuous mode
[  448.837131][  T143] veth0_vlan: left promiscuous mode
[  448.849731][ T5143] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  448.896006][ T5143] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  448.912700][ T5143] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  448.935661][ T5143] usb 4-1: USB disconnect, device number 46
[  448.943182][ T5095] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  448.964819][T12251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1476'.
[  448.983224][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'.
[  448.992772][T12251] netlink: 'syz.1.1476': attribute type 1 has an invalid length.
[  449.124117][ T5095] usb 1-1: device descriptor read/64, error -71
[  449.343851][ T5094] Bluetooth: hci2: command tx timeout
[  449.429214][ T5095] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  449.516384][  T143] team0 (unregistering): Port device team_slave_1 removed
[  449.558950][  T143] team0 (unregistering): Port device team_slave_0 removed
[  449.583274][ T5095] usb 1-1: device descriptor read/64, error -71
[  449.713396][ T5095] usb usb1-port1: attempt power cycle
[  449.977215][T12158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.115846][T12158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.133328][ T5095] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  450.183994][ T5095] usb 1-1: device descriptor read/8, error -71
[  450.192361][T12254] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  450.208650][T12254] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  450.286813][T12158] team0: Port device team_slave_0 added
[  450.317418][T12158] team0: Port device team_slave_1 added
[  450.491308][T12158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.503221][ T5095] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  450.517831][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.543760][    C0] vkms_vblank_simulate: vblank timer overrun
[  450.555395][ T5142] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  450.563749][ T5095] usb 1-1: device descriptor read/8, error -71
[  450.599833][T12158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.648171][T12158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.662599][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.690927][    C0] vkms_vblank_simulate: vblank timer overrun
[  450.704603][T12158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.721877][ T5095] usb usb1-port1: unable to enumerate USB device
[  450.763063][ T5142] usb 2-1: Using ep0 maxpacket: 32
[  450.777224][ T5142] usb 2-1: config 0 has an invalid interface number: 86 but max is 0
[  450.798882][ T5142] usb 2-1: config 0 has no interface number 0
[  450.818636][ T5142] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0023, bcdDevice=3a.ab
[  450.839075][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.858840][ T5142] usb 2-1: Product: syz
[  450.873749][ T5142] usb 2-1: Manufacturer: syz
[  450.888242][ T5142] usb 2-1: SerialNumber: syz
[  450.904549][T12158] hsr_slave_0: entered promiscuous mode
[  450.927945][T12158] hsr_slave_1: entered promiscuous mode
[  450.931858][ T5142] usb 2-1: config 0 descriptor??
[  450.966500][ T5142] option 2-1:0.86: GSM modem (1-port) converter detected
[  453.044578][T12158] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  453.070322][T12158] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  453.098668][T12158] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  453.117257][T12158] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  453.157208][ T5095] usb 2-1: USB disconnect, device number 58
[  453.195337][ T5095] option 2-1:0.86: device disconnected
[  453.763165][ T5177] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  454.393039][T12344] FAULT_INJECTION: forcing a failure.
[  454.393039][T12344] name failslab, interval 1, probability 0, space 0, times 0
[  454.405692][T12344] CPU: 1 PID: 12344 Comm: syz.2.1496 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0
[  454.415845][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  454.425888][T12344] Call Trace:
[  454.429151][T12344]  <TASK>
[  454.432065][T12344]  dump_stack_lvl+0x241/0x360
[  454.436734][T12344]  ? __pfx_dump_stack_lvl+0x10/0x10
[  454.441914][T12344]  ? __pfx__printk+0x10/0x10
[  454.446500][T12344]  should_fail_ex+0x3b0/0x4e0
[  454.451171][T12344]  should_failslab+0x9/0x20
[  454.455664][T12344]  __kmalloc_node_noprof+0xdf/0x440
[  454.460852][T12344]  ? kvmalloc_node_noprof+0x72/0x190
[  454.466129][T12344]  kvmalloc_node_noprof+0x72/0x190
[  454.471233][T12344]  __kvm_mmu_topup_memory_cache+0x4d9/0x6b0
[  454.477118][T12344]  ? __pfx_lock_release+0x10/0x10
[  454.482131][T12344]  ? rcu_is_watching+0x15/0xb0
[  454.486884][T12344]  kvm_mmu_load+0x115/0x26e0
[  454.491470][T12344]  ? __mutex_unlock_slowpath+0x21d/0x750
[  454.497093][T12344]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  454.503066][T12344]  ? __pfx_kvm_mmu_load+0x10/0x10
[  454.508079][T12344]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  454.514053][T12344]  ? __asan_memset+0x23/0x50
[  454.518626][T12344]  ? vmx_flush_tlb_guest+0x1e5/0x310
[  454.523906][T12344]  ? __pfx_vmx_flush_tlb_guest+0x10/0x10
[  454.529541][T12344]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  454.535506][T12344]  ? kvm_apic_has_interrupt+0x9d4/0xa70
[  454.541045][T12344]  vcpu_run+0x6b72/0x87f0
[  454.545458][T12344]  ? __pfx_vcpu_run+0x10/0x10
[  454.550145][T12344]  ? __local_bh_enable_ip+0x168/0x200
[  454.555500][T12344]  ? lockdep_hardirqs_on+0x99/0x150
[  454.560702][T12344]  ? __pfx_lock_acquire+0x10/0x10
[  454.565730][T12344]  ? fpu_swap_kvm_fpstate+0x82/0x460
[  454.571558][T12344]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  454.577282][T12344]  ? xfd_validate_state+0x6e/0x150
[  454.582387][T12344]  ? rcu_is_watching+0x15/0xb0
[  454.587230][T12344]  ? rcu_is_watching+0x15/0xb0
[  454.591983][T12344]  kvm_arch_vcpu_ioctl_run+0xa7e/0x1920
[  454.597521][T12344]  ? mark_lock+0x9a/0x350
[  454.601861][T12344]  ? kvm_arch_vcpu_ioctl_run+0x1c9/0x1920
[  454.607570][T12344]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  454.613546][T12344]  ? __pfx_lock_acquire+0x10/0x10
[  454.618551][T12344]  ? get_task_pid+0x23/0x310
[  454.623132][T12344]  ? __pfx_lock_release+0x10/0x10
[  454.628162][T12344]  ? kvm_vcpu_ioctl+0x1d9/0xd00
[  454.633006][T12344]  ? get_task_pid+0x23/0x310
[  454.637598][T12344]  kvm_vcpu_ioctl+0x7f5/0xd00
[  454.642259][T12344]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  454.647446][T12344]  ? __fget_files+0x29/0x470
[  454.652021][T12344]  ? __fget_files+0x3f6/0x470
[  454.656683][T12344]  ? __fget_files+0x29/0x470
[  454.661268][T12344]  ? bpf_lsm_file_ioctl+0x9/0x10
[  454.666211][T12344]  ? security_file_ioctl+0x87/0xb0
[  454.671306][T12344]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  454.676488][T12344]  __se_sys_ioctl+0xfc/0x170
[  454.681063][T12344]  do_syscall_64+0xf3/0x230
[  454.685561][T12344]  ? clear_bhb_loop+0x35/0x90
[  454.690217][T12344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.696095][T12344] RIP: 0033:0x7f2715575bd9
[  454.700513][T12344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.720101][T12344] RSP: 002b:00007f27163dd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  454.728501][T12344] RAX: ffffffffffffffda RBX: 00007f2715704038 RCX: 00007f2715575bd9
[  454.736454][T12344] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  454.744414][T12344] RBP: 00007f27163dd0a0 R08: 0000000000000000 R09: 0000000000000000
[  454.752367][T12344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.760318][T12344] R13: 000000000000006e R14: 00007f2715704038 R15: 00007f271582fa68
[  454.768286][T12344]  </TASK>
[  458.207369][ T5177] usb 1-1: device descriptor read/all, error -71
[  461.489177][T12158] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.505677][T12158] 8021q: adding VLAN 0 to HW filter on device team0
[  461.532783][T12158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  461.543297][T12158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  463.042076][T12158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  463.066838][T12158] veth0_vlan: entered promiscuous mode
[  463.079867][T12158] veth1_vlan: entered promiscuous mode
[  463.099919][T12158] veth0_macvtap: entered promiscuous mode
[  463.108117][T12158] veth1_macvtap: entered promiscuous mode
[  463.121055][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.148977][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.158802][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.169281][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.180115][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.190506][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.200290][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.210697][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.221705][T12158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.230791][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.241205][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.039392][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.100890][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.110751][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.614427][ T5088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  465.617678][ T5088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  465.618713][ T5088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  465.620676][ T5088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  465.621545][ T5088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  465.621979][ T5088] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  465.622984][ T5138] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  465.626348][ T5088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  465.627226][ T5088] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  465.628301][ T5088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  465.628664][ T5088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  465.629010][ T5088] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  465.629936][ T5088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  465.653954][ T5091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  465.654354][ T5091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  465.655253][ T5091] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  465.660923][ T5091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  465.661641][ T5091] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  465.662173][ T5091] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  465.668448][ T5091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  465.668905][ T5091] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  465.669290][ T5091] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  465.684666][ T5091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  465.685423][ T5091] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  465.686627][ T5091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  465.805074][ T5138] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  465.805105][ T5138] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  465.806535][ T5138] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  465.806566][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  465.806589][ T5138] usb 4-1: SerialNumber: syz
[  466.027198][ T5138] usb 4-1: 0:2 : does not exist
[  466.027293][ T5138] usb 4-1: unit 5: unexpected type 0x0a
[  466.047770][ T5138] usb 4-1: USB disconnect, device number 47
[  466.265406][ T5092] udevd[5092]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  468.812663][ T5091] Bluetooth: hci6: command tx timeout
[  468.839600][T12366] Bluetooth: hci5: command tx timeout
[  468.843640][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.964791][T12158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.975394][T12158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.999027][T12158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.249619][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.256792][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  471.265895][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.273036][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  471.371134][T12366] Bluetooth: hci6: command tx timeout
[  471.376658][T12366] Bluetooth: hci5: command tx timeout
[  474.133339][ T5091] Bluetooth: hci5: command tx timeout
[  474.138825][ T5091] Bluetooth: hci6: command tx timeout
[  475.275106][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  475.554095][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  475.805069][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  475.813890][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  475.822669][ T5091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  475.830871][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  478.833132][ T5091] Bluetooth: hci6: command tx timeout
[  478.838607][ T5091] Bluetooth: hci5: command tx timeout
[  478.844538][ T5091] Bluetooth: hci0: command tx timeout
[  484.348448][T12366] Bluetooth: hci0: command tx timeout
[  490.623916][ T5091] Bluetooth: hci0: command tx timeout
[  497.676802][T12366] Bluetooth: hci0: command tx timeout
[  497.700510][T12365] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  497.718468][T12158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.727454][T12158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.736241][T12158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.745012][T12158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.765072][T12365] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  497.774657][T12365] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  497.782735][T12365] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  497.790885][T12365] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  497.798595][T12365] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  505.323511][ T5091] Bluetooth: hci1: command tx timeout
[  505.399956][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  505.406428][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[  513.601346][ T5091] Bluetooth: hci1: command tx timeout
[  513.654736][T12366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  513.692266][T12366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  522.061428][T12366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  522.069832][T12366] Bluetooth: hci1: command tx timeout
[  522.131058][T12366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  522.139572][T12366] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  522.147920][T12366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  530.934117][T12381] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  530.989430][T12365] Bluetooth: hci1: command tx timeout
[  550.234126][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  550.255695][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  550.268350][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  550.277745][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  550.291710][ T5091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  550.300462][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  561.415111][ T5091] Bluetooth: hci3: command tx timeout
[  572.335430][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[  572.341775][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[  572.356168][ T5091] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  572.783803][ T5091] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  572.793251][ T5091] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  572.838076][T12396] Bluetooth: hci4: Opcode 0x0c03 failed: -4
[  572.996710][ T5094] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  573.005227][ T5094] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  573.064860][ T5094] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  573.072061][ T5094] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  573.205890][ T5094] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  573.213176][ T5094] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  573.269682][ T5094] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  573.277072][ T5094] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  573.306880][ T5094] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  573.314323][ T5094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  585.092143][T12366] Bluetooth: hci3: command tx timeout
[  585.098747][T12366] Bluetooth: hci8: command tx timeout
[  585.105116][T12366] Bluetooth: hci7: command tx timeout
[  599.212889][T12365] Bluetooth: hci7: command tx timeout
[  599.218351][T12365] Bluetooth: hci8: command tx timeout
[  599.223984][T12365] Bluetooth: hci3: command tx timeout
[  614.855628][   T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 4209 jiffies s: 48741 root: 0x2/.
[  614.867667][   T19] rcu: blocking rcu_node structures (internal RCU debug):
[  614.875074][   T19] Sending NMI from CPU 0 to CPUs 1:
[  614.880292][    C1] NMI backtrace for cpu 1
[  614.880305][    C1] CPU: 1 PID: 12392 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0
[  614.880327][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  614.880339][    C1] RIP: 0010:preempt_count_sub+0xfb/0x170
[  614.880373][    C1] Code: 75 74 83 3d 26 dd 47 0e 00 75 19 90 48 c7 c7 40 47 ca 8b 48 c7 c6 20 48 ca 8b e8 f0 b6 f2 ff 90 0f 0b 90 90 90 e9 6b ff ff ff <48> c7 c1 e0 f6 79 94 80 e1 07 80 c1 03 38 c1 0f 8c 1b ff ff ff 48
[  614.880390][    C1] RSP: 0018:ffffc90000a189e8 EFLAGS: 00000002
[  614.880407][    C1] RAX: 0000000000000004 RBX: 0000000000000001 RCX: 0000000000000001
[  614.880424][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[  614.880436][    C1] RBP: ffff88802a79e8c8 R08: ffff88802a30b2eb R09: 1ffff1100546165d
[  614.880451][    C1] R10: dffffc0000000000 R11: ffffed100546165e R12: dffffc0000000000
[  614.880466][    C1] R13: ffff88802a79e808 R14: dffffc0000000000 R15: ffff88802a30b340
[  614.880482][    C1] FS:  0000555587d63500(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  614.880500][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  614.880514][    C1] CR2: 00007f148f504000 CR3: 00000000660c6000 CR4: 00000000003506f0
[  614.880531][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  614.880543][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  614.880556][    C1] Call Trace:
[  614.880564][    C1]  <NMI>
[  614.880573][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  614.880594][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  614.880617][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  614.880636][    C1]  ? nmi_handle+0x2a/0x5a0
[  614.880670][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  614.880691][    C1]  ? nmi_handle+0x14f/0x5a0
[  614.880717][    C1]  ? nmi_handle+0x2a/0x5a0
[  614.880743][    C1]  ? preempt_count_sub+0xfb/0x170
[  614.880768][    C1]  ? default_do_nmi+0x63/0x160
[  614.880789][    C1]  ? exc_nmi+0x123/0x1f0
[  614.880808][    C1]  ? end_repeat_nmi+0xf/0x53
[  614.880841][    C1]  ? preempt_count_sub+0xfb/0x170
[  614.880868][    C1]  ? preempt_count_sub+0xfb/0x170
[  614.880895][    C1]  ? preempt_count_sub+0xfb/0x170
[  614.880922][    C1]  </NMI>
[  614.880929][    C1]  <IRQ>
[  614.880936][    C1]  _raw_spin_unlock+0x28/0x50
[  614.880955][    C1]  advance_sched+0x9b4/0xca0
[  614.880989][    C1]  ? __pfx_advance_sched+0x10/0x10
[  614.881015][    C1]  __hrtimer_run_queues+0x59b/0xd50
[  614.881040][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  614.881070][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  614.881101][    C1]  hrtimer_interrupt+0x396/0x990
[  614.881138][    C1]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  614.881167][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  614.881191][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  614.881217][    C1] RIP: 0010:handle_softirqs+0x1df/0x970
[  614.881237][    C1] Code: 89 7c 24 70 0f b7 db 48 c7 c7 40 b0 c9 8b e8 a8 02 2c 0a 65 66 c7 05 56 d2 a9 7e 00 00 e8 f9 88 43 00 fb 49 c7 c4 c0 a0 00 8e <b8> ff ff ff ff 0f bc c3 41 89 c7 41 ff c7 0f 84 e6 03 00 00 89 5c
[  614.881253][    C1] RSP: 0018:ffffc90000a18e40 EFLAGS: 00000286
[  614.881268][    C1] RAX: 303db9b10f044100 RBX: 0000000000000286 RCX: ffffffff9479f603
[  614.881283][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1fe9c0
[  614.881298][    C1] RBP: ffffc90000a18f50 R08: ffffffff8fad496f R09: 1ffffffff1f5a92d
[  614.881313][    C1] R10: dffffc0000000000 R11: fffffbfff1f5a92e R12: ffffffff8e00a0c0
[  614.881328][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920001431dc
[  614.881353][    C1]  ? ktime_get+0x9b/0xb0
[  614.881379][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[  614.881400][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  614.881425][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  614.881452][    C1]  __irq_exit_rcu+0xf4/0x1c0
[  614.881470][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  614.881494][    C1]  irq_exit_rcu+0x9/0x30
[  614.881511][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  614.881535][    C1]  </IRQ>
[  614.881542][    C1]  <TASK>
[  614.881549][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  614.881575][    C1] RIP: 0010:arch_stack_walk+0x143/0x1b0
[  614.881602][    C1] Code: 70 ff ff ff 4c 89 ff e8 2b 7f 09 00 48 89 c3 31 ff 48 89 c6 e8 7e bd 5e 00 48 85 db 74 31 4c 89 f7 48 89 de 4d 89 eb 41 ff d3 <66> 90 84 c0 74 26 4c 89 ff e8 bf 80 09 00 83 bd 70 ff ff ff 00 74
[  614.881619][    C1] RSP: 0018:ffffc90009717480 EFLAGS: 00000286
[  614.881634][    C1] RAX: 0000000000000001 RBX: ffffffff8205efab RCX: ffff888029741e00
[  614.881648][    C1] RDX: dffffc0000000000 RSI: ffffffff8205efab RDI: ffffc9000971756c
[  614.881663][    C1] RBP: ffffc90009717510 R08: 0000000000000000 R09: ffffc90009717570
[  614.881677][    C1] R10: 0000000000000003 R11: ffffffff8181dd90 R12: ffff888029741e00
[  614.881691][    C1] R13: ffffffff8181dd90 R14: ffffc90009717560 R15: ffffc90009717480
[  614.881707][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  614.881736][    C1]  ? save_stack+0xfb/0x1f0
[  614.881760][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  614.881788][    C1]  ? save_stack+0xfb/0x1f0
[  614.881819][    C1]  ? save_stack+0xfb/0x1f0
[  614.881845][    C1]  stack_trace_save+0x118/0x1d0
[  614.881873][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  614.881907][    C1]  save_stack+0xfb/0x1f0
[  614.881933][    C1]  ? __pfx_save_stack+0x10/0x10
[  614.881970][    C1]  __set_page_owner+0x92/0x800
[  614.881997][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  614.882020][    C1]  ? __pfx_lock_release+0x10/0x10
[  614.882040][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  614.882064][    C1]  ? do_raw_spin_trylock+0xc8/0x1f0
[  614.882095][    C1]  post_alloc_hook+0x1f3/0x230
[  614.882121][    C1]  get_page_from_freelist+0x2e4c/0x2f10
[  614.882156][    C1]  ? __alloc_pages_noprof+0x166/0x6c0
[  614.882186][    C1]  ? alloc_pages_bulk_noprof+0x729/0xd40
[  614.882217][    C1]  ? prepare_alloc_pages+0x369/0x5d0
[  614.882248][    C1]  __alloc_pages_noprof+0x256/0x6c0
[  614.882276][    C1]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  614.882313][    C1]  alloc_pages_mpol_noprof+0x3e8/0x680
[  614.882341][    C1]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  614.882365][    C1]  ? rcu_is_watching+0x15/0xb0
[  614.882386][    C1]  ? trace_kmalloc+0x1f/0xd0
[  614.882410][    C1]  ? __vmalloc_node_range_noprof+0x5dd/0x1460
[  614.882434][    C1]  ? alloc_pages_noprof+0xef/0x170
[  614.882460][    C1]  __vmalloc_node_range_noprof+0x971/0x1460
[  614.882496][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  614.882523][    C1]  vmalloc_user_noprof+0x74/0x80
[  614.882543][    C1]  ? kcov_ioctl+0x59/0x640
[  614.882562][    C1]  kcov_ioctl+0x59/0x640
[  614.882582][    C1]  ? bpf_lsm_file_ioctl+0x9/0x10
[  614.882602][    C1]  ? security_file_ioctl+0x87/0xb0
[  614.882625][    C1]  ? __pfx_kcov_ioctl+0x10/0x10
[  614.882646][    C1]  __se_sys_ioctl+0xfc/0x170
[  614.882668][    C1]  do_syscall_64+0xf3/0x230
[  614.882693][    C1]  ? clear_bhb_loop+0x35/0x90
[  614.882712][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.882738][    C1] RIP: 0033:0x7f148f3757db
[  614.882754][    C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  614.882769][    C1] RSP: 002b:00007ffd29e5b3c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  614.882788][    C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f148f3757db
[  614.882802][    C1] RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000e1
[  614.882815][    C1] RBP: 00007f148f504790 R08: 00000000000000da R09: 0000000000000000
[  614.882827][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c
[  614.882840][    C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009
[  614.882861][    C1]  </TASK>
[  614.885236][ T5088] Bluetooth: hci3: command tx timeout
[  615.637715][ T5088] Bluetooth: hci8: command tx timeout
[  615.643724][ T5088] Bluetooth: hci7: command tx timeout
[  615.649143][ T5088] Bluetooth: hci0: command 0x0406 tx timeout
[  615.655864][ T5088] Bluetooth: hci5: command 0x0406 tx timeout
[  615.661890][ T5088] Bluetooth: hci6: command 0x0406 tx timeout