last executing test programs:

25.36613297s ago: executing program 4 (id=719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001007300fe880001000000000000060000007d01ff020000000000000000000000000001"], 0xfdef)

24.674748702s ago: executing program 4 (id=724):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='./file0\x00', 0xa0ff, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x723080, 0x70)
fcntl$setlease(r3, 0x400, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x8000000003c)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x10, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}, 0x1c)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap$IORING_OFF_SQES(&(0x7f000050b000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
sched_setaffinity(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x4d60d799}, {0x6, 0xfe}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19)
socket$kcm(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000003c0))
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES64=r4], 0x4c}}, 0x0)

23.171451956s ago: executing program 4 (id=730):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="23b5c0c93b86ca050f4f00010afd"]})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB="1fea8a28d7329ff29e32fd261808809d3793071a3e5e1452727c561ccc2857a50a36187242143ab8327f4d9fce387b9f53cf1ad59d66c7d9f8703595ebacb273247b779b641e90f8bc59d220fc23ca958f1120558250ddeccf866fd3ecbfeca57d56bbbb63349a7023aed287b818e37489dfdcc834aa6b742e04cd0fd7ae06ec10f232873d897508c2bac2d9abf21c11e4f77e2e0694a7616073794190b3a224228e4f34c46c6e7a114c645d2be2ee453c948a37b2270511217f35a7c1f78dab201cc491e49937e7b8ee0ab870c28903d1e249f0253965d1bcb1f9f7d05977e987a9963708020d0a18183d65ca0a8e50004d88d3d0", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x2}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, 0x0, 0x0}, 0x90)
sync()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000803ec0000000000010000000000000400048005000300010000000900010073797a3000000000060002"], 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)

20.642565297s ago: executing program 4 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000303010100000000210000006acceb9183fc442430c1b88a37741efaad89f893a443d4148818e50b6cba504c96abed26f2af726aef46b609d03e3b8630ece68181497fb6e23111715fb04035879d872ec6276ec2eb7409cc10fdb4d626471a63456565852f851dbe89c4db1821ca27b28cd4446da819f72ca8ab352008"], 0x20}}, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1)
write$UHID_INPUT(r2, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006)
pipe(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r5], 0x44}}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000280)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES32], 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)

18.745583154s ago: executing program 4 (id=755):
r0 = creat(&(0x7f0000001000)='./file0\x00', 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f0000001040)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000440)=0xc)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x10)

18.101240236s ago: executing program 4 (id=761):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0)
rseq(&(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)}, 0x20, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x4})

8.936049142s ago: executing program 3 (id=822):
r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000c00)={0x2, 0x0, @ioapic})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x50, 0x46d, 0xc29b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xe0, 0x2, 0x3, 0x1, 0x1, 0xf8, {0x9, 0x21, 0xff81, 0x71, 0x1, {0x22, 0x62e}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x8, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0xd6, 0x5}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x1, 0x2, 0x10}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0xf, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "9afe8b0fb0d4e0e6c44fb7860fa50c8c"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x8, 0xca9}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xd, 0xffff}]}, 0x6, [{0x37, &(0x7f00000000c0)=@string={0x37, 0x3, "b8413e16f5fb078a7a04c0453fb78c3b3d00be63074b4c715903efb89e851067e0e96044b04b986216ccd8f68cae0fdb29f84d0271"}}, {0x4f, &(0x7f0000000180)=@string={0x4f, 0x3, "77d339cefd5b245095f37657d1af6076bd7fafe42d3a3b35e7773fbdc3e5119537cc4c8cc40e3033ecf8e80e372c6c00aa05cd9522317a5c0d67fb0f7ce87cd2d85fbca0fbda9c7f45de8ce99d"}}, {0x72, &(0x7f0000000240)=@string={0x72, 0x3, "ab4ac21f5f1eb208a1904314309ea3ce4720cae065f4ea36045967acdd25081975ec3d74cbc1b88ac4553d4a711d1087a68659f9a11f6cf5b45b280128af6a4c39aa882c9e4116c8800f25d0c9b01a6acc65097f7cceb8d9386dda9f270383010a05be373b22a5e1f04576698faeac40"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43e}}, {0xa9, &(0x7f0000000300)=@string={0xa9, 0x3, "1b01d84a4b3892241ba9d264639df0296551f41cbc55e1cb58b3c5c9323f9799446d3e859ea4fa31b21fa58ac22bf83016387aa294aad1c64af2d2dc58aeab88f2170ea310d7fbe461dae45e002446c3bb101119fc6c70a9215e11d142e51e23d7dc412be4d7ba7abb975811a1388d23ffd4fe858a0f1941a193548caa74f00f3dea485ca94c03020f1db44c7fd3b3590badac674863902e96a06fd626b0978b3e740d312f0a9f"}}, {0x45, &(0x7f0000000400)=@string={0x45, 0x3, "fef74e1df6e8d911afa04d1b4c7122f5af187feea35835d1b9d3c85ee7ea0e54848fc6d75e0006f61750eb7aecefb7cf327e456ec58c5a184f2a32370cd21ca1c2a584"}}]})
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x56, {0x56, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

8.774894327s ago: executing program 1 (id=824):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

8.539905887s ago: executing program 1 (id=825):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='btrfs_convert_extent_bit\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
r6 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1b0)
renameat2(r6, &(0x7f0000000380)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = memfd_create(&(0x7f0000004480)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\xb9\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\x01\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00#\x00d\x1d\x06sNE4{\xdev\f\xbe\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xc1pI[\x1c\x00\x00\x00\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb8<X\xfa\xddz\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8bCb[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7zDF\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT[\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18\x00\x00\x00\x00\x00\x00', 0x5)
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100})
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x101})
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x541b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e22416202104190419ab0102030109024b00010000000009040002000202ff0005a406000105240000000d240f0100000000000000000006241a00000005240100000524"], 0x0)

7.130793438s ago: executing program 2 (id=835):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

7.003104059s ago: executing program 2 (id=836):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001100), &(0x7f00000011c0)=0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402300, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x11, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRES64])

6.577588597s ago: executing program 2 (id=837):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x73, 0x0, 0xfc, 0x0, 0xffffffff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xc, 0x7, 0x0, 0x5, 0x1, 0xba, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9})
socket$caif_stream(0x25, 0x1, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$SOUND_MIXER_READ_STEREODEVS(r6, 0x80044dfb, &(0x7f0000000080))
preadv(r3, &(0x7f0000000100)=[{&(0x7f000000c3c0)=""/102383, 0x18fef}, {&(0x7f0000000340)=""/164, 0xa4}], 0x2, 0xffffffff, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

5.752127446s ago: executing program 3 (id=838):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000080)="8d62cf5ad0ae49149d57eabb060807df82a92e3a174a47d461f378b0ae71a4ff9e1815e311634d7d185a417518b0835be2c4128d35f30a2f35caa8c347c0e4df12bc7550fb22e4c89ce5b25d1bb2a0343e9f40ccef86314e84c457ee550d5730e491bd67795b4c8aa8411dab6d89bab09f4d638c53a613ddc0bb72697fb1813d3d5a17a5233afdcadabb6f8b5728504241e7a4bb8a484d17a5e5b9b5920f01c9ecced652337e9501cb688d64afd765cbf0b6a9f4392c813f", 0xb8, 0x10, &(0x7f0000000200)={0x11, 0x9, 0x0, 0x1, 0x3, 0x6, @random="2f5fec3079a3"}, 0x14)
recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/188, 0xbc}], 0x1}}], 0x1, 0x0, 0x0)

5.64196642s ago: executing program 3 (id=839):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0xef, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfc, 0x0, 0x9, 0x9, 0x0, 0x8c})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.201140596s ago: executing program 3 (id=841):
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40280)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154", 0x1c}], 0x2}}], 0x1, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001})
syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x0, 0x800, 0xfd})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, <r7=>0x0}, 0x2020)
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x1000, 0x0)
write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7}, 0x50)
syz_fuse_handle_req(r6, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x3, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x81, 0x8}, 0x48)

4.625348363s ago: executing program 0 (id=843):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = signalfd(r0, &(0x7f0000000040), 0x8) (async)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async, rerun: 64)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) (async, rerun: 64)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300)='@', 0x20000000}, 0x20) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
socket$nl_generic(0x11, 0x3, 0x10) (async, rerun: 32)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
syz_io_uring_setup(0xed1, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r6 = dup(r5)
fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) (async)
unshare(0x2a020400)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8001}, 0x0, 0x0) (async)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@hyper}, {@my=0x0}, 0x400, "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"}, 0x418}) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20) (async)
read$FUSE(r6, &(0x7f0000001680)={0x2020, 0x0, <r7=>0x0}, 0x2020) (async)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)=<r8=>0x0)
write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0xfffffffffffffff5, r7, {{0x4, 0x1, 0x0, r8}}}, 0x28) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=ANY=[@ANYBLOB="440000001100290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a80080002800400050008"], 0x44}}, 0x0) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
close_range(r10, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f00000006c0)={0x324100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (async)
utimensat(r1, 0x0, 0x0, 0x0)

4.512801206s ago: executing program 1 (id=844):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local})
r3 = socket(0x10, 0x3, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5})
ioperm(0xfffffffffffffffd, 0xfffc, 0x0)
futex(0x0, 0x6, 0x0, &(0x7f00000000c0), 0x0, 0x0)
socket(0x18, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa2000000000000a6320000f8ffffffb703000008000000b716000000000000850000000200000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.352189286s ago: executing program 0 (id=845):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

4.346022039s ago: executing program 0 (id=846):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001100), &(0x7f00000011c0)=0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402300, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x11, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRES64])

4.235644076s ago: executing program 3 (id=847):
r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000c00)={0x2, 0x0, @ioapic})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100), 0x0, 0x0})
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x50, 0x46d, 0xc29b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xe0, 0x2, 0x3, 0x1, 0x1, 0xf8, {0x9, 0x21, 0xff81, 0x71, 0x1, {0x22, 0x62e}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x8, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0xd6, 0x5}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x1, 0x2, 0x10}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0xf, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "9afe8b0fb0d4e0e6c44fb7860fa50c8c"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x8, 0xca9}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xd, 0xffff}]}, 0x6, [{0x37, &(0x7f00000000c0)=@string={0x37, 0x3, "b8413e16f5fb078a7a04c0453fb78c3b3d00be63074b4c715903efb89e851067e0e96044b04b986216ccd8f68cae0fdb29f84d0271"}}, {0x4f, &(0x7f0000000180)=@string={0x4f, 0x3, "77d339cefd5b245095f37657d1af6076bd7fafe42d3a3b35e7773fbdc3e5119537cc4c8cc40e3033ecf8e80e372c6c00aa05cd9522317a5c0d67fb0f7ce87cd2d85fbca0fbda9c7f45de8ce99d"}}, {0x72, &(0x7f0000000240)=@string={0x72, 0x3, "ab4ac21f5f1eb208a1904314309ea3ce4720cae065f4ea36045967acdd25081975ec3d74cbc1b88ac4553d4a711d1087a68659f9a11f6cf5b45b280128af6a4c39aa882c9e4116c8800f25d0c9b01a6acc65097f7cceb8d9386dda9f270383010a05be373b22a5e1f04576698faeac40"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43e}}, {0xa9, &(0x7f0000000300)=@string={0xa9, 0x3, "1b01d84a4b3892241ba9d264639df0296551f41cbc55e1cb58b3c5c9323f9799446d3e859ea4fa31b21fa58ac22bf83016387aa294aad1c64af2d2dc58aeab88f2170ea310d7fbe461dae45e002446c3bb101119fc6c70a9215e11d142e51e23d7dc412be4d7ba7abb975811a1388d23ffd4fe858a0f1941a193548caa74f00f3dea485ca94c03020f1db44c7fd3b3590badac674863902e96a06fd626b0978b3e740d312f0a9f"}}, {0x45, &(0x7f0000000400)=@string={0x45, 0x3, "fef74e1df6e8d911afa04d1b4c7122f5af187feea35835d1b9d3c85ee7ea0e54848fc6d75e0006f61750eb7aecefb7cf327e456ec58c5a184f2a32370cd21ca1c2a584"}}]})
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x56, {0x56, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.987971298s ago: executing program 2 (id=848):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000080)="8d62cf5ad0ae49149d57eabb060807df82a92e3a174a47d461f378b0ae71a4ff9e1815e311634d7d185a417518b0835be2c4128d35f30a2f35caa8c347c0e4df12bc7550fb22e4c89ce5b25d1bb2a0343e9f40ccef86314e84c457ee550d5730e491bd67795b4c8aa8411dab6d89bab09f4d638c53a613ddc0bb72697fb1813d3d5a17a5233afdcadabb6f8b5728504241e7a4bb8a484d17a5e5b9b5920f01c9ecced652337e9501cb688d64afd765cbf0b6a9f4392c813f1f4eba09", 0xbc, 0x10, &(0x7f0000000200)={0x11, 0x9, 0x0, 0x1, 0x3, 0x6, @random="2f5fec3079a3"}, 0x14)
recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/188, 0xbc}], 0x1}}], 0x1, 0x0, 0x0)

3.836127317s ago: executing program 1 (id=849):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="23b5c0c93b86ca050f4f00010afd"]})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB="1fea8a28d7329ff29e32fd261808809d3793071a3e5e1452727c561ccc2857a50a36187242143ab8327f4d9fce387b9f53cf1ad59d66c7d9f8703595ebacb273247b779b641e90f8bc59d220fc23ca958f1120558250ddeccf866fd3ecbfeca57d56bbbb63349a7023aed287b818e37489dfdcc834aa6b742e04cd0fd7ae06ec10f232873d897508c2bac2d9abf21c11e4f77e2e0694a7616073794190b3a224228e4f34c46c6e7a114c645d2be2ee453c948a37b2270511217f35a7c1f78dab201cc491e49937e7b8ee0ab870c28903d1e249f0253965d1bcb1f9f7d05977e987a9963708020d0a18183d65ca0a8e50004d88d3d0", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x2}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000803ec0000000000010000000000000400048005000300010000000900010073797a3000000000060002"], 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)

3.835840825s ago: executing program 3 (id=850):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0xef, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfc, 0x0, 0x9, 0x9, 0x0, 0x8c})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.544600538s ago: executing program 0 (id=852):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f}})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', <r4=>0x0, 0x20, 0x7800, 0x1, 0x29a, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x66, 0x0, 0x5, 0x7f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x56, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x10001}, {@remote, 0x7ff}]}, @timestamp_addr={0x44, 0xc, 0x26, 0x1, 0x5, [{@multicast2, 0xf96}]}]}}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket(0x10, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1f, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r8, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtclass={0xac, 0x28, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x2, 0x1}, {0xfff3, 0xa}, {0xd, 0xb}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xda}, @TCA_HTB_RATE64={0xc, 0x6, 0x6}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x401, 0x7, 0x7, 0x5}, {0x6, 0x0, 0x6, 0x81, 0x401, 0xb}, 0x8, 0x2, 0x5000000, 0xc220000, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0x7c, 0x5}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xe8, 0x40}}]}, 0xac}, 0x1, 0x0, 0x0, 0x44}, 0xc000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000104000000000000000000fcee00", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r14, @ANYBLOB="0100000000000000000003000000e80001802c0004001400010002000000ac14140000000000000000001400020002000a00ac1414bb00000040000000002c0002800800030000000000080001000000000008000300b200000008000100000000000800148b50310000100001006574683a62726964676530007c000280080001"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

3.543538183s ago: executing program 2 (id=853):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='btrfs_convert_extent_bit\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
r6 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1b0)
renameat2(r6, &(0x7f0000000380)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = memfd_create(&(0x7f0000004480)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\xb9\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\x01\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00#\x00d\x1d\x06sNE4{\xdev\f\xbe\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xc1pI[\x1c\x00\x00\x00\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb8<X\xfa\xddz\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8bCb[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7zDF\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT[\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18\x00\x00\x00\x00\x00\x00', 0x5)
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100})
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x101})
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x541b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e22416202104190419ab0102030109024b00010000000009040002000202ff0005a406000105240000000d240f0100000000000000000006241a00000005240100000524"], 0x0)

2.892621138s ago: executing program 0 (id=854):
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003500010700328bf1b00000001000a99327a3030000"], 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0)
recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x4, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc4c85513, &(0x7f0000000040)={0xb})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0xc1105511, &(0x7f0000000040))
connect$can_bcm(r7, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/15, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000000000b8ee0816756b62187804752330b2"], 0x80}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f0400001b04"], 0x7)

2.088024372s ago: executing program 0 (id=855):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='btrfs_convert_extent_bit\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
r6 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x1b0)
renameat2(r6, &(0x7f0000000380)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = memfd_create(&(0x7f0000004480)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\xb9\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\x01\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00#\x00d\x1d\x06sNE4{\xdev\f\xbe\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xc1pI[\x1c\x00\x00\x00\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb8<X\xfa\xddz\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8bCb[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7zDF\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT[\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18\x00\x00\x00\x00\x00\x00', 0x5)
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100})
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x101})
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x541b, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e22416202104190419ab0102030109024b00010000000009040002000202ff0005a406000105240000000d240f0100000000000000000006241a00000005240100000524"], 0x0)

1.549151337s ago: executing program 1 (id=856):
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r2 = socket(0x200000100000011, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
fcntl$setsig(r4, 0xa, 0x21)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}, 0xc000000}], 0xfb93a852dd518c, 0x101d0)
dup3(r5, r6, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
write$binfmt_aout(r2, 0x0, 0x120)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000011001fff008a85084600004000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028004000600080002007f000001"], 0x40}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
r9 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9)
r10 = syz_io_uring_setup(0x6a4c, &(0x7f0000000600)={0x0, 0x4e0f, 0x10100}, &(0x7f0000000500), &(0x7f0000000140)=<r11=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=<r12=>0x0, &(0x7f0000000380))
syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r10, 0x381b, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9})

212.003731ms ago: executing program 1 (id=857):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x73, 0x0, 0xfc, 0x0, 0xffffffff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xc, 0x7, 0x0, 0x5, 0x1, 0xba, 0x0, 0x4, 0x0, '\x00', 0x0, 0x9})
socket$caif_stream(0x25, 0x1, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$SOUND_MIXER_READ_STEREODEVS(r6, 0x80044dfb, &(0x7f0000000080))
preadv(r3, &(0x7f0000000100)=[{&(0x7f000000c3c0)=""/102383, 0x18fef}, {&(0x7f0000000340)=""/164, 0xa4}], 0x2, 0xffffffff, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

0s ago: executing program 2 (id=858):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local})
r3 = socket(0x10, 0x3, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5})
ioperm(0xfffffffffffffffd, 0xfffc, 0x0)
futex(0x0, 0x6, 0x0, &(0x7f00000000c0), 0x0, 0x0)
socket(0x18, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa2000000000000a6320000f8ffffffb703000008000000b716000000000000850000000200000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

kernel console output (not intermixed with test programs):

e_0) entered disabled state
[  307.151757][ T8859] bridge_slave_0: entered allmulticast mode
[  307.181213][ T8859] bridge_slave_0: entered promiscuous mode
[  307.212443][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.220570][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.252783][ T8859] bridge_slave_1: entered allmulticast mode
[  307.288161][ T8859] bridge_slave_1: entered promiscuous mode
[  307.321686][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.358124][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.396560][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.407524][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.421704][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.432752][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.442990][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.453888][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.464090][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.478681][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.489051][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.499560][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.509491][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.524140][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.534400][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.545516][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.555995][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.566876][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.577134][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.590800][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.602845][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.800231][ T8693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.835014][ T8693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.887859][ T8693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.913721][ T8693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.939237][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.957843][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.276630][ T8859] team0: Port device team_slave_0 added
[  308.310752][ T8859] team0: Port device team_slave_1 added
[  308.629225][  T989] IPVS: stop unused estimator thread 0...
[  308.667508][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.674499][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.724749][ T5272] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  308.800884][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.906352][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.950991][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.004626][ T5272] usb 1-1: Using ep0 maxpacket: 32
[  309.051670][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.068008][ T5272] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.082263][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0
[  309.105887][ T5272] usb 1-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19
[  309.144809][ T4619] Bluetooth: hci2: command tx timeout
[  309.158089][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.195890][ T5272] usb 1-1: Product: syz
[  309.200194][ T5272] usb 1-1: Manufacturer: syz
[  309.210012][ T5272] usb 1-1: SerialNumber: syz
[  309.244127][ T5272] usb 1-1: config 0 descriptor??
[  309.267601][ T5272] rndis_host 1-1:0.0: skipping garbage
[  309.273388][ T5272] usb 1-1: bad CDC descriptors
[  309.295165][ T5272] cdc_acm 1-1:0.0: skipping garbage
[  309.310690][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.323780][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'.
[  309.353336][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.657199][ T8859] hsr_slave_0: entered promiscuous mode
[  309.729098][ T8859] hsr_slave_1: entered promiscuous mode
[  309.826320][ T8859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.833971][ T8859] Cannot create hsr debugfs directory
[  310.066096][ T5225] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  310.089417][ T5225] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  310.098329][ T5225] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  310.110432][ T5225] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  310.119845][ T5225] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  310.137352][ T5225] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  310.307211][  T989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.360228][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.371579][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.385790][ T5293] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  310.435899][  T989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.612286][ T5293] usb 3-1: Using ep0 maxpacket: 8
[  310.628964][ T5293] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  310.648461][  T989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.656728][ T5293] usb 3-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.40
[  310.682702][ T8957] FAULT_INJECTION: forcing a failure.
[  310.682702][ T8957] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  310.686286][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.733448][ T5293] usb 3-1: Product: syz
[  310.742500][ T5293] usb 3-1: Manufacturer: syz
[  310.757068][ T8957] CPU: 0 UID: 0 PID: 8957 Comm: syz.1.605 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  310.767724][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  310.777814][ T8957] Call Trace:
[  310.781122][ T8957]  <TASK>
[  310.784077][ T8957]  dump_stack_lvl+0x241/0x360
[  310.788785][ T8957]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.794023][ T8957]  ? __pfx__printk+0x10/0x10
[  310.798667][ T8957]  should_fail_ex+0x3b0/0x4e0
[  310.803390][ T8957]  prepare_alloc_pages+0x1da/0x5d0
[  310.808551][ T8957]  __alloc_pages_noprof+0x166/0x6c0
[  310.813800][ T8957]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  310.819586][ T8957]  alloc_pages_mpol_noprof+0x3e8/0x680
[  310.825092][ T8957]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  310.831135][ T8957]  ? alloc_pages_noprof+0xef/0x170
[  310.836294][ T8957]  pte_alloc_one+0x88/0x5d0
[  310.840844][ T8957]  ? __pfx_pte_alloc_one+0x10/0x10
[  310.845999][ T8957]  ? __pfx_validate_chain+0x10/0x10
[  310.851239][ T8957]  ? validate_chain+0x11e/0x5900
[  310.856315][ T8957]  handle_pte_fault+0x218b/0x6eb0
[  310.861398][ T8957]  ? mark_lock+0x9a/0x350
[  310.865859][ T8957]  ? __pfx_handle_pte_fault+0x10/0x10
[  310.871267][ T8957]  ? __lock_acquire+0x137a/0x2040
[  310.876360][ T8957]  ? __thp_vma_allowable_orders+0x951/0xa20
[  310.882305][ T8957]  ? __pfx_lock_release+0x10/0x10
[  310.887378][ T8957]  handle_mm_fault+0x1029/0x1980
[  310.892385][ T8957]  ? __pfx_handle_mm_fault+0x10/0x10
[  310.897724][ T8957]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  310.904102][ T8957]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  310.909432][ T8957]  exc_page_fault+0x2b9/0x8c0
[  310.914275][ T8957]  asm_exc_page_fault+0x26/0x30
[  310.919168][ T8957] RIP: 0010:__get_user_4+0x11/0x20
[  310.924321][ T8957] Code: 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[  310.943971][ T8957] RSP: 0018:ffffc90004147bd8 EFLAGS: 00050202
[  310.950160][ T8957] RAX: 0000000020000040 RBX: 0000000020000040 RCX: ffffc90004147b03
[  310.958245][ T8957] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606640
[  310.966246][ T8957] RBP: ffffc90004147cb0 R08: ffffffff90179faf R09: 1ffffffff202f3f5
[  310.974417][ T8957] R10: dffffc0000000000 R11: fffffbfff202f3f6 R12: 1ffff92000828f84
[  310.982420][ T8957] R13: 000000000000010d R14: 0000000000000000 R15: ffff8880651b1ec0
[  310.990448][ T8957]  dccp_getsockopt+0xb7/0x1910
[  310.995268][ T8957]  ? __pfx_dccp_getsockopt+0x10/0x10
[  311.000595][ T8957]  ? aa_sock_opt_perm+0x79/0x120
[  311.005571][ T8957]  ? sock_common_getsockopt+0x2e/0xb0
[  311.010979][ T8957]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  311.016921][ T8957]  do_sock_getsockopt+0x373/0x850
[  311.022257][ T8957]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  311.027853][ T8957]  ? __fget_files+0x3f6/0x470
[  311.032581][ T8957]  ? __fget_files+0x29/0x470
[  311.037216][ T8957]  __sys_getsockopt+0x271/0x330
[  311.042117][ T8957]  ? __pfx___sys_getsockopt+0x10/0x10
[  311.047526][ T8957]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  311.053901][ T8957]  __ia32_sys_getsockopt+0xb5/0xd0
[  311.059152][ T8957]  __do_fast_syscall_32+0xb4/0x110
[  311.064303][ T8957]  ? exc_page_fault+0x590/0x8c0
[  311.069196][ T8957]  do_fast_syscall_32+0x34/0x80
[  311.074090][ T8957]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  311.080549][ T8957] RIP: 0023:0xf7fcf579
[  311.084655][ T8957] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  311.104290][ T8957] RSP: 002b:00000000f578657c EFLAGS: 00000206 ORIG_RAX: 000000000000016d
[  311.112737][ T8957] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000010d
[  311.120834][ T8957] RDX: 00000000000000d0 RSI: 0000000000000000 RDI: 0000000020000040
[  311.128840][ T8957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  311.136928][ T8957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  311.144933][ T8957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  311.153002][ T8957]  </TASK>
[  311.160607][ T5293] usb 3-1: SerialNumber: syz
[  311.203977][ T5293] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  311.252522][ T5277] usb 1-1: USB disconnect, device number 30
[  311.253051][  T989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.498754][ T5293] usb 3-1: USB disconnect, device number 25
[  311.647815][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.624'.
[  311.674739][ T8974] netem: invalid attributes len -24
[  311.686210][ T8974] netem: change failed
[  312.186836][ T4619] Bluetooth: hci10: command tx timeout
[  312.332525][  T989] bridge_slave_1: left allmulticast mode
[  312.366156][  T989] bridge_slave_1: left promiscuous mode
[  312.479302][  T989] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.552243][  T989] bridge_slave_0: left allmulticast mode
[  312.558449][  T989] bridge_slave_0: left promiscuous mode
[  312.564741][  T989] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.565272][   T29] audit: type=1326 audit(1722321686.945:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.0.628" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x0
[  313.288210][ T8997] netlink: 52 bytes leftover after parsing attributes in process `syz.0.631'.
[  313.300712][ T8997] netlink: 52 bytes leftover after parsing attributes in process `syz.0.631'.
[  313.576423][  T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.594098][  T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.617829][  T989] bond0 (unregistering): Released all slaves
[  313.639313][ T8955] chnl_net:caif_netlink_parms(): no params data found
[  313.646246][ T5274] usb 1-1: new low-speed USB device number 31 using dummy_hcd
[  313.833599][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'.
[  313.845794][ T5274] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  313.857711][ T5274] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  313.872179][ T5274] usb 1-1: config 0 has no interface number 0
[  313.879038][ T5274] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  313.890005][ T5274] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  313.902738][ T5274] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  313.912439][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.923329][ T5274] usb 1-1: config 0 descriptor??
[  314.266875][ T5225] Bluetooth: hci10: command tx timeout
[  314.366087][ T5274] usb 1-1: USB disconnect, device number 31
[  314.506537][ T5225] Bluetooth: hci5: command 0x0406 tx timeout
[  314.548485][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.586390][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.621553][ T8955] bridge_slave_0: entered allmulticast mode
[  314.646819][ T8955] bridge_slave_0: entered promiscuous mode
[  314.792592][  T989] hsr_slave_0: left promiscuous mode
[  314.809308][  T989] hsr_slave_1: left promiscuous mode
[  314.831264][  T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.857020][  T989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.898636][  T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.912532][ T5225] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  314.927127][ T5225] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  314.937029][ T5225] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  314.957593][ T5225] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  314.966284][ T5225] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  314.974649][  T989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.975757][ T5225] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  315.080577][  T989] veth1_macvtap: left promiscuous mode
[  315.095578][  T989] veth0_macvtap: left promiscuous mode
[  315.105440][  T989] veth1_vlan: left promiscuous mode
[  315.106555][  T989] veth0_vlan: left promiscuous mode
[  315.476604][  T939] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  315.678188][  T939] usb 1-1: Using ep0 maxpacket: 32
[  315.689367][  T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.700891][  T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.716852][  T939] usb 1-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  315.726551][  T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.737652][  T939] usb 1-1: config 0 descriptor??
[  315.981911][  T989] team0 (unregistering): Port device team_slave_1 removed
[  316.047453][  T989] team0 (unregistering): Port device team_slave_0 removed
[  316.344755][ T5225] Bluetooth: hci10: command tx timeout
[  316.427478][ T5280] usb 1-1: USB disconnect, device number 32
[  316.767103][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.774341][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.792884][ T8955] bridge_slave_1: entered allmulticast mode
[  316.813515][ T8955] bridge_slave_1: entered promiscuous mode
[  317.013664][ T8955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.066986][ T5225] Bluetooth: hci9: command tx timeout
[  317.111080][ T8955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.425935][   T29] audit: type=1326 audit(1722321691.815:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.0.640" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x0
[  317.482914][ T8955] team0: Port device team_slave_0 added
[  317.577149][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  317.583786][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  317.621279][ T8955] team0: Port device team_slave_1 added
[  317.736705][ T8859] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  317.813856][ T8859] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  318.006147][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.034452][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.059549][ T4619] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  318.073340][ T4619] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  318.082196][ T4619] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  318.090141][ T4619] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  318.097779][ T8955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.120872][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.133191][ T4619] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  318.140679][ T4619] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  318.210648][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.251705][ T8955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.275768][ T8859] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  318.302584][ T8859] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  318.426164][ T4619] Bluetooth: hci10: command tx timeout
[  318.488597][ T8955] hsr_slave_0: entered promiscuous mode
[  318.505762][ T8955] hsr_slave_1: entered promiscuous mode
[  318.517210][ T8955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.525164][ T8955] Cannot create hsr debugfs directory
[  318.704800][ T5280] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  318.885697][ T5280] usb 1-1: device descriptor read/64, error -71
[  319.034067][  T989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.145203][ T4619] Bluetooth: hci9: command tx timeout
[  319.167519][ T5280] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  319.180612][  T989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.241729][ T9013] chnl_net:caif_netlink_parms(): no params data found
[  319.364813][ T5280] usb 1-1: device descriptor read/64, error -71
[  319.427612][  T989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.485067][ T5280] usb usb1-port1: attempt power cycle
[  319.641127][  T989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.907575][ T5280] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  319.963256][ T5280] usb 1-1: device descriptor read/8, error -71
[  320.103810][ T9026] chnl_net:caif_netlink_parms(): no params data found
[  320.177611][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.185025][ T4619] Bluetooth: hci11: command tx timeout
[  320.195383][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.203355][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.215219][ T9013] bridge_slave_0: entered allmulticast mode
[  320.222905][ T9013] bridge_slave_0: entered promiscuous mode
[  320.238066][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.245461][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.252762][ T9013] bridge_slave_1: entered allmulticast mode
[  320.261071][ T9013] bridge_slave_1: entered promiscuous mode
[  320.295516][ T5280] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  320.336228][ T5280] usb 1-1: device descriptor read/8, error -71
[  320.457132][ T5280] usb usb1-port1: unable to enumerate USB device
[  320.488706][ T9013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.522838][ T8859] 8021q: adding VLAN 0 to HW filter on device team0
[  320.587666][ T9013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.739846][  T939] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.747330][  T939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.901352][  T989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.017534][ T9013] team0: Port device team_slave_0 added
[  321.063797][  T939] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.071034][  T939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.199585][  T989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.218723][ T9013] team0: Port device team_slave_1 added
[  321.225078][ T4619] Bluetooth: hci9: command tx timeout
[  321.241901][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.270242][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.285687][ T9026] bridge_slave_0: entered allmulticast mode
[  321.299278][ T9026] bridge_slave_0: entered promiscuous mode
[  321.320213][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.327682][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.335861][ T9026] bridge_slave_1: entered allmulticast mode
[  321.365449][ T9026] bridge_slave_1: entered promiscuous mode
[  321.540303][  T989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.778773][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.795564][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.872429][ T9013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.901055][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.919198][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.948506][ T9013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.983411][ T8859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  321.994146][ T8859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  322.007900][ T8955] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  322.034252][ T8955] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  322.106145][  T989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.138742][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.215480][ T8955] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  322.233870][ T8955] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  322.265110][ T4619] Bluetooth: hci11: command tx timeout
[  322.288845][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.419390][ T9013] hsr_slave_0: entered promiscuous mode
[  322.436106][ T9013] hsr_slave_1: entered promiscuous mode
[  322.456049][ T9013] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  322.474172][ T9013] Cannot create hsr debugfs directory
[  322.560906][ T9026] team0: Port device team_slave_0 added
[  322.929792][ T9026] team0: Port device team_slave_1 added
[  323.308790][ T4619] Bluetooth: hci9: command tx timeout
[  323.331444][  T989] bridge_slave_1: left allmulticast mode
[  323.347195][  T989] bridge_slave_1: left promiscuous mode
[  323.352992][  T989] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.457275][  T989] bridge_slave_0: left allmulticast mode
[  323.463117][  T989] bridge_slave_0: left promiscuous mode
[  323.473037][  T989] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.500317][  T989] bridge_slave_1: left allmulticast mode
[  323.506444][  T989] bridge_slave_1: left promiscuous mode
[  323.512274][  T989] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.526567][  T989] bridge_slave_0: left allmulticast mode
[  323.532274][  T989] bridge_slave_0: left promiscuous mode
[  323.545232][  T989] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.010201][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  324.023295][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  324.038279][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  324.048731][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  324.057150][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  324.070643][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  324.345254][ T4619] Bluetooth: hci11: command tx timeout
[  324.686468][  T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.699212][  T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.713921][  T989] bond0 (unregistering): Released all slaves
[  324.892974][  T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.914498][  T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.930800][  T989] bond0 (unregistering): Released all slaves
[  324.956338][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.963336][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.989808][ T9026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.003087][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.010118][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.041311][ T9026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.100177][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.553693][ T9026] hsr_slave_0: entered promiscuous mode
[  325.581492][ T9026] hsr_slave_1: entered promiscuous mode
[  325.605743][ T9026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.613364][ T9026] Cannot create hsr debugfs directory
[  326.111492][ T8859] veth0_vlan: entered promiscuous mode
[  326.185141][ T4619] Bluetooth: hci1: command tx timeout
[  326.299427][ T8859] veth1_vlan: entered promiscuous mode
[  326.427685][ T4619] Bluetooth: hci11: command tx timeout
[  326.544919][  T989] hsr_slave_0: left promiscuous mode
[  326.564151][  T989] hsr_slave_1: left promiscuous mode
[  326.580886][  T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.594448][  T989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.605369][  T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.624819][  T989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.649314][  T989] hsr_slave_0: left promiscuous mode
[  326.676648][  T989] hsr_slave_1: left promiscuous mode
[  326.682961][  T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.692345][  T989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.701953][  T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.710767][  T989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.770698][  T989] veth1_macvtap: left promiscuous mode
[  326.777562][  T989] veth0_macvtap: left promiscuous mode
[  326.783763][  T989] veth1_vlan: left promiscuous mode
[  326.790217][  T989] veth0_vlan: left promiscuous mode
[  326.812176][  T989] veth1_macvtap: left promiscuous mode
[  326.818684][  T989] veth0_macvtap: left promiscuous mode
[  326.824825][  T989] veth1_vlan: left promiscuous mode
[  326.830618][  T989] veth0_vlan: left promiscuous mode
[  327.863077][  T989] team0 (unregistering): Port device team_slave_1 removed
[  327.924394][  T989] team0 (unregistering): Port device team_slave_0 removed
[  328.265189][ T4619] Bluetooth: hci1: command tx timeout
[  329.160585][  T989] team0 (unregistering): Port device team_slave_1 removed
[  329.226018][  T989] team0 (unregistering): Port device team_slave_0 removed
[  330.313905][ T8859] veth0_macvtap: entered promiscuous mode
[  330.345757][ T4619] Bluetooth: hci1: command tx timeout
[  330.369693][ T9122] chnl_net:caif_netlink_parms(): no params data found
[  330.485570][ T8859] veth1_macvtap: entered promiscuous mode
[  330.557654][ T8955] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.622575][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.652278][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.664432][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.675286][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.685254][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.695918][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.706008][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.716969][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.727361][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.739318][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.750568][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.763097][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.773810][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.784802][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.795136][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  330.806476][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.818650][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  330.924260][ T8955] 8021q: adding VLAN 0 to HW filter on device team0
[  331.173439][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.186495][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.197085][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.219412][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.229998][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.241463][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.252679][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.263836][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.277326][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.288448][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.299124][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.311388][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.321763][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.332789][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.342789][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.353446][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.376705][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.463442][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.470675][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.522547][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.529935][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.540887][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.560618][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.568801][ T9122] bridge_slave_0: entered allmulticast mode
[  331.576563][ T9122] bridge_slave_0: entered promiscuous mode
[  331.587319][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.594711][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.602036][ T9122] bridge_slave_1: entered allmulticast mode
[  331.609598][ T9122] bridge_slave_1: entered promiscuous mode
[  331.649498][ T8859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.675020][ T8859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.689514][ T8859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.699381][ T8859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.761182][ T9122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.834300][ T9122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.973670][ T9026] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  331.999301][ T9026] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  332.028372][ T9122] team0: Port device team_slave_0 added
[  332.100523][ T9026] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  332.117552][ T9026] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  332.159942][ T9122] team0: Port device team_slave_1 added
[  332.321605][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.329329][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.356760][ T9122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.394789][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.406915][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.413916][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.440872][ T4619] Bluetooth: hci1: command tx timeout
[  332.450663][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.451288][ T9122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.479507][ T9013] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  332.515324][ T9013] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  332.579117][  T989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.640503][ T9013] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  332.658991][ T9013] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  332.741944][  T989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.822949][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.849097][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.901320][  T989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.951954][ T9122] hsr_slave_0: entered promiscuous mode
[  332.980780][ T9122] hsr_slave_1: entered promiscuous mode
[  332.988989][ T9122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  333.005619][ T9122] Cannot create hsr debugfs directory
[  333.096880][  T989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.409457][ T8955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.766808][ T5293] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  333.782564][  T989] bridge_slave_1: left allmulticast mode
[  333.793547][  T989] bridge_slave_1: left promiscuous mode
[  333.802931][  T989] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.833827][  T989] bridge_slave_0: left allmulticast mode
[  333.840089][  T989] bridge_slave_0: left promiscuous mode
[  333.862706][  T989] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.956551][ T5293] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  333.966064][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.995011][ T5293] usb 4-1: config 0 descriptor??
[  334.005881][ T5293] usb 4-1: bad CDC descriptors
[  334.416116][ T5277] usb 4-1: USB disconnect, device number 53
[  335.003623][  T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.016338][  T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.031611][  T989] bond0 (unregistering): Released all slaves
[  335.329452][ T8955] veth0_vlan: entered promiscuous mode
[  335.423201][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.446540][ T8955] veth1_vlan: entered promiscuous mode
[  335.671296][ T9026] 8021q: adding VLAN 0 to HW filter on device team0
[  335.830497][  T989] hsr_slave_0: left promiscuous mode
[  335.861572][  T989] hsr_slave_1: left promiscuous mode
[  335.890884][  T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.911104][  T989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.956790][  T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.964823][  T989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.015346][  T989] veth1_macvtap: left promiscuous mode
[  336.020961][  T989] veth0_macvtap: left promiscuous mode
[  336.027390][  T989] veth1_vlan: left promiscuous mode
[  336.033130][  T989] veth0_vlan: left promiscuous mode
[  336.378868][ T5223] IPVS: starting estimator thread 0...
[  336.494974][ T9247] IPVS: using max 18 ests per chain, 43200 per kthread
[  337.170007][  T989] team0 (unregistering): Port device team_slave_1 removed
[  337.225129][  T939] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  337.257499][  T989] team0 (unregistering): Port device team_slave_0 removed
[  337.436437][  T939] usb 4-1: Using ep0 maxpacket: 32
[  337.447523][  T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.459440][  T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.470341][  T939] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  337.480450][  T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.495514][  T939] usb 4-1: config 0 descriptor??
[  338.172151][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.179355][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.213442][ T5293] usb 4-1: USB disconnect, device number 54
[  338.271819][ T9013] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.288473][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.295696][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.350333][ T8955] veth0_macvtap: entered promiscuous mode
[  338.462352][ T9013] 8021q: adding VLAN 0 to HW filter on device team0
[  338.498002][ T8955] veth1_macvtap: entered promiscuous mode
[  338.630614][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.637846][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.733073][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.740289][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.788174][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.818796][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.850694][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.880642][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.902825][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.914271][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.957523][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.999116][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.015018][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.026372][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.037683][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.049049][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.061070][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.072913][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.082945][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.093672][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.111795][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.135620][ T9122] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  339.170282][ T9122] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  339.211832][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.256584][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.287309][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.298719][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.310677][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.322076][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.333829][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.345002][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.355989][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.375274][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.444924][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.458309][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.490532][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.518417][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.529395][ T8955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.540505][ T8955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.556282][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.588929][ T9122] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  339.610558][ T8955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.620420][ T8955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.634833][ T8955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.647840][ T8955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.694313][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.747544][ T9122] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  340.096793][ T9285] FAULT_INJECTION: forcing a failure.
[  340.096793][ T9285] name failslab, interval 1, probability 0, space 0, times 0
[  340.115100][ T4619] Bluetooth: hci4: command 0x0406 tx timeout
[  340.136094][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.3.665 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  340.146730][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  340.156960][ T9285] Call Trace:
[  340.160237][ T9285]  <TASK>
[  340.163167][ T9285]  dump_stack_lvl+0x241/0x360
[  340.167853][ T9285]  ? __pfx_dump_stack_lvl+0x10/0x10
[  340.173051][ T9285]  ? __pfx__printk+0x10/0x10
[  340.177640][ T9285]  ? fs_reclaim_acquire+0x93/0x140
[  340.182760][ T9285]  ? __pfx___might_resched+0x10/0x10
[  340.188055][ T9285]  should_fail_ex+0x3b0/0x4e0
[  340.192744][ T9285]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  340.198477][ T9285]  should_failslab+0xac/0x100
[  340.203159][ T9285]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  340.208877][ T9285]  __kmalloc_noprof+0xd8/0x400
[  340.213638][ T9285]  ? kfree+0x4e/0x360
[  340.217619][ T9285]  tomoyo_realpath_from_path+0xcf/0x5e0
[  340.223257][ T9285]  tomoyo_path_number_perm+0x23a/0x880
[  340.228720][ T9285]  ? __lock_acquire+0x137a/0x2040
[  340.233835][ T9285]  ? tomoyo_path_number_perm+0x208/0x880
[  340.239470][ T9285]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  340.245747][ T9285]  ? __fget_files+0x29/0x470
[  340.250347][ T9285]  ? __fget_files+0x3f6/0x470
[  340.255033][ T9285]  security_file_ioctl_compat+0x75/0xb0
[  340.260581][ T9285]  __se_compat_sys_ioctl+0xd6/0xca0
[  340.265781][ T9285]  ? __pfx___se_compat_sys_ioctl+0x10/0x10
[  340.271598][ T9285]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  340.277585][ T9285]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  340.283930][ T9285]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  340.290531][ T9285]  ? lockdep_hardirqs_on+0x99/0x150
[  340.295752][ T9285]  __do_fast_syscall_32+0xb4/0x110
[  340.300890][ T9285]  ? exc_page_fault+0x590/0x8c0
[  340.305748][ T9285]  do_fast_syscall_32+0x34/0x80
[  340.310597][ T9285]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  340.316928][ T9285] RIP: 0023:0xf73dd579
[  340.320993][ T9285] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  340.340774][ T9285] RSP: 002b:00000000f56f657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  340.349198][ T9285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a
[  340.357196][ T9285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  340.365168][ T9285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  340.373138][ T9285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  340.381114][ T9285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  340.389110][ T9285]  </TASK>
[  340.402401][ T9285] ERROR: Out of memory at tomoyo_realpath_from_path.
[  340.414721][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.422575][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.553417][ T9013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.591172][ T4619] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  340.600306][ T4619] Bluetooth: hci2: Injecting HCI hardware error event
[  340.609430][ T4619] Bluetooth: hci2: hardware error 0x00
[  340.648145][ T9026] veth0_vlan: entered promiscuous mode
[  340.674019][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.666'.
[  340.685835][ T9288] netem: invalid attributes len -24
[  340.696675][ T9288] netem: change failed
[  340.783745][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.843090][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.856266][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.893881][ T9013] veth0_vlan: entered promiscuous mode
[  340.917657][ T9292] mmap: syz.3.668 (9292) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  340.940520][ T9026] veth1_vlan: entered promiscuous mode
[  341.013541][ T9122] 8021q: adding VLAN 0 to HW filter on device team0
[  341.099172][ T9013] veth1_vlan: entered promiscuous mode
[  341.141700][  T939] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.148912][  T939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.243060][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.250241][ T5223] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.311140][ T9026] veth0_macvtap: entered promiscuous mode
[  341.329372][ T9026] veth1_macvtap: entered promiscuous mode
[  341.334924][ T5277] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  341.356807][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.368132][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.390674][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.404206][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.432377][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.444141][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.455702][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.467490][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.479693][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.490851][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.502873][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.515507][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.526491][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.537758][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.548531][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.559955][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.570856][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.582353][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.591257][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.593737][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.617407][ T5277] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  341.628773][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.640833][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.649857][ T5277] usb 5-1: config 0 descriptor??
[  341.679014][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.691583][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.732920][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.735125][ T5225] Bluetooth: hci2: unexpected event for opcode 0x041b
[  341.752200][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.764389][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.795371][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.830184][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.846947][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.873246][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.883904][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.893933][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.904572][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.914407][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.926991][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.938618][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.950355][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.966740][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.996885][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.011766][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.032220][ T9013] veth0_macvtap: entered promiscuous mode
[  342.054263][ T9013] veth1_macvtap: entered promiscuous mode
[  342.100699][ T9026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.111459][ T9026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.120826][ T9026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.134757][ T5277] usbhid 5-1:0.0: can't add hid device: -71
[  342.141266][ T5277] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  342.149574][ T9026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.165140][ T5277] usb 5-1: USB disconnect, device number 16
[  342.254961][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.267553][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.284921][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.304858][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.335043][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.346759][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.357462][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.368964][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.379888][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.390929][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.402340][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.415970][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.426410][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.438569][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.461137][ T9304] FAULT_INJECTION: forcing a failure.
[  342.461137][ T9304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.465453][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.475309][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.3.671 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  342.495448][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  342.498354][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.505673][ T9304] Call Trace:
[  342.505687][ T9304]  <TASK>
[  342.505697][ T9304]  dump_stack_lvl+0x241/0x360
[  342.505726][ T9304]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.505747][ T9304]  ? __pfx__printk+0x10/0x10
[  342.517228][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.518809][ T9304]  ? vfs_write+0x7c4/0xc90
[  342.521724][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.526378][ T9304]  should_fail_ex+0x3b0/0x4e0
[  342.526409][ T9304]  _copy_from_user+0x2f/0xe0
[  342.526431][ T9304]  move_addr_to_kernel+0x82/0x150
[  342.526454][ T9304]  __sys_connect+0xc1/0x310
[  342.532758][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.536196][ T9304]  ? __pfx___sys_connect+0x10/0x10
[  342.536241][ T9304]  __ia32_sys_connect+0x7a/0x90
[  342.536264][ T9304]  __do_fast_syscall_32+0xb4/0x110
[  342.536287][ T9304]  ? exc_page_fault+0x590/0x8c0
[  342.536309][ T9304]  do_fast_syscall_32+0x34/0x80
[  342.536329][ T9304]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  342.536358][ T9304] RIP: 0023:0xf73dd579
[  342.536377][ T9304] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  342.536395][ T9304] RSP: 002b:00000000f56f657c EFLAGS: 00000206 ORIG_RAX: 000000000000016a
[  342.536417][ T9304] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000040
[  342.536432][ T9304] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000
[  342.536445][ T9304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  342.536458][ T9304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  342.536471][ T9304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  342.536499][ T9304]  </TASK>
[  342.685465][ T4619] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  342.694013][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.731142][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.819456][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.846409][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.865913][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.877504][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.901811][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.929955][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.947849][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.959499][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.969879][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.980942][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.000576][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.011558][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.022695][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.034301][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.045228][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.058005][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.069618][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.081370][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.094049][ T9013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.105973][ T9013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.119119][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.154350][ T9311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.673'.
[  343.185909][ T5293] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  343.204069][ T9311] netem: invalid attributes len -24
[  343.209716][ T9311] netem: change failed
[  343.247813][ T9013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.279403][ T9013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.306749][ T9013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.323700][ T9013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.409077][ T5293] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  343.434831][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.446022][ T5293] usb 4-1: config 0 descriptor??
[  343.460300][ T5293] usb 4-1: bad CDC descriptors
[  343.532672][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.553694][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.697127][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.790973][  T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.805901][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'.
[  343.836361][  T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.909140][ T5272] usb 4-1: USB disconnect, device number 55
[  343.919205][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.005625][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.130862][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.145391][ T5271] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  344.156728][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.192520][ T9122] veth0_vlan: entered promiscuous mode
[  344.256919][ T9122] veth1_vlan: entered promiscuous mode
[  344.336606][ T9122] veth0_macvtap: entered promiscuous mode
[  344.350565][ T5271] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  344.409975][ T9122] veth1_macvtap: entered promiscuous mode
[  344.427077][ T5271] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  344.443928][ T5271] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  344.454352][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  344.462706][ T5271] usb 5-1: SerialNumber: syz
[  344.499257][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.511771][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.569158][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.597401][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.611796][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.624375][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.683475][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.713047][ T9333] netlink: 48 bytes leftover after parsing attributes in process `syz.1.679'.
[  344.728546][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.782853][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.796407][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.806438][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.817963][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.828752][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.839409][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.850269][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.860887][ T9335] input: syz0 as /devices/virtual/input/input17
[  344.870442][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.881106][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.924806][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.935366][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.935391][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.935405][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.935418][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.941170][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.006151][ T5271] usb 5-1: 0:2 : does not exist
[  345.006228][ T5271] usb 5-1: unit 255 not found!
[  345.053474][ T5271] usb 5-1: USB disconnect, device number 17
[  345.054993][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055013][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055023][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055036][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055047][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055060][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055072][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055084][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055096][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055110][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055123][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055139][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055152][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055166][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055179][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055194][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055206][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055220][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055233][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055247][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.055258][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.055273][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.057546][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.088902][ T9122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.333898][ T5293] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  345.407655][ T9122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.418301][ T9122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.427523][ T9122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.567194][ T9173] udevd[9173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  345.576577][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.652630][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.672789][  T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.675048][ T5223] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  345.685965][  T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.700970][ T5293] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  345.717532][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.737448][ T5293] usb 3-1: config 0 descriptor??
[  345.773647][  T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.785847][  T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.880176][ T5223] usb 4-1: Using ep0 maxpacket: 32
[  345.907130][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.930052][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.940428][ T5223] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  345.951075][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.965505][ T5223] usb 4-1: config 0 descriptor??
[  346.060351][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'.
[  346.186013][ T5293] usbhid 3-1:0.0: can't add hid device: -71
[  346.203451][ T5293] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  346.218294][ T5293] usb 3-1: USB disconnect, device number 26
[  346.404764][  T939] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  346.605298][ T5271] usb 4-1: USB disconnect, device number 56
[  346.659699][  T939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  346.681789][   T29] audit: type=1326 audit(1722321721.045:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9346 comm="syz.0.649" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x0
[  346.759592][  T939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  346.784285][  T939] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  346.804711][  T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  346.813699][  T939] usb 2-1: SerialNumber: syz
[  347.033721][  T939] usb 2-1: 0:2 : does not exist
[  347.045837][  T939] usb 2-1: unit 255 not found!
[  347.188468][  T939] usb 2-1: USB disconnect, device number 32
[  347.432718][ T9173] udevd[9173]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  347.574746][ T5271] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  347.803462][ T5271] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  347.818448][ T9372] FAULT_INJECTION: forcing a failure.
[  347.818448][ T9372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  347.831462][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.849827][ T9372] CPU: 1 UID: 0 PID: 9372 Comm: syz.2.690 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  347.860449][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  347.870530][ T9372] Call Trace:
[  347.873844][ T9372]  <TASK>
[  347.876931][ T9372]  dump_stack_lvl+0x241/0x360
[  347.881643][ T9372]  ? __pfx_dump_stack_lvl+0x10/0x10
[  347.886873][ T9372]  ? __pfx__printk+0x10/0x10
[  347.891494][ T9372]  ? __pfx_lock_release+0x10/0x10
[  347.896567][ T9372]  should_fail_ex+0x3b0/0x4e0
[  347.901280][ T9372]  _copy_from_user+0x2f/0xe0
[  347.905899][ T9372]  get_compat_msghdr+0xae/0x730
[  347.910781][ T9372]  ? __fget_files+0x29/0x470
[  347.915393][ T9372]  ? __pfx_get_compat_msghdr+0x10/0x10
[  347.920957][ T9372]  ? __fget_files+0x3f6/0x470
[  347.925656][ T9372]  __sys_sendmsg+0x273/0x3a0
[  347.930244][ T9372]  ? __pfx___sys_sendmsg+0x10/0x10
[  347.935351][ T9372]  ? vfs_write+0x7c4/0xc90
[  347.939782][ T9372]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  347.946559][ T9372]  ? lockdep_hardirqs_on+0x99/0x150
[  347.951785][ T9372]  __do_fast_syscall_32+0xb4/0x110
[  347.956925][ T9372]  ? exc_page_fault+0x590/0x8c0
[  347.961816][ T9372]  do_fast_syscall_32+0x34/0x80
[  347.966705][ T9372]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  347.973058][ T9372] RIP: 0023:0xf7ff7579
[  347.977125][ T9372] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  347.996731][ T9372] RSP: 002b:00000000f57a657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  348.005146][ T9372] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280
[  348.013115][ T9372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  348.021092][ T9372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  348.029148][ T9372] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  348.037141][ T9372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  348.045298][ T9372]  </TASK>
[  348.086328][ T5271] usb 1-1: config 0 descriptor??
[  348.093680][ T5271] usb 1-1: bad CDC descriptors
[  348.279276][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'.
[  348.367150][ T5293] usb 1-1: USB disconnect, device number 37
[  348.454949][ T5271] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  348.594721][ T5276] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  348.644680][ T5271] usb 3-1: Using ep0 maxpacket: 32
[  348.651909][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  348.665730][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  348.685929][ T5271] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  348.704848][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.750650][ T5271] usb 3-1: config 0 descriptor??
[  348.770939][ T9379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  348.786644][ T5271] hub 3-1:0.0: USB hub found
[  348.797462][ T5276] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  348.826359][ T5276] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  348.845665][ T5276] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  348.865158][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  348.879123][ T5276] usb 5-1: SerialNumber: syz
[  348.915818][   T29] audit: type=1326 audit(1722321723.315:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.1.696" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x0
[  348.965038][ T1851] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  349.035121][ T5271] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  349.157276][ T5276] usb 5-1: 0:2 : does not exist
[  349.162836][ T1851] usb 4-1: Using ep0 maxpacket: 32
[  349.168260][ T5276] usb 5-1: unit 255 not found!
[  349.186000][ T1851] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf
[  349.221628][ T1851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.240561][ T5276] usb 5-1: USB disconnect, device number 18
[  349.271047][ T1851] usb 4-1: Product: syz
[  349.302872][ T5271] hid-generic 0003:046D:C314.0013: unknown main item tag 0x0
[  349.318690][ T1851] usb 4-1: Manufacturer: syz
[  349.323348][ T1851] usb 4-1: SerialNumber: syz
[  349.341600][ T1851] usb 4-1: config 0 descriptor??
[  349.348105][ T5271] hid-generic 0003:046D:C314.0013: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0
[  349.368944][ T1851] usb 4-1: MBOX3: Invalid descriptor size=18.
[  349.524490][ T9393] program syz.0.699 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  349.531825][ T9322] udevd[9322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  349.751850][  T939] usb 4-1: USB disconnect, device number 57
[  349.884817][ T5276] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  349.954254][ T9400] FAULT_INJECTION: forcing a failure.
[  349.954254][ T9400] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.984002][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.1.701 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  349.994734][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  350.004813][ T9400] Call Trace:
[  350.008192][ T9400]  <TASK>
[  350.011136][ T9400]  dump_stack_lvl+0x241/0x360
[  350.015831][ T9400]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.021059][ T9400]  ? __pfx__printk+0x10/0x10
[  350.025652][ T9400]  ? __pfx_lock_release+0x10/0x10
[  350.030773][ T9400]  should_fail_ex+0x3b0/0x4e0
[  350.035453][ T9400]  _copy_from_user+0x2f/0xe0
[  350.040042][ T9400]  get_compat_msghdr+0xae/0x730
[  350.044905][ T9400]  ? __fget_files+0x29/0x470
[  350.049513][ T9400]  ? __pfx_get_compat_msghdr+0x10/0x10
[  350.054971][ T9400]  ? __fget_files+0x3f6/0x470
[  350.059652][ T9400]  __sys_sendmsg+0x273/0x3a0
[  350.064241][ T9400]  ? __pfx___sys_sendmsg+0x10/0x10
[  350.069349][ T9400]  ? vfs_write+0x7c4/0xc90
[  350.073795][ T9400]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  350.080385][ T9400]  ? lockdep_hardirqs_on+0x99/0x150
[  350.085582][ T9400]  __do_fast_syscall_32+0xb4/0x110
[  350.090774][ T9400]  ? exc_page_fault+0x590/0x8c0
[  350.095617][ T9400]  do_fast_syscall_32+0x34/0x80
[  350.100470][ T9400]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  350.106807][ T9400] RIP: 0023:0xf7f42579
[  350.110874][ T9400] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  350.130658][ T9400] RSP: 002b:00000000f56f657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  350.139069][ T9400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140
[  350.147038][ T9400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  350.154999][ T9400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  350.162963][ T9400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  350.170926][ T9400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  350.179084][ T9400]  </TASK>
[  350.251664][ T5276] usb 1-1: Using ep0 maxpacket: 16
[  350.285870][ T5276] usb 1-1: config index 0 descriptor too short (expected 19757, got 45)
[  350.294260][ T5276] usb 1-1: config 232 has too many interfaces: 121, using maximum allowed: 32
[  350.325448][ T5276] usb 1-1: config 232 has an invalid descriptor of length 206, skipping remainder of the config
[  350.337027][ T5276] usb 1-1: config 232 has 0 interfaces, different from the descriptor's value: 121
[  350.353021][ T5276] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice=27.cd
[  350.363096][ T1851] usb 3-1: USB disconnect, device number 27
[  350.371198][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.383237][ T5276] usb 1-1: Product: syz
[  350.388070][ T5276] usb 1-1: Manufacturer: syz
[  350.392784][ T5276] usb 1-1: SerialNumber: syz
[  350.463320][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'.
[  350.616563][ T5276] usb 1-1: USB disconnect, device number 38
[  350.796028][ T1851] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  350.998394][ T1851] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  351.041525][ T1851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  351.086152][ T1851] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  351.109723][ T1851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  351.128354][ T1851] usb 2-1: SerialNumber: syz
[  351.144771][  T939] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  351.284772][ T5277] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  351.365036][  T939] usb 5-1: Using ep0 maxpacket: 8
[  351.382941][  T939] usb 5-1: unable to get BOS descriptor or descriptor too short
[  351.411906][ T1851] usb 2-1: 0:2 : does not exist
[  351.417814][  T939] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  351.437270][ T1851] usb 2-1: unit 255 not found!
[  351.458775][  T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.466245][ T1851] usb 2-1: USB disconnect, device number 33
[  351.507062][ T5277] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  351.517609][  T939] usb 5-1: Product: syz
[  351.521791][  T939] usb 5-1: Manufacturer: syz
[  351.543729][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.583938][  T939] usb 5-1: SerialNumber: syz
[  351.589596][ T5277] usb 4-1: config 0 descriptor??
[  351.616119][ T5277] usb 4-1: bad CDC descriptors
[  351.687690][   T29] audit: type=1326 audit(1722321726.085:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.0.711" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x0
[  351.688767][  T939] usb 5-1: config 0 descriptor??
[  351.737394][ T9173] udevd[9173]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  352.010967][ T5285] usb 4-1: USB disconnect, device number 58
[  352.536693][  T939] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  352.576000][  T939] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  352.584219][  T939] dib0700: firmware download failed at 7 with -22
[  352.640362][  T939] usb 5-1: USB disconnect, device number 19
[  352.694621][ T5285] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  352.954600][ T5285] usb 2-1: Using ep0 maxpacket: 8
[  352.961883][ T5285] usb 2-1: unable to get BOS descriptor or descriptor too short
[  352.978009][ T5285] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  352.992372][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.002677][ T5285] usb 2-1: Product: syz
[  353.007809][ T5285] usb 2-1: Manufacturer: syz
[  353.012449][ T5285] usb 2-1: SerialNumber: syz
[  353.022623][ T5285] usb 2-1: config 0 descriptor??
[  353.302254][ T9450] netlink: 'syz.2.718': attribute type 14 has an invalid length.
[  353.312761][ T9450] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (204)
[  353.331955][ T9450] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  353.614988][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'.
[  353.665561][ T5285] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  353.676280][ T5285] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  353.702810][ T5285] dib0700: firmware download failed at 7 with -22
[  353.729474][ T5285] usb 2-1: USB disconnect, device number 34
[  354.014804][ T5293] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  354.097575][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.722'.
[  354.101176][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'.
[  354.224652][ T5293] usb 4-1: Using ep0 maxpacket: 32
[  354.232202][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.243999][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.254779][ T5293] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  354.263944][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.291754][ T5293] usb 4-1: config 0 descriptor??
[  354.323226][ T9466] netlink: 68 bytes leftover after parsing attributes in process `syz.2.722'.
[  354.466622][ T9466] netlink: 68 bytes leftover after parsing attributes in process `syz.2.722'.
[  354.714635][ T5277] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  354.866827][   T29] audit: type=1326 audit(1722321729.255:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.724" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x0
[  354.940582][ T5285] usb 4-1: USB disconnect, device number 59
[  354.978693][ T5277] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.024710][ T5277] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  355.042597][ T5277] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  355.052418][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  355.063790][ T5277] usb 1-1: SerialNumber: syz
[  355.294049][ T5277] usb 1-1: 0:2 : does not exist
[  355.303706][ T5277] usb 1-1: unit 255 not found!
[  355.376811][ T5277] usb 1-1: USB disconnect, device number 39
[  355.632394][ T9491] FAULT_INJECTION: forcing a failure.
[  355.632394][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.654069][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.3.729 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  355.664819][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  355.674994][ T9491] Call Trace:
[  355.678299][ T9491]  <TASK>
[  355.681244][ T9491]  dump_stack_lvl+0x241/0x360
[  355.685939][ T9491]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.691145][ T9491]  ? __pfx__printk+0x10/0x10
[  355.695738][ T9491]  ? __pfx_lock_release+0x10/0x10
[  355.700862][ T9491]  should_fail_ex+0x3b0/0x4e0
[  355.705548][ T9491]  _copy_from_user+0x2f/0xe0
[  355.710142][ T9491]  get_compat_msghdr+0xae/0x730
[  355.715002][ T9491]  ? __fget_files+0x29/0x470
[  355.719589][ T9491]  ? __pfx_get_compat_msghdr+0x10/0x10
[  355.725069][ T9491]  ? __fget_files+0x3f6/0x470
[  355.729779][ T9491]  __sys_sendmsg+0x273/0x3a0
[  355.734376][ T9491]  ? __pfx___sys_sendmsg+0x10/0x10
[  355.739484][ T9491]  ? vfs_write+0x7c4/0xc90
[  355.743952][ T9491]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  355.750561][ T9491]  ? lockdep_hardirqs_on+0x99/0x150
[  355.755790][ T9491]  __do_fast_syscall_32+0xb4/0x110
[  355.760932][ T9491]  ? exc_page_fault+0x590/0x8c0
[  355.765787][ T9491]  do_fast_syscall_32+0x34/0x80
[  355.770636][ T9491]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  355.776967][ T9491] RIP: 0023:0xf73dd579
[  355.781034][ T9491] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  355.800686][ T9491] RSP: 002b:00000000f56f657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  355.809543][ T9491] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000280
[  355.817611][ T9491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  355.825598][ T9491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  355.833579][ T9491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  355.841546][ T9491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  355.849528][ T9491]  </TASK>
[  355.866144][ T9173] udevd[9173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  355.927852][ T5276] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  356.144664][ T5276] usb 2-1: Using ep0 maxpacket: 8
[  356.162275][ T5276] usb 2-1: unable to get BOS descriptor or descriptor too short
[  356.209673][ T5276] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  356.235563][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.243614][ T5276] usb 2-1: Product: syz
[  356.287465][ T5276] usb 2-1: Manufacturer: syz
[  356.296807][ T5276] usb 2-1: SerialNumber: syz
[  356.314818][ T5285] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  356.318817][ T5276] usb 2-1: config 0 descriptor??
[  356.406351][  T939] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  356.514724][ T5285] usb 5-1: Using ep0 maxpacket: 8
[  356.537235][ T5285] usb 5-1: unable to get BOS descriptor or descriptor too short
[  356.600697][ T5285] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  356.620128][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.639467][  T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.652708][ T5285] usb 5-1: Product: syz
[  356.657542][  T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.671362][ T5285] usb 5-1: Manufacturer: syz
[  356.676430][ T5285] usb 5-1: SerialNumber: syz
[  356.688451][  T939] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  356.688626][ T5285] usb 5-1: config 0 descriptor??
[  356.703395][  T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.732270][  T939] usb 3-1: config 0 descriptor??
[  356.794003][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.735'.
[  356.805162][ T9508] netem: invalid attributes len -24
[  356.841566][ T9508] netem: change failed
[  357.174322][ T5276] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  357.214920][  T939] usbhid 3-1:0.0: can't add hid device: -71
[  357.222762][ T5276] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  357.257437][ T5276] dib0700: firmware download failed at 7 with -22
[  357.282178][ T5276] usb 2-1: USB disconnect, device number 35
[  357.285170][  T939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  357.405000][  T939] usb 3-1: USB disconnect, device number 28
[  357.569690][ T5285] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  357.627815][ T5285] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  357.660714][ T5285] dib0700: firmware download failed at 7 with -22
[  357.672565][ T5285] usb 5-1: USB disconnect, device number 20
[  358.243885][   T29] audit: type=1326 audit(1722321732.635:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.0.740" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x0
[  358.387122][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'.
[  358.446619][ T5285] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  358.654834][ T5285] usb 4-1: Using ep0 maxpacket: 16
[  358.667939][ T5285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.689693][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  358.709721][ T5285] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  358.743483][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  358.783670][ T5285] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  358.835545][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  358.864405][ T5271] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  358.897701][ T5285] usb 4-1: Product: syz
[  358.901887][ T5285] usb 4-1: Manufacturer: syz
[  358.945608][ T5285] usb 4-1: SerialNumber: syz
[  358.966924][ T5285] usb 4-1: config 0 descriptor??
[  358.997551][ T5285] usb 4-1: NFC: intf ffff88801d293000 id ffffffff8f2c8800
[  359.074450][ T5271] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  359.087241][ T5271] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  359.112377][ T5271] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  359.131824][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  359.150572][ T5271] usb 5-1: SerialNumber: syz
[  359.242098][ T9530] fuse: Unknown parameter 'f'
[  359.319276][ T5285] usb 4-1: USB disconnect, device number 60
[  359.398630][ T9563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'.
[  359.400969][ T5271] usb 5-1: 0:2 : does not exist
[  359.411059][ T9563] netem: invalid attributes len -24
[  359.421645][ T9563] netem: change failed
[  359.461559][ T5271] usb 5-1: unit 255 not found!
[  359.498231][ T5271] usb 5-1: USB disconnect, device number 21
[  359.743367][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'.
[  359.776059][ T9173] udevd[9173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  360.166040][ T9577] FAULT_INJECTION: forcing a failure.
[  360.166040][ T9577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.194883][ T9577] CPU: 0 UID: 0 PID: 9577 Comm: syz.3.754 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  360.205531][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  360.215705][ T9577] Call Trace:
[  360.219007][ T9577]  <TASK>
[  360.221950][ T9577]  dump_stack_lvl+0x241/0x360
[  360.226659][ T9577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  360.231883][ T9577]  ? __pfx__printk+0x10/0x10
[  360.236507][ T9577]  ? __pfx_lock_release+0x10/0x10
[  360.241579][ T9577]  should_fail_ex+0x3b0/0x4e0
[  360.246291][ T9577]  _copy_from_user+0x2f/0xe0
[  360.250911][ T9577]  get_compat_msghdr+0xae/0x730
[  360.255796][ T9577]  ? __fget_files+0x29/0x470
[  360.260449][ T9577]  ? __pfx_get_compat_msghdr+0x10/0x10
[  360.265980][ T9577]  ? __fget_files+0x3f6/0x470
[  360.270956][ T9577]  __sys_sendmsg+0x273/0x3a0
[  360.275555][ T9577]  ? __pfx___sys_sendmsg+0x10/0x10
[  360.280658][ T9577]  ? vfs_write+0x7c4/0xc90
[  360.285114][ T9577]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  360.291706][ T9577]  ? lockdep_hardirqs_on+0x99/0x150
[  360.296905][ T9577]  __do_fast_syscall_32+0xb4/0x110
[  360.302016][ T9577]  ? exc_page_fault+0x590/0x8c0
[  360.306866][ T9577]  do_fast_syscall_32+0x34/0x80
[  360.311741][ T9577]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  360.318096][ T9577] RIP: 0023:0xf73dd579
[  360.322165][ T9577] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  360.341767][ T9577] RSP: 002b:00000000f56f657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  360.350271][ T9577] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000
[  360.358250][ T9577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  360.366222][ T9577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  360.374188][ T9577] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  360.382152][ T9577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  360.390142][ T9577]  </TASK>
[  360.631894][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.758'.
[  360.654372][    C0] eth0: bad gso: type: 1, size: 1408
[  360.660513][ T9586] netem: invalid attributes len -24
[  360.667570][ T9586] netem: change failed
[  361.389745][ T9616] FAULT_INJECTION: forcing a failure.
[  361.389745][ T9616] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  361.427676][ T9616] CPU: 1 UID: 0 PID: 9616 Comm: syz.1.766 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  361.438335][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  361.448507][ T9616] Call Trace:
[  361.451982][ T9616]  <TASK>
[  361.454979][ T9616]  dump_stack_lvl+0x241/0x360
[  361.459775][ T9616]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.465006][ T9616]  ? __pfx__printk+0x10/0x10
[  361.469623][ T9616]  ? __pfx_lock_release+0x10/0x10
[  361.474688][ T9616]  should_fail_ex+0x3b0/0x4e0
[  361.479408][ T9616]  _copy_from_user+0x2f/0xe0
[  361.484032][ T9616]  get_compat_msghdr+0xae/0x730
[  361.488926][ T9616]  ? __fget_files+0x29/0x470
[  361.493539][ T9616]  ? __pfx_get_compat_msghdr+0x10/0x10
[  361.499025][ T9616]  ? __fget_files+0x3f6/0x470
[  361.503750][ T9616]  __sys_sendmmsg+0x46e/0x740
[  361.508551][ T9616]  ? __pfx___sys_sendmmsg+0x10/0x10
[  361.513785][ T9616]  ? __pfx_lock_acquire+0x10/0x10
[  361.518844][ T9616]  ? get_pid_task+0x23/0x1f0
[  361.523461][ T9616]  ? __pfx_lock_release+0x10/0x10
[  361.528512][ T9616]  ? kstrtouint_from_user+0x128/0x190
[  361.533965][ T9616]  ? __pfx_lock_release+0x10/0x10
[  361.539035][ T9616]  ? __mutex_unlock_slowpath+0x21d/0x750
[  361.544712][ T9616]  ? __fget_files+0x3f6/0x470
[  361.549446][ T9616]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  361.555447][ T9616]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  361.561780][ T9616]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  361.567360][ T9616]  __do_fast_syscall_32+0xb4/0x110
[  361.572487][ T9616]  ? exc_page_fault+0x590/0x8c0
[  361.577342][ T9616]  do_fast_syscall_32+0x34/0x80
[  361.582196][ T9616]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  361.588544][ T9616] RIP: 0023:0xf7f42579
[  361.592612][ T9616] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  361.612305][ T9616] RSP: 002b:00000000f56f657c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  361.620719][ T9616] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000
[  361.628685][ T9616] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  361.636651][ T9616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  361.644630][ T9616] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  361.652612][ T9616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  361.660691][ T9616]  </TASK>
[  361.692204][ T9618] ALSA: mixer_oss: invalid OSS volume 'Vµ€Ã'
[  361.731101][ T9618] ALSA: mixer_oss: invalid OSS volume 'ýèôQ²‡FaèòŒ‚'
[  361.737183][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'.
[  362.244654][ T5285] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  362.265182][ T5277] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  362.392037][ T9632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.772'.
[  362.404395][ T9632] netem: invalid attributes len -24
[  362.410178][ T9632] netem: change failed
[  362.456672][ T5285] usb 2-1: Using ep0 maxpacket: 16
[  362.467280][ T5277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.488152][ T5277] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  362.496386][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.516002][ T5277] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  362.535277][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  362.553614][ T5277] usb 3-1: SerialNumber: syz
[  362.573453][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.600899][ T5285] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00
[  362.625587][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.638377][ T5285] usb 2-1: config 0 descriptor??
[  362.797219][ T5277] usb 3-1: 0:2 : does not exist
[  362.827700][ T5277] usb 3-1: unit 255 not found!
[  362.890466][ T5277] usb 3-1: USB disconnect, device number 29
[  362.960469][ T5285] usbhid 2-1:0.0: can't add hid device: -71
[  362.977427][ T5285] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  363.018916][ T5285] usb 2-1: USB disconnect, device number 36
[  363.166207][ T9173] udevd[9173]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  363.706287][ T9661] ALSA: mixer_oss: invalid OSS volume 'Vµ€Ã'
[  363.740834][ T9663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'.
[  363.750095][ T9663] netem: invalid attributes len -24
[  363.756097][ T9663] netem: change failed
[  363.759553][ T9661] ALSA: mixer_oss: invalid OSS volume 'ýèôQ²‡FaèòŒ‚'
[  364.325024][ T5271] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  364.514719][ T5271] usb 1-1: Using ep0 maxpacket: 32
[  364.523413][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.537698][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.547956][ T5271] usb 1-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  364.568687][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.593536][ T5271] usb 1-1: config 0 descriptor??
[  365.020309][ T9690] netlink: 'syz.3.793': attribute type 4 has an invalid length.
[  365.049801][ T9690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  365.086656][ T5277] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  365.243781][ T5271] usb 1-1: USB disconnect, device number 40
[  365.284704][ T5277] usb 3-1: Using ep0 maxpacket: 32
[  365.311721][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  365.331639][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  365.350629][ T5277] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  365.361223][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.390992][ T5277] usb 3-1: config 0 descriptor??
[  365.397477][ T9684] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  365.416144][ T5293] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  365.429498][ T5277] hub 3-1:0.0: USB hub found
[  365.594881][ T5293] usb 4-1: device descriptor read/64, error -71
[  365.660765][ T5277] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  365.886102][ T5293] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  365.901154][ T5277] hid-generic 0003:046D:C314.0016: unknown main item tag 0x0
[  365.938589][ T5277] hid-generic 0003:046D:C314.0016: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0
[  365.987599][  T939] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  366.085040][ T5293] usb 4-1: device descriptor read/64, error -71
[  366.246654][ T5293] usb usb4-port1: attempt power cycle
[  366.254721][  T939] usb 2-1: Using ep0 maxpacket: 32
[  366.259621][  T939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  366.259649][  T939] usb 2-1: config 0 interface 0 has no altsetting 0
[  366.261932][  T939] usb 2-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19
[  366.261953][  T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.261965][  T939] usb 2-1: Product: syz
[  366.261975][  T939] usb 2-1: Manufacturer: syz
[  366.261984][  T939] usb 2-1: SerialNumber: syz
[  366.263606][  T939] usb 2-1: config 0 descriptor??
[  366.273832][  T939] rndis_host 2-1:0.0: skipping garbage
[  366.273852][  T939] usb 2-1: bad CDC descriptors
[  366.281675][  T939] cdc_acm 2-1:0.0: skipping garbage
[  366.359155][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'.
[  366.359240][ T9708] netem: invalid attributes len -24
[  366.359254][ T9708] netem: change failed
[  366.655653][  T939] usb 3-1: USB disconnect, device number 30
[  366.675716][ T5293] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  366.755492][ T5293] usb 4-1: device descriptor read/8, error -71
[  367.055717][ T5293] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  367.105948][ T5293] usb 4-1: device descriptor read/8, error -71
[  367.205297][ T5273] IPVS: starting estimator thread 0...
[  367.289900][ T5293] usb usb4-port1: unable to enumerate USB device
[  367.365007][ T9720] IPVS: using max 18 ests per chain, 43200 per kthread
[  367.789138][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.809'.
[  367.806472][ T9738] netem: invalid attributes len -24
[  367.811720][ T9738] netem: change failed
[  368.196087][ T5285] usb 2-1: USB disconnect, device number 37
[  368.376557][ T5273] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  368.614739][ T5273] usb 3-1: Using ep0 maxpacket: 32
[  368.630267][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  368.641820][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  368.661473][ T5273] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  368.672655][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.685381][ T5273] usb 3-1: config 0 descriptor??
[  368.691375][ T9748] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  368.700968][ T5273] hub 3-1:0.0: USB hub found
[  368.910766][ T5273] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  368.993264][ T9769] ALSA: mixer_oss: invalid OSS volume 'Vµ€Ã'
[  369.001965][ T9769] ALSA: mixer_oss: invalid OSS volume 'ýèôQ²‡FaèòŒ‚'
[  369.077401][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.820'.
[  369.104857][ T9768] netem: invalid attributes len -24
[  369.129862][ T5273] hid-generic 0003:046D:C314.0017: unknown main item tag 0x0
[  369.134164][ T5273] hid-generic 0003:046D:C314.0017: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0
[  369.532919][   T29] audit: type=1326 audit(1722321743.925:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.0.818" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x0
[  369.626006][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'.
[  369.928103][ T5273] usb 3-1: USB disconnect, device number 31
[  370.215020][ T5277] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  370.375026][ T5277] usb 4-1: device descriptor read/64, error -71
[  370.644716][ T5277] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  370.793176][ T5276] IPVS: starting estimator thread 0...
[  370.804958][ T5277] usb 4-1: device descriptor read/64, error -71
[  370.824856][ T5225] Bluetooth: hci7: command 0x0406 tx timeout
[  370.884728][ T9806] IPVS: using max 22 ests per chain, 52800 per kthread
[  370.964814][ T5277] usb usb4-port1: attempt power cycle
[  371.093064][ T9811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.831'.
[  371.141166][ T9811] netem: invalid attributes len -24
[  371.154705][ T9811] netem: change failed
[  371.204654][ T5273] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  371.208739][ T5225] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  371.228423][ T5225] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  371.248024][ T5225] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  371.259618][ T5225] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  371.269247][ T5225] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  371.278726][ T5225] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  371.317009][ T5225] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  371.327971][ T5225] Bluetooth: hci1: Injecting HCI hardware error event
[  371.337943][ T5225] Bluetooth: hci1: hardware error 0x00
[  371.378271][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'.
[  371.394877][ T5277] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  371.419999][ T5273] usb 2-1: Using ep0 maxpacket: 32
[  371.445620][ T5277] usb 4-1: device descriptor read/8, error -71
[  371.485604][ T5273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.507404][ T5273] usb 2-1: config 0 interface 0 has no altsetting 0
[  371.546344][ T5273] usb 2-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19
[  371.563457][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.572923][ T5273] usb 2-1: Product: syz
[  371.577565][ T5273] usb 2-1: Manufacturer: syz
[  371.583057][ T5273] usb 2-1: SerialNumber: syz
[  371.595378][ T5273] usb 2-1: config 0 descriptor??
[  371.636399][ T5273] rndis_host 2-1:0.0: skipping garbage
[  371.642019][ T5273] usb 2-1: bad CDC descriptors
[  371.648367][ T5273] cdc_acm 2-1:0.0: skipping garbage
[  371.744725][ T5277] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  371.805590][ T5277] usb 4-1: device descriptor read/8, error -71
[  371.930427][ T5277] usb usb4-port1: unable to enumerate USB device
[  371.994626][ T5271] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  372.037113][ T9817] chnl_net:caif_netlink_parms(): no params data found
[  372.185298][ T5271] usb 1-1: Using ep0 maxpacket: 8
[  372.198513][ T5271] usb 1-1: unable to get BOS descriptor or descriptor too short
[  372.214710][ T5271] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  372.224869][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.261613][ T5271] usb 1-1: Product: syz
[  372.274610][ T5271] usb 1-1: Manufacturer: syz
[  372.279264][ T5271] usb 1-1: SerialNumber: syz
[  372.314345][ T5271] usb 1-1: config 0 descriptor??
[  372.320788][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.357028][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.364329][ T9817] bridge_slave_0: entered allmulticast mode
[  372.386531][ T9817] bridge_slave_0: entered promiscuous mode
[  372.403521][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.423247][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.441368][ T9817] bridge_slave_1: entered allmulticast mode
[  372.462574][ T9817] bridge_slave_1: entered promiscuous mode
[  372.555018][ T5273] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  372.579563][ T9817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.638493][ T9817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.732161][ T5271] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  372.746916][ T5273] usb 3-1: Using ep0 maxpacket: 32
[  372.757799][ T5271] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  372.766525][ T5271] dib0700: firmware download failed at 7 with -22
[  372.780590][ T5271] usb 1-1: USB disconnect, device number 41
[  372.788071][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  372.821216][ T9817] team0: Port device team_slave_0 added
[  372.831962][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  372.838720][ T9817] team0: Port device team_slave_1 added
[  372.859371][ T5273] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  372.886102][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.915320][ T5273] usb 3-1: config 0 descriptor??
[  372.928941][ T9839] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  372.944056][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.944857][ T5273] hub 3-1:0.0: USB hub found
[  372.955725][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.988559][ T9817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.098336][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  373.106958][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.133944][ T9817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.185386][ T5273] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  373.379765][ T9817] hsr_slave_0: entered promiscuous mode
[  373.394963][ T4619] Bluetooth: hci12: command tx timeout
[  373.414809][ T5273] hid-generic 0003:046D:C314.0018: unknown main item tag 0x0
[  373.426692][ T5273] hid-generic 0003:046D:C314.0018: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0
[  373.433035][ T9817] hsr_slave_1: entered promiscuous mode
[  373.466747][ T5225] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  373.511830][ T9817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  373.522623][ T9817] Cannot create hsr debugfs directory
[  373.651759][ T5277] usb 2-1: USB disconnect, device number 38
[  374.062032][ T9817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.267563][  T939] usb 3-1: USB disconnect, device number 32
[  374.410593][ T9817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.676752][ T9817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.725665][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'.
[  374.984921][ T4619] Bluetooth: hci11: Controller not accepting commands anymore: ncmd = 0
[  375.000290][ T4619] Bluetooth: hci11: Injecting HCI hardware error event
[  375.010286][ T4619] Bluetooth: hci11: hardware error 0x00
[  375.058436][ T9817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.311167][  T939] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  375.345189][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.852'.
[  375.459323][ T9887] netlink: 'syz.0.852': attribute type 1 has an invalid length.
[  375.475957][ T5228] Bluetooth: hci12: command tx timeout
[  375.496050][ T9887] netlink: 'syz.0.852': attribute type 2 has an invalid length.
[  375.564697][  T939] usb 2-1: Using ep0 maxpacket: 8
[  375.586755][  T939] usb 2-1: unable to get BOS descriptor or descriptor too short
[  375.615195][ T9889] team0: Port device team_slave_0 removed
[  375.623858][  T939] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  375.644958][  T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.653447][  T939] usb 2-1: Product: syz
[  375.656791][ T9887] netlink: 112 bytes leftover after parsing attributes in process `syz.0.852'.
[  375.664565][  T939] usb 2-1: Manufacturer: syz
[  375.671602][  T939] usb 2-1: SerialNumber: syz
[  375.679308][  T939] usb 2-1: config 0 descriptor??
[  375.746813][ T9887] tipc: Started in network mode
[  375.751939][ T9887] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[  375.768914][ T9887] tipc: Enabled bearer <eth:bridge0>, priority 16
[  375.866553][ T9817] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  375.927789][ T9892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  375.936284][ T9817] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  375.950356][ T9892] Bluetooth: hci6: command 0x0406 tx timeout
[  375.960116][ T9892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  375.975378][ T9892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  375.989402][ T9892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.013972][ T9892] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  376.026668][ T9892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.105023][ T9817] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  376.146315][ T9817] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  376.554259][  T939] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  376.605096][  T939] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  376.623614][  T939] dib0700: firmware download failed at 7 with -22
[  376.641588][  T939] usb 2-1: USB disconnect, device number 39
[  376.645776][ T5277] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  376.779393][ T5293] tipc: Node number set to 10922666
[  376.884854][ T5277] usb 3-1: Using ep0 maxpacket: 32
[  376.906523][ T5277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.923086][ T5277] usb 3-1: config 0 interface 0 has no altsetting 0
[  376.938300][ T5277] usb 3-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19
[  376.954630][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.984857][ T5277] usb 3-1: Product: syz
[  377.000304][ T9817] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.004649][ T5277] usb 3-1: Manufacturer: syz
[  377.024721][ T5277] usb 3-1: SerialNumber: syz
[  377.034137][ T9897] chnl_net:caif_netlink_parms(): no params data found
[  377.050528][ T5277] usb 3-1: config 0 descriptor??
[  377.070507][ T5277] rndis_host 3-1:0.0: skipping garbage
[  377.077166][ T5277] usb 3-1: bad CDC descriptors
[  377.083669][ T5277] cdc_acm 3-1:0.0: skipping garbage
[  377.152271][ T4619] Bluetooth: hci11: Opcode 0x0c03 failed: -110
[  377.239893][ T9817] 8021q: adding VLAN 0 to HW filter on device team0
[  377.411398][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.418663][ T5285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.492784][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.500016][ T5285] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.547165][ T4619] Bluetooth: hci12: command tx timeout
[  377.867527][ T5293] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  377.930700][ T9897] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.962745][ T9897] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.005414][ T9897] bridge_slave_0: entered allmulticast mode
[  378.040489][ T9897] bridge_slave_0: entered promiscuous mode
[  378.074718][ T5293] usb 1-1: Using ep0 maxpacket: 32
[  378.104666][ T4619] Bluetooth: hci2: command tx timeout
[  378.113034][ T9897] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.155485][ T5293] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.165839][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.166104][ T9897] bridge_slave_1: entered allmulticast mode
[  378.194934][ T5293] usb 1-1: config 0 interface 0 has no altsetting 0
[  378.206361][ T9897] bridge_slave_1: entered promiscuous mode
[  378.220640][ T5293] usb 1-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19
[  378.238181][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.252124][ T5293] usb 1-1: Product: syz
[  378.265081][ T5293] usb 1-1: Manufacturer: syz
[  378.275373][ T5293] usb 1-1: SerialNumber: syz
[  378.287762][ T5293] usb 1-1: config 0 descriptor??
[  378.308968][ T5293] rndis_host 1-1:0.0: skipping garbage
[  378.349164][ T5293] usb 1-1: bad CDC descriptors
[  378.380654][ T5293] cdc_acm 1-1:0.0: skipping garbage
[  378.502012][ T9897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.525333][ T5271] usb 3-1: USB disconnect, device number 33
[  378.587437][ T9897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.757095][ T9897] team0: Port device team_slave_0 added
[  378.840773][ T9897] team0: Port device team_slave_1 added
[  378.975443][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.995033][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  379.001478][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  379.011665][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.063279][ T5293] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  379.073777][ T9897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.168684][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.186192][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.249174][ T9897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.282515][ T9817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.284568][ T5293] usb 2-1: Using ep0 maxpacket: 32
[  379.307019][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  379.341149][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  379.356626][ T5293] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  379.368900][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.418786][ T5293] usb 2-1: config 0 descriptor??
[  379.429127][ T9918] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  379.455435][ T5293] hub 2-1:0.0: USB hub found
[  379.478623][ T9897] hsr_slave_0: entered promiscuous mode
[  379.528910][ T9897] hsr_slave_1: entered promiscuous mode
[  379.536274][ T9897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  379.544346][ T9897] Cannot create hsr debugfs directory
[  379.625552][   T30] INFO: task syz.2.498:8009 blocked for more than 143 seconds.
[  379.633389][ T5228] Bluetooth: hci12: command tx timeout
[  379.641055][   T30]       Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  379.651262][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  379.668910][   T30] task:syz.2.498       state:D stack:25088 pid:8009  tgid:8009  ppid:7569   flags:0x20004004
[  379.695061][ T5293] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  379.713356][   T30] Call Trace:
[  379.724114][   T30]  <TASK>
[  379.757505][   T30]  __schedule+0x1800/0x4a60
[  379.814647][   T30]  ? __pfx___schedule+0x10/0x10
[  379.827893][   T30]  ? __pfx_lock_release+0x10/0x10
[  379.844697][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  379.854128][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  379.860744][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  379.868710][   T30]  ? schedule+0x90/0x320
[  379.924628][   T30]  schedule+0x14b/0x320
[  379.928850][   T30]  ? do_exit+0x4ff/0x27f0
[  379.933197][   T30]  do_exit+0x57c/0x27f0
[  379.984553][   T30]  ? __pfx_do_exit+0x10/0x10
[  379.989719][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  380.015208][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  380.021270][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  380.031906][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  380.038154][   T30]  do_group_exit+0x207/0x2c0
[  380.042801][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  380.048953][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  380.054292][   T30]  get_signal+0x16a1/0x1740
[  380.061928][   T30]  ? __pfx_get_signal+0x10/0x10
[  380.067256][   T30]  ? do_futex+0x33b/0x560
[  380.071635][   T30]  arch_do_signal_or_restart+0x96/0x860
[  380.077763][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  380.084354][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  380.091016][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  380.097448][   T30]  __do_fast_syscall_32+0xc4/0x110
[  380.102992][   T30]  ? exc_page_fault+0x590/0x8c0
[  380.109330][   T30]  do_fast_syscall_32+0x34/0x80
[  380.114236][   T30]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  380.124902][   T30] RIP: 0023:0xf7f77579
[  380.129090][   T30] RSP: 002b:00000000f755fafc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0
[  380.138271][   T30] RAX: fffffffffffffdfc RBX: 00000000f7434f8c RCX: 0000000000000080
[  380.147191][   T30] RDX: 0000000000000000 RSI: 00000000f755fcd0 RDI: 0000000000000000
[  380.156004][   T30] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000
[  380.164022][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  380.177322][   T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  380.187462][ T5228] Bluetooth: hci2: command tx timeout
[  380.191194][   T30]  </TASK>
[  380.198774][   T30] INFO: task syz.2.498:8010 blocked for more than 143 seconds.
[  380.223519][   T30]       Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  380.231538][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  380.253748][   T30] task:syz.2.498       state:D stack:22480 pid:8010  tgid:8009  ppid:7569   flags:0x20004006
[  380.266218][   T30] Call Trace:
[  380.269550][   T30]  <TASK>
[  380.272496][   T30]  __schedule+0x1800/0x4a60
[  380.279024][   T30]  ? __pfx___schedule+0x10/0x10
[  380.284101][   T30]  ? __pfx_lock_release+0x10/0x10
[  380.289300][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  380.295807][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  380.302541][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  380.315861][   T30]  ? schedule+0x90/0x320
[  380.326991][   T30]  schedule+0x14b/0x320
[  380.331222][   T30]  ? down_read+0x6a5/0xa40
[  380.336455][   T30]  schedule_preempt_disabled+0x13/0x30
[  380.342346][   T30]  down_read+0x705/0xa40
[  380.347708][   T30]  ? __lock_acquire+0x137a/0x2040
[  380.352802][   T30]  ? __pfx_down_read+0x10/0x10
[  380.357673][   T30]  ? __pfx_cgroup_rstat_updated+0x10/0x10
[  380.363875][   T30]  page_cache_ra_unbounded+0xf7/0x7f0
[  380.369434][   T30]  ? count_memcg_event_mm+0x90/0x420
[  380.375416][   T30]  do_sync_mmap_readahead+0x49c/0x970
[  380.380942][   T30]  ? __pfx_do_sync_mmap_readahead+0x10/0x10
[  380.389600][   T30]  ? count_memcg_event_mm+0x90/0x420
[  380.395403][   T30]  ? __filemap_get_folio+0x984/0xc10
[  380.401272][   T30]  filemap_fault+0x828/0x1760
[  380.406628][   T30]  ? __pfx_filemap_fault+0x10/0x10
[  380.412173][   T30]  ? handle_pte_fault+0x21d9/0x6eb0
[  380.418181][   T30]  ? __pfx_lock_release+0x10/0x10
[  380.431516][   T30]  ? pte_alloc_one+0x443/0x5d0
[  380.436506][   T30]  ? is_bpf_text_address+0x285/0x2a0
[  380.442223][   T30]  __do_fault+0x135/0x460
[  380.446838][   T30]  ? handle_pte_fault+0x21d9/0x6eb0
[  380.452269][   T30]  handle_pte_fault+0x3b18/0x6eb0
[  380.458030][   T30]  ? validate_chain+0x11e/0x5900
[  380.463389][   T30]  ? __pfx_handle_pte_fault+0x10/0x10
[  380.469489][   T30]  ? mark_lock+0x9a/0x350
[  380.475047][   T30]  ? __lock_acquire+0x137a/0x2040
[  380.480663][   T30]  ? __thp_vma_allowable_orders+0x326/0xa20
[  380.487181][   T30]  handle_mm_fault+0x1029/0x1980
[  380.492574][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  380.500392][   T30]  ? __pfx_find_vma+0x10/0x10
[  380.505730][   T30]  ? vma_is_secretmem+0xd/0x50
[  380.510536][   T30]  ? check_vma_flags+0x500/0x5a0
[  380.515765][   T30]  __get_user_pages+0x6ec/0x16a0
[  380.520989][   T30]  ? __alloc_pages_noprof+0x30a/0x6c0
[  380.528595][   T30]  ? get_dump_page+0xe2/0x2f0
[  380.533328][   T30]  ? __pfx___get_user_pages+0x10/0x10
[  380.539375][   T30]  ? __pfx_lock_release+0x10/0x10
[  380.546537][   T30]  get_dump_page+0x155/0x2f0
[  380.553391][   T30]  ? __pfx_get_dump_page+0x10/0x10
[  380.560158][   T30]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  380.567050][   T30]  ? free_unref_page+0x634/0xea0
[  380.572068][   T30]  ? alloc_pages_noprof+0xef/0x170
[  380.578193][   T30]  dump_user_range+0x14c/0x950
[  380.583421][   T30]  ? __pfx_dump_user_range+0x10/0x10
[  380.593124][   T30]  ? writenote+0x250/0x3b0
[  380.599154][   T30]  ? elf_core_dump+0x339c/0x4bb0
[  380.605819][   T30]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[  380.611470][   T30]  ? dump_emit+0x99/0xd0
[  380.616747][   T30]  elf_core_dump+0x406d/0x4bb0
[  380.621609][   T30]  ? __pfx_elf_core_dump+0x10/0x10
[  380.633933][   T30]  ? __lock_acquire+0x137a/0x2040
[  380.639505][   T30]  ? rcu_read_lock_any_held+0xb7/0x160
[  380.645363][   T30]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  380.651379][   T30]  do_coredump+0x1b04/0x2a30
[  380.657265][   T30]  ? __pfx_lock_release+0x10/0x10
[  380.662928][   T30]  ? __pfx_do_coredump+0x10/0x10
[  380.668823][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  380.674729][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  380.680023][   T30]  get_signal+0x13fa/0x1740
[  380.692148][   T30]  ? __pfx_get_signal+0x10/0x10
[  380.697495][   T30]  arch_do_signal_or_restart+0x96/0x860
[  380.703135][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  380.724713][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  380.740090][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  380.754675][   T30]  __do_fast_syscall_32+0xc4/0x110
[  380.760225][   T30]  ? exc_page_fault+0x590/0x8c0
[  380.765789][   T30]  do_fast_syscall_32+0x34/0x80
[  380.770680][   T30]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  380.777783][   T30] RIP: 0023:0xf7148da0
[  380.781904][   T30] RSP: 002b:00000000f572607c EFLAGS: 00000206 ORIG_RAX: 0000000000000182
[  380.790544][   T30] RAX: 000000000000000b RBX: 0000000020000680 RCX: 00000000f572610c
[  380.798982][   T30] RDX: 00000000f572608c RSI: 0000000000000000 RDI: 0000000000000000
[  380.807453][   T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  380.815910][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  380.824251][   T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  380.842457][   T30]  </TASK>
[  380.857841][   T30] 
[  380.857841][   T30] Showing all locks held in the system:
[  380.939258][   T30] 1 lock held by khungtaskd/30:
[  380.944181][   T30]  #0: ffffffff8e9377a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  381.013693][   T30] 3 locks held by kworker/0:2/939:
[  381.019422][   T30]  #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  381.031013][   T30]  #1: ffffc90003957d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  381.046282][   T30]  #2: ffff8880795ac240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130
[  381.057104][   T30] 2 locks held by kworker/u8:11/2974:
[  381.062503][   T30] 3 locks held by kworker/u9:1/4619:
[  381.070529][   T30]  #0: ffff888062e8d948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  381.076480][ T5228] Bluetooth: hci8: command 0x0406 tx timeout
[  381.081556][   T30]  #1: ffffc9000d49fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  381.100516][   T30]  #2: ffff88802e118d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  381.110582][   T30] 2 locks held by getty/4978:
[  381.115322][   T30]  #0: ffff88802f5fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  381.125623][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  381.135948][   T30] 3 locks held by kworker/0:7/5285:
[  381.143153][   T30] 5 locks held by kworker/0:9/5293:
[  381.148504][   T30]  #0: ffff8880186c3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  381.160063][   T30]  #1: ffffc9000445fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  381.172075][   T30]  #2: ffff888023bbe190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  381.183034][   T30]  #3: ffff888024a10190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520
[  381.192486][   T30]  #4: ffff88802e46b160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520
[  381.202284][   T30] 1 lock held by syz.1.386/7316:
[  381.207330][   T30] 3 locks held by syz.2.498/8010:
[  381.212366][   T30]  #0: ffff88802d41a420 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1adc/0x2a30
[  381.221762][   T30]  #1: ffff888079ff9498 (&mm->mmap_lock){++++}-{3:3}, at: get_dump_page+0xe2/0x2f0
[  381.232139][   T30]  #2: ffff88801dc9e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0
[  381.245493][   T30] 1 lock held by syz.1.502/8065:
[  381.250524][   T30]  #0: ffff88801dc9e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530
[  381.261770][   T30] 1 lock held by syz.4.521/8195:
[  381.305153][   T30]  #0: ffff88801dc9e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0
[  381.352968][   T30] 3 locks held by syz.1.527/8318:
[  381.385914][   T30]  #0: ffff88807aa5c420 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1adc/0x2a30
[  381.415482][   T30]  #1: ffff888015873118 (&mm->mmap_lock){++++}-{3:3}, at: get_dump_page+0xe2/0x2f0
[  381.436551][   T30]  #2: ffff88801dc9e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0
[  381.454370][   T30] 1 lock held by syz.4.571/8477:
[  381.460196][   T30]  #0: ffff88801dc9e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530
[  381.472227][   T30] 1 lock held by syz.2.585/8514:
[  381.478218][   T30]  #0: ffff88801dc9e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530
[  381.489574][   T30] 4 locks held by udevd/9173:
[  381.494324][   T30]  #0: ffff888029e8fc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60
[  381.510308][   T30]  #1: ffff888071f35c88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0
[  381.520049][   T30]  #2: ffff8880428542d8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0
[  381.530384][   T30]  #3: ffff888024a10190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340
[  381.540604][   T30] 2 locks held by syz.2.677/9325:
[  381.547125][   T30] 3 locks held by syz.4.761/9604:
[  381.558557][   T30]  #0: ffff8880518e2420 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1adc/0x2a30
[  381.569443][   T30]  #1: ffff88807b488b18 (&mm->mmap_lock){++++}-{3:3}, at: get_dump_page+0xe2/0x2f0
[  381.579839][   T30]  #2: ffff88801dc9e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0
[  381.591834][   T30] 1 lock held by syz-executor/9817:
[  381.597742][   T30]  #0: ffffffff8e93cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  381.608988][   T30] 1 lock held by syz-executor/9897:
[  381.623966][   T30]  #0: ffffffff8e93cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  381.640230][   T30] 1 lock held by syz.0.855/9907:
[  381.646046][   T30] 3 locks held by syz.1.857/9917:
[  381.656678][   T30]  #0: ffff88805f0a0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  381.668018][   T30]  #1: ffff88805f0a0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  381.678508][   T30]  #2: ffffffff8fdeb1a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  381.689311][   T30] 
[  381.691707][   T30] =============================================
[  381.691707][   T30] 
[  381.790918][   T30] NMI backtrace for cpu 1
[  381.795313][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  381.805840][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  381.815927][   T30] Call Trace:
[  381.819242][   T30]  <TASK>
[  381.822180][   T30]  dump_stack_lvl+0x241/0x360
[  381.826887][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.832203][   T30]  ? __pfx__printk+0x10/0x10
[  381.836813][   T30]  ? vprintk_emit+0x631/0x770
[  381.841520][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  381.846586][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  381.851732][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  381.857221][   T30]  ? _printk+0xd5/0x120
[  381.861409][   T30]  ? __pfx__printk+0x10/0x10
[  381.866022][   T30]  ? __wake_up_klogd+0xcc/0x110
[  381.870899][   T30]  ? __pfx__printk+0x10/0x10
[  381.875523][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  381.880584][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  381.886589][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  381.892587][   T30]  watchdog+0xfee/0x1030
[  381.896836][   T30]  ? watchdog+0x1ea/0x1030
[  381.901266][   T30]  ? __pfx_watchdog+0x10/0x10
[  381.906034][   T30]  kthread+0x2f0/0x390
[  381.910110][   T30]  ? __pfx_watchdog+0x10/0x10
[  381.914793][   T30]  ? __pfx_kthread+0x10/0x10
[  381.919480][   T30]  ret_from_fork+0x4b/0x80
[  381.923898][   T30]  ? __pfx_kthread+0x10/0x10
[  381.928486][   T30]  ret_from_fork_asm+0x1a/0x30
[  381.933262][   T30]  </TASK>
[  381.938095][   T30] Sending NMI from CPU 1 to CPUs 0:
[  381.943350][    C0] NMI backtrace for cpu 0
[  381.943365][    C0] CPU: 0 UID: 0 PID: 5273 Comm: kworker/0:3 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  381.943386][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  381.943397][    C0] Workqueue: events drain_vmap_area_work
[  381.943422][    C0] RIP: 0010:clockevents_program_event+0xd8/0x350
[  381.943448][    C0] Code: ae 83 0f 00 49 8d 5f 3c 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 f3 01 00 00 8b 1b 89 de 83 e6 04 31 ff e8 c8 87 0f 00 <83> e3 04 0f 85 ff 00 00 00 e8 2a 1c fd ff 49 29 c4 bf 01 00 00 00
[  381.943465][    C0] RSP: 0018:ffffc90000007e78 EFLAGS: 00000046
[  381.943479][    C0] RAX: 0000000080010002 RBX: 0000000000000003 RCX: ffff888029ba5a00
[  381.943492][    C0] RDX: ffff888029ba5a00 RSI: 0000000000000000 RDI: 0000000000000000
[  381.943504][    C0] RBP: 0000000000000003 R08: ffffffff8183e338 R09: ffffffff8183e2e2
[  381.943516][    C0] R10: 0000000000000002 R11: ffff888029ba5a00 R12: 00000058ec24ff2b
[  381.943528][    C0] R13: dffffc0000000000 R14: ffff8880b9228378 R15: ffff8880b9228340
[  381.943541][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[  381.943555][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  381.943568][    C0] CR2: 00000000f7f16e40 CR3: 0000000064684000 CR4: 00000000003506f0
[  381.943581][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  381.943592][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  381.943603][    C0] Call Trace:
[  381.943610][    C0]  <NMI>
[  381.943617][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  381.943642][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  381.943666][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  381.943689][    C0]  ? nmi_handle+0x2a/0x5a0
[  381.943714][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  381.943735][    C0]  ? nmi_handle+0x14f/0x5a0
[  381.943750][    C0]  ? nmi_handle+0x2a/0x5a0
[  381.943767][    C0]  ? clockevents_program_event+0xd8/0x350
[  381.943789][    C0]  ? default_do_nmi+0x63/0x160
[  381.943814][    C0]  ? exc_nmi+0x123/0x1f0
[  381.943837][    C0]  ? end_repeat_nmi+0xf/0x53
[  381.943864][    C0]  ? clockevents_program_event+0x82/0x350
[  381.943884][    C0]  ? clockevents_program_event+0xd8/0x350
[  381.943908][    C0]  ? clockevents_program_event+0xd8/0x350
[  381.943930][    C0]  ? clockevents_program_event+0xd8/0x350
[  381.943954][    C0]  ? clockevents_program_event+0xd8/0x350
[  381.943976][    C0]  </NMI>
[  381.943982][    C0]  <IRQ>
[  381.943991][    C0]  hrtimer_interrupt+0x54a/0x990
[  381.944022][    C0]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  381.944049][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  381.944068][    C0]  </IRQ>
[  381.944074][    C0]  <TASK>
[  381.944080][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  381.944105][    C0] RIP: 0010:__sanitizer_cov_trace_switch+0x9d/0x120
[  381.944129][    C0] Code: 00 00 4d 85 d2 0f 84 8b 00 00 00 4c 8b 4c 24 20 65 4c 8b 1c 25 40 d7 03 00 31 d2 eb 08 48 ff c2 49 39 d2 74 71 4c 8b 74 d6 10 <65> 8b 05 64 6a 70 7e a9 00 01 ff 00 74 11 a9 00 01 00 00 74 de 41
[  381.944142][    C0] RSP: 0018:ffffc900042d7318 EFLAGS: 00000202
[  381.944156][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888029ba5a00
[  381.944167][    C0] RDX: 0000000000000004 RSI: ffffffff8e7a32a0 RDI: 0000000000000005
[  381.944178][    C0] RBP: 0000000000000005 R08: 0000000000000005 R09: ffffffff81410f0e
[  381.944189][    C0] R10: 0000000000000008 R11: ffff888029ba5a00 R12: ffffffff9027e9b0
[  381.944201][    C0] R13: dffffc0000000000 R14: 0000000000000006 R15: 1ffff9200085ae90
[  381.944217][    C0]  ? unwind_next_frame+0x7be/0x2a00
[  381.944247][    C0]  unwind_next_frame+0x7be/0x2a00
[  381.944275][    C0]  ? unwind_next_frame+0x1b90/0x2a00
[  381.944298][    C0]  ? get_stack_info_noinstr+0x1a/0x130
[  381.944327][    C0]  ? __unwind_start+0x2bc/0x7c0
[  381.944350][    C0]  ? get_stack_info+0x102/0x180
[  381.944374][    C0]  __unwind_start+0x641/0x7c0
[  381.944400][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  381.944422][    C0]  arch_stack_walk+0x103/0x1b0
[  381.944442][    C0]  ? __unwind_start+0x2bc/0x7c0
[  381.944468][    C0]  stack_trace_save+0x118/0x1d0
[  381.944489][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  381.944509][    C0]  ? mark_lock+0x9a/0x350
[  381.944532][    C0]  kasan_save_track+0x3f/0x80
[  381.944577][    C0]  ? reclaim_list_global+0x2a3/0x1350
[  381.944596][    C0]  kasan_save_free_info+0x40/0x50
[  381.944614][    C0]  poison_slab_object+0xe0/0x150
[  381.944638][    C0]  ? reclaim_list_global+0x2a3/0x1350
[  381.944656][    C0]  __kasan_slab_free+0x37/0x60
[  381.944678][    C0]  kmem_cache_free+0x145/0x350
[  381.944698][    C0]  reclaim_list_global+0x2a3/0x1350
[  381.944720][    C0]  decay_va_pool_node+0xf68/0xfc0
[  381.944748][    C0]  ? __pfx_decay_va_pool_node+0x10/0x10
[  381.944767][    C0]  ? __mutex_lock+0x2ef/0xd70
[  381.944797][    C0]  __purge_vmap_area_lazy+0x15d/0xae0
[  381.944821][    C0]  ? process_scheduled_works+0x945/0x1830
[  381.944840][    C0]  drain_vmap_area_work+0x27/0x40
[  381.944856][    C0]  process_scheduled_works+0xa2c/0x1830
[  381.944895][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  381.944923][    C0]  ? assign_work+0x364/0x3d0
[  381.944948][    C0]  worker_thread+0x86d/0xd40
[  381.944975][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  381.944997][    C0]  ? __kthread_parkme+0x169/0x1d0
[  381.945023][    C0]  ? __pfx_worker_thread+0x10/0x10
[  381.945046][    C0]  kthread+0x2f0/0x390
[  381.945063][    C0]  ? __pfx_worker_thread+0x10/0x10
[  381.945084][    C0]  ? __pfx_kthread+0x10/0x10
[  381.945100][    C0]  ret_from_fork+0x4b/0x80
[  381.945124][    C0]  ? __pfx_kthread+0x10/0x10
[  381.945140][    C0]  ret_from_fork_asm+0x1a/0x30
[  381.945173][    C0]  </TASK>
[  382.600437][ T4619] Bluetooth: hci2: command tx timeout
[  382.636895][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  382.643790][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
[  382.654290][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  382.664524][   T30] Call Trace:
[  382.667805][   T30]  <TASK>
[  382.670731][   T30]  dump_stack_lvl+0x241/0x360
[  382.675421][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.680628][   T30]  ? __pfx__printk+0x10/0x10
[  382.685232][   T30]  ? vscnprintf+0x5d/0x90
[  382.689579][   T30]  panic+0x349/0x860
[  382.693477][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  382.699645][   T30]  ? __pfx_panic+0x10/0x10
[  382.704057][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  382.709436][   T30]  ? __irq_work_queue_local+0x137/0x410
[  382.714981][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  382.720351][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  382.726508][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  382.732665][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  382.738824][   T30]  watchdog+0x102d/0x1030
[  382.743330][   T30]  ? watchdog+0x1ea/0x1030
[  382.748015][   T30]  ? __pfx_watchdog+0x10/0x10
[  382.752693][   T30]  kthread+0x2f0/0x390
[  382.756772][   T30]  ? __pfx_watchdog+0x10/0x10
[  382.761446][   T30]  ? __pfx_kthread+0x10/0x10
[  382.766032][   T30]  ret_from_fork+0x4b/0x80
[  382.770451][   T30]  ? __pfx_kthread+0x10/0x10
[  382.775036][   T30]  ret_from_fork_asm+0x1a/0x30
[  382.779814][   T30]  </TASK>
[  382.783051][   T30] Kernel Offset: disabled
[  382.787368][   T30] Rebooting in 86400 seconds..