last executing test programs:

26.877097635s ago: executing program 0 (id=36):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0) (async)
ptrace$getregset(0x4211, r0, 0x200, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x42, 0xb, 0x70bd29, 0x0, {0x4}}, 0x14}}, 0x0) (async)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@my=0x1, 0x1}) (async)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000004c0)={{@my=0x1}, @host, 0x5, 0x0, 0xfffffffffffffffc}) (async, rerun: 32)
syz_usb_connect(0x0, 0x2f, &(0x7f0000000480)=ANY=[@ANYBLOB="120100004494e9202d1e550089430102030109021c0001000000000904000001020600000905010000000000000200"], 0x0) (async, rerun: 32)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x400000, 0xc0) (async)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x428}}, 0x0) (async, rerun: 32)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) (rerun: 32)
read(r4, &(0x7f0000000080)=""/1, 0x1)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0)

26.695111312s ago: executing program 0 (id=40):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback, 0x401}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0)
r4 = getpgid(0x0)
r5 = syz_pidfd_open(r4, 0x0)
pidfd_send_signal(r5, 0x21, 0x0, 0x4)
r6 = syz_io_uring_complete(0x0)
setns(r6, 0x3a000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b)
cachestat(r7, &(0x7f0000000040), &(0x7f0000000080), 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000018c0)=ANY=[@ANYRES16=r0, @ANYRES8=r5, @ANYRES64=r4, @ANYBLOB="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", @ANYRES8=r2, @ANYRESOCT=r7, @ANYBLOB="c534df2a5c527b78878831402d05e9a94d331b8628884643917eb979ecde8d647887447735a5895f3f380b0b9d4c8a8aaf20b084b691a17b0c162e2f17892ed07838be0bcf8378510906f2c208ddee4b1106a63a7281b25bc23f9a6054c2d9c7b4249391f63eda22758ee1d8788249b121f89146d6cb3aaa358f879f01ed73670ef718a96fc5b90e57a1985d13c29aa878f572a41f790364f3f05c14423469a206ad37724a6dc37aae50e0a6", @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@newneigh={0x5c, 0x1c, 0x20, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x0, r3, 0x40}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_MASTER={0x8, 0x9, 0x7}, @NDA_SRC_VNI={0x8, 0xb, 0xfffffff8}, @NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x891}, 0x40000)

24.028267682s ago: executing program 0 (id=51):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x26, 0x2, 0xb836000)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000002, 0x50, r2, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r4, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x40, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000000c0019800800020048050000100002800c000280050001003a"], 0x30}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000030003000000580001"], 0x6c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r9, &(0x7f0000001000)=ANY=[], 0xff2e)
ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"})
r10 = syz_open_pts(r9, 0x0)
r11 = dup3(r10, r9, 0x0)
ioctl$TIOCGETD(r11, 0x5424, &(0x7f0000000180))
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x4)
r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
poll(&(0x7f0000000080)=[{r12}], 0x1, 0x24b)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r13, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x4001)

22.599574059s ago: executing program 0 (id=59):
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x3, &(0x7f00000000c0))
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x3b}, 0x18)
openat(r1, &(0x7f0000000080)='./file1\x00', 0x2, 0x2)
lseek(r1, 0x2, 0x1)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

19.388578855s ago: executing program 0 (id=75):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/5, 0x5}}], 0x1, 0x2, 0x0)

18.221560066s ago: executing program 1 (id=76):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0)

17.58372502s ago: executing program 1 (id=79):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)

17.448230949s ago: executing program 1 (id=80):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)

16.305787556s ago: executing program 0 (id=83):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) (async)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB="df909054", @ANYBLOB="997509163bf0fcbbc715b216650321cf2ec24856da4be4d05cf3f5d06109721585e706580bd5c8bcab61c8f8561f617fa5a1f6bb59d981a67941eb02ed03e733461c3e7828ce9bf1b3f03cafc52620c192dcbf0c188c5a22066f8df4b1b15360f5933c7e321804f5cd194760fdee3fea7ad46284bfaca79d96575c3be3f453b861abff46578b5f1ed318ea17fd7233b34945074df7f865d63a5d8efeb70e3d05231f36f41e202d9ddfc1b1cca53566d254154bf3435751869910d6414111ad84fac11eb526ddaf931b186c593f2b60d32332a27d2f9c813ddaffdb0c6cd090c741", @ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x3) (async, rerun: 32)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async, rerun: 32)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000012000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) (async)
fchmod(r3, 0x140) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) (rerun: 32)
fcntl$lock(r5, 0x25, &(0x7f0000002380))
preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x0) (async)
r7 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb35b, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fc, 0xfffffffd, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x5}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x8}], 0x0, 0xd, 0x2, 0x1}}) (async)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000))
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001100)=ANY=[@ANYBLOB="28f3ff00", @ANYBLOB="df29c928e57bb88f9db32a57e1eb5ab852b3cbaa0694b6c4d3115c9d3ef55f9d648abff9df4ce8abae741a87efca84e437334c8aaf7069b516f4aa4c106a4b7ead338617db984ed8a2370e6c3b61f6a2b30485bc0a33b6c2bd63c7f3162919cfd796387d1561f7f6042f23e698045a0ae6605aa6ce419b4844d51737a1eec2c54d8e85551f29465133f2125ad938f48ba3cbde959259079d99df5cf21614284f97df3ad7ac610f2f543ac4897dc1a787ce526c7590f385e00aebacd00aeeef6a0600000000000000f1de4e2646c9d36b8cbcbb2c8e", @ANYBLOB="cf040000f200009e004d9600000008000300", @ANYRES32=r1, @ANYBLOB="0a0006", @ANYRESOCT=r8], 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') (async, rerun: 64)
write$cgroup_pressure(r10, 0x0, 0x0) (rerun: 64)

16.074595878s ago: executing program 32 (id=83):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) (async)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB="df909054", @ANYBLOB="997509163bf0fcbbc715b216650321cf2ec24856da4be4d05cf3f5d06109721585e706580bd5c8bcab61c8f8561f617fa5a1f6bb59d981a67941eb02ed03e733461c3e7828ce9bf1b3f03cafc52620c192dcbf0c188c5a22066f8df4b1b15360f5933c7e321804f5cd194760fdee3fea7ad46284bfaca79d96575c3be3f453b861abff46578b5f1ed318ea17fd7233b34945074df7f865d63a5d8efeb70e3d05231f36f41e202d9ddfc1b1cca53566d254154bf3435751869910d6414111ad84fac11eb526ddaf931b186c593f2b60d32332a27d2f9c813ddaffdb0c6cd090c741", @ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x3) (async, rerun: 32)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async, rerun: 32)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000012000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) (async)
fchmod(r3, 0x140) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) (rerun: 32)
fcntl$lock(r5, 0x25, &(0x7f0000002380))
preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x0) (async)
r7 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb35b, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fc, 0xfffffffd, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x5}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x8}], 0x0, 0xd, 0x2, 0x1}}) (async)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000))
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001100)=ANY=[@ANYBLOB="28f3ff00", @ANYBLOB="df29c928e57bb88f9db32a57e1eb5ab852b3cbaa0694b6c4d3115c9d3ef55f9d648abff9df4ce8abae741a87efca84e437334c8aaf7069b516f4aa4c106a4b7ead338617db984ed8a2370e6c3b61f6a2b30485bc0a33b6c2bd63c7f3162919cfd796387d1561f7f6042f23e698045a0ae6605aa6ce419b4844d51737a1eec2c54d8e85551f29465133f2125ad938f48ba3cbde959259079d99df5cf21614284f97df3ad7ac610f2f543ac4897dc1a787ce526c7590f385e00aebacd00aeeef6a0600000000000000f1de4e2646c9d36b8cbcbb2c8e", @ANYBLOB="cf040000f200009e004d9600000008000300", @ANYRES32=r1, @ANYBLOB="0a0006", @ANYRESOCT=r8], 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') (async, rerun: 64)
write$cgroup_pressure(r10, 0x0, 0x0) (rerun: 64)

14.922189587s ago: executing program 1 (id=88):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_open_dev$mouse(&(0x7f0000000c00), 0x100000001, 0x101000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x8, &(0x7f0000000f80)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xfffffe00}, @generic={0xf3, 0x3, 0x3, 0xb, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x50}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x90}}, 0x0)
r4 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0xd0e0000, 0x128, 0x100, 0x1c0, 0x1d8, 0x1d8, 0x1c0, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00'}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@unspec=@rateest={{0x68}, {'tunl0\x00', 'tunl0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8)
move_mount(r4, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1b025, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x1}, 0x0, 0x0})
syz_usb_control_io(r6, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)={0x0, 0x8, 0x4a, {0x4a, 0x8, "fce6f192f1f10b35a627980cae7d1dcd9a102841f354a81a7c5bbe65bd15fe51260007ea4d789fdfc22206bf647f62a81c5d84a42daa69897657f684400ac38ab0b742cebcc08fde"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f00000003c0)={0x0, 0xf, 0x1d7, {0x5, 0xf, 0x1d7, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xc, 0x0, 0x2, [0xff0000, 0xc0, 0x3f30]}, @generic={0xca, 0x10, 0x1, "8629418fceea3c2120df4109536cff92d7b6f82327222103aa234e6f35c8e96384c89601548463c5b05cce6defb70470a0f0d2a97f41e6da616391b093daebf5426a4001220c0561200c1dded532dcfacae7dbf0871f1667a05ba3d794b229df84b6a94e9e3ba49b798d3b6cf43cfb5c4f024af13d68550040413e52e4818df855bfe91a9150dc8d381fb5b296451588332b65dab868cbcb0dbbe96aafd64c2a15662bf54a3de5af40d4fefc82c00f72d84a79860882e78fdbe323bf296b219666ac6e9563636e"}, @generic={0xce, 0x10, 0xa, "af0672bad5c2c1c3997f18072353b94a03f71cde2a768bc61aac97596ebd6cd03b11799ab1494f491028fd09598ab07bac767e4ce7316e54a9084d229c526f93d4c10b0fa7002a48495b2a24cb68a5071f6949e0e16ad2817b9bdf8ce001967d02fa3cae8c520922cd9306ebd4d41203628330343c0b74dd4c5c2a656181e4fe7331266a0645283b974a4717202bfa485cabb992629c2a473d8e84d4fe80e1b7e1d2e6a78f23be7d43b566e4cba1fabd49ea5b58342ee37dfff6a0eb1abeea4479a6f7c9357849edb91f16"}, @ext_cap={0x7, 0x10, 0x2, 0x5, 0x3, 0x6, 0x6ba}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a6fa802ef4358763ae74a3d9680787f9"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x80, 0x80, "d51c21a4", "e26957c9"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0x0, 0x5, 0x3, 0x81, 0xfffc}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000640)={0x20, 0x9, 0x81, "e06739b444b70cafee50f4b529bacd83627a0b7dfc239e9a81e473656f8df39c4448ff8e0658e9d6bd77a0f14498dc369c61fe46c843a714880360fa34849d73b539f081495c778c506b8c2a8c2013a3dcba84bd2ef261dcf40ac769453baa68e7fb1486842d9f83d3d483a66b5d39bd05d77514bdde6388507ef5a9df87e3e6f9"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xe0, 0x2}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xbf9a}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0xd8}, &(0x7f0000000800)={0x40, 0xb, 0x2, 'wJ'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x96}, &(0x7f0000000880)={0x40, 0x13, 0x6, @random="d8b395af068f"}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random="e0d86078383c"}, &(0x7f0000000900)={0x40, 0x19, 0x2, "a284"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000009c0)={0x40, 0x1e, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

11.207382623s ago: executing program 1 (id=102):
prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async)
unshare(0x8000400) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fadvise64(r0, 0x8000000000000001, 0xd3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) (async)
r3 = syz_io_uring_setup(0x29c0, &(0x7f0000000000)={0x0, 0x2b35, 0x8, 0x2, 0x3da}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000002d40)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) (async)
writev(r2, &(0x7f0000001640)=[{&(0x7f0000000140)="3cca78c8", 0x4}, {0x0}], 0x2)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f00000001c0)=""/90, 0x5a, <r4=>0x0, &(0x7f0000001680)=""/4096, 0x1000}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1006d, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd99c, @value}, 0x94)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x44b, 0x70bd26, 0x0, {0x7a, 0x0, 0x0, r6, 0x0, 0x2040}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x50)

10.620579503s ago: executing program 1 (id=107):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020100000000000000000000000000180100002020782500000000002020207b1a634200000000bfa100000000001007010000f8ffffffb702000008000000b70300000d0f0000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

10.276713722s ago: executing program 33 (id=107):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020100000000000000000000000000180100002020782500000000002020207b1a634200000000bfa100000000001007010000f8ffffffb702000008000000b70300000d0f0000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

8.560423287s ago: executing program 4 (id=116):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "0a74de5ec3"}, @input_terminal={0xc, 0x24, 0x2, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x4, 0x0, "30e9d48c"}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, '?*'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0xfd, 0x40}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0) (async)
getsockopt$inet_int(r0, 0x10d, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "0a74de5ec3"}, @input_terminal={0xc, 0x24, 0x2, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x0, 0x4, 0x0, "30e9d48c"}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, '?*'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0xfd, 0x40}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async)

6.924389701s ago: executing program 4 (id=119):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}]}}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0)

6.093780253s ago: executing program 3 (id=121):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'batadv_slave_1\x00', 0xfffffffe}, 0x18) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'rose0\x00'}, 0x18) (async)
bind$inet6(r1, &(0x7f0000000100), 0x1c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e22, 0x7f, @loopback, 0x8}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
listen(r5, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

5.808463149s ago: executing program 2 (id=122):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

5.737239527s ago: executing program 3 (id=123):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b1082a6d000000040902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201403001c00783ff3"], 0x0, 0x0, 0x0, 0x0})

5.463269794s ago: executing program 2 (id=124):
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2040)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="18005080100008"], 0x34}, 0x1, 0x0, 0x0, 0x8000055}, 0x0)

5.212437066s ago: executing program 4 (id=125):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000980)={0x1}, 0x8)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000300), &(0x7f00000003c0)=0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680))
socket$nl_xfrm(0x10, 0x3, 0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="0031fd0000009a163342f289e2b1837a812aee3c7d0482d2ea1a8367307a459c4107d448ca6c9225269c0149b3cb23a5643d204555a65dd3b5910c1f86fadf769ac3087be2dac52c6dd23929c6cd4fa4d3883c050f7908882c14479b7c95a4b47cc0f5b107dd5a8e58513d60ef97b7276a1437e53b91557e9ed8a7dc055efe0762c9e14db1060d453193154fba35db0ac72a29eb1dd1328b5f2f99af21168225b6ae9e28933bf83c2c8267812dff6e2ac904489bf08c4dec40c1f90cfc7f9b856d9794bdcb3918875150c868363f2784fe38fa658ac5fc4000aa0f0e0af2cc248dfc5ce9"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000380)=ANY=[@ANYRESOCT], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
shmdt(0x0)

4.977690914s ago: executing program 2 (id=126):
msgget(0x3, 0x262)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x2}], 0x2, 0x20, 0x0)
sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
close(0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x600000)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
io_setup(0x8, &(0x7f0000000240))
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000140))

3.985530001s ago: executing program 4 (id=127):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
socket$netlink(0x10, 0x3, 0x4) (async)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000140)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29)
socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x500, &(0x7f00000001c0)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b87030b0000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010092797a30000000002c000000030a01010000000000000000010000010900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000030900010073797a3000000000140000001100010000000000000000000000000a"], 0x108}}, 0x0)

3.562631775s ago: executing program 4 (id=128):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

3.560827719s ago: executing program 3 (id=129):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80400)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64)
r5 = userfaultfd(0x80001) (rerun: 64)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x15, 0xdd, 0xed, 0x20, 0x4b4, 0x1002, 0xd63f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5e, 0xc2, 0xa5}}]}}]}}, 0x0)

3.531992943s ago: executing program 2 (id=130):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}, 0x1c)
socket$kcm(0x10, 0x400000002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800090200000000003000000a0030fc0000c8000002000053db6ae1da1b80bc9b7a0db9ba5eef2e63f5df68715ec9699e13fefd38697ef03975d671718078a0b29fca0e3d80435400e9836ad3aa4b703fe43b20de14c52c499cb292b67c23c810fb684046"], 0x1c}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f", 0x7}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9", 0x15}], 0x2}, 0x40)
r2 = socket$igmp6(0xa, 0x3, 0x2)
openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
unshare(0x8000400)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
lseek(r4, 0x4, 0x3)
read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r6)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000002340)=ANY=[@ANYBLOB="1cfa060000000200000080a08b000000", @ANYBLOB="01002abd7000ffdbdf25010000000400028004000180", @ANYRES16=r7, @ANYRESHEX=0x0, @ANYRES8=r7, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24000804}, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'sit0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xe, r8})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f0000000000)={0x1, @pix={0xfffffffd, 0x1, 0x42474752, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, 0x1}})
epoll_create1(0x0)
setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='dvmrp0\x00', 0xd)
sendmmsg$inet6(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002380)="8208770441b78c25b673692d3109fcf9762cc6b634acd4113b8ff28de40ce6ae156cd331cc7c298dd3b64fa18b65c46389f36ae12abf95cf5c2a28059e908cd016903270814291ba82466f45a61998e2ce77eb2c809938c956be8f87d3227020f291022b58c857a08b026642bf23e506be179be86ac25ad3457867e9560c0b00bfce50d2abda2a9c63c4308790b1297f9f9b9eae11bce9975c83ebb8fb8dca1a58a64e7e2d37f30675378a2ec9"}], 0x1}}], 0x1, 0x4000c010)
rmdir(&(0x7f0000002440)='./file0\x00')
sendto$inet6(r9, &(0x7f0000002480)="8b3f01653520c8cbb4766a754e83d51e350f09144609785539d5c7a8b13234d7dbb95bd7031eeec8fca79d96250000", 0x2f, 0x0, 0x0, 0x0)

3.27656657s ago: executing program 2 (id=131):
syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async, rerun: 32)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (rerun: 32)
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008b425b40779261058f7a0102030109024b0001030000000904dd0d00020201e6052406000105240096cf0d240f01001000000f00f7ff0206241a2a0010052401034a0524060000051e00000c0d240f0101"], 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) (async, rerun: 64)
r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64)
syz_usb_connect$cdc_ecm(0x0, 0xda, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x1, 0x1, 0x4, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0xbc, {{0x5}, {0x5, 0x24, 0x0, 0x9b}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0x3, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x1, 0xfffb}, @mdlm={0x15, 0x24, 0x12, 0xc}, @mdlm_detail={0x70, 0x24, 0x13, 0x4, "591dc3f56db9feef0f4b9c9466929a889d8c67e0c0842acbc1f0428930b6f13c99de76aa0400f5cb3933818385e4af21ab091d9a4a20244635b4b47637d7f2483efd01e748bd2fc1df9e305f2364d1f269b19d5c0574ee838b8e969f067e3e489869901c2bba66ef85c8a8eb"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xdf, 0x9, 0x6}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x6, 0x1, 0x9, 0x40, 0x2}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x380a}}, {0x2d, &(0x7f00000003c0)=@string={0x2d, 0x3, "5e6f37eb833880d8f2b145400d451094e05bd5f8098ffa594c47f153f5f67cd0c11f5addc850154b1fe97d"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x820}}, {0x28, &(0x7f00000004c0)=@string={0x28, 0x3, "57b7253a057b03f56facd33002b7b603560a1802a8a4ca5757ba4d194daa3d538eb734f94085"}}]}) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000680)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded241482cfe17c3778a", 0xb8)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'pimreg0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7be}]}}]}, 0x44}}, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @remote}, 0x4, 0x0, 0x3}}, 0x1) (async)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000080)) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000040)=""/26, &(0x7f0000000100)=0x1a) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x4, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8001, @vifc_lcl_addr=@empty, @rand_addr=0x64010101}, 0x10) (async)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async, rerun: 64)
syz_usb_connect$cdc_ecm(0x3, 0x6f, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x47, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "0d7a5afb90"}, {0x5, 0x24, 0x0, 0x703}, {0xd, 0x24, 0xf, 0x1, 0x808, 0x7, 0xb8, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x2, 0x0, 0xe, 0x5, 0x7}, @acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xff, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x79, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xff, 0x6, 0x10}}}}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x250, 0x6, 0x6, 0x5, 0x20, 0x81}, 0xde, &(0x7f0000000c80)={0x5, 0xf, 0xde, 0x2, [@generic={0xd6, 0x10, 0x3, "41bac7ba90693d25373741752948e78f02c5231d929e4ea098e20408ecc043afb1d536dc1f11487f747a0e3a17eb22ae164cfdac03b4cba09145c589592323b2c13e731aa39c3060e55aceea24d44f67cb8eaf912bf3712ece3bbf9baee21796508bd70be5439aa5fb758347d06f6b5864b3ad2f831e525014920ec1a0143a7b21e7c30fbb2b64001b253d6db1e4aa924de6d26f84ccaad47ae02e748a262ee6e4d527298f6b70b1a503a87e2e0e3d47128a2fa6a71daad2d9e6e1d0a5b31d4f0c918960e5420b7236a3015d77c42ee3166b37"}, @ptm_cap={0x3}]}, 0x8, [{0xa5, &(0x7f0000000d80)=@string={0xa5, 0x3, "c23cd57695fd31595bbb86dcbdcc2582c704e9aaa31dbff8e9d07ee8d24024e83873021800df4fb2a3a353b51ed790463b0f95ecff196178cbc3866d9ab773e73528db95b6f44cf671546b6b2f99506fab88c6f740c56d4ab9ba94b093bc1b77e205c4ef6a32c755d5de00328b93d3541fdeadb84c9a68b643022c7014df691124204c3c380bc46772cc96c2d368b33373db596e50b77d808aa4395ab30d6bc58c8b16"}}, {0x51, &(0x7f0000000e40)=@string={0x51, 0x3, "b1c1c926e3f4c69068fe7029e341f76f64d44a8611bed75891cb7b4c8d19664c774d27612e44066c993ceee422beeb3891a164b6f259b7d1156203b019d43cb2724c8911a6098945543caa79c21987"}}, {0x7c, &(0x7f0000000ec0)=@string={0x7c, 0x3, "9e56cd33e7943b1141675ddd126f2d0a2716d2b67dadc2e33f834b3dbb80a30086099b3d9c0f659bc7046746df418a94620f870c99e5bd96ffb6b2f047743f54e42e1bfb7a7c88580ba95a8d84ca09240aa8c19f5e1ceeddbc8ad314c1caddaedb8d4454300fed7d81aadec8cdc3a84c75c6317791d63ff09fa0"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x411}}, {0xf4, &(0x7f0000000fc0)=@string={0xf4, 0x3, "2f70d36b6a954c16aa874e6933cc3bd1e884056ae4636b4bb73b5f9b9d1e028db45ca9b581d9288879ffa37739f123b1b469b57695c6753a8b19c12294dca5806b8a08717ae7f719a642b59fcbb358a715dea240998ffd80c507481e067b724ac34477e5ff5cedce3a18e6d26e097e87e9e1f66bdc62bb9b9807f450e5f4e3014b42c13e3c98ba7b0aa09878e5a38e4e304d973bd7dfa1f6002a07d3f0ca245872664bec14b22c0d44bbca1ea3e3da8f96ed865e34673cf669dc3e98dae60b473c502db64ac71ad21d58f240b73c211592cbf3cb3ea1d31a84dc349384daede32ecf47a79b7b010f0b5819b9919b40a2c899"}}, {0xf2, &(0x7f00000010c0)=@string={0xf2, 0x3, "ae69ea94ef40d0ee535df2675da3f630ea6499233450631b0621f3f741062108344bd362e31f271932433cef719a7db4daf6400156dc638b4c466ef15a483ef5a06a7fc392e16bb97987936ae8012899c95a69c7796e2e445bc36db778855951083ec78ef2d8d778bf1ae2746513024330f3a061b66ebef9f2d4687dd1990cc8b35ac62f29dfd3c03a39abab1c4ed1284b0497771d3426eb53651f8c484ffa70130cd51ce506fe09dbc57d74f86a1ce50d8f3c19ecf5afb65cea14cb02df6d69fe23a6be7a38781f8c01e37698053ef0824aa587b75af46e3e4d4e28c555a1944eb9b19303811e99ff2701f8fef25473"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x42d}}]}) (rerun: 64)
r9 = socket$rxrpc(0x21, 0x2, 0x2)
recvmmsg(r9, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x10001, 0x0) (async)
syz_usb_connect$cdc_ecm(0x0, 0xde, &(0x7f0000000680)={{0x12, 0x1, 0x151, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x1, 0x1, 0x0, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "eb296dbb"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x6}, @acm={0x4, 0x24, 0x2, 0xe}, @mdlm_detail={0x75, 0x24, 0x13, 0x1, "a933a2d01d4ba4bf5ef5021c77579e898e3f1657244427f70970c01cdf9a19d3dc9024919805a213bc926f31279ca29fc87e0064b756a8539dc1960b3b9fa8609412a57f552a4285342eadec63d3c868146358e4decaa93cc6c35c4770fa6ec809c50fe6afce34edd4fefa7abe7ae1a3d7"}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x20}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x76, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0xfb, 0xd}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x4, 0x4, 0x7, 0x20, 0x65}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0x7, [{0x83, &(0x7f0000000780)=@string={0x83, 0x3, "af1399b5f0e6ead7d4e5753106bd1dcdea0551554ff5ef75af1c0c77884556a46ccc291000a81edd051a55dbfccd55ad350c703d5991fe5eae18d79bbddbc73542fe2a359635f535c816dcf5038b02cc9545a4edb9722bc95ab45f1c7b917ac34171fd673d33f8968e14ca9902acdb03f9754ba6124654888bb4b3e91388fee15b"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x30, &(0x7f00000008c0)=@string={0x30, 0x3, "82436d887c91aa9e2c58a1da2ee22210fecedff79eba34f4dbc0e82c37d49f1df9405fcf2f5be11e6d45b95fabbe"}}, {0xfd, &(0x7f0000000900)=@string={0xfd, 0x3, "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"}}, {0xf3, &(0x7f0000000a00)=@string={0xf3, 0x3, "8d7c1bbeb5e6d6591db88f9c016fe68a32575433b960a712ec8be847a2ec4ebfdae3706e50ccf8d0ae58a7de94ba3953fed8867f3ba8d81be7da1d2d468836fcb7d96614c6dc95f429e61ec0c5f0bc5faa9ae8f406d4bb25dbb5bf51716f710794bdf24383b51ff6c0f6116301efde2b64b8105e8ecffb09857bf3bb843489b5251c0128463e65358ed074fbdee5895fb5c318e923c6b29f7c1c1d93e379ba232da5585bc38b7d603610fccbdd317a4eaffde7656b6d0dbcf4ac314dd8914ab0d7c984bd0a7f82bd99e384b89181749c0267f789d87e10183f88e1542fd6c732c2d918245f2877b5f4048e12cc78ae082b"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x835}}]})

3.112266966s ago: executing program 2 (id=132):
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x5452, &(0x7f0000000c00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x800}, &(0x7f0000000180), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x1, r1, 0x0, 0x0, 0x0, 0x10001, 0x0, {0x1}})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@length={{0x28}, {0x5, 0xffbe}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
r6 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}, 0x1c)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_CREATE(r7, 0x5501)
r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
capset(0x0, &(0x7f0000000200)={0xfffffffd, 0x0, 0x8})
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_pidfd_open(0x0, 0x0)
r10 = pidfd_getfd(r9, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(r10, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @multicast2}, 0xc)
r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_STD(r11, 0x40085618, &(0x7f0000000040)=0x10000)
fcntl$setlease(r8, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)

2.936051775s ago: executing program 5 (id=84):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fchdir(0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00')
pread64(r1, &(0x7f0000000440)=""/249, 0xf9, 0x3c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setfsgid(0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9c, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x1, 0xf0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0xff, 0x9}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xd2, 0x3, 0x1, 0xff, 0x1}, 0x45, &(0x7f00000000c0)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xc5, 0xf5, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x110, 0x0, 0x3, 0x1, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "1c1534c906f0c7d5ff3eeaa3935273dd"}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "4ae33f274064141f3530954f96d98405"}]}, 0x2, [{0xd5, &(0x7f00000001c0)=@string={0xd5, 0x3, "db51e597966e5541090d9d2891f77a4bcc16d904d8e9ccf3ea473212ba192384f8cc3b7837263f369a116acb163f151941b5b7104ad7e4311b35eb0e224af05af0564ac52962622f476c49ebc3ee983ba2c2d5a765f5c172097af32bfb60a31e357b45e1992d88d4984b61a4523b220cd01880d50ae9a0d2ae4fdebff9e9e207d4e1f2a75e3c25427313362cb2a4cf9c9bc6c9bb1b16c48df21aca575fd8cdb4971e4ddd177f8394c0ecdd721e6816117ddaea3aea5edde85e9b27dc108cff8c5e32f29aa38f9d09579ca6e4266a4bf83ee203"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1404}}]})
timer_create(0xfffffffd, 0x0, &(0x7f0000000040))
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000044c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004380)=ANY=[@ANYBLOB="2001800000df"], 0x0})

2.686414745s ago: executing program 3 (id=133):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))

1.838726904s ago: executing program 6 (id=108):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/5, 0x5}}], 0x1, 0x2, 0x0)

1.738058777s ago: executing program 6 (id=134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)

1.657111457s ago: executing program 6 (id=135):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000980)={0x1}, 0x8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680))
socket$nl_xfrm(0x10, 0x3, 0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="0031fd0000009a163342f289e2b1837a812aee3c7d0482d2ea1a8367307a459c4107d448ca6c9225269c0149b3cb23a5643d204555a65dd3b5910c1f86fadf769ac3087be2dac52c6dd23929c6cd4fa4d3883c050f7908882c14479b7c95a4b47cc0f5b107dd5a8e58513d60ef97b7276a1437e53b91557e9ed8a7dc055efe0762c9e14db1060d453193154fba35db0ac72a29eb1dd1328b5f2f99af21168225b6ae9e28933bf83c2c8267812dff6e2ac904489bf08c4dec40c1f90cfc7f9b856d9794bdcb3918875150c868363f2784fe38fa658ac5fc4000aa0f0e0af2cc248dfc5ce9"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000380)=ANY=[@ANYRESOCT], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
shmdt(0x0)

785.692834ms ago: executing program 5 (id=136):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
process_mrelease(r3, 0x0) (async)
process_mrelease(r3, 0x0)
listen(r1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e)
close(r1) (async)
close(r1)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0) (async)
syz_usb_control_io$hid(r5, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/notes', 0xc81, 0x2a) (async)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/notes', 0xc81, 0x2a)
write$FUSE_OPEN(r6, &(0x7f0000002bc0)={0x20}, 0x20)
r7 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000240)={@rand_addr, @multicast2, @empty}, &(0x7f0000000280)=0xc)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="09bbc473fa129a4a5309d28429b2f97c2cf6d57c45a6fa55c4d9b65c2d6466949e5192436a338b65aa50d7b39c42f4872725d92603dd834e01cc98679bf4a88773246ca2dae6ed26", 0x0, 0x48) (async)
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="09bbc473fa129a4a5309d28429b2f97c2cf6d57c45a6fa55c4d9b65c2d6466949e5192436a338b65aa50d7b39c42f4872725d92603dd834e01cc98679bf4a88773246ca2dae6ed26", 0x0, 0x48)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000001c0)={0x40, 0x18, 0x49, "aacf154e03e94e03ad3b33c49bb1ed5cf678c0963261b893bdbbef7fa7a23c318c99d97588d647b35ecc93ae56a98fbb8b3c86ee443dd90bd860cb2140c560b96316fab2b2eced79a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000001c0)={0x40, 0x18, 0x49, "aacf154e03e94e03ad3b33c49bb1ed5cf678c0963261b893bdbbef7fa7a23c318c99d97588d647b35ecc93ae56a98fbb8b3c86ee443dd90bd860cb2140c560b96316fab2b2eced79a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

420.38476ms ago: executing program 4 (id=137):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x9, 0x0, [<r6=>0x0], [0xff, 0x0, 0x39a], [], [0x100000001]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x2, 0x79})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, <r7=>0xffffffffffffffff})
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x63}, './file0\x00'})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7})

301.036798ms ago: executing program 6 (id=138):
msgget(0x3, 0x262)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x2}], 0x2, 0x20, 0x0)
sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
close(0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x600000)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
io_setup(0x8, &(0x7f0000000240))
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000140))

270.411876ms ago: executing program 3 (id=139):
set_tid_address(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)

0s ago: executing program 3 (id=140):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}})
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ppoll(&(0x7f0000000180)=[{r4, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x98, 0x2e8, 0x138, 0x0, 0x98, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'nr0\x00', 'gretap0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x302d, 0x6, 0x1, 0x8, 0x2, 0x8, 0x8}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x27]}}}, {{@ip={@rand_addr=0x64010101, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0)
close(r4)
syz_io_uring_setup(0x1f89, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x3}, &(0x7f0000000040), &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000041000900000000000002000003000000080002"], 0x1c}}, 0x0) (async)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000041000900000000000002000003000000080002"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="b6a924f5"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x886c}]]}, 0x2c}}, 0x0)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="000000de22b5c947", 0x8) (async)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="000000de22b5c947", 0x8)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "8fce6123"}]}}, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts.
[   58.567758][ T5819] cgroup: Unknown subsys name 'net'
[   58.707385][ T5819] cgroup: Unknown subsys name 'cpuset'
[   58.715637][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.051037][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.660572][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.668939][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   63.677159][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   63.686850][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.693807][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.703130][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   63.711466][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.719725][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   63.720527][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.730120][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.736023][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.743394][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   63.748215][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.766815][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   63.774959][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   63.782048][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   63.786460][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.789136][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.797981][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   63.805302][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.812479][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.816943][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   63.826807][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   63.834148][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   63.839456][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   63.855323][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   63.856817][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.870611][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.884148][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   63.896159][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.283863][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   64.348740][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.403332][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.500306][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.545371][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.552600][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.562709][ T5849] bridge_slave_0: entered allmulticast mode
[   64.570057][ T5849] bridge_slave_0: entered promiscuous mode
[   64.617160][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.624460][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.631655][ T5851] bridge_slave_0: entered allmulticast mode
[   64.638611][ T5851] bridge_slave_0: entered promiscuous mode
[   64.648515][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.655776][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.662967][ T5849] bridge_slave_1: entered allmulticast mode
[   64.669871][ T5849] bridge_slave_1: entered promiscuous mode
[   64.713846][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.721324][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.728791][ T5851] bridge_slave_1: entered allmulticast mode
[   64.735490][ T5851] bridge_slave_1: entered promiscuous mode
[   64.763119][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.810769][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.824252][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.834002][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.841299][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.848738][ T5852] bridge_slave_0: entered allmulticast mode
[   64.855374][ T5852] bridge_slave_0: entered promiscuous mode
[   64.875776][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.893802][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.901254][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.909043][ T5852] bridge_slave_1: entered allmulticast mode
[   64.916203][ T5852] bridge_slave_1: entered promiscuous mode
[   64.927638][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.934830][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.942141][ T5847] bridge_slave_0: entered allmulticast mode
[   64.949759][ T5847] bridge_slave_0: entered promiscuous mode
[   64.958768][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.001955][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.009296][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.017293][ T5847] bridge_slave_1: entered allmulticast mode
[   65.024282][ T5847] bridge_slave_1: entered promiscuous mode
[   65.042303][ T5851] team0: Port device team_slave_0 added
[   65.050742][ T5849] team0: Port device team_slave_0 added
[   65.089607][ T5851] team0: Port device team_slave_1 added
[   65.105515][ T5849] team0: Port device team_slave_1 added
[   65.113046][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.125258][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.160041][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.167438][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.193568][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.242853][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.254995][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.265021][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.271994][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.297963][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.315513][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.322478][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.348660][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.370319][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.377608][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.384979][ T5850] bridge_slave_0: entered allmulticast mode
[   65.391581][ T5850] bridge_slave_0: entered promiscuous mode
[   65.402406][ T5852] team0: Port device team_slave_0 added
[   65.435713][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.442700][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.469005][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.482065][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.493240][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.500565][ T5850] bridge_slave_1: entered allmulticast mode
[   65.507751][ T5850] bridge_slave_1: entered promiscuous mode
[   65.515805][ T5852] team0: Port device team_slave_1 added
[   65.532311][ T5847] team0: Port device team_slave_0 added
[   65.576552][ T5847] team0: Port device team_slave_1 added
[   65.587856][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.600228][ T5851] hsr_slave_0: entered promiscuous mode
[   65.607273][ T5851] hsr_slave_1: entered promiscuous mode
[   65.615080][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.622056][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.648748][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.679075][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.699051][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.706236][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.732572][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.744769][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.751741][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.778015][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.825385][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.832397][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.859002][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.873611][ T5849] hsr_slave_0: entered promiscuous mode
[   65.875602][ T5840] Bluetooth: hci0: command tx timeout
[   65.886179][ T5849] hsr_slave_1: entered promiscuous mode
[   65.892170][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.900373][ T5849] Cannot create hsr debugfs directory
[   65.909346][ T5850] team0: Port device team_slave_0 added
[   65.937970][ T5850] team0: Port device team_slave_1 added
[   65.954186][ T5840] Bluetooth: hci1: command tx timeout
[   65.954207][ T5832] Bluetooth: hci2: command tx timeout
[   65.954580][ T5832] Bluetooth: hci4: command tx timeout
[   65.960131][ T5840] Bluetooth: hci3: command tx timeout
[   66.044745][ T5852] hsr_slave_0: entered promiscuous mode
[   66.051009][ T5852] hsr_slave_1: entered promiscuous mode
[   66.060070][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.067877][ T5852] Cannot create hsr debugfs directory
[   66.082384][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.089453][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.115619][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.147003][ T5847] hsr_slave_0: entered promiscuous mode
[   66.153503][ T5847] hsr_slave_1: entered promiscuous mode
[   66.160011][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.167944][ T5847] Cannot create hsr debugfs directory
[   66.174218][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.181197][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.207875][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.310813][ T5850] hsr_slave_0: entered promiscuous mode
[   66.318021][ T5850] hsr_slave_1: entered promiscuous mode
[   66.324207][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.331793][ T5850] Cannot create hsr debugfs directory
[   66.563400][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.585324][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.607818][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.626805][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.649738][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.678386][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.699208][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.715781][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.751343][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.777226][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.798235][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.807731][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.852652][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.889758][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.900536][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.910966][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.979062][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.989101][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   67.019817][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.027008][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   67.049478][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   67.098386][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.111653][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   67.146261][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.153593][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.181915][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   67.193802][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.200981][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.225541][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.232651][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.253218][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.269370][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.276511][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.352714][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   67.377821][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.388859][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.395999][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.419091][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.441264][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.448452][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.473373][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.500861][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   67.532646][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.552990][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.560244][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.591118][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.603221][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.610500][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.630666][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   67.649527][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.656715][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.680658][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.695262][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.702361][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.781474][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.800328][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.842403][ T5851] veth0_vlan: entered promiscuous mode
[   67.876333][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.891805][ T5851] veth1_vlan: entered promiscuous mode
[   67.950467][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.959388][ T5840] Bluetooth: hci0: command tx timeout
[   67.967142][ T5847] veth0_vlan: entered promiscuous mode
[   67.985990][ T5849] veth0_vlan: entered promiscuous mode
[   68.009174][ T5849] veth1_vlan: entered promiscuous mode
[   68.021199][ T5852] veth0_vlan: entered promiscuous mode
[   68.034158][ T5840] Bluetooth: hci4: command tx timeout
[   68.034614][ T5844] Bluetooth: hci1: command tx timeout
[   68.039579][ T5840] Bluetooth: hci2: command tx timeout
[   68.045223][ T5832] Bluetooth: hci3: command tx timeout
[   68.055338][ T5847] veth1_vlan: entered promiscuous mode
[   68.068024][ T5851] veth0_macvtap: entered promiscuous mode
[   68.089500][ T5851] veth1_macvtap: entered promiscuous mode
[   68.100574][ T5852] veth1_vlan: entered promiscuous mode
[   68.145257][ T5850] veth0_vlan: entered promiscuous mode
[   68.172040][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.187140][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.199101][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.208429][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.217887][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.226992][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.243598][ T5847] veth0_macvtap: entered promiscuous mode
[   68.260624][ T5850] veth1_vlan: entered promiscuous mode
[   68.276032][ T5847] veth1_macvtap: entered promiscuous mode
[   68.285320][ T5849] veth0_macvtap: entered promiscuous mode
[   68.292889][ T5852] veth0_macvtap: entered promiscuous mode
[   68.319187][ T5849] veth1_macvtap: entered promiscuous mode
[   68.328398][ T5852] veth1_macvtap: entered promiscuous mode
[   68.381839][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.396191][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.407856][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.423134][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.435101][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.445117][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.456076][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.468251][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.486503][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.497980][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.509395][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.519125][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.530592][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.542008][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.553238][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.563445][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.576125][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.587017][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.607601][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.618737][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.629339][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.640111][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.651222][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.666237][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.675733][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.686350][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.695309][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.707583][ T5850] veth0_macvtap: entered promiscuous mode
[   68.730130][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.739720][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.751775][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.761779][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.776659][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.790867][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.792261][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.802568][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.819509][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.830304][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.840844][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.851683][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.862551][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.893580][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.899276][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.911148][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.912990][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.934946][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.943669][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.963344][ T5850] veth1_macvtap: entered promiscuous mode
[   69.009134][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.024420][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.034434][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.045026][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.055453][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.066044][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.076474][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.088533][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.100392][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.116198][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.129538][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.139821][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.150575][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.161249][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.171849][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.181753][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.192794][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.204691][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.230998][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.287891][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.302921][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.341320][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.351977][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.362177][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.371059][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.420535][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.434933][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.503079][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.511743][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.530170][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.538315][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.566917][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.580334][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.636856][ T2148] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.663843][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.678405][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.694524][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.702393][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.764432][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.772370][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.854298][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   69.868910][ T2148] usb 1-1: Using ep0 maxpacket: 32
[   69.875173][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   69.921916][ T2148] usb 1-1: config 0 has an invalid interface number: 250 but max is 0
[   69.931483][ T2148] usb 1-1: config 0 has no interface number 0
[   69.964073][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   70.027950][ T2148] usb 1-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63
[   70.046658][ T5840] Bluetooth: hci0: command tx timeout
[   70.074067][ T2148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.083379][ T5894] syzkaller0: entered promiscuous mode
[   70.090000][ T2148] usb 1-1: Product: syz
[   70.094420][ T5894] syzkaller0: entered allmulticast mode
[   70.104096][ T2148] usb 1-1: Manufacturer: syz
[   70.108851][ T2148] usb 1-1: SerialNumber: syz
[   70.117090][ T5840] Bluetooth: hci1: command tx timeout
[   70.118112][ T5836] Bluetooth: hci3: command tx timeout
[   70.122512][ T5840] Bluetooth: hci4: command tx timeout
[   70.122542][ T5840] Bluetooth: hci2: command tx timeout
[   70.147916][ T2148] usb 1-1: config 0 descriptor??
[   70.158185][ T2148] gspca_main: sunplus-2.14.0 probing 04f1:1001
[   70.424200][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   70.454871][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   70.475737][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   70.581317][ T5890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.604365][ T5890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.624263][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   70.646730][ T5903] wireguard0: entered promiscuous mode
[   70.652286][ T5903] wireguard0: entered allmulticast mode
[   70.884141][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   70.924179][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   70.933173][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   71.356103][ T5895] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.625381][ T2148] gspca_sunplus: reg_w_riv err -110
[   71.630886][ T2148] sunplus 1-1:0.250: probe with driver sunplus failed with error -110
[   71.797494][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[   71.804280][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[   72.116933][ T5840] Bluetooth: hci0: command tx timeout
[   72.196415][ T5840] Bluetooth: hci2: command tx timeout
[   72.196632][ T5844] Bluetooth: hci3: command tx timeout
[   72.201851][ T5840] Bluetooth: hci4: command tx timeout
[   72.201882][ T5840] Bluetooth: hci1: command tx timeout
[   72.529008][ T5890] netlink: 'syz.0.1': attribute type 15 has an invalid length.
[   72.619377][    T8] usb 1-1: USB disconnect, device number 2
[   72.759978][ T5914] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.096117][   T29] audit: type=1326 audit(1732980600.892:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.132131][   T29] audit: type=1326 audit(1732980600.892:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.154071][    C0] vkms_vblank_simulate: vblank timer overrun
[   73.225789][   T29] audit: type=1326 audit(1732980600.892:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.294495][   T29] audit: type=1326 audit(1732980600.892:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.320992][ T5906] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   73.344232][   T29] audit: type=1326 audit(1732980600.892:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.389978][ T5947] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12'.
[   73.416084][   T29] audit: type=1326 audit(1732980600.892:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.465258][ T5906] usb 5-1: device descriptor read/64, error -71
[   73.492383][   T29] audit: type=1326 audit(1732980600.892:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.513450][ T5938] netlink: 416 bytes leftover after parsing attributes in process `syz.3.12'.
[   73.563806][   T29] audit: type=1326 audit(1732980600.892:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.598834][   T29] audit: type=1326 audit(1732980600.892:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.632656][   T29] audit: type=1326 audit(1732980600.892:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7fc00000
[   73.654608][    C0] vkms_vblank_simulate: vblank timer overrun
[   73.696370][ T5834] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   73.708038][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   73.716523][ T5906] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   73.814682][ T5886] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.844124][ T5906] usb 5-1: device descriptor read/64, error -71
[   73.894291][ T5834] usb 1-1: Using ep0 maxpacket: 8
[   73.901659][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.913292][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.923468][    T8] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[   73.933701][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.944662][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.954462][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.965526][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   73.968812][ T5906] usb usb5-port1: attempt power cycle
[   73.978529][ T5834] usb 1-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00
[   73.992959][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.003192][    T8] usb 3-1: config 0 descriptor??
[   74.013822][ T5834] usb 1-1: config 0 descriptor??
[   74.035581][ T5886] usb 2-1: Using ep0 maxpacket: 16
[   74.042522][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.053779][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.063681][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   74.076928][ T5886] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   74.086089][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.100327][ T5886] usb 2-1: config 0 descriptor??
[   74.324262][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   74.345548][ T5906] usb 5-1: device descriptor read/8, error -71
[   74.423195][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13'.
[   74.428041][    T8] saitek 0003:06A3:0621.0001: unbalanced collection at end of report description
[   74.446643][ T5834] usbhid 1-1:0.0: can't add hid device: -71
[   74.455840][    T8] saitek 0003:06A3:0621.0001: parse failed
[   74.462021][ T5834] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   74.470379][    T8] saitek 0003:06A3:0621.0001: probe with driver saitek failed with error -22
[   74.488008][ T5834] usb 1-1: USB disconnect, device number 3
[   74.566718][ T5886] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   74.574709][ T5886] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   74.581972][ T5886] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   74.584373][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   74.589569][ T5886] microsoft 0003:045E:07DA.0002: unknown main item tag 0x2
[   74.605314][ T5886] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   74.614552][ T5886] microsoft 0003:045E:07DA.0002: No inputs registered, leaving
[   74.631312][ T5886] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   74.643011][ T5886] microsoft 0003:045E:07DA.0002: no inputs found
[   74.650698][ T5886] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[   74.651557][ T5906] usb 5-1: device descriptor read/8, error -71
[   74.689832][   T25] usb 3-1: USB disconnect, device number 2
[   74.804445][ T5906] usb usb5-port1: unable to enumerate USB device
[   74.817514][    T8] usb 2-1: USB disconnect, device number 2
[   75.074669][ T5906] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   75.204048][ T5906] usb 4-1: device descriptor read/64, error -71
[   75.464029][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   75.604169][ T5906] usb 4-1: device descriptor read/64, error -71
[   75.724453][ T5906] usb usb4-port1: attempt power cycle
[   75.924490][   T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   75.939797][ T5989] Zero length message leads to an empty skb
[   75.964159][    T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   76.065797][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   76.094196][   T25] usb 3-1: Using ep0 maxpacket: 32
[   76.101076][ T5906] usb 4-1: device descriptor read/8, error -71
[   76.110376][   T25] usb 3-1: config 1 interface 0 has no altsetting 0
[   76.120339][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.40
[   76.131699][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.141617][   T25] usb 3-1: Product: 㮽峠Ȋ듸네痕㆏茇挽貋轅囁뺮鼻赫ꛈ薙ꦐ➔湛閆埁䟺讔暙ߒẍ壥皴뒬부굓ꎾ臼ﻔꚋ鮚佶핖罏朂⛑ᶬ慆햢ᵮ賓覵Ⳝ
[   76.162882][    T8] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.162915][   T25] usb 3-1: Manufacturer: ᠊
[   76.180211][    T8] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.198125][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[   76.201814][   T25] usb 3-1: SerialNumber: syz
[   76.206372][    T8] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[   76.221744][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.245527][    T8] usb 2-1: config 0 descriptor??
[   76.354309][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   76.373219][ T5993] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET)
[   76.390657][ T5906] usb 4-1: device descriptor read/8, error -71
[   76.504460][ T5906] usb usb4-port1: unable to enumerate USB device
[   76.666980][    T8] usbhid 2-1:0.0: can't add hid device: -71
[   76.673489][    T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   76.687453][    T8] usb 2-1: USB disconnect, device number 3
[   77.090011][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'.
[   77.429968][ T6005] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   77.451688][   T25] usbhid 3-1:1.0: can't add hid device: -71
[   77.457810][   T25] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   77.476910][   T25] usb 3-1: USB disconnect, device number 3
[   77.568185][ T6012] netlink: 448 bytes leftover after parsing attributes in process `syz.0.36'.
[   77.804170][   T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   77.828021][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.964700][   T25] usb 3-1: Using ep0 maxpacket: 16
[   77.978405][   T25] usb 3-1: unable to get BOS descriptor or descriptor too short
[   77.998842][   T25] usb 3-1: config 127 has an invalid interface number: 20 but max is 0
[   78.019045][   T25] usb 3-1: config 127 has no interface number 0
[   78.059620][   T25] usb 3-1: config 127 interface 20 has no altsetting 0
[   78.067258][   T25] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=10.66
[   78.076822][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.104283][ T5906] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   78.268020][ T5906] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[   78.283971][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.319458][ T5906] usb 1-1: config 0 descriptor??
[   78.381241][   T25] usb 3-1: string descriptor 0 read error: -71
[   78.428916][   T25] usb_8dev 3-1:127.20 can0: sending command message failed
[   78.453840][   T25] usb_8dev 3-1:127.20 can0: can't get firmware version
[   78.555510][   T25] usb_8dev 3-1:127.20: probe with driver usb_8dev failed with error -22
[   78.598181][   T25] usb 3-1: USB disconnect, device number 4
[   79.376570][ T5906] hackrf 1-1:0.0: Board ID: 00
[   79.381404][ T5906] hackrf 1-1:0.0: Firmware version: 
[   79.394263][ T5906] hackrf 1-1:0.0: Registered as swradio24
[   79.400054][ T5906] videodev: could not get a free minor
[   79.406285][ T5906] hackrf 1-1:0.0: Failed to register as video device (-23)
[   79.466382][ T5906] hackrf 1-1:0.0: probe with driver hackrf failed with error -23
[   79.827095][   T46] usb 1-1: USB disconnect, device number 4
[   79.852935][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   80.174134][   T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   80.174211][    T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   80.284155][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   80.341026][   T25] usb 5-1: Using ep0 maxpacket: 32
[   80.361060][    T8] usb 4-1: config 0 has no interfaces?
[   80.381151][    T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   80.403197][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.408816][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.426293][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.436723][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   80.447955][ T5906] usb 3-1: Using ep0 maxpacket: 32
[   80.459708][    T8] usb 4-1: Product: syz
[   80.464118][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.466593][   T25] usb 5-1: config 0 descriptor??
[   80.480162][    T8] usb 4-1: Manufacturer: syz
[   80.488256][    T8] usb 4-1: SerialNumber: syz
[   80.488333][ T5906] usb 3-1: config 1 interface 0 has no altsetting 0
[   80.501391][    T8] usb 4-1: config 0 descriptor??
[   80.539285][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.40
[   80.560872][   T25] hub 5-1:0.0: USB hub found
[   80.579574][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.601539][ T5906] usb 3-1: Product: 㮽峠Ȋ듸네痕㆏茇挽貋轅囁뺮鼻赫ꛈ薙ꦐ➔湛閆埁䟺讔暙ߒẍ壥皴뒬부굓ꎾ臼ﻔꚋ鮚佶핖罏朂⛑ᶬ慆햢ᵮ賓覵Ⳝ
[   80.638583][ T5906] usb 3-1: Manufacturer: ᠊
[   80.643501][ T5906] usb 3-1: SerialNumber: syz
[   80.725319][ T6054] netlink: 84 bytes leftover after parsing attributes in process `syz.0.51'.
[   80.772254][   T25] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[   80.804820][   T25] usbhid 5-1:0.0: can't add hid device: -71
[   80.822447][   T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   80.831095][ T6055] bridge_slave_0: left allmulticast mode
[   80.881236][ T6055] bridge_slave_0: left promiscuous mode
[   80.902047][   T25] usb 5-1: USB disconnect, device number 6
[   80.915396][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.980205][ T6055] bridge_slave_1: left allmulticast mode
[   80.998081][ T6055] bridge_slave_1: left promiscuous mode
[   81.004037][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.029548][ T6055] bond0: (slave bond_slave_0): Releasing backup interface
[   81.047893][ T6055] bond0: (slave bond_slave_1): Releasing backup interface
[   81.073574][ T6034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.172196][ T6055] team0: Port device team_slave_0 removed
[   81.250815][ T6055] team0: Port device team_slave_1 removed
[   81.266450][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.276025][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.291162][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.299809][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.392363][ T5906] usbhid 3-1:1.0: can't add hid device: -71
[   81.435025][ T5906] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   81.499846][ T5906] usb 3-1: USB disconnect, device number 5
[   81.760521][ T6072] netlink: 100 bytes leftover after parsing attributes in process `syz.4.57'.
[   81.774409][   T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   81.944604][   T46] usb 2-1: Using ep0 maxpacket: 16
[   81.986847][ T6080] FAULT_INJECTION: forcing a failure.
[   81.986847][ T6080] name failslab, interval 1, probability 0, space 0, times 1
[   82.004530][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.017306][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: syz.4.61 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0
[   82.024594][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.027487][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   82.027555][ T6080] Call Trace:
[   82.027565][ T6080]  <TASK>
[   82.053542][ T6080]  dump_stack_lvl+0x241/0x360
[   82.058251][ T6080]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.063464][ T6080]  ? __pfx__printk+0x10/0x10
[   82.068073][ T6080]  ? __kmalloc_noprof+0xb5/0x4c0
[   82.073048][ T6080]  ? __pfx___might_resched+0x10/0x10
[   82.078371][ T6080]  should_fail_ex+0x3b0/0x4e0
[   82.083074][ T6080]  should_failslab+0xac/0x100
[   82.087776][ T6080]  __kmalloc_noprof+0xdd/0x4c0
[   82.092549][ T6080]  ? ethnl_default_notify+0x18f/0x780
[   82.097929][ T6080]  ethnl_default_notify+0x18f/0x780
[   82.103134][ T6080]  ? __pfx_ethnl_default_notify+0x10/0x10
[   82.108854][ T6080]  ? __pfx_ethnl_set_debug+0x10/0x10
[   82.114146][ T6080]  ? mutex_is_locked+0x17/0x50
[   82.118924][ T6080]  ethnl_default_set_doit+0x617/0x910
[   82.124306][ T6080]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[   82.130210][ T6080]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[   82.136548][ T6080]  genl_rcv_msg+0xb14/0xec0
[   82.141142][ T6080]  ? __pfx_genl_rcv_msg+0x10/0x10
[   82.146273][ T6080]  ? __pfx_lock_acquire+0x10/0x10
[   82.151388][ T6080]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[   82.157375][ T6080]  ? __pfx___might_resched+0x10/0x10
[   82.162670][ T6080]  netlink_rcv_skb+0x1e3/0x430
[   82.167440][ T6080]  ? __pfx_genl_rcv_msg+0x10/0x10
[   82.172463][ T6080]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   82.177767][ T6080]  ? __netlink_deliver_tap+0x7aa/0x7f0
[   82.183283][ T6080]  genl_rcv+0x28/0x40
[   82.187371][ T6080]  netlink_unicast+0x7f6/0x990
[   82.192157][ T6080]  ? __pfx_netlink_unicast+0x10/0x10
[   82.197450][ T6080]  ? __virt_addr_valid+0x183/0x530
[   82.202562][ T6080]  ? __check_object_size+0x48e/0x900
[   82.207850][ T6080]  netlink_sendmsg+0x8e4/0xcb0
[   82.212709][ T6080]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.218082][ T6080]  ? aa_sock_msg_perm+0x91/0x160
[   82.223025][ T6080]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.228396][ T6080]  __sock_sendmsg+0x221/0x270
[   82.233080][ T6080]  ____sys_sendmsg+0x52a/0x7e0
[   82.237864][ T6080]  ? __pfx_____sys_sendmsg+0x10/0x10
[   82.243239][ T6080]  ? __fget_files+0x2a/0x410
[   82.247846][ T6080]  ? __fget_files+0x2a/0x410
[   82.252445][ T6080]  __sys_sendmsg+0x269/0x350
[   82.257034][ T6080]  ? __pfx_lock_release+0x10/0x10
[   82.262063][ T6080]  ? __pfx___sys_sendmsg+0x10/0x10
[   82.267178][ T6080]  ? __pfx_vfs_write+0x10/0x10
[   82.271954][ T6080]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   82.278280][ T6080]  ? do_syscall_64+0x100/0x230
[   82.283136][ T6080]  ? do_syscall_64+0xb6/0x230
[   82.287817][ T6080]  do_syscall_64+0xf3/0x230
[   82.292336][ T6080]  ? clear_bhb_loop+0x35/0x90
[   82.297008][ T6080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.302904][ T6080] RIP: 0033:0x7ff9cd380849
[   82.307341][ T6080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.326946][ T6080] RSP: 002b:00007ff9ce0e9058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.335369][ T6080] RAX: ffffffffffffffda RBX: 00007ff9cd545fa0 RCX: 00007ff9cd380849
[   82.343342][ T6080] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000004
[   82.351331][ T6080] RBP: 00007ff9ce0e90a0 R08: 0000000000000000 R09: 0000000000000000
[   82.359320][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.367298][ T6080] R13: 0000000000000000 R14: 00007ff9cd545fa0 R15: 00007ff9cd66fa38
[   82.375283][ T6080]  </TASK>
[   82.400317][   T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   82.455839][  T972] cfg80211: failed to load regulatory.db
[   82.518893][   T46] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   82.571905][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.624864][   T46] usb 2-1: config 0 descriptor??
[   82.764479][    T8] usb 4-1: USB disconnect, device number 6
[   82.902705][ T6088] fuse: Bad value for 'group_id'
[   82.931596][ T6088] fuse: Bad value for 'group_id'
[   82.955109][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   83.031333][   T46] usbhid 2-1:0.0: can't add hid device: -71
[   83.054991][   T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   83.094171][   T46] usb 2-1: USB disconnect, device number 4
[   83.194255][ T5888] usb 5-1: Using ep0 maxpacket: 32
[   83.202780][ T5888] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[   83.210996][ T5888] usb 5-1: config 0 has no interface number 0
[   83.217224][ T5888] usb 5-1: config 0 interface 12 has no altsetting 0
[   83.227192][ T5888] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[   83.236406][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.244499][ T5888] usb 5-1: Product: syz
[   83.248790][ T5888] usb 5-1: Manufacturer: syz
[   83.254350][ T5888] usb 5-1: SerialNumber: syz
[   83.261246][ T5888] usb 5-1: config 0 descriptor??
[   83.649803][   T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   83.846018][   T46] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   83.862608][   T46] usb 2-1: config 0 has no interface number 0
[   83.869870][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   83.891891][   T46] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.903381][   T46] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.923160][   T46] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   83.940758][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.964853][   T46] usb 2-1: config 0 descriptor??
[   84.056292][ T5906] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[   84.065828][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.080926][ T5888] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[   84.097339][ T5888] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[   84.124159][ T5888] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[   84.134487][ T5906] usb 4-1: config 0 descriptor??
[   84.152413][ T5888] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[   84.179854][ T5888] usb 5-1: USB disconnect, device number 7
[   84.391795][   T46] uclogic 0003:256C:006D.0003: unknown main item tag 0x0
[   84.409339][   T46] uclogic 0003:256C:006D.0003: unknown main item tag 0x0
[   84.417361][   T46] uclogic 0003:256C:006D.0003: unknown main item tag 0x0
[   84.425046][   T46] uclogic 0003:256C:006D.0003: unknown main item tag 0x0
[   84.432412][   T46] uclogic 0003:256C:006D.0003: unknown main item tag 0x0
[   84.457629][   T46] uclogic 0003:256C:006D.0003: No inputs registered, leaving
[   84.482505][   T46] uclogic 0003:256C:006D.0003: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1
[   84.823338][ T5906] gs_usb 4-1:0.0: Configuring for 2 interfaces
[   85.103506][ T6122] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   85.235305][ T5888] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   85.426059][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   85.435428][ T5888] usb 3-1: config 1 has no interface number 0
[   85.441629][ T5888] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.453246][ T5888] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   85.462400][ T5888] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   85.473847][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.483267][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.491358][ T5888] usb 3-1: Product: syz
[   85.495600][ T5888] usb 3-1: Manufacturer: syz
[   85.500219][ T5888] usb 3-1: SerialNumber: syz
[   86.170469][ T5884] usb 2-1: USB disconnect, device number 5
[   86.245272][ T6125] netlink: 'syz.1.76': attribute type 11 has an invalid length.
[   86.339672][ T5888] cdc_ncm 3-1:1.1: bind() failure
[   86.544467][ T5834] usb 3-1: USB disconnect, device number 6
[   86.593858][ T5906] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[   86.779523][ T5906] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[   86.896480][ T5906] usb 4-1: USB disconnect, device number 7
[   87.043271][ T3020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.204639][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   87.266476][ T3020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.394215][ T5884] usb 2-1: Using ep0 maxpacket: 32
[   87.423503][ T5884] usb 2-1: config index 0 descriptor too short (expected 164, got 36)
[   87.463887][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.485563][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.511357][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'.
[   87.514018][ T5884] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[   87.532164][ T3020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.544167][ T6127] syz.3.77: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   87.547653][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'.
[   87.567713][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.580790][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.3.77 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0
[   87.590993][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   87.601080][ T6127] Call Trace:
[   87.604823][ T6127]  <TASK>
[   87.607777][ T6127]  dump_stack_lvl+0x241/0x360
[   87.612493][ T6127]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.617737][ T6127]  ? __pfx__printk+0x10/0x10
[   87.622374][ T6127]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[   87.628831][ T6127]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[   87.635373][ T6127]  warn_alloc+0x278/0x410
[   87.639721][ T6127]  ? __pfx_warn_alloc+0x10/0x10
[   87.644581][ T6127]  ? translate_table+0x174/0x2260
[   87.649782][ T6127]  ? __get_vm_area_node+0x1c8/0x2d0
[   87.654993][ T6127]  ? __get_vm_area_node+0x25c/0x2d0
[   87.660208][ T6127]  __vmalloc_node_range_noprof+0x62f/0x1380
[   87.666105][ T6127]  ? __pfx___alloc_pages_noprof+0x10/0x10
[   87.671840][ T6127]  ? rcu_is_watching+0x15/0xb0
[   87.676603][ T6127]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   87.682927][ T6127]  ? rcu_is_watching+0x15/0xb0
[   87.687696][ T6127]  ? trace_kmalloc+0x1f/0xd0
[   87.692332][ T6127]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[   87.697795][ T6127]  ? __kvmalloc_node_noprof+0x72/0x190
[   87.703265][ T6127]  __kvmalloc_node_noprof+0x142/0x190
[   87.708646][ T6127]  ? translate_table+0x174/0x2260
[   87.713670][ T6127]  translate_table+0x174/0x2260
[   87.718542][ T6127]  ? __pfx_translate_table+0x10/0x10
[   87.723826][ T6127]  ? __might_fault+0xaa/0x120
[   87.728510][ T6127]  ? __pfx_lock_release+0x10/0x10
[   87.733540][ T6127]  ? __might_fault+0xaa/0x120
[   87.738218][ T6127]  ? __might_fault+0xc6/0x120
[   87.742903][ T6127]  ? _copy_from_user+0x99/0xc0
[   87.747674][ T6127]  ? copy_from_sockptr_offset+0x6b/0xb0
[   87.753224][ T6127]  do_ipt_set_ctl+0xe3d/0x1250
[   87.757993][ T6127]  ? __pfx___mutex_trylock_common+0x10/0x10
[   87.763889][ T6127]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[   87.769091][ T6127]  ? __pfx_lock_release+0x10/0x10
[   87.774116][ T6127]  ? rcu_is_watching+0x15/0xb0
[   87.778883][ T6127]  ? trace_contention_end+0x3c/0x120
[   87.784184][ T6127]  ? __mutex_unlock_slowpath+0x21e/0x790
[   87.789823][ T6127]  ? __pfx___mutex_lock+0x10/0x10
[   87.794851][ T6127]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   87.800897][ T6127]  ? smc_setsockopt+0x1c3/0xe50
[   87.805759][ T6127]  ? __pfx___mutex_lock+0x10/0x10
[   87.810834][ T6127]  nf_setsockopt+0x295/0x2c0
[   87.815531][ T6127]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   87.821429][ T6127]  smc_setsockopt+0x275/0xe50
[   87.826113][ T6127]  ? __pfx_smc_setsockopt+0x10/0x10
[   87.831308][ T6127]  ? aa_sock_opt_perm+0x79/0x120
[   87.836254][ T6127]  ? __pfx_smc_setsockopt+0x10/0x10
[   87.841451][ T6127]  do_sock_setsockopt+0x3af/0x720
[   87.846475][ T6127]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   87.852020][ T6127]  ? __fget_files+0x395/0x410
[   87.856702][ T6127]  ? __fget_files+0x2a/0x410
[   87.861302][ T6127]  __x64_sys_setsockopt+0x1ee/0x280
[   87.866506][ T6127]  do_syscall_64+0xf3/0x230
[   87.871015][ T6127]  ? clear_bhb_loop+0x35/0x90
[   87.875705][ T6127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.881606][ T6127] RIP: 0033:0x7f4b18180849
[   87.886024][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.905726][ T6127] RSP: 002b:00007f4b18fed058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   87.914152][ T6127] RAX: ffffffffffffffda RBX: 00007f4b18345fa0 RCX: 00007f4b18180849
[   87.922120][ T6127] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004
[   87.930085][ T6127] RBP: 00007f4b181f3986 R08: 0000000000000298 R09: 0000000000000000
[   87.938084][ T6127] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000000
[   87.946069][ T6127] R13: 0000000000000000 R14: 00007f4b18345fa0 R15: 00007f4b1846fa38
[   87.954070][ T6127]  </TASK>
[   87.968540][ T6127] Mem-Info:
[   87.971707][ T6127] active_anon:6227 inactive_anon:0 isolated_anon:0
[   87.971707][ T6127]  active_file:9422 inactive_file:38194 isolated_file:0
[   87.971707][ T6127]  unevictable:768 dirty:172 writeback:50
[   87.971707][ T6127]  slab_reclaimable:9696 slab_unreclaimable:97296
[   87.971707][ T6127]  mapped:29184 shmem:1470 pagetables:787
[   87.971707][ T6127]  sec_pagetables:0 bounce:0
[   87.971707][ T6127]  kernel_misc_reclaimable:0
[   87.971707][ T6127]  free:1316407 free_pcp:3024 free_cma:0
[   87.974968][ T5884] usb 2-1: config 0 descriptor??
[   88.058704][ T6127] Node 0 active_anon:24208kB inactive_anon:0kB active_file:37628kB inactive_file:152700kB unevictable:2136kB isolated(anon):0kB isolated(file):0kB mapped:96376kB dirty:388kB writeback:400kB shmem:4344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11128kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no
[   88.132085][ T6127] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[   88.177010][ T6127] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.213980][ T6127] lowmem_reserve[]: 0 2463 2464 0 0
[   88.219959][ T6127] Node 0 DMA32 free:1376716kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:24268kB inactive_anon:0kB active_file:37628kB inactive_file:152120kB unevictable:6836kB writepending:188kB present:3129332kB managed:2550468kB mlocked:5400kB bounce:0kB free_pcp:21304kB local_pcp:560kB free_cma:0kB
[   88.277160][ T6127] lowmem_reserve[]: 0 0 0 0 0
[   88.282020][ T6127] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.309528][ T6127] lowmem_reserve[]: 0 0 0 0 0
[   88.326715][ T6127] Node 1 Normal free:3903560kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.364938][ T6127] lowmem_reserve[]: 0 0 0 0 0
[   88.372006][ T6127] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   88.394748][ T6127] Node 0 DMA32: 38*4kB (UM) 189*8kB (UM) 243*16kB (UM) 285*32kB (UME) 186*64kB (UME) 84*128kB (UME) 39*256kB (UME) 23*512kB (UM) 19*1024kB (UM) 4*2048kB (UM) 316*4096kB (UM) = 1381072kB
[   88.398664][ T3020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.418930][ T6127] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   88.444774][ T6127] Node 1 Normal: 192*4kB (UME) 65*8kB (UME) 42*16kB (UME) 213*32kB (UME) 94*64kB (UME) 35*128kB (UME) 15*256kB (UME) 5*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3903560kB
[   88.475975][ T6127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   88.493093][ T5884] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[   88.502562][ T5884] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[   88.516372][ T5884] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[   88.526497][ T6127] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.539471][ T5884] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[   88.550335][ T6127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   88.563760][ T5884] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[   88.578285][ T6127] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.595819][ T5884] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0
[   88.615044][ T6127] 49691 total pagecache pages
[   88.621283][ T6127] 4 pages in swap cache
[   88.631009][ T6127] Free swap  = 124516kB
[   88.637069][ T6127] Total swap = 124996kB
[   88.641505][ T6127] 2097051 pages RAM
[   88.651204][ T6127] 0 pages HighMem/MovableOnly
[   88.659106][ T6127] 427648 pages reserved
[   88.699508][ T5884] logitech 0003:046D:C29C.0004: no inputs found
[   88.724095][ T6127] 0 pages cma reserved
[   88.793542][ T5884] usb 2-1: USB disconnect, device number 6
[   88.973330][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.986560][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.995757][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.007503][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.016914][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   89.027048][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.664115][ T5906] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   89.765554][  T972] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   89.776249][ T3020] bond0 (unregistering): Released all slaves
[   89.839192][ T5906] usb 3-1: Using ep0 maxpacket: 16
[   89.864157][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   89.892745][ T5906] usb 3-1: config 0 has no interface number 0
[   89.923236][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.924293][  T972] usb 2-1: Using ep0 maxpacket: 32
[   89.943995][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.963993][ T5906] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   89.973094][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.127420][ T5906] usb 3-1: config 0 descriptor??
[   90.174183][  T972] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   90.174216][  T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.216104][  T972] usb 2-1: Product: syz
[   90.216130][  T972] usb 2-1: Manufacturer: syz
[   90.216148][  T972] usb 2-1: SerialNumber: syz
[   90.237591][  T972] usb 2-1: config 0 descriptor??
[   90.251526][  T972] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   90.357746][ T5906] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71
[   90.357787][ T5906] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71
[   90.357801][ T5906] uclogic 0003:28BD:0071.0005: pen probing failed: -71
[   90.357815][ T5906] uclogic 0003:28BD:0071.0005: failed probing parameters: -71
[   90.357879][ T5906] uclogic 0003:28BD:0071.0005: probe with driver uclogic failed with error -71
[   90.371361][ T5906] usb 3-1: USB disconnect, device number 7
[   90.840843][ T6151] chnl_net:caif_netlink_parms(): no params data found
[   90.880990][   T29] kauditd_printk_skb: 15 callbacks suppressed
[   90.881009][   T29] audit: type=1326 audit(1732980618.682:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7ffc0000
[   90.970100][   T29] audit: type=1326 audit(1732980618.682:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7ffc0000
[   90.993535][   T29] audit: type=1326 audit(1732980618.682:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7824d80849 code=0x7ffc0000
[   91.045859][   T29] audit: type=1326 audit(1732980618.752:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7824db2925 code=0x7ffc0000
[   91.077275][ T5836] Bluetooth: hci2: command tx timeout
[   91.114704][   T29] audit: type=1326 audit(1732980618.752:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7ffc0000
[   91.137592][   T29] audit: type=1326 audit(1732980618.752:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7ffc0000
[   91.160019][   T29] audit: type=1326 audit(1732980618.772:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7824d80849 code=0x7ffc0000
[   91.182442][ T5834] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   91.272337][   T29] audit: type=1326 audit(1732980618.772:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7ffc0000
[   91.296565][   T29] audit: type=1326 audit(1732980618.782:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7824d80849 code=0x7ffc0000
[   91.318973][   T29] audit: type=1326 audit(1732980618.782:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7824d80849 code=0x7ffc0000
[   91.351613][ T5834] usb 5-1: Using ep0 maxpacket: 32
[   91.361070][ T6204] netlink: 'syz.2.97': attribute type 11 has an invalid length.
[   91.373282][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.385245][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.400216][ T5834] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   91.412502][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.421049][ T3020] hsr_slave_0: left promiscuous mode
[   91.428217][ T3020] hsr_slave_1: left promiscuous mode
[   91.444608][ T5834] usb 5-1: config 0 descriptor??
[   91.459678][ T3020] veth1_macvtap: left promiscuous mode
[   91.471726][ T5834] hub 5-1:0.0: USB hub found
[   91.479459][ T6156] xt_l2tp: wrong L2TP version: 0
[   91.492033][ T3020] veth0_macvtap: left promiscuous mode
[   91.497889][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.503249][ T3020] veth1_vlan: left promiscuous mode
[   91.516070][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.518781][ T3020] veth0_vlan: left promiscuous mode
[   91.774095][ T5834] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[   91.810873][ T5834] usbhid 5-1:0.0: can't add hid device: -71
[   91.826939][ T5834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   91.867923][ T5834] usb 5-1: USB disconnect, device number 8
[   92.545617][  T972] gspca_stk1135: reg_w 0x2ff err -71
[   92.552026][  T972] gspca_stk1135: serial bus timeout: status=0x00
[   92.564056][  T972] gspca_stk1135: Sensor write failed
[   92.573793][  T972] gspca_stk1135: serial bus timeout: status=0x00
[   92.594083][  T972] gspca_stk1135: Sensor write failed
[   92.600535][  T972] gspca_stk1135: serial bus timeout: status=0x00
[   92.621119][  T972] gspca_stk1135: Sensor read failed
[   92.629059][  T972] gspca_stk1135: serial bus timeout: status=0x00
[   92.641989][  T972] gspca_stk1135: Sensor read failed
[   92.659454][  T972] gspca_stk1135: Detected sensor type unknown (0x0)
[   92.681871][  T972] gspca_stk1135: serial bus timeout: status=0x00
[   92.699489][  T972] gspca_stk1135: Sensor read failed
[   92.707326][  T972] gspca_stk1135: serial bus timeout: status=0x00
[   92.717782][  T972] gspca_stk1135: Sensor read failed
[   92.723070][  T972] gspca_stk1135: serial bus timeout: status=0x00
[   92.739813][  T972] gspca_stk1135: Sensor write failed
[   92.750069][  T972] gspca_stk1135: serial bus timeout: status=0x00
[   92.768427][  T972] gspca_stk1135: Sensor write failed
[   92.795323][  T972] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[   92.837568][  T972] usb 2-1: USB disconnect, device number 7
[   92.856885][ T5884] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   93.082939][ T5884] usb 5-1: config index 0 descriptor too short (expected 5292, got 77)
[   93.104646][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.115018][ T5884] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 20
[   93.130066][ T6218] tipc: Started in network mode
[   93.144338][ T6218] tipc: Node identity d, cluster identity 4711
[   93.154358][ T5836] Bluetooth: hci2: command tx timeout
[   93.154500][ T6218] tipc: Node number set to 13
[   93.209690][ T5884] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   93.238586][ T6218] tipc: Cannot configure node identity twice
[   93.247218][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.255923][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.277636][ T5884] usb 5-1: Product: syz
[   93.284240][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.292185][ T5884] usb 5-1: Manufacturer: syz
[   93.292315][ T6151] bridge_slave_0: entered allmulticast mode
[   93.304438][ T5884] usb 5-1: SerialNumber: syz
[   93.332886][ T5884] usb 5-1: config 0 descriptor??
[   93.392831][ T6151] bridge_slave_0: entered promiscuous mode
[   93.441969][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.464182][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.476469][ T6151] bridge_slave_1: entered allmulticast mode
[   93.495763][ T6151] bridge_slave_1: entered promiscuous mode
[   93.739758][ T6151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.768099][ T6230] tipc: Started in network mode
[   93.773024][ T6230] tipc: Node identity 7f000001, cluster identity 4711
[   93.785621][ T6230] tipc: Enabled bearer <udp:syz2>, priority 10
[   93.795862][ T6151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.946183][ T6151] team0: Port device team_slave_0 added
[   93.960477][ T6151] team0: Port device team_slave_1 added
[   94.092972][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.138375][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.225706][ T6151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.270681][ T5888] IPVS: starting estimator thread 0...
[   94.322708][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.381535][ T6245] IPVS: using max 28 ests per chain, 67200 per kthread
[   94.401863][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.523637][ T6151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.707414][ T6256] binder: 6254:6256 ioctl 400c620e 200006c0 returned -22
[   94.770387][ T6151] hsr_slave_0: entered promiscuous mode
[   94.780503][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.792684][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.801254][ T5834] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   94.814135][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.826389][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.835874][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   94.843632][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.863581][ T6151] hsr_slave_1: entered promiscuous mode
[   94.906327][  T972] tipc: Node number set to 2130706433
[   94.965050][ T5834] usb 3-1: Using ep0 maxpacket: 16
[   94.976036][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.988746][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.999267][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short
[   95.009798][ T5834] usb 3-1: unable to read config index 0 descriptor/start: -71
[   95.022082][ T5834] usb 3-1: can't read configurations, error -71
[   95.234369][ T5844] Bluetooth: hci2: command tx timeout
[   95.305195][ T3020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.355399][  T972] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   95.472070][ T3020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.506431][  T972] usb 4-1: device descriptor read/64, error -71
[   95.653790][ T3020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.752487][ T5884] usb 5-1: USB disconnect, device number 9
[   95.767674][  T972] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   95.843530][ T3020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.904386][ T6151] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   95.914383][  T972] usb 4-1: device descriptor read/64, error -71
[   95.922236][ T6151] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   95.945973][ T6151] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   95.960456][ T6151] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   96.024747][  T972] usb usb4-port1: attempt power cycle
[   96.128017][ T6264] chnl_net:caif_netlink_parms(): no params data found
[   96.143779][ T3020] bridge_slave_1: left allmulticast mode
[   96.151368][ T3020] bridge_slave_1: left promiscuous mode
[   96.159466][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.171036][ T3020] bridge_slave_0: left allmulticast mode
[   96.177308][ T3020] bridge_slave_0: left promiscuous mode
[   96.183612][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.274254][ T5884] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   96.385342][  T972] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   96.425663][  T972] usb 4-1: device descriptor read/8, error -71
[   96.426189][ T5884] usb 5-1: Using ep0 maxpacket: 32
[   96.493080][ T5884] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   96.510574][ T5884] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   96.520891][ T5884] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   96.548766][ T5884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.558340][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.566962][ T5884] usb 5-1: Product: syz
[   96.574438][ T5884] usb 5-1: Manufacturer: syz
[   96.579137][ T5884] usb 5-1: SerialNumber: syz
[   96.672865][  T972] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   96.711725][  T972] usb 4-1: device descriptor read/8, error -71
[   96.814986][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.824295][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.838387][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.848452][  T972] usb usb4-port1: unable to enumerate USB device
[   96.849249][ T5884] usb 5-1: 2:1 : sample bitwidth 253 in over sample bytes 2
[   96.865548][ T5884] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   96.865829][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.886184][ T3020] bond0 (unregistering): Released all slaves
[   96.924993][ T5844] Bluetooth: hci0: command tx timeout
[   96.964624][ T5884] usb 5-1: USB disconnect, device number 10
[   97.143557][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.171901][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.180842][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.188474][ T6264] bridge_slave_0: entered allmulticast mode
[   97.196140][ T6264] bridge_slave_0: entered promiscuous mode
[   97.203272][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.210732][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.218132][ T6264] bridge_slave_1: entered allmulticast mode
[   97.225263][ T6264] bridge_slave_1: entered promiscuous mode
[   97.268172][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.283505][ T3020] hsr_slave_0: left promiscuous mode
[   97.292611][ T3020] hsr_slave_1: left promiscuous mode
[   97.298262][  T972] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   97.308668][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.316196][ T5844] Bluetooth: hci2: command tx timeout
[   97.322165][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.330634][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.338145][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.354122][ T3020] veth1_macvtap: left promiscuous mode
[   97.359687][ T3020] veth0_macvtap: left promiscuous mode
[   97.365393][ T3020] veth1_vlan: left promiscuous mode
[   97.370739][ T3020] veth0_vlan: left promiscuous mode
[   97.490195][  T972] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   97.517142][  T972] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[   97.528118][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.536393][  T972] usb 3-1: Product: syz
[   97.540583][  T972] usb 3-1: Manufacturer: syz
[   97.545290][  T972] usb 3-1: SerialNumber: syz
[   97.555920][  T972] usb 3-1: config 0 descriptor??
[   97.571921][  T972] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   97.837167][  T972] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2
[   97.882254][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.914246][ T5906] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   97.926446][ T3020] team0 (unregistering): Port device team_slave_1 removed
[   97.962011][ T3020] team0 (unregistering): Port device team_slave_0 removed
[   97.982412][ T5884] usb 3-1: USB disconnect, device number 10
[   98.084229][ T5906] usb 5-1: Using ep0 maxpacket: 8
[   98.095140][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[   98.125290][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   98.134638][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   98.151591][ T5906] usb 5-1: SerialNumber: syz
[   98.163040][ T5906] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[   98.495599][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.582230][    T8] usb 5-1: USB disconnect, device number 11
[   98.673760][ T6264] team0: Port device team_slave_0 added
[   98.701192][ T6151] 8021q: adding VLAN 0 to HW filter on device team0
[   98.721378][ T6315] bond0: entered promiscuous mode
[   98.735837][ T6315] bond_slave_0: entered promiscuous mode
[   98.760550][ T6315] bond_slave_1: entered promiscuous mode
[   98.782359][ T6315] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   98.801411][ T6315] bond0: left promiscuous mode
[   98.807154][ T6315] bond_slave_0: left promiscuous mode
[   98.813874][ T6315] bond_slave_1: left promiscuous mode
[   98.849573][ T6264] team0: Port device team_slave_1 added
[   98.936359][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.943357][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.972898][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.990858][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.999445][ T5844] Bluetooth: hci0: command tx timeout
[   99.012958][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.014100][ T5884] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   99.040383][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.089156][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.097191][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.207287][ T6264] hsr_slave_0: entered promiscuous mode
[   99.225025][ T5884] usb 4-1: Using ep0 maxpacket: 8
[   99.232669][ T6264] hsr_slave_1: entered promiscuous mode
[   99.238943][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[   99.249487][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.258274][ T6264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.274853][ T6264] Cannot create hsr debugfs directory
[   99.275760][ T5884] usb 4-1: config 0 descriptor??
[   99.280448][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[   99.322468][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'.
[   99.340036][ T5884] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[   99.349064][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.356229][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.372765][ T5884] pwc: Warning: more than 1 configuration available.
[   99.724290][ T5906] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   99.749805][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.830079][ T6264] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   99.851005][ T6264] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   99.868851][ T6151] veth0_vlan: entered promiscuous mode
[   99.879655][ T6264] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   99.897152][ T5906] usb 3-1: Using ep0 maxpacket: 32
[   99.901894][ T6264] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   99.909360][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.909393][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.909426][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   99.909449][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.957059][ T5906] usb 3-1: config 0 descriptor??
[   99.965679][ T5906] hub 3-1:0.0: USB hub found
[   99.970545][ T6151] veth1_vlan: entered promiscuous mode
[  100.048648][ T6151] veth0_macvtap: entered promiscuous mode
[  100.070495][ T6151] veth1_macvtap: entered promiscuous mode
[  100.113714][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.135331][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.150921][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.150964][ T5884] pwc: recv_control_msg error -71 req 02 val 2700
[  100.163991][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.181045][ T5906] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  100.190685][ T5884] pwc: recv_control_msg error -71 req 04 val 1600
[  100.192233][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.209403][ T5906] usbhid 3-1:0.0: can't add hid device: -71
[  100.214120][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.215708][ T5884] pwc: recv_control_msg error -71 req 02 val 2c00
[  100.235522][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  100.247125][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.251822][ T5884] pwc: recv_control_msg error -71 req 04 val 1000
[  100.272426][ T5884] pwc: recv_control_msg error -71 req 04 val 1300
[  100.287414][ T5906] usb 3-1: USB disconnect, device number 11
[  100.302096][ T5884] pwc: recv_control_msg error -71 req 04 val 1400
[  100.311888][ T5884] pwc: recv_control_msg error -71 req 02 val 2000
[  100.351686][ T5884] pwc: recv_control_msg error -71 req 02 val 2100
[  100.373198][ T5884] pwc: recv_control_msg error -71 req 06 val 0600
[  100.378258][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.391838][ T5884] pwc: recv_control_msg error -71 req 04 val 1500
[  100.400265][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.421562][ T5884] pwc: recv_control_msg error -71 req 02 val 2500
[  100.440243][ T5884] pwc: recv_control_msg error -71 req 02 val 2400
[  100.449395][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.461532][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.471750][ T5884] pwc: recv_control_msg error -71 req 02 val 2600
[  100.479518][ T5884] pwc: recv_control_msg error -71 req 02 val 2900
[  100.486322][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.497633][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.500022][ T6354] netlink: 'syz.4.127': attribute type 10 has an invalid length.
[  100.507653][ T5884] pwc: recv_control_msg error -71 req 02 val 2800
[  100.523509][ T5884] pwc: recv_control_msg error -71 req 04 val 1100
[  100.532977][ T6354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.127'.
[  100.534137][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.556865][ T5884] pwc: recv_control_msg error -71 req 04 val 1200
[  100.569563][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.578116][ T5884] pwc: Registered as video103.
[  100.587190][ T6354] bridge0: port 3(syz_tun) entered blocking state
[  100.604806][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[  100.606657][ T6354] bridge0: port 3(syz_tun) entered disabled state
[  100.632645][ T6354] syz_tun: entered allmulticast mode
[  100.647254][ T6354] syz_tun: entered promiscuous mode
[  100.653886][ T5884] usb 4-1: USB disconnect, device number 12
[  100.678841][ T6354] bridge0: port 3(syz_tun) entered blocking state
[  100.685467][ T6354] bridge0: port 3(syz_tun) entered forwarding state
[  100.735664][ T6264] 8021q: adding VLAN 0 to HW filter on device team0
[  100.770672][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.777840][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.800130][ T6151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.821548][ T6151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.850952][ T6151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.886018][ T6151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.940865][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.948081][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.991100][ T6264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  101.003074][ T6264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.079166][ T5844] Bluetooth: hci0: command tx timeout
[  101.131291][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.161838][ T5906] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  101.182108][ T6368] xt_l2tp: v2 tid > 0xffff: 262144
[  101.189506][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.202065][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.314351][ T5906] usb 5-1: device descriptor read/64, error -71
[  101.339482][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.354953][ T6264] veth0_vlan: entered promiscuous mode
[  101.371961][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.386491][ T6264] veth1_vlan: entered promiscuous mode
[  101.442836][ T6264] veth0_macvtap: entered promiscuous mode
[  101.459230][ T6264] veth1_macvtap: entered promiscuous mode
[  101.498668][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.520004][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.533559][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.553263][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.554404][ T5906] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  101.572739][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.594094][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.608620][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.621036][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.663729][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.674195][ T5887] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  101.704310][ T5906] usb 5-1: device descriptor read/64, error -71
[  101.713504][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.744227][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.754103][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  101.776527][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.789236][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.801677][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.820219][ T5906] usb usb5-port1: attempt power cycle
[  101.828269][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.838727][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.849519][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.860952][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.870931][ T5887] usb 3-1: Using ep0 maxpacket: 8
[  101.887404][ T5887] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  101.900662][ T5887] usb 3-1: config 179 has no interface number 0
[  101.904679][ T5884] usb 6-1: Using ep0 maxpacket: 8
[  101.909055][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  101.933256][ T6264] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.942817][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  101.958469][ T6264] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.959854][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  101.967950][ T6264] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.985647][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  101.989972][ T5884] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  102.008665][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.008866][ T5887] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  102.016812][   T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  102.016962][ T6264] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.035599][ T5887] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  102.039632][ T5884] usb 6-1: Product: syz
[  102.055121][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.059225][ T5884] usb 6-1: Manufacturer: syz
[  102.063239][ T6376] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  102.080765][ T5884] usb 6-1: SerialNumber: syz
[  102.103259][ T5884] usb 6-1: config 0 descriptor??
[  102.120404][ T5884] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244)
[  102.164717][ T5906] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  102.189029][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  102.214342][   T25] usb 4-1: config 1 has no interface number 0
[  102.220585][   T25] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.238966][ T5906] usb 5-1: device descriptor read/8, error -71
[  102.277593][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.292822][   T25] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  102.304536][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.325928][   T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  102.347806][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.364498][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  102.378838][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.388747][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.394866][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.398832][   T25] usb 4-1: Product: syz
[  102.416979][   T25] usb 4-1: Manufacturer: syz
[  102.421664][   T25] usb 4-1: SerialNumber: syz
[  102.442375][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.514669][ T5906] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  102.934832][ T5906] usb 5-1: device descriptor read/8, error -71
[  103.054891][ T5906] usb usb5-port1: unable to enumerate USB device
[  103.074236][ T5884] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  103.086513][ T6401] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  103.124350][ T5884] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  103.155698][ T5844] Bluetooth: hci0: command tx timeout
[  103.174459][ T5884] usb 6-1: USB disconnect, device number 2
[  103.323544][   T25] cdc_ncm 4-1:1.1: bind() failure
[  103.530979][ T5886] usb 4-1: USB disconnect, device number 13
[  104.014274][ T5886] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  104.265801][ T5886] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  104.304218][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.368989][ T5886] usb 6-1: config 0 descriptor??
[  104.410453][ T5886] cp210x 6-1:0.0: cp210x converter detected
[  104.526630][ T5884] usb 3-1: USB disconnect, device number 12
[  104.526727][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  104.541197][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  104.550181][    C0] ==================================================================
[  104.558359][    C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x8db/0x980
[  104.566469][    C0] Read of size 1 at addr ffff88805900d091 by task udevd/5207
[  104.573872][    C0] 
[  104.576218][    C0] CPU: 0 UID: 0 PID: 5207 Comm: udevd Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0
[  104.586138][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  104.596299][    C0] Call Trace:
[  104.599580][    C0]  <IRQ>
[  104.602420][    C0]  dump_stack_lvl+0x241/0x360
[  104.607103][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.612300][    C0]  ? __pfx__printk+0x10/0x10
[  104.616925][    C0]  ? _printk+0xd5/0x120
[  104.621076][    C0]  ? __virt_addr_valid+0x183/0x530
[  104.626185][    C0]  ? __virt_addr_valid+0x183/0x530
[  104.631307][    C0]  print_report+0x169/0x550
[  104.635808][    C0]  ? __virt_addr_valid+0x183/0x530
[  104.641060][    C0]  ? __virt_addr_valid+0x183/0x530
[  104.646174][    C0]  ? __virt_addr_valid+0x45f/0x530
[  104.651284][    C0]  ? __phys_addr+0xba/0x170
[  104.656061][    C0]  ? register_lock_class+0x8db/0x980
[  104.661343][    C0]  kasan_report+0x143/0x180
[  104.665853][    C0]  ? register_lock_class+0x8db/0x980
[  104.671129][    C0]  register_lock_class+0x8db/0x980
[  104.676238][    C0]  ? __pfx_register_lock_class+0x10/0x10
[  104.681872][    C0]  ? __lock_acquire+0x1397/0x2100
[  104.686948][    C0]  __lock_acquire+0xf3/0x2100
[  104.691621][    C0]  ? mark_lock+0x9a/0x360
[  104.695942][    C0]  ? __lock_acquire+0x1397/0x2100
[  104.700958][    C0]  lock_acquire+0x1ed/0x550
[  104.705455][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[  104.710821][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  104.715847][    C0]  ? kcov_remote_stop+0x78/0x6e0
[  104.720948][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  104.726149][    C0]  ? __pfx_lock_release+0x10/0x10
[  104.731171][    C0]  _raw_spin_lock_irqsave+0xd5/0x120
[  104.736456][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[  104.741818][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  104.747725][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  104.752923][    C0]  __wake_up_common_lock+0x25/0x1e0
[  104.758129][    C0]  __usb_hcd_giveback_urb+0x4ff/0x6e0
[  104.763524][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  104.769426][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  104.774637][    C0]  dummy_timer+0x856/0x4620
[  104.779147][    C0]  ? debug_object_deactivate+0x2d5/0x390
[  104.784880][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  104.789908][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  104.795053][    C0]  __hrtimer_run_queues+0x59b/0xd30
[  104.800418][    C0]  ? ktime_get_update_offsets_now+0x2d/0x3b0
[  104.806401][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  104.812146][    C0]  ? read_tsc+0x9/0x20
[  104.816330][    C0]  ? ktime_get_update_offsets_now+0x393/0x3b0
[  104.822405][    C0]  hrtimer_run_softirq+0x19a/0x2c0
[  104.827612][    C0]  handle_softirqs+0x2d4/0x9b0
[  104.832375][    C0]  ? __irq_exit_rcu+0xf7/0x220
[  104.837136][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  104.842418][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  104.847614][    C0]  __irq_exit_rcu+0xf7/0x220
[  104.852195][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  104.857388][    C0]  irq_exit_rcu+0x9/0x30
[  104.861643][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  104.867290][    C0]  </IRQ>
[  104.870220][    C0]  <TASK>
[  104.873142][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  104.879225][    C0] RIP: 0010:kasan_check_range+0x86/0x290
[  104.884855][    C0] Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc
[  104.904538][    C0] RSP: 0018:ffffc90003997e20 EFLAGS: 00000246
[  104.910600][    C0] RAX: 1ffff1100ff09101 RBX: 1ffff11006432ae0 RCX: ffffffff82137687
[  104.918762][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888032195700
[  104.926822][    C0] RBP: ffffffffffffffff R08: ffff888032195707 R09: 1ffff11006432ae0
[  104.934788][    C0] R10: dffffc0000000000 R11: ffffed1006432ae0 R12: ffff88807f8488c0
[  104.942751][    C0] R13: dffffc0000000000 R14: dffffc0000000001 R15: ffffed1006432ae1
[  104.950726][    C0]  ? __fput+0x687/0xa50
[  104.954878][    C0]  __fput+0x687/0xa50
[  104.958860][    C0]  __x64_sys_close+0x7f/0x110
[  104.963537][    C0]  do_syscall_64+0xf3/0x230
[  104.968044][    C0]  ? clear_bhb_loop+0x35/0x90
[  104.972720][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.978610][    C0] RIP: 0033:0x7f88ddd1a37f
[  104.983015][    C0] Code: af 6a 0d 00 f7 d8 64 89 02 48 83 c8 ff 44 89 c7 48 89 04 24 e8 e1 fc f9 ff 48 8b 04 24 48 83 c4 28 c3 c3 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 7a 6a 0d 00 f7 d8 64 89 02 48 83
[  105.002638][    C0] RSP: 002b:00007ffecca6ae08 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[  105.011078][    C0] RAX: ffffffffffffffda RBX: 00005636017c6e40 RCX: 00007f88ddd1a37f
[  105.019147][    C0] RDX: 00007f88ddded860 RSI: 0000000000000000 RDI: 000000000000000c
[  105.027312][    C0] RBP: 0000000000000000 R08: 000000000000000c R09: 0000000000000000
[  105.035805][    C0] R10: 000000000000010f R11: 0000000000000202 R12: 0000000000000000
[  105.043786][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000563600231fc1
[  105.051757][    C0]  </TASK>
[  105.054772][    C0] 
[  105.057169][    C0] Allocated by task 5887:
[  105.061593][    C0]  kasan_save_track+0x3f/0x80
[  105.066311][    C0]  __kasan_kmalloc+0x98/0xb0
[  105.070916][    C0]  __kmalloc_cache_noprof+0x243/0x390
[  105.076307][    C0]  xpad_probe+0x3c8/0x1b90
[  105.080730][    C0]  usb_probe_interface+0x641/0xbb0
[  105.085844][    C0]  really_probe+0x2b8/0xad0
[  105.090343][    C0]  __driver_probe_device+0x1a2/0x390
[  105.095626][    C0]  driver_probe_device+0x50/0x430
[  105.100643][    C0]  __device_attach_driver+0x2d6/0x530
[  105.106009][    C0]  bus_for_each_drv+0x24e/0x2e0
[  105.110861][    C0]  __device_attach+0x333/0x520
[  105.115617][    C0]  bus_probe_device+0x189/0x260
[  105.120597][    C0]  device_add+0x856/0xbf0
[  105.124933][    C0]  usb_set_configuration+0x1976/0x1fb0
[  105.130677][    C0]  usb_generic_driver_probe+0x88/0x140
[  105.136143][    C0]  usb_probe_device+0x1b8/0x380
[  105.141074][    C0]  really_probe+0x2b8/0xad0
[  105.145751][    C0]  __driver_probe_device+0x1a2/0x390
[  105.151088][    C0]  driver_probe_device+0x50/0x430
[  105.156188][    C0]  __device_attach_driver+0x2d6/0x530
[  105.161553][    C0]  bus_for_each_drv+0x24e/0x2e0
[  105.166419][    C0]  __device_attach+0x333/0x520
[  105.171178][    C0]  bus_probe_device+0x189/0x260
[  105.176205][    C0]  device_add+0x856/0xbf0
[  105.180531][    C0]  usb_new_device+0x104a/0x19a0
[  105.185391][    C0]  hub_event+0x2d6d/0x5150
[  105.189913][    C0]  process_scheduled_works+0xa66/0x1840
[  105.195469][    C0]  worker_thread+0x870/0xd30
[  105.200079][    C0]  kthread+0x2f0/0x390
[  105.204163][    C0]  ret_from_fork+0x4b/0x80
[  105.208584][    C0]  ret_from_fork_asm+0x1a/0x30
[  105.213367][    C0] 
[  105.215685][    C0] Freed by task 5884:
[  105.219651][    C0]  kasan_save_track+0x3f/0x80
[  105.224323][    C0]  kasan_save_free_info+0x40/0x50
[  105.229519][    C0]  __kasan_slab_free+0x59/0x70
[  105.234286][    C0]  kfree+0x196/0x430
[  105.238266][    C0]  xpad_disconnect+0x359/0x490
[  105.243060][    C0]  usb_unbind_interface+0x25b/0x940
[  105.248276][    C0]  device_release_driver_internal+0x503/0x7c0
[  105.254344][    C0]  bus_remove_device+0x34f/0x420
[  105.259277][    C0]  device_del+0x57a/0x9b0
[  105.263683][    C0]  usb_disable_device+0x3bf/0x850
[  105.268698][    C0]  usb_disconnect+0x340/0x950
[  105.273375][    C0]  hub_event+0x1ebc/0x5150
[  105.278044][    C0]  process_scheduled_works+0xa66/0x1840
[  105.283594][    C0]  worker_thread+0x870/0xd30
[  105.288175][    C0]  kthread+0x2f0/0x390
[  105.292268][    C0]  ret_from_fork+0x4b/0x80
[  105.296795][    C0]  ret_from_fork_asm+0x1a/0x30
[  105.301582][    C0] 
[  105.303909][    C0] The buggy address belongs to the object at ffff88805900d000
[  105.303909][    C0]  which belongs to the cache kmalloc-1k of size 1024
[  105.317982][    C0] The buggy address is located 145 bytes inside of
[  105.317982][    C0]  freed 1024-byte region [ffff88805900d000, ffff88805900d400)
[  105.331880][    C0] 
[  105.334203][    C0] The buggy address belongs to the physical page:
[  105.340609][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59008
[  105.349371][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  105.357898][    C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  105.365949][    C0] page_type: f5(slab)
[  105.369938][    C0] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
[  105.378526][    C0] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[  105.387194][    C0] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
[  105.395945][    C0] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[  105.404617][    C0] head: 00fff00000000003 ffffea0001640201 ffffffffffffffff 0000000000000000
[  105.413461][    C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  105.422123][    C0] page dumped because: kasan: bad access detected
[  105.428528][    C0] page_owner tracks the page as allocated
[  105.434228][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3492, tgid 3492 (kworker/u8:10), ts 69839982743, free_ts 17925519254
[  105.453676][    C0]  post_alloc_hook+0x1f3/0x230
[  105.458530][    C0]  get_page_from_freelist+0x365c/0x37a0
[  105.464071][    C0]  __alloc_pages_noprof+0x292/0x710
[  105.469286][    C0]  alloc_pages_mpol_noprof+0x3e8/0x680
[  105.474745][    C0]  alloc_slab_page+0x6a/0x140
[  105.479418][    C0]  allocate_slab+0x5a/0x2f0
[  105.483913][    C0]  ___slab_alloc+0xcd1/0x14b0
[  105.488608][    C0]  __slab_alloc+0x58/0xa0
[  105.492967][    C0]  __kmalloc_noprof+0x2e6/0x4c0
[  105.497830][    C0]  ieee802_11_parse_elems_full+0xdb/0x2880
[  105.503638][    C0]  ieee80211_inform_bss+0x15f/0x1080
[  105.508930][    C0]  cfg80211_inform_single_bss_data+0xec1/0x2070
[  105.515167][    C0]  cfg80211_inform_bss_data+0x3ce/0x5e80
[  105.520820][    C0]  cfg80211_inform_bss_frame_data+0x3bb/0x720
[  105.526882][    C0]  ieee80211_bss_info_update+0x8a7/0xbc0
[  105.532598][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70
[  105.538751][    C0] page last free pid 1 tgid 1 stack trace:
[  105.544543][    C0]  free_unref_page+0xdef/0x1130
[  105.549393][    C0]  free_contig_range+0x152/0x550
[  105.554327][    C0]  destroy_args+0x92/0x910
[  105.558737][    C0]  debug_vm_pgtable+0x4be/0x550
[  105.563584][    C0]  do_one_initcall+0x248/0x870
[  105.568611][    C0]  do_initcall_level+0x157/0x210
[  105.573554][    C0]  do_initcalls+0x3f/0x80
[  105.577873][    C0]  kernel_init_freeable+0x435/0x5d0
[  105.583052][    C0]  kernel_init+0x1d/0x2b0
[  105.587359][    C0]  ret_from_fork+0x4b/0x80
[  105.591756][    C0]  ret_from_fork_asm+0x1a/0x30
[  105.596594][    C0] 
[  105.598903][    C0] Memory state around the buggy address:
[  105.604513][    C0]  ffff88805900cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  105.612554][    C0]  ffff88805900d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  105.620606][    C0] >ffff88805900d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  105.628648][    C0]                          ^
[  105.633392][    C0]  ffff88805900d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  105.641433][    C0]  ffff88805900d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  105.649470][    C0] ==================================================================
[  105.657593][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  105.664771][    C0] CPU: 0 UID: 0 PID: 5207 Comm: udevd Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0
[  105.674639][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  105.684692][    C0] Call Trace:
[  105.687997][    C0]  <IRQ>
[  105.690853][    C0]  dump_stack_lvl+0x241/0x360
[  105.695533][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.700733][    C0]  ? __pfx__printk+0x10/0x10
[  105.705333][    C0]  ? rcu_is_watching+0x15/0xb0
[  105.710091][    C0]  ? lock_release+0xbf/0xa30
[  105.714666][    C0]  ? vscnprintf+0x5d/0x90
[  105.719068][    C0]  panic+0x349/0x880
[  105.722979][    C0]  ? check_panic_on_warn+0x21/0xb0
[  105.728106][    C0]  ? __pfx_panic+0x10/0x10
[  105.732552][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  105.737755][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  105.743633][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  105.749996][    C0]  ? print_report+0x502/0x550
[  105.754750][    C0]  check_panic_on_warn+0x86/0xb0
[  105.759673][    C0]  ? register_lock_class+0x8db/0x980
[  105.764944][    C0]  end_report+0x77/0x160
[  105.769173][    C0]  kasan_report+0x154/0x180
[  105.773660][    C0]  ? register_lock_class+0x8db/0x980
[  105.778928][    C0]  register_lock_class+0x8db/0x980
[  105.784018][    C0]  ? __pfx_register_lock_class+0x10/0x10
[  105.789634][    C0]  ? __lock_acquire+0x1397/0x2100
[  105.794639][    C0]  __lock_acquire+0xf3/0x2100
[  105.799295][    C0]  ? mark_lock+0x9a/0x360
[  105.803616][    C0]  ? __lock_acquire+0x1397/0x2100
[  105.808638][    C0]  lock_acquire+0x1ed/0x550
[  105.813124][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[  105.818564][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  105.823675][    C0]  ? kcov_remote_stop+0x78/0x6e0
[  105.828633][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  105.833943][    C0]  ? __pfx_lock_release+0x10/0x10
[  105.838971][    C0]  _raw_spin_lock_irqsave+0xd5/0x120
[  105.844274][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[  105.849670][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  105.855566][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  105.860817][    C0]  __wake_up_common_lock+0x25/0x1e0
[  105.866188][    C0]  __usb_hcd_giveback_urb+0x4ff/0x6e0
[  105.871606][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  105.877506][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  105.882706][    C0]  dummy_timer+0x856/0x4620
[  105.887287][    C0]  ? debug_object_deactivate+0x2d5/0x390
[  105.892945][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  105.897983][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  105.902963][    C0]  __hrtimer_run_queues+0x59b/0xd30
[  105.908185][    C0]  ? ktime_get_update_offsets_now+0x2d/0x3b0
[  105.914186][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  105.919914][    C0]  ? read_tsc+0x9/0x20
[  105.923970][    C0]  ? ktime_get_update_offsets_now+0x393/0x3b0
[  105.930038][    C0]  hrtimer_run_softirq+0x19a/0x2c0
[  105.935142][    C0]  handle_softirqs+0x2d4/0x9b0
[  105.940400][    C0]  ? __irq_exit_rcu+0xf7/0x220
[  105.945243][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  105.950509][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  105.955692][    C0]  __irq_exit_rcu+0xf7/0x220
[  105.960282][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  105.965467][    C0]  irq_exit_rcu+0x9/0x30
[  105.969691][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  105.975319][    C0]  </IRQ>
[  105.978239][    C0]  <TASK>
[  105.981157][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  105.987125][    C0] RIP: 0010:kasan_check_range+0x86/0x290
[  105.992739][    C0] Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc
[  106.012328][    C0] RSP: 0018:ffffc90003997e20 EFLAGS: 00000246
[  106.018377][    C0] RAX: 1ffff1100ff09101 RBX: 1ffff11006432ae0 RCX: ffffffff82137687
[  106.026330][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888032195700
[  106.034288][    C0] RBP: ffffffffffffffff R08: ffff888032195707 R09: 1ffff11006432ae0
[  106.042249][    C0] R10: dffffc0000000000 R11: ffffed1006432ae0 R12: ffff88807f8488c0
[  106.050298][    C0] R13: dffffc0000000000 R14: dffffc0000000001 R15: ffffed1006432ae1
[  106.058281][    C0]  ? __fput+0x687/0xa50
[  106.062599][    C0]  __fput+0x687/0xa50
[  106.066586][    C0]  __x64_sys_close+0x7f/0x110
[  106.071341][    C0]  do_syscall_64+0xf3/0x230
[  106.075833][    C0]  ? clear_bhb_loop+0x35/0x90
[  106.080495][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.086382][    C0] RIP: 0033:0x7f88ddd1a37f
[  106.090779][    C0] Code: af 6a 0d 00 f7 d8 64 89 02 48 83 c8 ff 44 89 c7 48 89 04 24 e8 e1 fc f9 ff 48 8b 04 24 48 83 c4 28 c3 c3 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 7a 6a 0d 00 f7 d8 64 89 02 48 83
[  106.110474][    C0] RSP: 002b:00007ffecca6ae08 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[  106.118874][    C0] RAX: ffffffffffffffda RBX: 00005636017c6e40 RCX: 00007f88ddd1a37f
[  106.126842][    C0] RDX: 00007f88ddded860 RSI: 0000000000000000 RDI: 000000000000000c
[  106.134838][    C0] RBP: 0000000000000000 R08: 000000000000000c R09: 0000000000000000
[  106.142904][    C0] R10: 000000000000010f R11: 0000000000000202 R12: 0000000000000000
[  106.151517][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000563600231fc1
[  106.159593][    C0]  </TASK>
[  107.232982][    C0] Shutting down cpus with NMI
[  107.237865][    C0] Kernel Offset: disabled
[  107.242208][    C0] Rebooting in 86400 seconds..