last executing test programs:

11.332136731s ago: executing program 0 (id=3926):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
pread64(r1, 0x0, 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev, @broadcast}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xc8)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r5 = socket$kcm(0x29, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r6, r4})
write(r5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x68, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}, [@mark={0xc}, @replay_esn_val={0x1c}]}, 0x68}}, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r7, &(0x7f0000001140)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0)

9.093458751s ago: executing program 4 (id=3930):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x100088, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
getxattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000640)=ANY=[@ANYRES64=r0], &(0x7f0000000780)=""/72, 0x48)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
creat(&(0x7f0000000000)='./file0/file0\x00', 0x0)
chdir(&(0x7f0000002340)='./bus\x00')
mkdir(&(0x7f00000006c0)='\x00', 0xdc)
socket(0x11, 0x800000003, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x442, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/1090], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r6, 0x80086303, &(0x7f0000000000))
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="b201000000000000e14f003b000200b9d34f42", @ANYRES32=r2, @ANYBLOB="d5069bbdc7ef3c330080000000fffff7ffffff08"], 0x6f4}}, 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d90000850000002300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)

8.726886572s ago: executing program 1 (id=3934):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc0100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000"], 0xf8}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6}]}}}]}, 0x4c}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty, 0xfffffffc}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x1]}}, 0x5c)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x3a, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/144, 0x0})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='quota\x00\x00\x00')
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})

8.645067583s ago: executing program 2 (id=3935):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x8001}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000e10000000000000000000000001811000086241a5f1b77623a7c140b9f7d9bec48566024a0d9b0f59eec7664f6eba5e2737475d9c923a3924ed0cb9a006a0d9abcc1f3c26d7b838ed532a12ccf6c5d4ffe578b", @ANYRES64, @ANYRESHEX=r0], &(0x7f00000001c0)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r5}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r7 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x101, 0x2)

8.437839752s ago: executing program 2 (id=3936):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0x5460, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

7.856211372s ago: executing program 0 (id=3937):
syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x400445a0, &(0x7f0000000440))
r1 = creat(0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x45c, 0x0, &(0x7f0000000140)="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"})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4)
tkill(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12)
sendto$inet6(r6, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c)
sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0xa8, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9c4c}, [@country_functional={0x10, 0x24, 0x7, 0x80, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x6]}, @call_mgmt={0x5}, @mdlm_detail={0x25, 0x24, 0x13, 0x0, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x1}}}}}}}]}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7.538364264s ago: executing program 4 (id=3939):
pipe2(&(0x7f0000000000), 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x12, 0x3, "0617e504906bfa9b8f977148fc1c"}]}]}, 0x2c}}, 0xc090)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000040)={0x5})
ioctl$VIDIOC_S_INPUT(r6, 0x5460, &(0x7f00000000c0)=0x3)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})
fchdir(0xffffffffffffffff)

6.967259577s ago: executing program 0 (id=3940):
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000))
pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0)
r5 = socket(0x10, 0x802, 0x0)
connect$netlink(r5, &(0x7f00000001c0)=@proc, 0xc)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@loopback, @initdev}, &(0x7f0000000340)=0xc)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r10 = fcntl$dupfd(r8, 0x0, r9)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDSIGACCEPT(r10, 0x400455c8, 0x0)

6.232585815s ago: executing program 1 (id=3941):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x28400)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'vlan0\x00'})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x9, 0x4)
sendto$inet(r1, &(0x7f0000000640)="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", 0xffffffffffffff1c, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/packet\x00')
read$msr(r2, &(0x7f0000000180)=""/126, 0x7e)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x40, 0x5, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x800)
r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r4, 0x541b, 0x0)

6.128186264s ago: executing program 3 (id=3942):
syz_emit_vhci(0x0, 0x22)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x0, 0x0, 0x0, 0x3, "2f3e784b7cc0ab31e7fd3d1fa09814", "aadb641b", '\x00', "f500", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad35c6ed4500f52938453c9", "ac562047f08f7537b6597721"]})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f63"], 0xd)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(0xffffffffffffffff, 0x4, 0x0)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x34}, @l2cap_cid_signaling={{0x30}, [@l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0xe, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x52a}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x5}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x3}}, @l2cap_create_chan_rsp={{0xd, 0xc, 0x8}, {0x0, 0xfffe, 0x8, 0x8}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xfff8, 0x4}}]}}, 0x39)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c800080104010100100c0400050008000d6008000500fcffa70005000300080003000c000000060003a908000000ec67000026070531140003000c00bc000409040000002402000078050100110302000001040251000900ff0304090200150200faff0200040901074201800600040006100002ffff02000000ff7f0000ff07000001020e00"], 0x10d)
socket$inet6(0xa, 0x0, 0x0)
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000000c0)=0x1)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
r5 = socket(0x1, 0x2, 0x0)
syz_io_uring_setup(0x27f3, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
socket$nl_netfilter(0x10, 0x3, 0xc)

6.127068591s ago: executing program 2 (id=3943):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x13, &(0x7f0000000080)=@framed={{0x18, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x13, &(0x7f0000000340)=""/222}, 0x21)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10}}, 0x98}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x5}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f00000004c0)="096c28fb27164e5e2f893045853bb57f65b9c9a3991ea224ef63ad1cb731d4e21709108d434ee7a6d3bc7322f14de5eb8784c4604e2e5462af09fb8156c6879eb868be6420b285755e8b5d30407fe9ee7e32072928fe2615dfe780e78dab20bcfb77626f7e2e4cea8aec19d5831154bfcf82bf94690fef6705312fcd83635d08559784efba879741126feec6d8c2b9021413c63b37790a6a05bd759b906e8bb81420d93bbdd3d4fc34c762a70285da7badb5a4062b7a6c6aa8080206e252b6c47f3c6be7373e8c16858b2500a7ccc9aae5acc663ef930b", &(0x7f00000005c0)=""/84, &(0x7f0000000640)="e35115874bb753ef44333f3d8f94139d792d4bc16c4115b01addcf97e41d5d574124e5b8a45f504f2a058af83169ebd83dc8f7b4c21eb6e2bec0629c1602f1768e258f072402666001bea3b1b1e61ae05b0a12794ef20e3591695d95723011b3d739b339edfb4c7fff84f98713b6a9b94209a844fb5f58168f8c0c9d4715d964132a279b9cb29e597ae7873bffbe3b2ccbc129ca3d4e2c85289554d1cac8f5afec82348ace0417295488e7f8cf7d6b25f3ddb1f136a9e8623e1d89f24525e9e6ff45c206d0f989", &(0x7f00000008c0)="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", 0x581c, r3, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000055c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f97ce02f933134cda3a43785ba1979608232af6a30f90a9c017652689217c707e90b23f59db8f8fef13288689f34c1ea1575f8cb973bdea2efdda0c250c0453a51e6f09efc91d70770c2d4285bf84bb43b671bc0431de978298842a9ad183d196f9efd85b0686bba1c3016072d56c86b37897479ca83e12947d2fe64a7e4c11c87e30103109035f84e8a37f89026d5833866c343d453905a8490347b16ddec97d16a7f383d88057afcb6b15095eae9cdd3b8721de72567045ab2b8c3b0112a27aa730d40c1f020ea04866f94ce36bd4369ead3af0ac5ecceed6669d2069cf3b797cab4fb1ab6151baa4a0f3f095f8a3ab2ebdd1df79024d3b0"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x80)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0)

5.530593555s ago: executing program 4 (id=3944):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r1, 0x6b, &(0x7f0000001180)}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

5.40660041s ago: executing program 4 (id=3945):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x48804)

5.321289275s ago: executing program 4 (id=3946):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
pread64(r1, 0x0, 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev, @broadcast}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xc8)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r5 = socket$kcm(0x29, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
sendmmsg$inet(r5, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r6, r4})
write(r5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x68, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}, [@mark={0xc}, @replay_esn_val={0x1c}]}, 0x68}}, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r7, &(0x7f0000001140)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.06213723s ago: executing program 3 (id=3947):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
pread64(r1, 0x0, 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev, @broadcast}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xc8)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f000000000000000055211c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e028cb2654d493a0b4b35faae176f99b745eda2967199cc93685bb537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ae2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b419a6248029d33d61dd5c844024ba757371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2980005a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e03a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb7a2d9c085b189b5fd1f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a103ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de08bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bbe0f10521862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfbd36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d30edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a730000000000000000001ed58cd2c684667178576dbb57345b63c313e4a8fcfefe511e084c24b31a2e693946748bb73511695bc0eec1553b0f67d50678fb29ad13d2104fdd7a992574d475d3e51652fb3fda6a9fc0458f10b6d121bd48664858b51a9054d7c1d310af6a043e4b99472fbff86fea83924059419d54f07da0b6b7d6e6d61e680f151b0e"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r5 = socket$kcm(0x29, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="cd07e85142f8ead499f3ef72f2227c53dd9255de4766b5f33ef218a7c39a97bbd4f8385f1852a08a0e900c7f9183f6c74e7e3407bac0d64f2fe763278fbc7ea1e7111be746ae2748fc96288a8b288a6d1baf35514905bee7b70175dd6a5b1b43735e06d236ee53c79aa6f817e833618ba7321afdf30656589fb5d92a67f70e2cb1dd98e48ff65bb2569a258f78bca3682750e0584ea00629c67c6411cd532d62be01f143fe9ce39012147357e8abe37baa6cfad28b949c343c17567015b2811ea8dfd577749855bcc1cbdae064318ac83c505129a407543c355a4e902e6d43e92cf7d4a538400b7741304b9179bc8357b82081d7141a388f8659108dbd3142dca4483efd112eae795c780aa14fde5d3ad8a29f57cbbe4929ced3ec0c45c4964e627d283b4c8302ab1eac4796a40ff79106ab2b28a1a72028a56a6b4e7e44f9578970f37fc3edfdf4b51bece98270e1b3b8da8f4bad2d38d0d04220f53e70f88f9431cd8184995253d38f27fbece66f45558a0941277de0308ed8a3bd8cbaa2f12406458086f37d447d9cb471c3b075bef79673e3b27d707f1483be8949600e9259a4edb962ff5e2a47a369468814971d2a81bbdf6222dfd7334912d33b51080cecb1eb5ca9ee573abc277b75e15b8fe9b242abd74ea74a4f83bd96e3b1ae924d927bb45a7b4b879f6a689f4977d0dbd4eaa0cfe64dacb82cf3784e21cd4e136ee610c2672eaedf35918d3c82eec28ea5753ea137f8a5d2f2f8a7aceffa1d71ac75bef177945d757ddc904c46a8a69336861cf08a5c51996807008e58ebf23a7e597bb07cce48e40b8a172144c4e649090fba0ec62152f85c3c4b843bde0f6eafbaa12bd1449801d2c4bfb51317bbc4d521ea1015e73a8c9146eb37eb9583a2443d8eea2293c808efc19a5735408281f16f590e00415c43ac2ce1c3432d41525dd0137eb991d9c56c163c0d4ab2d4ce2a418ff537bf20e6152bbd81d4a2a3570a7c3053f2ceb5e9797d2c60fb069cdcb03e06aedf63ff47f7ef9551e26cf08740c74b273bcda959a1e9a84c0fa05416b99d73d402fb81754e1ccf796d9da53399d6dce3ce83303ccb4166cf36ccb0c9bddbe0e34dfbcae31b4ce8fe513570e036844ab516cf4d6293bdd388112084e6aefcc6e7967fe99aabd72a207bb4ec8fc02d5bc229ca68c9db99529208146f49f29fda53c49707d76a649aa5df7607c3ee514eb820f4d0cc55d547ecd3193c4946525af9f68f8ec2d0a6b0ccfbd8ae0a265249255c98e9e6ab3d8d82dbfb8c15a8ef69b78cc9b4f0ad5a2ce9d6793ada0b6163d9d1ed3e50f9c819ca46b40ff40b375f5e2ce6caa996af36324cbbaa63635b0e107ad01174baa553b86dba12e8ad9586727a70aee6785121e9edb5a98e01b7848734d3e044c494a4061493e1ae7fd73a2ed9b83d286e24a732966faee7705d8a2d360159acbdf18616028134c25d1a92bb45f06207701454390b87d5bcb66ec73d8c3c53049f42c85de0acc45a9379302203be199ce55154b739bfb3d27929b12163e2078905137774974b90c07960fd410fd58394bc53e7745f5627de2f0361418173763c69f8a11d93a104ad382cf385b0c6c7c3c5fc8236e6f18ae9be0543d28d54050b9e60f2f774a16be4904243d482ad3252edaccce56dcd350b6e249fe686d5adc07bc57c71aebdc243eac56f29fa24e69b8d444c54a95522beafac6230a3c4e89c6d55654a4a077f7f854d6b24f8b45da2baa5dc3e4df15c56263c7fa80642789ea712a9562a70379afe5ac584c891178d71a558e73456e53e7f9256f4c0b27daa3eab32f1e56b3dd9280053c1ec57e86fd87a725ab9a5d93e3f8e6e848afbdadb859c744f40a86486fbbd1da6a18c834bf43594aac9d0340521dea06befad18bb868e9e63578ed66c70ecfeb31ce55755a5d48de4113c7e29975643cbc53f114ed522231e410f1fe4b910e6af3d4b56918952f7f25204813b3283e20a54fd285a80988494576bd738e685edda5177eeb0e2c9816dac60302b12ec046c9feb770dec403fd4fadd1628aa4978647e8dac1825166a5be8b580b195387d901ecbf03b70d4301f6de69f691009a659c03186b8431e226022f811a6d2ce73c8bce19b09e04728b739da06054690f30c71bb3326f8d4fc80cf654a42fc6134967206e110558a6f9e9c434bf175def183da8a5c135975dd7eac8fcea1343710cd92fdcba2152b32e014cb8e87d3c500e8f439e1522da6866105e937663d8044527982d147df983ca83eaa7fb4dd5c0c79232dd687e02dc135d3067547cafb1934b5769114472beb906646ffdc44291289bc27478262295c2fa517ccd553804e73eb9150f5d451afd79f175e14b563a5e6c86e9a0eacd450be530a3e506297a751bc5800f3c45a3e18b93c21aa8c0f2d144122803361d4b59e2a21bb462c0b8bf9d8f4c91610c633fefced62b8de88bd2e56e58eb538f30b1710f8cf5e6e54db33adc53d2519351696028edda2e915a3f575ee3488b6ac2d96856fe5742ae57679e11e7baeeb7446aa3d92a834086b8b2eba58a16e54a2df19f4be02fb9ed80f9547c327ca69bfc027852c0f54eea05b0982f0a08548f16a80d17121b5c3536d072b6dd78965d7fcb1d13d8435c003050de3900f43ec378070ff24e9fe463451cd2ca1d81532121fa6a010df9e471dbd068c9de5698eb986a43640843e6ab2ae9c849603cc1ed6799cd80a9dc8937127ef006edd442b68fc79a7d31d80f255ce9593e12a219d4a38a84c2a77ae3c604ac33614aea6c8523e4f553866b801cfdbf3545370555685f2f6ae4a05745713bac8452e86536807b986037d28953cc093122c7e400f4ebd876282e831b5e45c2e2dab9c7620ef9aa3c3f733baef8eee8242e0edfc20c9f58127739c978fbda24af4068e36a0c556cf2e60be433e6c86fcaafaab94124385c14dff932713044432cfc6ce7c6ae88c1fe32097d2e223616818eb1df981cd70a9a35ad7776745b660dec25e93cf5d6157cc161b808097f49a7713c5a164cd5cd61cb44b155edd38b72c5788b5328a1090cc366fb114d658eb4f045740fa95c19a9b6fc4c758036b9ba3d566e93073a5387f850f70db48d7c4a071d2b6bcdc67113b242688fbddffcff2c369680a4f5e7f0bafc27241a95695ff39c828f5d2b4e2a5955414aae21358971a9bd5d27fb3b4980d7a2058f5a686a65a95245aa418df589d6191ddf8e2a75b80c78dece49e7cdb6dc038944c8badeb86ab903a7a2db35cff18dd46ffbc02c36461205df47e93ab492ee2c49b489c22e9d0a44766f855cc1bc37622c72ab452908860cc054e9cd245cef29667e078e09403f395a0ff222272fd39bcf8c657de071fa6b02efb062e133f4ca14dbc3041fc3d0d7f44a30c955fbe5088ec222355d0b533f506ac75cadbb646b437eccdffef7f521ff14b3716f945c3a0b532616e3fa4dd88ecff416b0c91798aac7072c610adef4e076f5609bc0a4431de4de4a7318115a3f45dd7105f0d25cf2f2eccfb949b7e9b1c6f051f1c8f61b95f665c219d1f32b7af585818e51a937f5d90b0dd2d1e68f4a9f94f8da2ab42b3c91c95871537d94fc2a191862cbbe28433c7773a3dabe82a371c47c905e46f74f4964fe4ff3551588cb97d089465d1df16daaf5617d5b677e2e77541f64ea33ad75611e1516f230d4f207f58494458b3e25a3ce1d1d098ae8a8db11fbb7783d6f3960e237c0a24e33043c21a552cedc8aa7a0838cb034070a5af237acaaacf0a4398b036cf32ddd2d614d26c53a3fdbd0fe8cd1e0064c8777ac8f9755e02ca4bf869bc94cd6bea3bab112f57aecc27e6011d4b4c8c3926abf995a39b4384f9bf410c4e3525a47d4db05f3c6c253c8adb2678c5f86dd2e5e3ffca798b5b756c0207e65a248449cd09abad3b3b8fcda337124bb66079dd1ac77949f3c8ddac7396eaf8348544164edb99e178d59c13878b8b8dbd0759cbf4b6b6d3dcb5adb4b6bf8402b93aa4a6b53789b627f68b772618cb8a9689ad282a230d6e5e125da910b4f26f72caf1eca8362b977f83bc16a798e05dfc6c7675cac8262e781db9db2250958ab6bda85ebd7c4d06681ee0f30bd062a08294ce0d459e10e3a0c2323373ec84ac3e6d99ec6134ee395b6ca8ad6e6a53dfba9a07747944cb2be0ed2fcac5c4e7c43a5da76031cec5169b3f445099322b704a5198c1018a3bce33a155e7881fac59fc526c32e954a700c4b6db8f25467b714d4b723224c1f1bcf59b2b75c577fe4acd95aea1c8ec9075945442a129a3efd5e64aa3d668be55e3c43580526e596a74baf605576606c7bab5005957371f075dbe44333465564af0eb35dfe14465d87035ee896e6fe8138ee43bc2d383e6ee51fe4ed62341d2a68ed64385ec31867f28ab33a8e0e0da7c6587432df0286d44a24ca0e85ae151307a24222fffc971b476e412a450c58d69b7b4a5d89c5f55170dc5f3689089f49894cf6d034f680067b28582ca2066d2578dec3528041289c7340355425064441b647a51bb4be746c165c10c0a2a82c8644a832a32877ea81e24a50c2e3f0fbc5b763656b6c7278cc83a94c65bbca431cefde888cd42b03299b591c756aca38f03ca7a8f61aa9a69de2ca81d7e5005fbd6c328493e2833d45fcb68cdfa761842b48aebf3570cec220dab6ab3b58e1214cf843b7201a8387077b5c1462f2b025f9c6a56f8", 0xd0b}], 0x5}}], 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r6, r4})
write(r5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x68, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}, [@mark={0xc}, @replay_esn_val={0x1c}]}, 0x68}}, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r7, &(0x7f0000001140)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.644111794s ago: executing program 2 (id=3948):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="e3042abd7000fbdbdf254400000800030000", @ANYBLOB="34002380060004009800000006000100b000000005001e0001000000080017000000000006000d00060000000500110001000000"], 0x50}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ftruncate(r8, 0x9)
recvfrom(r7, &(0x7f0000000540)=""/189, 0xbd, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r11)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0218fd000d0000000000000000000000030005000000000002000000e0ee5adf6d46b1cc8700000005001700000000000a004e2300000008fc1008000000000000000000000000010000080400000000030006000000000002000000e00000020000000000000000"], 0x68}}, 0x4000)

4.063570055s ago: executing program 0 (id=3949):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
pread64(r0, 0x0, 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev, @broadcast}, 0x10)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xc8)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r4 = socket$kcm(0x29, 0x5, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r3})
write(r4, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.788809646s ago: executing program 1 (id=3950):
syz_open_dev$evdev(&(0x7f0000000a00), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x400445a0, &(0x7f0000000440))
r1 = creat(0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x45c, 0x0, &(0x7f0000000140)="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"})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4)
tkill(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12)
sendto$inet6(r6, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c)
sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0xa8, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9c4c}, [@country_functional={0x10, 0x24, 0x7, 0x80, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x6]}, @call_mgmt={0x5}, @mdlm_detail={0x25, 0x24, 0x13, 0x0, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x1}}}}}}}]}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.511570989s ago: executing program 2 (id=3951):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc0100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000"], 0xf8}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6}]}}}]}, 0x4c}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty, 0xfffffffc}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x1]}}, 0x5c)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x3a, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/144, 0x0})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='quota\x00\x00\x00')
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})

2.827919545s ago: executing program 3 (id=3952):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
sendto$inet6(r2, &(0x7f0000002380)="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", 0xfffffffffffffced, 0x400c881, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfe6f, 0x0, 0x0}, &(0x7f0000000180)=0x57)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xc}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="270302003ef900000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33311e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000006c0)={0x2, @sliced={0x0, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3f7, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0)

2.700603877s ago: executing program 4 (id=3953):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
open$dir(0x0, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000980)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x600c, 0xc7, &(0x7f00000003c0)="68924ac614e07886a2bb2b00602eab62cb1908cf34c40aea9fc0223338648d5fae9790709fca03760074f49bc226420041ed7e80eeeeeb825271e7769edca4ef6d35cade8f8faf48d048b424201955d90a1354ae6be9f880a60b19171e30fe409ebdbc4058240c7df57a9b8257b7966d3af76cedb64597b3f651c9598c1302c4e81d83f1cf1b7c7d118f636fb669cf8cf05249723e268cb176d3313246cde296946dab605e135dd2b93042d3f9cecf55d34173befee87d43ee05c6cca73a189058eeb084b235d89767ddd4a12b9918ccd1a4d263bf8806c63f3d57444231bc2795b26b236addd8915079240ebb3f395d293f01", 0xf3, 0x0, 0xffffc38f, 0x8, 0x8, 0x2, &(0x7f00000004c0)="6d25f92cd8a9a63198ed059414b5afbeadc9c1b3ef1d8ba2c0bf5dd8ba2846fa6eb600db6e523de838c3872dc94b9c370e7fb0035c8a446adf302b31a8f7d324495128bc9ea457e351e8db0edf034fd835419e95d00c34f857367aba197a8e87582265"})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4008af21, &(0x7f00000001c0)={0x0, 0x4000000, 0x0, 0x0, 0x0})
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "4c4a39e4", {0x3, 0x101, 0x0, 0x8, 0x85, 0x9, 0xc}})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa, 0x8000, 0x1, 0x100, 0x7, 0x100000, r4})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000780)={0x0, 0x1000}, 0x4)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0x0, "5bc124a9f61874ca47cb07b9f68686573b0df3fe51604f4e7dfb79dbf5bcda2e", 0x4, 0x40, 0x1000, 0x550}, 0x3c)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @local, @private0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000240)=ANY=[])
r7 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0)
open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$P9_RREADLINK(r8, &(0x7f0000000300), 0x16)
dup3(r8, r7, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

2.452088986s ago: executing program 3 (id=3954):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
socket$packet(0x11, 0x3, 0x300)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x6, 0x1000, 0x1, 0x2000}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940))
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f00007fe000/0x800000)=nil)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
remap_file_pages(&(0x7f0000598000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3)

1.726173832s ago: executing program 1 (id=3955):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002b40)="529f7db3a20ae9e63e60d80ae445bf7847e5ace46b19d43da26eb414a8a6bc7857de2c27d2b933e5eaf842bc47f4f0d1259707275a51bedc00dc3ce370321b19f05355a1900b7e720ead9a5210e2fb0463af2ba771e16dafb0856bbf5f09874a7c897693665627b913b8e221654f939c4c6206a9ca0817ba7f72badfc35bb76bbd55ad43776c7f518906d3b2ac67d8f550f53ce1a580b98f945ea5d622edadc315b5c5ac4731ae99c941cf1a0207da76bb15417452885c59ec4347d4e128c1d5bb13ea", 0xc3}, {&(0x7f0000002f00)="f6a974af2fa4e037d46eb3534575d0b7d84958397a81036da3b12f2061743e4ef9fd554777cebd9d83a9200273816cd2de1f3cca215f202310b5bcb82d62b7b6f32630118cc9567bfae889a4d5dc95dfb8616f6d0674a05552388365ad382bd0c6032f51071889f20bb775ce106e711ca81cf449442ad004509f6545242487447750e24c2b9dd71df70a4dae57e376b143c2a838e98e3412db5649c216a1ba005caa3e6451d58c26294996fd7ac4002acae5164febfe8bb69e89c630027b533be4c117e092be5eea44393171ec8243dbd6c7f3cc0949e2b2", 0xd8}, {&(0x7f0000003000)="a5895c9e3bfa9e909482b7cd81e0bbd82595cba9ded2eeee899427c4559cd1b2c15fc9bb043f3b6e7ed80c10c48482c2cb1246120f615b26a529af2342ba8e3f15381a0693fcc2657959bcb4489b32fba846e854c3d491930f7b5a6bb8e0238614a80e3a9b234e0180a7f427cbaefa20e969c5a185e1cdf947134dae41cd287761a336ae415f2bdc2e3a7f4c002b390e5aec19fe3ff0a86710d4c8d3ebfe3d420ede87ccfa68730477", 0xa9}, {&(0x7f00000030c0)="f04c5a1c818c0914a8e29871bfdcdbaec4e149aaca62faee5f9882238143cdd3f48b233cf6a682bb8f3efe18f378fa7b489f8128c3254c7d340fb5de590c32f27c88c420ce585dcd1118e59e54c403f17903358d87127c8dc14ee4748d1e1a2cddb62ff4d54dfb3d0ceaab23fc53e1c154cb5d444eb8fc21d197e6a7d1abfa7757f1e834b96a29", 0x87}, {&(0x7f0000003180)="bfad285e9b68c72f42d76f0e8ab29260eb62f957d616fb370a847cf7de9bbf2290200b507ba9610bb1e8c1548e1a035d9dd3622a7e62462f9c39c889fb9797f410914954891ce9a06a0d0b52389e982f567d29ebf48483b0807cbcd674ee868bb76457b03eedefb15a5a70cf2a67f73c46f0dfdf926556951f40b68f4b5aaa1aa43d25d7b7c597a6091349e344c007cf13aafe883257a8ac6aee7fa7f7daa6c108f029f5e322262d0f88e92ed25381926d4f200b02ec8700154f38329768", 0xbe}, {&(0x7f0000000940)="fe2284dc", 0x4}, {&(0x7f0000003240)="ed0a44f2dfa14461fb31c9f19c20e88451e4e56b892ed183f71d5d", 0x1b}, {&(0x7f0000003280)="083400f20a7708fc99b6290f75d1df08eb9e625bbe12b826ecb6ae3692cf36b016e0b7183734bd65b694d69f", 0x2c}], 0x8}}, {{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000180)="491ddf5ae01bd95ff06153712c46384b3b6dcadd85023691dc10f7dfa077c3839ab19d9abeebb49eeaed4025255372fd63499f54f7057496e1098a837ad8a3cbe611416f66c12df9d55a0dc3e2bbf24ed6d90031c717a365b8d4bd20942d385b3c629998bf600c701a3486696ba1f5b0ee758a2d", 0x74}, {&(0x7f00000002c0)="907f7646afe52eddc6bd5a622486fee1a5a8b468b2273ae9ceb2d572023cc67ea2d4e5310a840f976d842f63f6d5bb95a28344a5b039e862ac001122ab7640fe26e9b720efc980eef199", 0x4a}, {&(0x7f0000000380)="fe25e9168adba281b373826e98b41807f92a2bd9250626de85d406d6480aaa713925dbd04023b5b1d0f2cfacf08079c3a88fbb6cafea4f7b6d9f606f1bbef10402b4ccd274b451f06e64316e409685e5ebe1117b23bddfe2aa46bb8d629cdae345891f0941ae0ac18c064e162e1950a774e61c3c98dcbcdd4db27736c2ff2605b03b12d1c9ba5fdbdb9a70fb32611a7499168ef0395fe5eb1905cf7e56f36de6767eb242809d54908532", 0xaa}, {&(0x7f0000000440)="3fe53ccc2e239f10ed35b8e5e38591c582b07b2a51540a0c7dc324224793a5be1f3310048aefa73b15b9148f81448db4db68056b6528d3cb1099ecee2e7dda19714784621944edb40d512d87a737106a6bc9d70fb1b9d58eb29370f0d33af24567a72c4e6290da9381d883fb8a0f3542eae2967a8d912499", 0x78}, {&(0x7f0000000240)="ef01848f76208083782ce7764b134a5f090b42fa3178ef76b3cce0e00cdc", 0x1e}, {&(0x7f00000004c0)="1a1e3bfa4eb08616808c5905d89e313b673009a0b2b0dc0a7260798803a921d367d20f1c27f7ba0cdf178fb2fe7bc21e91014bb78766ccab35a943e5950e939aaf8d55", 0x43}, {&(0x7f0000000540)="f0b31b9491c7395b5746960eba1912bcfb8f72767f528dd0123252510beb20d0f2e8ac108e53787df40848b57b8c16daa42880cd0e8c51135b0b57e1e9da64d6a8819fe7361497003dfdc51379b7008e99d23283c40248d99bcf81d01a67b40c2f1c0ecbe0a889302d19268ab93cb30a07e46e8a5f213a76bdcf7c572586f49980195942394bd561799fcd9af74da78c2e2a2f08398efc34ffbde558c10bb4ec1e5cf82f6509ca51692e866f08beda17553e0ecf6abbf1c384486bb7420c542365b6b2f2ca972dcc991a310bb77cd5f8aeacff961634a85951a4bed6c8beb8baa906354b867fae", 0xe7}, {&(0x7f0000000640)="da3e1b19c79831e0e7b058b367af4cb4ee3ef2cc314b0e5b66a2582d35107b32fa1fa9144540e9a47fed08461929cabb78044e519ef8a8dca1ee993c31707b59eddfb4a7c504167b08b6513d5e3a0afa575ee394dcbd4e8a44bc66ea492e600e838da3e8016986e39370b1f07372dcd76ec145dbd27428b06122bd24e734f3a19fff260ed49b83aece514c7efc1ab65ffa0103f922f0d636070d9a4d57f35ba0550d1ca7366fc4d26e644fb70ff983c03273581780b890b81ad7434f4811c38102730d9c74b9588484ccfb75a2b74098ac60887a065f796f83fb83780c1e4a2b7f7c22aed62b33176f87807c2b9dbc6c5524501f2401", 0xf6}, {&(0x7f0000000740)="d92a980c2b55dcb3f418b3a04e34369859e5ce65cdd0307a6ab53b9a4a105ec85efb6bfdc7b957f6e96f6abca7fedb3c47ae35fdd0549651351af7c4cb", 0x3d}, {&(0x7f0000000780)="d8f3e1e54a6532eb82a500017b021b3d1a779de65343e32bfcfbdc9f8011f593976850b821599bfca3166bfaa969833487", 0x31}], 0xa, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}], 0x18}}, {{&(0x7f00000008c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000b00)="28db5898cd039a26e0754bf4fa6645f3aaeb47dec68430bf5da5c5fcf122fe14758d19d3c7185704159aec60b3feb3813ee8817ddff063baa578e6b84cf748d3ac2a58a6198ac33cded98c28e4e144521cdac2a9a3d66650657584a6d0d06623659d3c850e43e8f9e31dbdeecaeec783a402164757458d59a9d355dda43c8a064d71f8ab522c7718766827cd0ce93b3575ffcda0bfab2d66fd63af20cffb57a083289053f0891e2d3319ec2f810f250e39f6c48e215db0cd06dedb0196eb85a108b1efef72785500470d9b3b36ef2308b4405dbaaa823866c39a267e15491e214615c274d1", 0xe5}, {&(0x7f0000000c80)="ec4ad00004d547d9ef6f47b60904cf268cb5d70b740fc22e44ed261fba969c90806c5114178632773479795040a9a489c01da7bb6f535425a752b14bf5428ce6119b04ff06eb7a5cf80a6ad721515c146a00e41ac0c282412527eaeb04c384d46c96ec599424650a1988fccdcec9ece5fa02c1c11c858044782bae5e2d52a4b89de3719e5c2fca68265fbf2c5c454bf6943075b04a6a43d5a04c39860b2ab4f1a960e34f6065", 0xa6}, {&(0x7f0000000940)}, {&(0x7f0000000d40)="3c0a464e5cc5b038908eebae42127387f84430fa617306676067a8b828fd2fefcc5f0c1ab0ab260b7aac8ea131e8ccf0c239cd384e820a79be0340aaf227d6f13782b52e2be01ac79013a3172168e1acefe11a924b92fff34f45c388d682af0d852f2957a1584797ba5bcc3149592befb5e44116d4c1b3a7600a60f8483cb1f27523c7748462519c7a4971b41c357bf5525be7bf005d03faff537e502183f2315debd5234e61532559a1e81d72630513", 0xb0}, {&(0x7f0000000e00)="e4b666f9c0e3d05d5c2204f7dc08a73baa0c57e2b713060a8ee57120c9d069f0cd5b45f7bb2862792b2fc00a74e25d11025d62e062c15b4440f640328744b3496191809028affdec81be21c918766fe4596a8f183047a9391b28b80b0b3bff472528e9ee941ad5e0088805bc175d5f94956fe519d637c78a0e5565833d32b559ef386d99f0f9", 0x86}, {&(0x7f0000000980)="a4483023364f92760ca460aeb5480a8e1cead2281eae9b2b9652ae27b0cc481817ee08a1571d4717f5fbb2ceefa7e646b166d5", 0x33}], 0x6, &(0x7f0000000fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}}}}], 0x20}}, {{&(0x7f0000001000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="03ef09350fa78dd891bff859976863745333175c587b43ffdc1f36f820a5f396a8ef37749f2d4d63cb2b65cfa98658ed9642c137069955da6ad5e9a46cd6d52c0b05d3c30a61722e127262f3903161c4edecf23c92ca65f8503077a9f8a180211889ef1cd53c35e1b8ff9d5dcdf6f47f284077d9ff2ad89de91e85918e1995bfc268d3795d832db8f04d6763b6b7ba4dace01f1c65b95e27e129f8c69762c53aa49295932aba4faa20f9c2162bae174793851f", 0xb3}], 0x2, &(0x7f0000002140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xa4, [@multicast1, @private=0xa010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x68}}, {{&(0x7f00000021c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002200)="f4089f13632b3cc42dc8eca4da0dea4dd8ab", 0x12}, {&(0x7f0000002240)="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", 0xfd}, {&(0x7f0000002340)="58f95fb61853876e0b550762aeaa12bbbbd390253d8732f9f16c5e1923d74d7258426d9bb1d7e2152202165116f45c82fd5fcffd69e4aabb53c859e3dfafcc0f08d53c4b6c099a9e5844ccdb66210a7bf1ce270ab131b3362325328059f86691", 0x60}, {&(0x7f00000023c0)="029f81646d4518c1922ebeec2725312ae2f3fc04430a996756dd4b37a8d0ca554303aa17712260c4f88797c7e6470367ab4a2fe1130437e7950648427518def5a7f62caa", 0x44}, {&(0x7f0000002440)="48cbfeffb9e0d2b48f1f8d6f5f308d4daf4023", 0x13}, {&(0x7f0000002480)="1ee484a0f344fed4529932a2db8c1b3791f73415754a200ea48a6d691743b6ab10c7e895bdd543875b4d1f7fd5b4dd8824785608b24146e2fcdd67936a871c2c077e3455272f8d679154de456fb74cb76e72e52feb08f0ee1ffaa792e8b7e9d5ef25e1fe68ccc152aab359", 0x6b}, {&(0x7f0000002500)="173572298bcb6f82666c8e06a1f2b15db2633b8ed25c830fe28af365bc6182f212f84ccd02053811e3a888a61d77e3a31f0c9165e7a45fdaa4949e73754941149c1dc1369a661608592cc7ac4dbf16d854a3874f5930ba9c9a59de8504027278e22ba574dd6e94a585b0103a1b462e87bbf65d09", 0x74}, {&(0x7f0000002580)="2d9f03567a5bd0550a82c0f92124dfa400fd6ea5ade5af3ce2250eeb7eaf6b7edde350a8abb65c4b7e427f95fb1885310c79c85689e9c4cf6bf9b4ca529cf721b2234df066ccab4b1b2d822f56ca840e734368e3340f8c6e508e42e6cc5ccdc562ac7b094de468d7a0c347b00914ac5d0702ff59bc556c36cfab5acdfe56", 0x7e}], 0x8, &(0x7f0000002680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa21}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010100}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002700)="3bd358a3e31a3c25ba0e536bf1ab831a58bf80eefd9009cb22f55edadf218a242c92d49500fc8c99218f86f4602fd24c3df81e7c2eddfe64b4725a5103564cc3146457ee213868e4b23e88ea00e2bf4a772f44def5dc1682673902adc48514ee9e3164c22889fab5c8bb9b94cf3d24c360096d4287673f146e280a4b3f1561a3678321eee9100293a883271349ea3f1b2f497e9b281b81715b965240b732fee62602c62784d7fcd3f48d90456024fec0b1b88b767b2cff0d8b283061f776ece93d24923ac9b88d083d570ce12b35aa07f15bdb55998c", 0xd6}], 0x1, &(0x7f0000002840)=[@ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xe4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast1]}, @timestamp={0x44, 0x8, 0xef, 0x0, 0x6, [0x3]}, @timestamp_prespec={0x44, 0x24, 0xa3, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback}, {@loopback, 0x101}, {@broadcast, 0xffff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@noop, @noop, @noop, @rr={0x7, 0x1f, 0x1a, [@empty, @rand_addr=0x64010100, @rand_addr=0x64010100, @multicast1, @empty, @private=0xa010102, @loopback]}, @ssrr={0x89, 0xb, 0x2c, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0xfe, 0x0, 0x7, [0xfffffffb, 0xcc3, 0x2d7a8770, 0x10000, 0x8335, 0x3]}, @end, @generic={0x86, 0xe, "ae27312461db3cefb1361ce0"}, @cipso={0x86, 0x33, 0x3, [{0x7, 0xc, "d6a1dd44badc146a2332"}, {0x0, 0x5, "d18fee"}, {0x0, 0x8, "0e0d6bcafffe"}, {0x5, 0x9, "37a069bf3bf791"}, {0x7, 0x7, "2a2272798d"}, {0x7, 0x4, "caa2"}]}]}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x26, 0x1, 0x3, [{@local, 0x9}]}, @timestamp={0x44, 0x8, 0x5d, 0x0, 0x0, [0xffff16f9]}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x6, 0x5, "a83861"}, {0x7, 0xc, "7faceea32a9ad3659004"}, {0x5, 0x5, "1d40b7"}, {0x4, 0x10, "33e9366412ed39dcc94714d0e7e8"}, {0x6, 0x7, "dcd3c5b395"}]}, @cipso={0x86, 0x50, 0x3, [{0x0, 0x9, "cae9fbc552365e"}, {0x2, 0x9, "9c95700d790b1d"}, {0x1, 0xe, "ae9964754965fafd76314149"}, {0x1, 0x9, "36293cf4e201f9"}, {0x7, 0x8, "7a3c8fb3cc69"}, {0x2, 0xd, "4e6dc474bd5c3c321b6950"}, {0x5, 0xc, "71dcaa5d6120047e27e9"}]}]}}}], 0x1b8}}, {{&(0x7f0000002a00)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000002a40)="55941fbc9579e501ff2312f65ff30e140fdf05fc96a13f54c05258a95394f73b06498747b1b7de149294c53ce25cc0ec0fff5baa4088657c31797f7f6183bad162e5d590c344e91c21204132442d8f4a782686df85859896b934e39dfb43a0ddf4a69ab92e5170e144ddd3c7aa8aea6a2db1983fcd2bdad21602c0e5eb512e8fd7ff60d2ab7f737abecc78d860d6e6d5d6876cc6131fe264e183c1ba620c328b9810775d894bcbe8834d5e5c20470a7c1b46e5f0", 0xb4}], 0x1, &(0x7f0000002b40)}}], 0x8, 0x0)

1.600388724s ago: executing program 0 (id=3956):
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0x0, 0x0}, 0x0)
ioprio_set$pid(0x0, 0x0, 0x0)
r3 = fanotify_init(0x0, 0x0)
fanotify_mark(r3, 0x1, 0x48000013, r1, 0x0)
read$FUSE(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000c000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r4, 0x0, r7, 0x0, 0x8ec0, 0x0)
dup3(r5, r6, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, 0x0, 0x25, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r10, r8, 0x4, r8}, 0x10)
fcntl$setpipe(r7, 0x407, 0x0)
dup2(r6, r7)
socket$kcm(0x23, 0x2, 0x0)

1.40243585s ago: executing program 3 (id=3957):
syz_emit_vhci(0x0, 0x22)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x0, 0x0, 0x0, 0x0, 0x3, "2f3e784b7cc0ab31e7fd3d1fa09814", "aadb641b", '\x00', "f500", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad35c6ed4500f52938453c9", "ac562047f08f7537b6597721"]})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f63"], 0xd)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(0xffffffffffffffff, 0x4, 0x0)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x34}, @l2cap_cid_signaling={{0x30}, [@l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0xe, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0x52a}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x5}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x3}}, @l2cap_create_chan_rsp={{0xd, 0xc, 0x8}, {0x0, 0xfffe, 0x8, 0x8}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xfff8, 0x4}}]}}, 0x39)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c800080104010100100c0400050008000d6008000500fcffa70005000300080003000c000000060003a908000000ec67000026070531140003000c00bc000409040000002402000078050100110302000001040251000900ff0304090200150200faff0200040901074201800600040006100002ffff02000000ff7f0000ff07000001020e00"], 0x10d)
socket$inet6(0xa, 0x0, 0x0)
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000000c0)=0x1)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
r5 = socket(0x1, 0x2, 0x0)
syz_io_uring_setup(0x27f3, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
socket$nl_netfilter(0x10, 0x3, 0xc)

1.398945178s ago: executing program 1 (id=3958):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000a355d28869e53e8b7436d4e754b8dbf6c2463586fe5e492ab7dce6f7d59908c83101416d22c05872f340ccc925148bdac82062822b2e9ae673e152b082d34f4c781988d00e6e1991a194261f9e2e565c"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x3, 0x8000, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00'}, 0x90)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
unshare(0x24010280)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000080)=0x9c)
bind$inet(r6, &(0x7f00000003c0)={0x2, 0x4e20, @broadcast}, 0x10)
r7 = epoll_create1(0x0)
r8 = epoll_create1(0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0)
msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRESOCT=0x0, @ANYRES8, @ANYRESOCT], 0x2000, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5}, 0x10)

1.27804326s ago: executing program 2 (id=3959):
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000))
pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0)
r5 = socket(0x10, 0x802, 0x0)
connect$netlink(r5, &(0x7f00000001c0)=@proc, 0xc)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@loopback, @initdev}, &(0x7f0000000340)=0xc)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r10 = fcntl$dupfd(r8, 0x0, r9)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDSIGACCEPT(r10, 0x400455c8, 0x0)

757.166585ms ago: executing program 1 (id=3960):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040))
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r1, 0x4b47, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='vlan1\x00', 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000002140)=0x7ff, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440))
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x415, 0x0)
r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fremovexattr(r4, 0x0)
syz_emit_ethernet(0x16, &(0x7f00000000c0)=ANY=[], 0x0)
truncate(&(0x7f0000000200)='./file0\x00', 0x8)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000ff0700000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000160ce691415cd4320df6d1f1d11e3d09c2069c3c3edab2470d688cf39caa89cce129d01f3d426e7ff1bdcfd8d25ecff01f3fe53a29851f9abbf9eabaeece20506897f457ceb1419bb7fd66f1fa9a31f5782d4df9ab46b45c44de733b4304bece94fb7047773ba8acde4d"])

206.478469ms ago: executing program 3 (id=3961):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="e3042abd7000fbdbdf254400000800030000", @ANYBLOB="34002380060004009800000006000100b000000005001e0001000000080017000000000006000d00060000000500110001000000"], 0x50}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ftruncate(r8, 0x9)
recvfrom(r7, &(0x7f0000000540)=""/189, 0xbd, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r11)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0218fd000d0000000000000000000000030005000000000002000000e0ee5adf6d46b1cc8700000005001700000000000a004e2300000008fc1008000000000000000000000000010000080400000000030006000000000002000000e00000020000000000000000"], 0x68}}, 0x4000)

0s ago: executing program 0 (id=3962):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc0100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000"], 0xf8}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6}]}}}]}, 0x4c}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty, 0xfffffffc}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x1]}}, 0x5c)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x3a, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/144, 0x0})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='quota\x00\x00\x00')
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6)

kernel console output (not intermixed with test programs):

 RDI: 0000000000000004
[ 1344.221478][T20396] RBP: 00007f082f2660a0 R08: 0000000000000000 R09: 0000000000000000
[ 1344.229485][T20396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1344.237584][T20396] R13: 000000000000000b R14: 00007f082e703f60 R15: 00007ffc83f04868
[ 1344.245694][T20396]  </TASK>
[ 1344.409664][T20403] ip6gretap0 speed is unknown, defaulting to 1000
[ 1344.466751][T20409] FAULT_INJECTION: forcing a failure.
[ 1344.466751][T20409] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1344.512410][T20409] CPU: 0 PID: 20409 Comm: syz.4.3581 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1344.522641][T20409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1344.532744][T20409] Call Trace:
[ 1344.536154][T20409]  <TASK>
[ 1344.539124][T20409]  dump_stack_lvl+0x241/0x360
[ 1344.543868][T20409]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1344.549202][T20409]  ? __pfx__printk+0x10/0x10
[ 1344.553944][T20409]  ? snprintf+0xda/0x120
[ 1344.558245][T20409]  should_fail_ex+0x3b0/0x4e0
[ 1344.563059][T20409]  _copy_to_user+0x2f/0xb0
[ 1344.567534][T20409]  simple_read_from_buffer+0xca/0x150
[ 1344.572998][T20409]  proc_fail_nth_read+0x1e9/0x250
[ 1344.578095][T20409]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1344.585788][T20409]  ? rw_verify_area+0x520/0x6b0
[ 1344.585833][T20409]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1344.585868][T20409]  vfs_read+0x204/0xbc0
[ 1344.585904][T20409]  ? __pfx_lock_release+0x10/0x10
[ 1344.585931][T20409]  ? fput+0x193/0x210
[ 1344.585966][T20409]  ? __pfx_vfs_read+0x10/0x10
[ 1344.586003][T20409]  ? __fget_files+0x29/0x470
[ 1344.586031][T20409]  ? __fget_files+0x3f6/0x470
[ 1344.586072][T20409]  ksys_read+0x1a0/0x2c0
[ 1344.586113][T20409]  ? __pfx_ksys_read+0x10/0x10
[ 1344.586149][T20409]  ? do_syscall_64+0x100/0x230
[ 1344.586189][T20409]  ? do_syscall_64+0xb6/0x230
[ 1344.586226][T20409]  do_syscall_64+0xf3/0x230
[ 1344.586262][T20409]  ? clear_bhb_loop+0x35/0x90
[ 1344.586301][T20409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1344.586335][T20409] RIP: 0033:0x7ff6643746bc
[ 1344.586358][T20409] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48
[ 1344.586379][T20409] RSP: 002b:00007ff665073040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1344.586407][T20409] RAX: ffffffffffffffda RBX: 00007ff664503f60 RCX: 00007ff6643746bc
[ 1344.586426][T20409] RDX: 000000000000000f RSI: 00007ff6650730b0 RDI: 0000000000000003
[ 1344.586443][T20409] RBP: 00007ff6650730a0 R08: 0000000000000000 R09: 0000000000000000
[ 1344.586466][T20409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1344.586482][T20409] R13: 000000000000000b R14: 00007ff664503f60 R15: 00007fff606fbf28
[ 1344.586519][T20409]  </TASK>
[ 1344.900965][T20421] FAULT_INJECTION: forcing a failure.
[ 1344.900965][T20421] name failslab, interval 1, probability 0, space 0, times 0
[ 1344.901002][T20421] CPU: 0 PID: 20421 Comm: syz.4.3584 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1344.901029][T20421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1344.901044][T20421] Call Trace:
[ 1344.901055][T20421]  <TASK>
[ 1344.901066][T20421]  dump_stack_lvl+0x241/0x360
[ 1344.901110][T20421]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1344.901147][T20421]  ? __pfx__printk+0x10/0x10
[ 1344.901188][T20421]  ? ima_get_action+0x75/0xb0
[ 1344.901217][T20421]  should_fail_ex+0x3b0/0x4e0
[ 1344.901253][T20421]  ? __alloc_skb+0x1c3/0x440
[ 1344.901291][T20421]  should_failslab+0x9/0x20
[ 1344.901319][T20421]  kmem_cache_alloc_node_noprof+0x71/0x320
[ 1344.901356][T20421]  __alloc_skb+0x1c3/0x440
[ 1344.901382][T20421]  ? mark_lock+0x9a/0x350
[ 1344.901416][T20421]  ? __pfx___alloc_skb+0x10/0x10
[ 1344.901455][T20421]  pfkey_sendmsg+0x187/0x1020
[ 1344.901498][T20421]  ? smack_socket_sendmsg+0x172/0x540
[ 1344.901534][T20421]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1344.901566][T20421]  ? tomoyo_socket_sendmsg_permission+0x288/0x420
[ 1344.901603][T20421]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[ 1344.901638][T20421]  ? __pfx___might_resched+0x10/0x10
[ 1344.901670][T20421]  ? __might_fault+0xaa/0x120
[ 1344.901700][T20421]  ? __pfx_lock_release+0x10/0x10
[ 1344.901726][T20421]  ? __import_iovec+0x536/0x820
[ 1344.901756][T20421]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1344.901780][T20421]  ? security_socket_sendmsg+0x87/0xb0
[ 1344.901818][T20421]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1344.901846][T20421]  __sock_sendmsg+0x221/0x270
[ 1344.901874][T20421]  ____sys_sendmsg+0x525/0x7d0
[ 1344.901917][T20421]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1344.901967][T20421]  __sys_sendmmsg+0x3b2/0x740
[ 1344.902041][T20421]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1344.902115][T20421]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1344.902146][T20421]  ? ksys_write+0x23e/0x2c0
[ 1344.902182][T20421]  ? __pfx_lock_release+0x10/0x10
[ 1344.902216][T20421]  ? vfs_write+0x7c4/0xc90
[ 1344.902258][T20421]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 1344.902294][T20421]  ? __pfx_vfs_write+0x10/0x10
[ 1344.902357][T20421]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1344.902388][T20421]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1344.902416][T20421]  ? do_syscall_64+0x100/0x230
[ 1344.902455][T20421]  __x64_sys_sendmmsg+0xa0/0xb0
[ 1344.902490][T20421]  do_syscall_64+0xf3/0x230
[ 1344.902525][T20421]  ? clear_bhb_loop+0x35/0x90
[ 1344.902564][T20421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1344.902597][T20421] RIP: 0033:0x7ff664375bd9
[ 1344.902619][T20421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1344.902640][T20421] RSP: 002b:00007ff665073048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1344.902668][T20421] RAX: ffffffffffffffda RBX: 00007ff664503f60 RCX: 00007ff664375bd9
[ 1344.902687][T20421] RDX: 001c15e33101f29d RSI: 0000000020000180 RDI: 0000000000000003
[ 1344.902705][T20421] RBP: 00007ff6650730a0 R08: 0000000000000000 R09: 0000000000000000
[ 1344.902722][T20421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1344.902738][T20421] R13: 000000000000000b R14: 00007ff664503f60 R15: 00007fff606fbf28
[ 1344.902774][T20421]  </TASK>
[ 1346.775787][T20404] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1346.777493][T20412] tty tty22: ldisc open failed (-12), clearing slot 21
[ 1346.782469][T20404] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1346.962347][T20429] ptm ptm0: ldisc open failed (-12), clearing slot 0
[ 1347.041065][T20404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1347.048774][T20404] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1347.058599][T20404] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1347.065901][T20404] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1347.130271][T20404] team0: Port device bridge0 added
[ 1347.139079][T20447] program syz.1.3590 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1347.729630][T20459] input: syz0 as /devices/virtual/input/input137
[ 1347.854893][T20451] FAULT_INJECTION: forcing a failure.
[ 1347.854893][T20451] name failslab, interval 1, probability 0, space 0, times 0
[ 1347.894586][T20451] CPU: 0 PID: 20451 Comm: syz.1.3590 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1347.904803][T20451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1347.914953][T20451] Call Trace:
[ 1347.918232][T20451]  <TASK>
[ 1347.921165][T20451]  dump_stack_lvl+0x241/0x360
[ 1347.925883][T20451]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1347.931101][T20451]  ? __pfx__printk+0x10/0x10
[ 1347.935707][T20451]  ? __pfx___might_resched+0x10/0x10
[ 1347.941148][T20451]  ? prepend_path+0x2f/0xbe0
[ 1347.945754][T20451]  should_fail_ex+0x3b0/0x4e0
[ 1347.950453][T20451]  ? tomoyo_encode+0x26f/0x540
[ 1347.955267][T20451]  should_failslab+0x9/0x20
[ 1347.959825][T20451]  __kmalloc_noprof+0xd8/0x400
[ 1347.964638][T20451]  tomoyo_encode+0x26f/0x540
[ 1347.969285][T20451]  tomoyo_realpath_from_path+0x59e/0x5e0
[ 1347.974961][T20451]  tomoyo_path_number_perm+0x23a/0x880
[ 1347.980457][T20451]  ? tomoyo_path_number_perm+0x208/0x880
[ 1347.986116][T20451]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1347.992171][T20451]  ? __fget_files+0x29/0x470
[ 1347.996777][T20451]  ? __fget_files+0x3f6/0x470
[ 1348.001475][T20451]  ? __fget_files+0x29/0x470
[ 1348.006176][T20451]  security_file_ioctl+0x75/0xb0
[ 1348.011134][T20451]  __se_sys_ioctl+0x47/0x170
[ 1348.015764][T20451]  do_syscall_64+0xf3/0x230
[ 1348.020320][T20451]  ? clear_bhb_loop+0x35/0x90
[ 1348.025044][T20451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1348.031059][T20451] RIP: 0033:0x7f082e575bd9
[ 1348.035493][T20451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1348.055226][T20451] RSP: 002b:00007f082dfff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1348.063677][T20451] RAX: ffffffffffffffda RBX: 00007f082e704038 RCX: 00007f082e575bd9
[ 1348.071670][T20451] RDX: 00000000200000c0 RSI: 00000000c0045627 RDI: 000000000000000c
[ 1348.079652][T20451] RBP: 00007f082dfff0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1348.087634][T20451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1348.095724][T20451] R13: 000000000000006e R14: 00007f082e704038 R15: 00007ffc83f04868
[ 1348.103724][T20451]  </TASK>
[ 1348.198931][T20451] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1348.242475][T20460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3594'.
[ 1348.274009][ T5145] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1348.471661][ T5145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[ 1348.501231][ T5145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[ 1348.511371][ T5145] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1348.524792][ T5145] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1348.533944][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1348.546818][ T5145] usb 4-1: config 0 descriptor??
[ 1349.441424][T17997] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1349.993975][T17997] usb 2-1: Using ep0 maxpacket: 16
[ 1350.071599][T17997] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1350.100411][T17997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.130266][T17997] usb 2-1: Product: syz
[ 1350.140568][T20488] program syz.0.3601 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1350.142190][T17997] usb 2-1: Manufacturer: syz
[ 1350.181781][T17997] usb 2-1: SerialNumber: syz
[ 1350.211892][T17997] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1350.228527][T17997] r8152-cfgselector 2-1: config 0 descriptor??
[ 1350.444510][T17997] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1350.454580][T17997] r8152-cfgselector 2-1: bad CDC descriptors
[ 1350.469447][T17997] r8152-cfgselector 2-1: USB disconnect, device number 87
[ 1351.145745][ T5145] usbhid 4-1:0.0: can't add hid device: -71
[ 1351.153155][ T5145] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1351.180633][ T5145] usb 4-1: USB disconnect, device number 103
[ 1352.724851][T20509] FAULT_INJECTION: forcing a failure.
[ 1352.724851][T20509] name failslab, interval 1, probability 0, space 0, times 0
[ 1352.783846][T20509] CPU: 1 PID: 20509 Comm: syz.4.3607 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1352.794084][T20509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1352.804276][T20509] Call Trace:
[ 1352.807587][T20509]  <TASK>
[ 1352.810559][T20509]  dump_stack_lvl+0x241/0x360
[ 1352.815314][T20509]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1352.820562][T20509]  ? __pfx__printk+0x10/0x10
[ 1352.825201][T20509]  ? __pfx___might_resched+0x10/0x10
[ 1352.830550][T20509]  ? prepend_path+0x2f/0xbe0
[ 1352.835191][T20509]  should_fail_ex+0x3b0/0x4e0
[ 1352.840016][T20509]  ? tomoyo_encode+0x26f/0x540
[ 1352.844829][T20509]  should_failslab+0x9/0x20
[ 1352.849386][T20509]  __kmalloc_noprof+0xd8/0x400
[ 1352.854231][T20509]  tomoyo_encode+0x26f/0x540
[ 1352.858959][T20509]  tomoyo_realpath_from_path+0x59e/0x5e0
[ 1352.864647][T20509]  tomoyo_path_number_perm+0x23a/0x880
[ 1352.870167][T20509]  ? tomoyo_path_number_perm+0x208/0x880
[ 1352.875850][T20509]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1352.881937][T20509]  ? __fget_files+0x29/0x470
[ 1352.886666][T20509]  ? __fget_files+0x3f6/0x470
[ 1352.891403][T20509]  ? __fget_files+0x29/0x470
[ 1352.896056][T20509]  security_file_ioctl+0x75/0xb0
[ 1352.901043][T20509]  __se_sys_ioctl+0x47/0x170
[ 1352.905687][T20509]  do_syscall_64+0xf3/0x230
[ 1352.910257][T20509]  ? clear_bhb_loop+0x35/0x90
[ 1352.914985][T20509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1352.921011][T20509] RIP: 0033:0x7ff664375bd9
[ 1352.925469][T20509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1352.945212][T20509] RSP: 002b:00007ff663dff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1352.953676][T20509] RAX: ffffffffffffffda RBX: 00007ff664504038 RCX: 00007ff664375bd9
[ 1352.961705][T20509] RDX: 0000000020000040 RSI: 0000000040046109 RDI: 0000000000000003
[ 1352.969722][T20509] RBP: 00007ff663dff0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1352.977740][T20509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1352.985757][T20509] R13: 000000000000006e R14: 00007ff664504038 R15: 00007fff606fbf28
[ 1352.993792][T20509]  </TASK>
[ 1352.996960][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1353.006135][T20512] veth0_vlan: entered allmulticast mode
[ 1353.032806][T20509] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1353.138699][T20515] veth0_vlan: left promiscuous mode
[ 1353.198564][T20515] veth0_vlan: entered promiscuous mode
[ 1354.059404][T20521] input: syz0 as /devices/virtual/input/input138
[ 1354.114027][T17985] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1354.663842][T20543] program syz.0.3616 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1355.753751][ T5145] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1356.343995][ T5145] usb 3-1: Using ep0 maxpacket: 8
[ 1356.670823][ T5145] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1356.687658][ T2466] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1357.113741][ T5145] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1357.124076][ T5145] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1357.154953][ T5145] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1357.189238][ T5145] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1357.218345][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1357.479966][ T5145] usb 3-1: GET_CAPABILITIES returned 0
[ 1357.490753][ T5145] usbtmc 3-1:16.0: can't read capabilities
[ 1357.690065][ T5145] usb 3-1: USB disconnect, device number 92
[ 1358.493996][ T5145] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1358.583896][T17985] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1358.893920][ T5145] usb 4-1: Using ep0 maxpacket: 8
[ 1358.934705][ T5145] usb 4-1: device descriptor read/all, error -71
[ 1358.953021][T20593] input: syz0 as /devices/virtual/input/input139
[ 1359.164116][T20600] FAT-fs (nullb0): bogus number of reserved sectors
[ 1359.213317][T20600] FAT-fs (nullb0): Can't find a valid FAT filesystem
[ 1359.355363][T20600] netlink: 'syz.0.3633': attribute type 1 has an invalid length.
[ 1359.397371][T20600] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.3633'.
[ 1360.184907][T20604] mkiss: ax0: crc mode is auto.
[ 1362.117037][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.485303][T20642] dummy0: entered promiscuous mode
[ 1362.490771][T20642] macsec1: entered allmulticast mode
[ 1362.518851][T20642] dummy0: entered allmulticast mode
[ 1362.566363][T20642] dummy0: left allmulticast mode
[ 1362.584564][T20642] dummy0: left promiscuous mode
[ 1362.812219][T20652] 9pnet: Could not find request transport: &d
[ 1362.914772][T17985] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1363.106617][T17985] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1363.142016][T20662] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[ 1363.151361][T20662] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[ 1363.320520][T20663] input: syz0 as /devices/virtual/input/input140
[ 1363.467705][T20667] FAULT_INJECTION: forcing a failure.
[ 1363.467705][T20667] name failslab, interval 1, probability 0, space 0, times 0
[ 1363.480701][T20667] CPU: 0 PID: 20667 Comm: syz.4.3651 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1363.490892][T20667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1363.500973][T20667] Call Trace:
[ 1363.504287][T20667]  <TASK>
[ 1363.507243][T20667]  dump_stack_lvl+0x241/0x360
[ 1363.511967][T20667]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1363.517204][T20667]  ? __pfx__printk+0x10/0x10
[ 1363.521923][T20667]  ? __pfx___might_resched+0x10/0x10
[ 1363.527283][T20667]  ? prepend_path+0x2f/0xbe0
[ 1363.531907][T20667]  should_fail_ex+0x3b0/0x4e0
[ 1363.536628][T20667]  ? tomoyo_encode+0x26f/0x540
[ 1363.541422][T20667]  should_failslab+0x9/0x20
[ 1363.545956][T20667]  __kmalloc_noprof+0xd8/0x400
[ 1363.550761][T20667]  tomoyo_encode+0x26f/0x540
[ 1363.555574][T20667]  tomoyo_realpath_from_path+0x59e/0x5e0
[ 1363.561251][T20667]  tomoyo_path_number_perm+0x23a/0x880
[ 1363.566756][T20667]  ? tomoyo_path_number_perm+0x208/0x880
[ 1363.572432][T20667]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1363.578506][T20667]  ? __fget_files+0x29/0x470
[ 1363.583125][T20667]  ? __fget_files+0x3f6/0x470
[ 1363.587844][T20667]  ? __fget_files+0x29/0x470
[ 1363.592732][T20667]  security_file_ioctl+0x75/0xb0
[ 1363.597707][T20667]  __se_sys_ioctl+0x47/0x170
[ 1363.602339][T20667]  do_syscall_64+0xf3/0x230
[ 1363.606895][T20667]  ? clear_bhb_loop+0x35/0x90
[ 1363.611614][T20667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1363.617547][T20667] RIP: 0033:0x7ff664375bd9
[ 1363.622000][T20667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1363.641642][T20667] RSP: 002b:00007ff663dde048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1363.650092][T20667] RAX: ffffffffffffffda RBX: 00007ff664504110 RCX: 00007ff664375bd9
[ 1363.658108][T20667] RDX: 0000000020000400 RSI: 00000000c06864a2 RDI: 0000000000000006
[ 1363.666115][T20667] RBP: 00007ff663dde0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1363.674118][T20667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1363.682121][T20667] R13: 000000000000006e R14: 00007ff664504110 R15: 00007fff606fbf28
[ 1363.690316][T20667]  </TASK>
[ 1363.695020][T20667] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1364.903912][T17985] Bluetooth: hci5: command 0x0406 tx timeout
[ 1365.216333][T17997] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1365.403696][T17998] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1365.533718][T17995] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1365.547349][T17997] usb 4-1: Using ep0 maxpacket: 32
[ 1365.570807][T17997] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1365.581542][T17997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1365.613677][T17998] usb 1-1: Using ep0 maxpacket: 32
[ 1365.623133][T17997] usb 4-1: config 0 descriptor??
[ 1365.633003][T17998] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1365.651131][T17997] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1365.659341][T17998] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1365.681855][T17998] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1365.704025][ T5145] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1365.704669][T17997] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1365.729849][T17998] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1365.751999][T17997] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1365.761381][T17998] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1365.772527][T17995] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1365.783729][T17997] usb 4-1: media controller created
[ 1365.793761][T17995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1365.846445][T17998] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1365.866466][T17995] usb 3-1: config 0 descriptor??
[ 1365.879294][T17997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1365.887818][T17998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1365.896285][T17998] usb 1-1: Product: syz
[ 1365.898310][ T5145] usb 5-1: device descriptor read/64, error -71
[ 1365.909348][T17998] usb 1-1: Manufacturer: syz
[ 1365.916580][T17998] usb 1-1: SerialNumber: syz
[ 1366.287849][T17997] usb 4-1: selecting invalid altsetting 1
[ 1366.303455][T20701] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3662'.
[ 1366.313002][T17997] set interface failed
[ 1366.313064][T17997] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1366.340861][T17998] cdc_ncm 1-1:1.0: bind() failure
[ 1366.352606][T17997] error writing reg: 0xff, val: 0x00
[ 1366.380765][T17998] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[ 1366.393844][ T5145] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1366.413739][T17998] cdc_ncm 1-1:1.1: bind() failure
[ 1366.477105][T17998] usb 1-1: USB disconnect, device number 93
[ 1366.506710][T17997] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1366.527892][T17997] usb 4-1: USB disconnect, device number 106
[ 1366.555134][T17995] [drm:udl_init] *ERROR* Selecting channel failed
[ 1366.582278][ T5145] usb 5-1: device descriptor read/64, error -71
[ 1366.612898][T17995] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 1366.621081][T17995] [drm] Initialized udl on minor 2
[ 1366.638154][T17995] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1366.651982][T17995] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1366.670017][T17996] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1366.681027][T17995] usb 3-1: USB disconnect, device number 93
[ 1366.688272][T17996] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1366.714249][ T5145] usb usb5-port1: attempt power cycle
[ 1367.153741][ T5145] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1367.210028][ T5145] usb 5-1: device descriptor read/8, error -71
[ 1367.636685][T20717] input: syz0 as /devices/virtual/input/input141
[ 1367.723787][ T5145] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1367.757232][ T5145] usb 5-1: device descriptor read/8, error -71
[ 1367.894176][ T5145] usb usb5-port1: unable to enumerate USB device
[ 1368.832926][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3671'.
[ 1369.833025][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'.
[ 1369.842376][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'.
[ 1370.700938][T17997] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1371.109764][T17997] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1371.119063][T17997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1371.139146][T17997] usb 3-1: config 0 descriptor??
[ 1371.228575][T20762] input: syz0 as /devices/virtual/input/input142
[ 1371.643737][T15408] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1371.700600][T17997] [drm:udl_init] *ERROR* Selecting channel failed
[ 1371.749673][T17997] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 1371.767546][T17997] [drm] Initialized udl on minor 2
[ 1371.781929][T17997] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1371.806637][T17997] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1371.826321][T17998] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1371.843826][T15408] usb 1-1: Using ep0 maxpacket: 32
[ 1371.852167][T17998] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1371.860210][T17997] usb 3-1: USB disconnect, device number 94
[ 1371.864826][T15408] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1371.874492][T17998] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1371.896222][T15408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1371.945656][T15408] usb 1-1: config 0 descriptor??
[ 1371.957207][T15408] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1371.982700][T15408] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1372.004175][T15408] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1372.010887][T15408] usb 1-1: media controller created
[ 1372.068199][T15408] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1372.111213][T15408] usb 1-1: selecting invalid altsetting 1
[ 1372.117861][T15408] set interface failed
[ 1372.117894][T15408] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1372.134911][T15408] error writing reg: 0xff, val: 0x00
[ 1372.259623][T15408] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1372.471288][ T5133] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1373.463756][ T5133] usb 2-1: Using ep0 maxpacket: 32
[ 1373.471810][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1373.565668][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1373.627453][ T5133] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1373.682415][ T5133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.733690][ T5133] usb 2-1: Product: syz
[ 1373.750790][ T5133] usb 2-1: Manufacturer: syz
[ 1373.787926][ T5133] usb 2-1: SerialNumber: syz
[ 1373.833779][ T5133] usb 2-1: config 0 descriptor??
[ 1373.984588][T15408] usb 1-1: USB disconnect, device number 94
[ 1374.414364][T20792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3683'.
[ 1377.679991][T17997] usb 2-1: USB disconnect, device number 88
[ 1378.727306][T20808] input: syz0 as /devices/virtual/input/input143
[ 1379.111336][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1379.140031][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1379.151111][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1379.177274][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1379.223713][ T5092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1379.232802][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1379.382458][T20811] ip6gretap0 speed is unknown, defaulting to 1000
[ 1379.657240][T20819] FAULT_INJECTION: forcing a failure.
[ 1379.657240][T20819] name failslab, interval 1, probability 0, space 0, times 0
[ 1379.680501][T20819] CPU: 1 PID: 20819 Comm: syz.4.3697 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1379.690719][T20819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1379.700813][T20819] Call Trace:
[ 1379.704122][T20819]  <TASK>
[ 1379.707090][T20819]  dump_stack_lvl+0x241/0x360
[ 1379.711831][T20819]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1379.717177][T20819]  ? __pfx__printk+0x10/0x10
[ 1379.721856][T20819]  ? __mutex_unlock_slowpath+0x21d/0x750
[ 1379.727536][T20819]  should_fail_ex+0x3b0/0x4e0
[ 1379.732262][T20819]  ? __alloc_skb+0x1c3/0x440
[ 1379.736899][T20819]  should_failslab+0x9/0x20
[ 1379.741439][T20819]  kmem_cache_alloc_node_noprof+0x71/0x320
[ 1379.747287][T20819]  ? nft_pernet+0x1ef/0x240
[ 1379.751842][T20819]  __alloc_skb+0x1c3/0x440
[ 1379.756312][T20819]  ? __pfx___alloc_skb+0x10/0x10
[ 1379.761301][T20819]  ? netlink_ack_tlv_len+0x6e/0x200
[ 1379.766540][T20819]  netlink_ack+0x13f/0xa30
[ 1379.770995][T20819]  ? __pfx_nf_tables_abort+0x10/0x10
[ 1379.776324][T20819]  ? nfnetlink_rcv+0x11b8/0x2a80
[ 1379.781303][T20819]  ? nfnetlink_rcv+0x1219/0x2a80
[ 1379.786288][T20819]  nfnetlink_rcv+0x24f9/0x2a80
[ 1379.791094][T20819]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1379.797486][T20819]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1379.802659][T20819]  ? __dev_queue_xmit+0x2d2/0x3d30
[ 1379.807851][T20819]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1379.813177][T20819]  ? skb_clone+0x240/0x390
[ 1379.817652][T20819]  ? __pfx_lock_release+0x10/0x10
[ 1379.822737][T20819]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1379.827993][T20819]  netlink_unicast+0x7ea/0x980
[ 1379.832820][T20819]  ? __pfx_netlink_unicast+0x10/0x10
[ 1379.838145][T20819]  ? __virt_addr_valid+0x183/0x520
[ 1379.843304][T20819]  ? __check_object_size+0x49c/0x900
[ 1379.848640][T20819]  ? bpf_lsm_netlink_send+0x9/0x10
[ 1379.853804][T20819]  netlink_sendmsg+0x8db/0xcb0
[ 1379.858628][T20819]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1379.864062][T20819]  ? __import_iovec+0x536/0x820
[ 1379.868972][T20819]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1379.874295][T20819]  ? security_socket_sendmsg+0x87/0xb0
[ 1379.879795][T20819]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1379.885123][T20819]  __sock_sendmsg+0x221/0x270
[ 1379.889855][T20819]  ____sys_sendmsg+0x525/0x7d0
[ 1379.894765][T20819]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1379.900124][T20819]  __sys_sendmsg+0x2b0/0x3a0
[ 1379.904767][T20819]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1379.909919][T20819]  ? vfs_write+0x7c4/0xc90
[ 1379.914431][T20819]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1379.920800][T20819]  ? do_syscall_64+0x100/0x230
[ 1379.925613][T20819]  ? do_syscall_64+0xb6/0x230
[ 1379.930337][T20819]  do_syscall_64+0xf3/0x230
[ 1379.934889][T20819]  ? clear_bhb_loop+0x35/0x90
[ 1379.939876][T20819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.945812][T20819] RIP: 0033:0x7ff664375bd9
[ 1379.950269][T20819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1379.969916][T20819] RSP: 002b:00007ff665073048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1379.978370][T20819] RAX: ffffffffffffffda RBX: 00007ff664503f60 RCX: 00007ff664375bd9
[ 1379.986356][T20819] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 1379.994345][T20819] RBP: 00007ff6650730a0 R08: 0000000000000000 R09: 0000000000000000
[ 1380.002357][T20819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1380.010351][T20819] R13: 000000000000000b R14: 00007ff664503f60 R15: 00007fff606fbf28
[ 1380.018367][T20819]  </TASK>
[ 1380.165094][T20811] chnl_net:caif_netlink_parms(): no params data found
[ 1380.507460][T20811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1380.546618][T20811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1380.560521][T20811] bridge_slave_0: entered allmulticast mode
[ 1380.585597][T20811] bridge_slave_0: entered promiscuous mode
[ 1380.606767][T20811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1380.657365][T20811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1380.694655][T20811] bridge_slave_1: entered allmulticast mode
[ 1380.743181][T20811] bridge_slave_1: entered promiscuous mode
[ 1380.971474][T20811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1381.000992][T20811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1381.131810][T20811] team0: Port device team_slave_0 added
[ 1381.178774][T20811] team0: Port device team_slave_1 added
[ 1381.313810][T17985] Bluetooth: hci2: command tx timeout
[ 1381.336630][T20811] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1381.357963][T20811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1381.483638][T20811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1381.537968][T20811] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1381.554232][T20811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1381.621295][T20811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1381.815614][T20811] hsr_slave_0: entered promiscuous mode
[ 1381.830019][T20811] hsr_slave_1: entered promiscuous mode
[ 1381.845525][T20811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1381.865849][T20811] Cannot create hsr debugfs directory
[ 1381.993830][   T58] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1382.186992][   T58] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1382.215908][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1382.301571][   T58] usb 5-1: config 0 descriptor??
[ 1382.671575][T20811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1382.911843][T20811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.229276][T20811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.386093][T17985] Bluetooth: hci2: command tx timeout
[ 1383.470448][T20811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.507560][   T58] [drm:udl_init] *ERROR* Selecting channel failed
[ 1383.552719][   T58] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[ 1383.586301][   T58] [drm] Initialized udl on minor 2
[ 1383.610553][   T58] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1383.639631][   T58] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1383.650333][ T5133] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1383.667927][ T5133] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1383.686584][   T58] usb 5-1: USB disconnect, device number 106
[ 1383.704109][ T5133] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1383.715415][T17985] Bluetooth: hci4: ACL packet for unknown connection handle 0
[ 1384.050491][T20811] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1384.173871][T17996] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1384.321675][T20811] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1384.375730][T20811] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1384.403234][T17996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1384.406181][T20859] input: syz0 as /devices/virtual/input/input145
[ 1384.440152][T17996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1384.444486][T20811] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1384.451214][ T5092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1384.467331][T17996] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[ 1384.479221][ T5092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1384.487435][T17996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1384.496860][ T5092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1384.517020][ T5092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1384.527612][T17996] usb 3-1: config 0 descriptor??
[ 1384.534347][ T5092] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1384.542808][ T5092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1384.724903][T20860] ip6gretap0 speed is unknown, defaulting to 1000
[ 1384.943439][T20811] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1384.967117][T17996] hid (null): report_id 0 is invalid
[ 1384.983050][T17996] logitech-hidpp-device 0003:046D:C086.0009: report_id 0 is invalid
[ 1384.996246][T17996] logitech-hidpp-device 0003:046D:C086.0009: item 0 0 1 8 parsing failed
[ 1385.016474][T17996] logitech-hidpp-device 0003:046D:C086.0009: hidpp_probe:parse failed
[ 1385.033017][T17996] logitech-hidpp-device 0003:046D:C086.0009: probe with driver logitech-hidpp-device failed with error -22
[ 1385.135576][T20811] 8021q: adding VLAN 0 to HW filter on device team0
[ 1385.177088][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1385.184381][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1385.254308][ T5133] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1385.448882][ T5133] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1385.463420][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1385.464060][T17985] Bluetooth: hci2: command tx timeout
[ 1385.466147][T17998] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1385.477587][T17998] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1385.503523][ T5133] usb 5-1: config 0 descriptor??
[ 1385.613217][T20860] chnl_net:caif_netlink_parms(): no params data found
[ 1385.964306][T15408] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1386.079769][T20860] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1386.096967][T20860] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1386.111423][ T5133] [drm:udl_init] *ERROR* Selecting channel failed
[ 1386.124552][T20860] bridge_slave_0: entered allmulticast mode
[ 1386.153340][T20860] bridge_slave_0: entered promiscuous mode
[ 1386.163949][T15408] usb 2-1: Using ep0 maxpacket: 32
[ 1386.183442][T20860] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1386.188061][ T5133] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[ 1386.202566][T20860] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1386.218595][T20860] bridge_slave_1: entered allmulticast mode
[ 1386.224168][ T5133] [drm] Initialized udl on minor 2
[ 1386.229915][T15408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1386.234989][T20860] bridge_slave_1: entered promiscuous mode
[ 1386.243904][ T5133] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1386.267444][T15408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1386.294243][ T5133] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1386.301466][T15410] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1386.309848][T15408] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1386.334646][T15410] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1386.342843][T15410] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1386.350150][ T5133] usb 5-1: USB disconnect, device number 107
[ 1386.361521][T15408] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1386.383675][T15408] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1386.409895][T15408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1386.421290][T15408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1386.457494][T15408] usb 2-1: Product: syz
[ 1386.461735][T15408] usb 2-1: Manufacturer: syz
[ 1386.467363][T20860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1386.473965][T15408] usb 2-1: SerialNumber: syz
[ 1386.524880][T20860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1386.585248][T17985] Bluetooth: hci5: command tx timeout
[ 1386.731854][T20860] team0: Port device team_slave_0 added
[ 1386.777202][T15408] cdc_ncm 2-1:1.0: bind() failure
[ 1386.795984][T20860] team0: Port device team_slave_1 added
[ 1386.796794][T15408] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1386.842188][T15408] cdc_ncm 2-1:1.1: bind() failure
[ 1386.854725][ T5133] usb 3-1: USB disconnect, device number 95
[ 1386.885327][T15408] usb 2-1: USB disconnect, device number 89
[ 1387.033244][T20860] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1387.052231][T20860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1387.162711][T20860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1387.188552][T20860] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1387.198813][T20860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1387.228970][T20860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1387.551086][T17985] Bluetooth: hci2: command tx timeout
[ 1387.561919][T20811] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1387.597935][T20860] hsr_slave_0: entered promiscuous mode
[ 1387.626346][T20860] hsr_slave_1: entered promiscuous mode
[ 1387.667321][T20860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1387.698890][T20860] Cannot create hsr debugfs directory
[ 1388.292395][T20905] input: syz0 as /devices/virtual/input/input146
[ 1388.421932][T20811] veth0_vlan: entered promiscuous mode
[ 1388.536234][T20860] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1388.612249][T20811] veth1_vlan: entered promiscuous mode
[ 1388.664630][T17985] Bluetooth: hci5: command tx timeout
[ 1388.695689][T20860] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1388.723875][T17995] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1388.870771][T20860] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1388.924114][T17995] usb 3-1: Using ep0 maxpacket: 32
[ 1388.941400][T17995] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1388.950995][T17995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1388.979139][T20811] veth0_macvtap: entered promiscuous mode
[ 1388.990282][T17995] usb 3-1: config 0 descriptor??
[ 1389.020139][T17995] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1389.034552][T17995] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1389.087299][T17995] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1389.104307][T17995] usb 3-1: media controller created
[ 1389.116495][T20860] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1389.151729][T17995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1389.185631][T20811] veth1_macvtap: entered promiscuous mode
[ 1389.193968][T17995] usb 3-1: selecting invalid altsetting 1
[ 1389.199738][T17995] set interface failed
[ 1389.199768][T17995] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1389.261640][T17995] error writing reg: 0xff, val: 0x00
[ 1389.278499][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1389.341067][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.375965][T17995] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1389.384239][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1389.396224][ T5133] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1389.433643][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.462606][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1389.499651][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.511368][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1389.528863][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.544942][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1389.562440][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.577438][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1389.595965][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.611780][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1389.624430][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.643415][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1389.656781][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.705844][ T5133] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1389.708753][T20811] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1389.755514][T17995] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1389.772063][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1389.791049][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1389.805356][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.848953][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1389.872989][ T5133] usb 2-1: config 0 descriptor??
[ 1389.917402][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.944448][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1389.965456][T17995] usb 5-1: Using ep0 maxpacket: 8
[ 1389.976890][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1389.992333][T17995] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1390.003095][T17995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1390.013320][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1390.029258][T17995] usb 5-1: Product: syz
[ 1390.035234][T17995] usb 5-1: Manufacturer: syz
[ 1390.045651][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1390.057829][T17995] usb 5-1: SerialNumber: syz
[ 1390.088400][T17995] usb 5-1: config 0 descriptor??
[ 1390.094899][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1390.112834][T17995] gspca_main: se401-2.14.0 probing 047d:5003
[ 1390.123451][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1390.148368][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1390.169934][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1390.188354][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1390.208349][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1390.230332][T20811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1390.294835][T20811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1390.339837][T20811] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1390.487713][T20811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.500320][T20811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.511579][T20811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.522323][T20811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.716972][T20860] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1390.744948][T17985] Bluetooth: hci5: command tx timeout
[ 1390.788622][T20860] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1390.808145][T20860] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1390.890153][T20860] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1390.931808][ T5133] [drm:udl_init] *ERROR* Selecting channel failed
[ 1391.010561][ T5133] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[ 1391.136951][ T5133] [drm] Initialized udl on minor 2
[ 1391.154299][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1391.164382][ T5133] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1391.179722][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1391.227123][ T5133] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1391.312323][T10387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1391.337237][T15410] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1391.345612][T10387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1391.363357][ T5133] usb 2-1: USB disconnect, device number 90
[ 1391.398274][T17995] gspca_se401: write req failed req 0x57 val 0x00 error -110
[ 1391.407230][T15410] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1391.459890][T17995] se401 5-1:0.0: probe with driver se401 failed with error -110
[ 1391.535726][T15410] usb 3-1: USB disconnect, device number 96
[ 1391.720862][T20860] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1391.770827][T20860] 8021q: adding VLAN 0 to HW filter on device team0
[ 1391.851933][T17998] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1391.859260][T17998] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1391.928364][T14906] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1391.935651][T14906] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1392.143917][T15410] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1392.152365][T20860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1392.365454][T15410] usb 1-1: Using ep0 maxpacket: 32
[ 1392.385448][T15410] usb 1-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 64
[ 1392.439267][T15410] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1392.478617][T15410] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1392.522281][T15410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1392.557199][T15410] usb 1-1: Product: syz
[ 1392.564628][T20934] FAULT_INJECTION: forcing a failure.
[ 1392.564628][T20934] name failslab, interval 1, probability 0, space 0, times 0
[ 1392.579582][T15410] usb 1-1: Manufacturer: syz
[ 1392.594118][T20934] CPU: 1 PID: 20934 Comm: syz.1.3727 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1392.604348][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1392.614450][T20934] Call Trace:
[ 1392.617766][T20934]  <TASK>
[ 1392.620735][T20934]  dump_stack_lvl+0x241/0x360
[ 1392.625473][T20934]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1392.630800][T20934]  ? __pfx__printk+0x10/0x10
[ 1392.635429][T20934]  ? ref_tracker_alloc+0x332/0x490
[ 1392.640567][T20934]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1392.646056][T20934]  should_fail_ex+0x3b0/0x4e0
[ 1392.650756][T20934]  ? skb_clone+0x20c/0x390
[ 1392.655200][T20934]  should_failslab+0x9/0x20
[ 1392.659812][T20934]  kmem_cache_alloc_noprof+0x6c/0x2a0
[ 1392.665211][T20934]  skb_clone+0x20c/0x390
[ 1392.669478][T20934]  __netlink_deliver_tap+0x3cc/0x7c0
[ 1392.674851][T20934]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1392.680113][T20934]  netlink_deliver_tap+0x19d/0x1b0
[ 1392.685446][T20934]  netlink_sendskb+0x68/0x140
[ 1392.690188][T20934]  netlink_unicast+0x39d/0x980
[ 1392.695024][T20934]  ? __asan_memcpy+0x40/0x70
[ 1392.699764][T20934]  ? __pfx_netlink_unicast+0x10/0x10
[ 1392.705103][T20934]  netlink_rcv_skb+0x262/0x430
[ 1392.709913][T20934]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1392.715506][T20934]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1392.720841][T20934]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1392.726158][T20934]  netlink_unicast+0x7ea/0x980
[ 1392.730949][T20934]  ? __pfx_netlink_unicast+0x10/0x10
[ 1392.736339][T20934]  ? __virt_addr_valid+0x183/0x520
[ 1392.741476][T20934]  ? __check_object_size+0x49c/0x900
[ 1392.746779][T20934]  ? bpf_lsm_netlink_send+0x9/0x10
[ 1392.751937][T20934]  netlink_sendmsg+0x8db/0xcb0
[ 1392.756823][T20934]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1392.762141][T20934]  ? __import_iovec+0x536/0x820
[ 1392.767125][T20934]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1392.772528][T20934]  ? security_socket_sendmsg+0x87/0xb0
[ 1392.778028][T20934]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1392.783341][T20934]  __sock_sendmsg+0x221/0x270
[ 1392.788041][T20934]  ____sys_sendmsg+0x525/0x7d0
[ 1392.792838][T20934]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1392.798165][T20934]  __sys_sendmsg+0x2b0/0x3a0
[ 1392.802778][T20934]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1392.807955][T20934]  ? vfs_write+0x7c4/0xc90
[ 1392.812440][T20934]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1392.818995][T20934]  ? do_syscall_64+0x100/0x230
[ 1392.823967][T20934]  ? do_syscall_64+0xb6/0x230
[ 1392.828860][T20934]  do_syscall_64+0xf3/0x230
[ 1392.833395][T20934]  ? clear_bhb_loop+0x35/0x90
[ 1392.838125][T20934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1392.844053][T20934] RIP: 0033:0x7f082e575bd9
[ 1392.848498][T20934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1392.868220][T20934] RSP: 002b:00007f082f266048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1392.876657][T20934] RAX: ffffffffffffffda RBX: 00007f082e703f60 RCX: 00007f082e575bd9
[ 1392.884639][T20934] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[ 1392.892619][T20934] RBP: 00007f082f2660a0 R08: 0000000000000000 R09: 0000000000000000
[ 1392.900605][T20934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1392.908592][T20934] R13: 000000000000000b R14: 00007f082e703f60 R15: 00007ffc83f04868
[ 1392.916687][T20934]  </TASK>
[ 1392.950225][T15410] usb 1-1: SerialNumber: syz
[ 1393.023059][T20919] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1393.031118][T17985] Bluetooth: hci5: command tx timeout
[ 1393.539893][T20860] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1393.696125][T15410] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[ 1394.665379][T15410] usb 1-1: USB disconnect, device number 95
[ 1394.795843][T20860] veth0_vlan: entered promiscuous mode
[ 1394.820530][T20860] veth1_vlan: entered promiscuous mode
[ 1395.046340][T20951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3731'.
[ 1395.092236][T20860] veth0_macvtap: entered promiscuous mode
[ 1395.142077][T20860] veth1_macvtap: entered promiscuous mode
[ 1395.177150][ T5133] usb 5-1: USB disconnect, device number 108
[ 1395.324591][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1395.369422][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1395.402771][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1395.460884][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1395.538717][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1395.624086][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1395.662476][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1395.720700][T20959] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1395.732879][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1395.756157][T17998] usb 2-1: new low-speed USB device number 91 using dummy_hcd
[ 1395.768531][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1395.808976][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1395.820149][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1395.831899][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1395.842112][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1395.864842][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1395.886131][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1395.897543][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1395.919106][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1395.947933][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.005205][T20860] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1396.018972][T17998] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[ 1396.064524][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1396.084299][T17998] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1396.105001][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.108943][T17998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.137465][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1396.169632][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.194480][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1396.219647][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.240284][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1396.260768][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.313490][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1396.336762][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.359538][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1396.383622][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.408438][T17998] usb 2-1: string descriptor 0 read error: -71
[ 1396.427443][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1396.439287][T17998] hub 2-1:32.0: USB hub found
[ 1396.446542][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.458288][T17998] hub 2-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1396.466425][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1396.502399][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.535752][T20860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1396.548550][T20860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1396.565257][T20860] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1396.574559][T17998] usb 2-1: USB disconnect, device number 91
[ 1396.602306][T20860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1396.624372][T20860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1396.633154][T20860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1396.633905][T15410] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1396.662805][T20860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1396.843877][T15410] usb 1-1: Using ep0 maxpacket: 32
[ 1396.857657][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1396.859142][T15410] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1396.878287][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1396.884266][T15410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.926602][T15410] usb 1-1: config 0 descriptor??
[ 1396.947376][T15410] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1396.981511][T15410] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1396.990265][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1396.994004][T15410] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1397.021903][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1397.033931][T20976] FAULT_INJECTION: forcing a failure.
[ 1397.033931][T20976] name failslab, interval 1, probability 0, space 0, times 0
[ 1397.047886][T20976] CPU: 1 PID: 20976 Comm: syz.4.3739 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1397.058099][T20976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1397.068203][T20976] Call Trace:
[ 1397.071526][T20976]  <TASK>
[ 1397.074500][T20976]  dump_stack_lvl+0x241/0x360
[ 1397.079233][T20976]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1397.084473][T20976]  ? __pfx__printk+0x10/0x10
[ 1397.089132][T20976]  should_fail_ex+0x3b0/0x4e0
[ 1397.093865][T20976]  ? io_cqring_event_overflow+0xd3/0x660
[ 1397.099552][T20976]  should_failslab+0x9/0x20
[ 1397.104107][T20976]  __kmalloc_noprof+0xd8/0x400
[ 1397.108952][T20976]  io_cqring_event_overflow+0xd3/0x660
[ 1397.114487][T20976]  io_req_cqe_overflow+0xf2/0x150
[ 1397.119582][T20976]  __io_submit_flush_completions+0x2c4/0xcf0
[ 1397.125635][T20976]  ? __pfx___io_submit_flush_completions+0x10/0x10
[ 1397.132238][T20976]  ? percpu_ref_get_many+0x1f/0x1d0
[ 1397.137516][T20976]  io_handle_tw_list+0x473/0x500
[ 1397.142535][T20976]  tctx_task_work_run+0x9a/0x370
[ 1397.147533][T20976]  tctx_task_work+0x9a/0x100
[ 1397.152152][T20976]  ? __pfx_tctx_task_work+0x10/0x10
[ 1397.157458][T20976]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1397.162679][T20976]  ? lockdep_hardirqs_on+0x99/0x150
[ 1397.167904][T20976]  task_work_run+0x24f/0x310
[ 1397.172518][T20976]  ? __pfx_task_work_run+0x10/0x10
[ 1397.177675][T20976]  ? __sys_recvmsg+0x319/0x3e0
[ 1397.182452][T20976]  get_signal+0x15e6/0x1740
[ 1397.186994][T20976]  ? fput+0x193/0x210
[ 1397.190993][T20976]  ? __pfx___sys_recvmsg+0x10/0x10
[ 1397.196172][T20976]  ? __pfx_get_signal+0x10/0x10
[ 1397.201146][T20976]  arch_do_signal_or_restart+0x96/0x860
[ 1397.206746][T20976]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1397.212974][T20976]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1397.219079][T20976]  ? syscall_exit_to_user_mode+0xa3/0x360
[ 1397.224845][T20976]  syscall_exit_to_user_mode+0xc9/0x360
[ 1397.230456][T20976]  do_syscall_64+0x100/0x230
[ 1397.235096][T20976]  ? clear_bhb_loop+0x35/0x90
[ 1397.239830][T20976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1397.245773][T20976] RIP: 0033:0x7ff664375bd9
[ 1397.250201][T20976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1397.269826][T20976] RSP: 002b:00007ff665073048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1397.278265][T20976] RAX: fffffffffffffe00 RBX: 00007ff664503f60 RCX: 00007ff664375bd9
[ 1397.286247][T20976] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003
[ 1397.294225][T20976] RBP: 00007ff6650730a0 R08: 0000000000000000 R09: 0000000000000000
[ 1397.302203][T20976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1397.310203][T20976] R13: 000000000000000b R14: 00007ff664503f60 R15: 00007fff606fbf28
[ 1397.318229][T20976]  </TASK>
[ 1397.330208][T15410] usb 1-1: media controller created
[ 1397.372735][T15410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1397.584810][T15410] usb 1-1: selecting invalid altsetting 1
[ 1397.590610][T15410] set interface failed
[ 1397.590642][T15410] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1397.611851][T15410] error writing reg: 0xff, val: 0x00
[ 1397.744896][T15410] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1397.790751][T15410] usb 1-1: USB disconnect, device number 96
[ 1397.993881][ T5133] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1398.174122][ T5133] usb 5-1: Using ep0 maxpacket: 8
[ 1398.199956][ T5133] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1398.213959][T17997] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1398.223492][ T5133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1398.251520][ T5133] usb 5-1: Product: syz
[ 1398.264007][ T5133] usb 5-1: Manufacturer: syz
[ 1398.279024][ T5133] usb 5-1: SerialNumber: syz
[ 1398.302792][ T5133] usb 5-1: config 0 descriptor??
[ 1398.320974][ T5133] gspca_main: se401-2.14.0 probing 047d:5003
[ 1398.417324][T17997] usb 3-1: config 1 interface 0 altsetting 105 endpoint 0x81 has an invalid bInterval 42, changing to 9
[ 1398.451738][T17997] usb 3-1: config 1 interface 0 altsetting 105 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1398.481704][T17997] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1398.502368][T17997] usb 3-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.40
[ 1398.515122][T17997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1398.532245][T17997] usb 3-1: Product: 亄항龋쨕眷₸嵡滎ꗼ諊ﶌ㔣復㮬竻ꙩ剩ⴛ쒪绱媑뿟㛀룯痶㎶悬淕㢓ꦕ䰱⨈벀㟹瞋腦艃舜꺲肃苲㒔⺤ᔣ竭Ц䛑│掙羣茿癯䕸쀦襧瀯ꚬ〒삺牘ꂂ댓ሂࡪ鵱ﮢ㌕⺠聿킄㕩ぼՃ쒝쐡笏㱴૳ఛ餤鏎䊻ę㼼룹䣁ࢷ뚆涧尉丿灞㞴엜밈氁ㅂᆀⷱ嘧玪ᶾ贗䨫̿Ŀ虼̙慚頍为
[ 1398.601184][T17997] usb 3-1: Manufacturer: 튨ﻡ䶿릇堒栗ꅢݝ律べ仞䊩㛏臏橧앜뷬挕♐ꫝ육煴䳿洞ͧ擼잠ሇ灮㶥㪓鵜檣㖶ᇩ寮릹膖練䛻卖⥣ŷꩇ㲨⑴萦ዣ窅갋棋殮鞔뿩ਪ赊
[ 1398.626510][T17997] usb 3-1: SerialNumber: ﴙꊝ踽隨蘖삧땁◜﹁욍穰督좋쇅ᅔ뜚ጒ撪蟄났킫ᇣ랓ᎏ咣伒칠ᖕ社痳骁Ʀﰭⱝಣ쩚⑭袠浑䌽龶쎝◪ꖇ닕⏡䚷烌䆋뽬讃䕔픖᾿눗깺渎헀଴ﲒ꩞懑즾᧗븿␙䟆瞠ⲿႃ鿐혢쟐８䗱난쬳퓃ᨰ푁Ꮵ攂塑ꨜ텺풰㥝櫣ᣢ䧜騲彑ᶧ鐾ㄇ
[ 1398.995481][T21015] binder: 20982:21015 ioctl 4018620d 0 returned -22
[ 1399.159172][T17997] usbhid 3-1:1.0: can't add hid device: -71
[ 1399.199302][T17997] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 1399.236296][T17997] usb 3-1: USB disconnect, device number 97
[ 1399.313727][ T5145] usb 1-1: new low-speed USB device number 97 using dummy_hcd
[ 1399.544355][ T5133] gspca_se401: write req failed req 0x57 val 0x00 error -110
[ 1399.597967][ T5145] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[ 1399.610719][ T5133] se401 5-1:0.0: probe with driver se401 failed with error -110
[ 1399.694262][ T5145] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1399.721191][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1400.163979][ T5145] usb 1-1: string descriptor 0 read error: -71
[ 1400.191483][ T5145] hub 1-1:32.0: USB hub found
[ 1400.232470][T15410] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1400.249559][ T5145] hub 1-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1400.405107][ T5145] usb 1-1: USB disconnect, device number 97
[ 1400.485863][T15410] usb 4-1: Using ep0 maxpacket: 32
[ 1400.510503][T15410] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1400.550051][T15410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1400.594349][T15410] usb 4-1: config 0 descriptor??
[ 1400.620480][T15410] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1400.661961][T15410] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1400.682765][T15410] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1400.698472][T15410] usb 4-1: media controller created
[ 1400.787416][T15410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1400.915709][T15410] usb 4-1: selecting invalid altsetting 1
[ 1400.931912][T15410] set interface failed
[ 1400.932050][T15410] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1400.943009][T15410] error writing reg: 0xff, val: 0x00
[ 1401.281459][T15410] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1401.338731][T15410] usb 4-1: USB disconnect, device number 107
[ 1401.903795][T15410] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1402.133944][T15410] usb 3-1: Using ep0 maxpacket: 32
[ 1402.141558][T15410] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1402.151000][T15410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1402.171805][T15410] usb 3-1: config 0 descriptor??
[ 1402.195887][T15410] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1402.218627][T15410] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1402.251418][T15410] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1402.278358][T15410] usb 3-1: media controller created
[ 1402.316796][T21053] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3764'.
[ 1402.367278][   T25] usb 5-1: USB disconnect, device number 109
[ 1402.375185][T21053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3764'.
[ 1402.400512][T15410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1402.401754][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3764'.
[ 1402.421659][T17995] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1402.668836][T15410] usb 3-1: selecting invalid altsetting 1
[ 1402.675405][T21053] ipvlan2: entered allmulticast mode
[ 1402.680833][T15410] set interface failed
[ 1402.680867][T15410] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1402.691642][T21053] veth0_vlan: entered allmulticast mode
[ 1402.698998][T15410] error writing reg: 0xff, val: 0x00
[ 1402.782379][T15410] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1402.806254][T17995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1402.823994][T15410] usb 3-1: USB disconnect, device number 98
[ 1402.835765][T17995] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1402.883946][T17995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1402.905278][T17995] usb 4-1: config 0 descriptor??
[ 1403.260751][   T29] audit: type=1326 audit(1720295711.948:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21070 comm="syz.0.3770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0953b75bd9 code=0x0
[ 1403.431872][T17985] Bluetooth: hci5: Dropping invalid advertising data
[ 1403.440545][T17985] Bluetooth: hci5: Malformed LE Event: 0x02
[ 1403.492617][T17995] ath6kl: Failed to submit usb control message: -71
[ 1403.511436][T17995] ath6kl: unable to send the bmi data to the device: -71
[ 1403.540601][T17995] ath6kl: Unable to send get target info: -71
[ 1403.575831][T17995] ath6kl: Failed to init ath6kl core: -71
[ 1403.590868][T17995] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1403.645744][T17995] usb 4-1: USB disconnect, device number 108
[ 1404.026980][T21087] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3777'.
[ 1404.059703][T21087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3777'.
[ 1404.087310][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3777'.
[ 1404.103997][T21087] ipvlan2: entered allmulticast mode
[ 1404.110496][T21087] veth0_vlan: entered allmulticast mode
[ 1404.224273][T21093] netlink: 'syz.0.3778': attribute type 10 has an invalid length.
[ 1404.251459][T21093] bond0: (slave bond_slave_0): Releasing backup interface
[ 1404.532264][T21108] netdevsim netdevsim1: Direct firmware load for ng failed with error -2
[ 1404.553671][T21108] netdevsim netdevsim1: Falling back to sysfs fallback for: ng
[ 1404.936788][T17995] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1405.155281][T17995] usb 1-1: Using ep0 maxpacket: 32
[ 1405.174999][T17995] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1405.203683][T17995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1405.255921][T17995] usb 1-1: config 0 descriptor??
[ 1405.295690][T17995] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1405.347722][T17995] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1405.378507][T17995] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1405.423478][T17995] usb 1-1: media controller created
[ 1405.549771][T17995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1405.575817][   T29] audit: type=1326 audit(1720295714.258:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21122 comm="syz.1.3788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f082e575bd9 code=0x0
[ 1405.834393][T17995] usb 1-1: selecting invalid altsetting 1
[ 1405.841284][T17995] set interface failed
[ 1405.844455][T17995] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1405.887709][T17995] error writing reg: 0xff, val: 0x00
[ 1405.993240][T17995] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1406.050829][T17995] usb 1-1: USB disconnect, device number 98
[ 1406.154203][T21134] netlink: 'syz.2.3791': attribute type 1 has an invalid length.
[ 1406.162389][T21134] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.3791'.
[ 1407.119985][T17985] Bluetooth: hci2: ACL packet for unknown connection handle 3152
[ 1407.193809][T17985] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 1407.264280][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1407.271002][ T5092] Bluetooth: Wrong link type (-22)
[ 1407.277215][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1407.284045][ T5092] Bluetooth: Wrong link type (-22)
[ 1407.289876][ T5092] Bluetooth: hci0: link tx timeout
[ 1407.295970][ T5092] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1407.464789][T17995] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1407.654344][T15410] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1408.047363][T15410] usb 2-1: Using ep0 maxpacket: 32
[ 1408.423793][T15410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1408.436748][T17985] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1408.443279][T17985] Bluetooth: Wrong link type (-22)
[ 1408.448524][T17985] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1408.455095][T17985] Bluetooth: Wrong link type (-22)
[ 1408.460256][T17985] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 1408.466808][T17985] Bluetooth: Wrong link type (-22)
[ 1408.474759][T17985] Bluetooth: hci0: link tx timeout
[ 1408.479885][T17985] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1408.513724][T17995] usb 1-1: Using ep0 maxpacket: 32
[ 1408.544481][T21167] netdevsim netdevsim4: Direct firmware load for ng failed with error -2
[ 1408.553793][T21167] netdevsim netdevsim4: Falling back to sysfs fallback for: ng
[ 1408.561580][T15410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1408.572723][T17995] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[ 1408.585012][T17995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.615712][T17995] usb 1-1: config 0 descriptor??
[ 1408.625698][T15410] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1408.627970][T17995] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state
[ 1408.653638][T15410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1408.664935][T17995] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1408.672051][T17995] dvb_usb_anysee 1-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[ 1408.689256][T15410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1408.722978][T15410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1408.737748][T15410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1408.791235][T15410] usb 2-1: Product: syz
[ 1408.813749][T15410] usb 2-1: Manufacturer: syz
[ 1408.818488][T15410] usb 2-1: SerialNumber: syz
[ 1408.871214][ T5133] usb 1-1: USB disconnect, device number 99
[ 1409.212361][T21183] netlink: 'syz.3.3804': attribute type 8 has an invalid length.
[ 1409.256632][T17985] Bluetooth: hci0: command tx timeout
[ 1409.324009][T17995] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1409.958509][T15410] cdc_ncm 2-1:1.0: bind() failure
[ 1409.967853][T15410] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1409.974881][T15410] cdc_ncm 2-1:1.1: bind() failure
[ 1409.987773][T15410] usb 2-1: USB disconnect, device number 92
[ 1410.155700][T17995] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1410.183684][T17995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1410.237544][T17995] usb 3-1: config 0 descriptor??
[ 1410.255772][T21190] pim6reg1: entered promiscuous mode
[ 1410.273321][T21190] pim6reg1: entered allmulticast mode
[ 1411.072714][ T5133] kernel write not supported for file bpf-prog (pid: 5133 comm: kworker/1:3)
[ 1411.315641][ T5092] Bluetooth: hci0: command 0x0406 tx timeout
[ 1412.034476][T17995] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1412.043058][T17995] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1412.065493][T17995] [drm:udl_init] *ERROR* Selecting channel failed
[ 1412.116549][T17995] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 1412.154316][T17995] [drm] Initialized udl on minor 2
[ 1412.217401][T17995] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1412.238636][T17995] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1412.266816][T15405] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1412.281177][T17995] usb 3-1: USB disconnect, device number 99
[ 1412.290073][T21223] netdevsim netdevsim1: Direct firmware load for ng failed with error -2
[ 1412.298024][T15405] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1412.305250][T21223] netdevsim netdevsim1: Falling back to sysfs fallback for: ng
[ 1412.895121][T17995] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1413.123885][T17995] usb 1-1: Using ep0 maxpacket: 32
[ 1413.158095][T17995] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1413.167455][T17995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1413.190820][T17995] usb 1-1: config 0 descriptor??
[ 1413.198941][T17995] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1413.209034][T17995] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1413.220846][T17995] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1413.234372][T17995] usb 1-1: media controller created
[ 1413.271063][T17995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1413.285864][ T5145] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1413.286202][T17996] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1413.313084][T17995] usb 1-1: selecting invalid altsetting 1
[ 1413.318950][T17995] set interface failed
[ 1413.318979][T17995] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1413.329778][T17995] error writing reg: 0xff, val: 0x00
[ 1413.333679][T15405] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1413.371132][T17995] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1413.483790][T17996] usb 3-1: Using ep0 maxpacket: 32
[ 1413.490748][ T5145] usb 5-1: Using ep0 maxpacket: 32
[ 1413.505680][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1413.508956][T17996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 52, changing to 7
[ 1413.533796][T17996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1413.542856][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 9272, setting to 1024
[ 1413.556123][T15405] usb 2-1: Using ep0 maxpacket: 32
[ 1413.561947][T15405] usb 2-1: config 0 has no interfaces?
[ 1413.569081][T17996] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1413.578579][T15405] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[ 1413.588076][T17996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.602414][T15405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1413.613246][T17996] usb 3-1: Product: syz
[ 1413.625810][T15405] usb 2-1: config 0 descriptor??
[ 1413.631114][T17996] usb 3-1: Manufacturer: syz
[ 1413.638702][T17996] usb 3-1: SerialNumber: syz
[ 1413.647483][ T5145] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8
[ 1413.650684][T17996] usb 3-1: config 0 descriptor??
[ 1413.671044][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.690463][ T5145] usb 5-1: Product: syz
[ 1413.698393][ T5145] usb 5-1: Manufacturer: syz
[ 1413.703177][ T5145] usb 5-1: SerialNumber: syz
[ 1413.713754][ T5145] usb 5-1: config 0 descriptor??
[ 1413.967339][T15405] usb 1-1: USB disconnect, device number 100
[ 1414.009284][T21244] vlan2: entered promiscuous mode
[ 1414.120390][T17996] usb 2-1: USB disconnect, device number 93
[ 1414.238304][T21254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3821'.
[ 1417.978742][T17997] usb 3-1: USB disconnect, device number 100
[ 1418.235176][T17995] usb 5-1: USB disconnect, device number 110
[ 1418.589697][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1418.589718][ T5092] Bluetooth: Wrong link type (-22)
[ 1418.589809][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1418.589820][ T5092] Bluetooth: Wrong link type (-22)
[ 1418.659054][T21275] netdevsim netdevsim1: Direct firmware load for ng failed with error -2
[ 1418.659204][T21275] netdevsim netdevsim1: Falling back to sysfs fallback for: ng
[ 1418.673493][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1418.673520][ T5092] Bluetooth: Wrong link type (-22)
[ 1418.674230][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1418.674251][ T5092] Bluetooth: Wrong link type (-22)
[ 1418.674323][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 1418.674341][ T5092] Bluetooth: Wrong link type (-22)
[ 1418.815365][T17996] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1419.004181][T17996] usb 1-1: Using ep0 maxpacket: 8
[ 1419.038137][T17996] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1419.091165][T17996] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[ 1419.127765][T17996] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1419.167167][T17996] usb 1-1: Manufacturer: syz
[ 1419.206515][T17996] usb 1-1: config 0 descriptor??
[ 1419.247135][T17996] appledisplay 1-1:0.0: Could not find int-in endpoint
[ 1419.265944][T17996] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1419.485315][T21260] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3827'.
[ 1419.643256][T21260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3827'.
[ 1419.696700][ T5145] usb 1-1: USB disconnect, device number 101
[ 1419.731565][T21291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3838'.
[ 1419.775440][T21291] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3838'.
[ 1419.952119][T21297] FAULT_INJECTION: forcing a failure.
[ 1419.952119][T21297] name failslab, interval 1, probability 0, space 0, times 0
[ 1419.966270][T21297] CPU: 1 PID: 21297 Comm: syz.1.3841 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1419.976520][T21297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1419.986622][T21297] Call Trace:
[ 1419.989943][T21297]  <TASK>
[ 1419.992903][T21297]  dump_stack_lvl+0x241/0x360
[ 1419.997694][T21297]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1420.002949][T21297]  ? __pfx__printk+0x10/0x10
[ 1420.007602][T21297]  ? netlink_insert+0x10b7/0x14b0
[ 1420.012726][T21297]  should_fail_ex+0x3b0/0x4e0
[ 1420.017567][T21297]  ? __alloc_skb+0x1c3/0x440
[ 1420.022207][T21297]  should_failslab+0x9/0x20
[ 1420.026744][T21297]  kmem_cache_alloc_node_noprof+0x71/0x320
[ 1420.032713][T21297]  __alloc_skb+0x1c3/0x440
[ 1420.037186][T21297]  ? __pfx___alloc_skb+0x10/0x10
[ 1420.042171][T21297]  ? netlink_autobind+0xd6/0x2f0
[ 1420.047239][T21297]  ? netlink_autobind+0x2b0/0x2f0
[ 1420.052331][T21297]  netlink_sendmsg+0x631/0xcb0
[ 1420.057160][T21297]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1420.062471][T21297]  ? __import_iovec+0x536/0x820
[ 1420.067353][T21297]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1420.072649][T21297]  ? security_socket_sendmsg+0x87/0xb0
[ 1420.078153][T21297]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1420.083541][T21297]  __sock_sendmsg+0x221/0x270
[ 1420.088242][T21297]  ____sys_sendmsg+0x525/0x7d0
[ 1420.093029][T21297]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1420.098358][T21297]  __sys_sendmsg+0x2b0/0x3a0
[ 1420.103065][T21297]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1420.108192][T21297]  ? vfs_write+0x7c4/0xc90
[ 1420.112678][T21297]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1420.119103][T21297]  ? do_syscall_64+0x100/0x230
[ 1420.123890][T21297]  ? do_syscall_64+0xb6/0x230
[ 1420.128588][T21297]  do_syscall_64+0xf3/0x230
[ 1420.133128][T21297]  ? clear_bhb_loop+0x35/0x90
[ 1420.137827][T21297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1420.143752][T21297] RIP: 0033:0x7f082e575bd9
[ 1420.148177][T21297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1420.167971][T21297] RSP: 002b:00007f082f266048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1420.176402][T21297] RAX: ffffffffffffffda RBX: 00007f082e703f60 RCX: 00007f082e575bd9
[ 1420.184386][T21297] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 1420.192366][T21297] RBP: 00007f082f2660a0 R08: 0000000000000000 R09: 0000000000000000
[ 1420.200348][T21297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1420.208338][T21297] R13: 000000000000000b R14: 00007f082e703f60 R15: 00007ffc83f04868
[ 1420.216341][T21297]  </TASK>
[ 1420.576149][ T5145] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1420.590069][ T5092] Bluetooth: hci5: command tx timeout
[ 1420.945720][ T5145] usb 4-1: Using ep0 maxpacket: 32
[ 1420.961501][ T5145] usb 4-1: config 0 has no interfaces?
[ 1421.123674][ T5145] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[ 1421.151545][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1421.167160][T17985] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1421.197298][ T2466] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1421.223044][ T5145] usb 4-1: config 0 descriptor??
[ 1421.236991][T17985] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1421.269850][T21324] netdevsim netdevsim2: Direct firmware load for ng failed with error -2
[ 1421.288746][T21324] netdevsim netdevsim2: Falling back to sysfs fallback for: ng
[ 1421.510769][T21299] FAULT_INJECTION: forcing a failure.
[ 1421.510769][T21299] name failslab, interval 1, probability 0, space 0, times 0
[ 1421.542072][T21299] CPU: 1 PID: 21299 Comm: syz.3.3842 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1421.552284][T21299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1421.562408][T21299] Call Trace:
[ 1421.565727][T21299]  <TASK>
[ 1421.568695][T21299]  dump_stack_lvl+0x241/0x360
[ 1421.573449][T21299]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1421.578711][T21299]  ? __pfx__printk+0x10/0x10
[ 1421.583371][T21299]  should_fail_ex+0x3b0/0x4e0
[ 1421.588105][T21299]  ? rtnl_newlink+0xf2/0x20a0
[ 1421.592826][T21299]  should_failslab+0x9/0x20
[ 1421.597378][T21299]  kmalloc_trace_noprof+0x6c/0x2c0
[ 1421.602541][T21299]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1421.607614][T21299]  rtnl_newlink+0xf2/0x20a0
[ 1421.612150][T21299]  ? __kernel_text_address+0xd/0x40
[ 1421.617404][T21299]  ? __mutex_trylock_common+0x183/0x2e0
[ 1421.622988][T21299]  ? __pfx___might_resched+0x10/0x10
[ 1421.628293][T21299]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1421.633335][T21299]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1421.639275][T21299]  ? rcu_is_watching+0x15/0xb0
[ 1421.644055][T21299]  ? trace_contention_end+0x3c/0x120
[ 1421.649351][T21299]  ? __mutex_lock+0x2ef/0xd70
[ 1421.654043][T21299]  ? rcu_read_unlock+0x87/0xa0
[ 1421.658829][T21299]  ? do_syscall_64+0xf3/0x230
[ 1421.663521][T21299]  ? rtnetlink_rcv_msg+0x842/0x1180
[ 1421.668750][T21299]  ? __pfx_lock_release+0x10/0x10
[ 1421.673788][T21299]  ? __pfx___mutex_lock+0x10/0x10
[ 1421.678838][T21299]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1421.683900][T21299]  rtnetlink_rcv_msg+0x89b/0x1180
[ 1421.688967][T21299]  ? rtnetlink_rcv_msg+0x208/0x1180
[ 1421.694198][T21299]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1421.699696][T21299]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1421.705703][T21299]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1421.712047][T21299]  ? __local_bh_enable_ip+0x168/0x200
[ 1421.717431][T21299]  ? lockdep_hardirqs_on+0x99/0x150
[ 1421.722643][T21299]  ? __local_bh_enable_ip+0x168/0x200
[ 1421.728034][T21299]  ? dev_hard_start_xmit+0x773/0x7e0
[ 1421.733350][T21299]  ? __dev_queue_xmit+0x2d2/0x3d30
[ 1421.738500][T21299]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1421.744239][T21299]  ? __dev_queue_xmit+0x2d2/0x3d30
[ 1421.749363][T21299]  ? __dev_queue_xmit+0x16c9/0x3d30
[ 1421.754600][T21299]  ? __dev_queue_xmit+0x2d2/0x3d30
[ 1421.759753][T21299]  ? ref_tracker_free+0x643/0x7e0
[ 1421.764808][T21299]  netlink_rcv_skb+0x1e3/0x430
[ 1421.769589][T21299]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1421.775076][T21299]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1421.780673][T21299]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1421.785906][T21299]  netlink_unicast+0x7ea/0x980
[ 1421.790716][T21299]  ? __pfx_netlink_unicast+0x10/0x10
[ 1421.796022][T21299]  ? __virt_addr_valid+0x183/0x520
[ 1421.801259][T21299]  ? __check_object_size+0x49c/0x900
[ 1421.806603][T21299]  ? bpf_lsm_netlink_send+0x9/0x10
[ 1421.811741][T21299]  netlink_sendmsg+0x8db/0xcb0
[ 1421.816569][T21299]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1421.821958][T21299]  ? __import_iovec+0x536/0x820
[ 1421.826842][T21299]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1421.832156][T21299]  ? security_socket_sendmsg+0x87/0xb0
[ 1421.837664][T21299]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1421.842989][T21299]  __sock_sendmsg+0x221/0x270
[ 1421.847713][T21299]  ____sys_sendmsg+0x525/0x7d0
[ 1421.852514][T21299]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1421.857910][T21299]  __sys_sendmsg+0x2b0/0x3a0
[ 1421.862535][T21299]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1421.867672][T21299]  ? vfs_write+0x7c4/0xc90
[ 1421.872147][T21299]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1421.878523][T21299]  ? do_syscall_64+0x100/0x230
[ 1421.883329][T21299]  ? do_syscall_64+0xb6/0x230
[ 1421.888101][T21299]  do_syscall_64+0xf3/0x230
[ 1421.892678][T21299]  ? clear_bhb_loop+0x35/0x90
[ 1421.897385][T21299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1421.903324][T21299] RIP: 0033:0x7fbd19375bd9
[ 1421.907748][T21299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1421.927410][T21299] RSP: 002b:00007fbd1a16d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1421.935955][T21299] RAX: ffffffffffffffda RBX: 00007fbd19503f60 RCX: 00007fbd19375bd9
[ 1421.943951][T21299] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000e
[ 1421.952176][T21299] RBP: 00007fbd1a16d0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1421.960162][T21299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1421.968145][T21299] R13: 000000000000000b R14: 00007fbd19503f60 R15: 00007fff34a324b8
[ 1421.976147][T21299]  </TASK>
[ 1422.027619][T17997] usb 4-1: USB disconnect, device number 109
[ 1422.150207][T17985] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1422.183767][   T25] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1422.215271][T17985] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1422.336494][T21329] netdevsim netdevsim2: Direct firmware load for ng failed with error -2
[ 1422.353933][T21329] netdevsim netdevsim2: Falling back to sysfs fallback for: ng
[ 1422.468187][   T25] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1422.493821][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1422.517425][   T25] usb 2-1: config 0 descriptor??
[ 1422.670903][T21332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1422.984433][T17985] Bluetooth: hci4: command 0x0406 tx timeout
[ 1423.154000][ T5092] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1423.292243][   T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1423.303629][   T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1423.324236][   T25] [drm:udl_init] *ERROR* Selecting channel failed
[ 1423.356764][   T25] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[ 1423.373743][   T25] [drm] Initialized udl on minor 2
[ 1423.393136][   T25] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1423.437039][   T25] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1423.445556][ T5145] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1423.474128][   T25] usb 2-1: USB disconnect, device number 94
[ 1423.493802][ T5145] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[ 1423.542893][ T5145] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1423.554248][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.911558][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1423.911613][ T5092] Bluetooth: Wrong link type (-22)
[ 1423.911686][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1423.911697][ T5092] Bluetooth: Wrong link type (-22)
[ 1424.005784][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1424.005815][ T5092] Bluetooth: Wrong link type (-22)
[ 1424.005895][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1424.005912][ T5092] Bluetooth: Wrong link type (-22)
[ 1424.005977][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 1424.005994][ T5092] Bluetooth: Wrong link type (-22)
[ 1424.028042][T21361] netdevsim netdevsim4: Direct firmware load for ng failed with error -2
[ 1424.028116][T21361] netdevsim netdevsim4: Falling back to sysfs fallback for: ng
[ 1424.323809][T17997] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 1424.530946][T17997] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1424.601597][T17997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1424.647501][T17997] usb 3-1: config 0 descriptor??
[ 1424.704225][   T25] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 1424.905657][T21379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3862'.
[ 1424.947167][   T25] usb 1-1: Using ep0 maxpacket: 16
[ 1424.985866][   T25] usb 1-1: config index 0 descriptor too short (expected 64742, got 92)
[ 1425.004481][   T25] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping
[ 1425.052806][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1425.072549][ T5092] Bluetooth: hci4: command 0x0406 tx timeout
[ 1425.097061][   T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1425.107223][   T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1425.153326][   T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1425.164931][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.173016][   T25] usb 1-1: Product: syz
[ 1425.177485][   T25] usb 1-1: Manufacturer: syz
[ 1425.182120][   T25] usb 1-1: SerialNumber: syz
[ 1425.202757][   T25] cdc_ncm 1-1:1.0: skipping garbage
[ 1425.216501][T17997] [drm:udl_init] *ERROR* Selecting channel failed
[ 1425.223090][   T25] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 1425.256881][   T25] cdc_ncm 1-1:1.0: bind() failure
[ 1425.280861][T17997] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[ 1425.462296][T17997] [drm] Initialized udl on minor 2
[ 1425.480221][T17997] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1425.491674][T17997] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1425.502553][T17995] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1425.682722][T17997] usb 3-1: USB disconnect, device number 101
[ 1425.688144][ T2453] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1425.695645][T17995] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1425.817635][T21391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3867'.
[ 1425.887126][T17995] usb 1-1: USB disconnect, device number 102
[ 1425.944247][T17985] Bluetooth: hci0: command 0x0406 tx timeout
[ 1426.127465][T21397] xt_socket: unknown flags 0x50
[ 1426.194696][T15405] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1426.398797][T15405] usb 2-1: Using ep0 maxpacket: 32
[ 1426.412890][T15405] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[ 1426.429947][T15405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1426.469726][T15405] usb 2-1: config 0 descriptor??
[ 1426.487123][T15405] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state
[ 1426.535236][T15405] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1426.544131][T15405] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[ 1426.632716][T17985] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1426.640464][T17985] Bluetooth: Wrong link type (-22)
[ 1426.646374][T17985] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1426.655318][T17985] Bluetooth: Wrong link type (-22)
[ 1426.662141][T17985] Bluetooth: hci2: link tx timeout
[ 1426.669742][T17985] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1426.711324][T17985] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1426.718100][ T5145] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1426.725881][T17985] Bluetooth: Wrong link type (-22)
[ 1426.731432][T17985] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1426.738014][T17985] Bluetooth: Wrong link type (-22)
[ 1426.743244][T17985] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 1426.750400][T17985] Bluetooth: Wrong link type (-22)
[ 1426.756682][T17985] Bluetooth: hci2: link tx timeout
[ 1426.761856][T17985] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1426.869186][T17995] usb 2-1: USB disconnect, device number 95
[ 1426.953667][ T5145] usb 4-1: Using ep0 maxpacket: 32
[ 1426.970269][ T5145] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1426.981493][ T5145] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1426.996430][ T5145] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1427.009566][T21411] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[ 1427.028299][ T5145] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1427.052168][T21411] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[ 1427.062701][ T5145] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1427.112046][ T5145] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1427.121638][ T5145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1427.130007][ T5145] usb 4-1: Product: syz
[ 1427.134854][ T5145] usb 4-1: Manufacturer: syz
[ 1427.139701][ T5145] usb 4-1: SerialNumber: syz
[ 1427.401635][ T5145] cdc_ncm 4-1:1.0: bind() failure
[ 1427.426579][ T5145] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1427.449327][ T5145] cdc_ncm 4-1:1.1: bind() failure
[ 1427.497070][ T5145] usb 4-1: USB disconnect, device number 110
[ 1427.623800][ T5092] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1428.134619][T21419] netlink: 'syz.0.3879': attribute type 11 has an invalid length.
[ 1428.221280][T21419] fuse: Bad value for 'group_id'
[ 1428.423699][T17997] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1428.603868][T17995] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 1428.612471][T17997] usb 3-1: no configurations
[ 1428.617436][T17997] usb 3-1: can't read configurations, error -22
[ 1428.664837][ T5092] Bluetooth: hci2: command tx timeout
[ 1428.784005][T17997] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1428.813688][T17995] usb 1-1: Using ep0 maxpacket: 16
[ 1428.823835][T17995] usb 1-1: config 0 has an invalid interface number: 7 but max is 0
[ 1428.832425][T17995] usb 1-1: config 0 has no interface number 0
[ 1428.880044][T17995] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=2e.76
[ 1428.891093][T17995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1428.899987][T17995] usb 1-1: Product: syz
[ 1428.904532][T17995] usb 1-1: Manufacturer: syz
[ 1428.909473][T17995] usb 1-1: SerialNumber: syz
[ 1428.922555][T17995] usb 1-1: config 0 descriptor??
[ 1428.930436][T17995] usb 1-1: Expected 3 endpoints, found: 0
[ 1428.965396][T17997] usb 3-1: no configurations
[ 1428.973144][T17997] usb 3-1: can't read configurations, error -22
[ 1428.994188][T17997] usb usb3-port1: attempt power cycle
[ 1429.117097][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1429.123995][ T5090] Bluetooth: Wrong link type (-22)
[ 1429.129293][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1429.137338][ T5090] Bluetooth: Wrong link type (-22)
[ 1429.143960][T17998] usb 1-1: USB disconnect, device number 103
[ 1429.193659][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1429.200312][ T5090] Bluetooth: Wrong link type (-22)
[ 1429.206961][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1429.214860][ T5090] Bluetooth: Wrong link type (-22)
[ 1429.220051][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 1429.227176][ T5090] Bluetooth: Wrong link type (-22)
[ 1429.331937][T21444] netdevsim netdevsim4: Direct firmware load for ng failed with error -2
[ 1429.341275][T21444] netdevsim netdevsim4: Falling back to sysfs fallback for: ng
[ 1429.424421][T17997] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1429.625398][T17997] usb 3-1: no configurations
[ 1429.630060][T17997] usb 3-1: can't read configurations, error -22
[ 1429.818030][T19621] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1430.162201][T17997] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1430.214907][T17997] usb 3-1: no configurations
[ 1430.219643][T17997] usb 3-1: can't read configurations, error -22
[ 1430.363945][T15405] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1430.981077][ T5092] Bluetooth: hci2: command 0x0406 tx timeout
[ 1430.988300][T17997] usb usb3-port1: unable to enumerate USB device
[ 1431.143644][ T5092] Bluetooth: hci0: command 0x0406 tx timeout
[ 1431.185700][T15405] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1431.202555][T15405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1431.249562][T15405] usb 4-1: config 0 descriptor??
[ 1431.310557][T21469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3893'.
[ 1431.324487][T21469] FAULT_INJECTION: forcing a failure.
[ 1431.324487][T21469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1431.346479][T21469] CPU: 1 PID: 21469 Comm: syz.2.3893 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1431.356785][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1431.366873][T21469] Call Trace:
[ 1431.370188][T21469]  <TASK>
[ 1431.373162][T21469]  dump_stack_lvl+0x241/0x360
[ 1431.377970][T21469]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1431.383234][T21469]  ? __pfx__printk+0x10/0x10
[ 1431.387913][T21469]  should_fail_ex+0x3b0/0x4e0
[ 1431.392644][T21469]  _copy_to_user+0x2f/0xb0
[ 1431.397091][T21469]  simple_read_from_buffer+0xca/0x150
[ 1431.402527][T21469]  proc_fail_nth_read+0x1e9/0x250
[ 1431.407590][T21469]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1431.413181][T21469]  ? rw_verify_area+0x520/0x6b0
[ 1431.418082][T21469]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1431.423680][T21469]  vfs_read+0x204/0xbc0
[ 1431.427893][T21469]  ? __pfx_lock_release+0x10/0x10
[ 1431.432963][T21469]  ? __pfx_vfs_read+0x10/0x10
[ 1431.437702][T21469]  ? __fget_files+0x29/0x470
[ 1431.442314][T21469]  ? __fget_files+0x3f6/0x470
[ 1431.447034][T21469]  ksys_read+0x1a0/0x2c0
[ 1431.451313][T21469]  ? __pfx_ksys_read+0x10/0x10
[ 1431.456116][T21469]  ? do_syscall_64+0x100/0x230
[ 1431.460913][T21469]  ? do_syscall_64+0xb6/0x230
[ 1431.465627][T21469]  do_syscall_64+0xf3/0x230
[ 1431.470185][T21469]  ? clear_bhb_loop+0x35/0x90
[ 1431.474955][T21469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1431.480888][T21469] RIP: 0033:0x7fafb73746bc
[ 1431.485333][T21469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48
[ 1431.505137][T21469] RSP: 002b:00007fafb820d040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1431.513694][T21469] RAX: ffffffffffffffda RBX: 00007fafb7503f60 RCX: 00007fafb73746bc
[ 1431.521709][T21469] RDX: 000000000000000f RSI: 00007fafb820d0b0 RDI: 0000000000000003
[ 1431.529724][T21469] RBP: 00007fafb820d0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1431.537780][T21469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1431.545839][T21469] R13: 000000000000000b R14: 00007fafb7503f60 R15: 00007ffd44705b88
[ 1431.553897][T21469]  </TASK>
[ 1431.580510][ T5145] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1431.793950][ T5092] Bluetooth: hci3: command 0x1003 tx timeout
[ 1431.811572][ T5090] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1431.824224][ T5145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1431.968255][ T5145] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1431.979648][ T5145] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00
[ 1431.989163][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1432.014860][ T5145] usb 1-1: config 0 descriptor??
[ 1432.026466][ T5145] usbhid 1-1:0.0: can't add hid device: -22
[ 1432.049513][ T5145] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[ 1432.311729][T15405] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[ 1432.356156][T15405] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1432.394296][T15405] [drm:udl_init] *ERROR* Selecting channel failed
[ 1432.461639][T15405] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[ 1432.500800][T15405] [drm] Initialized udl on minor 2
[ 1432.512247][T15405] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1432.563891][T15405] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1432.591615][T17997] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1432.608274][T15405] usb 4-1: USB disconnect, device number 111
[ 1432.644067][T17997] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1432.924280][T17995] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1433.128876][T17995] usb 2-1: Using ep0 maxpacket: 32
[ 1433.159074][T17995] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1433.190945][T17995] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1433.212557][T17995] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1433.225622][T17995] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1433.242449][T17995] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1433.284902][T17995] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1433.314828][T17995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1433.318081][T21483] binder: 21481:21483 ioctl 400c620e 20000140 returned -22
[ 1433.335792][T17995] usb 2-1: Product: syz
[ 1433.340021][T17995] usb 2-1: Manufacturer: syz
[ 1433.344854][T17995] usb 2-1: SerialNumber: syz
[ 1433.526931][T21487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3899'.
[ 1433.566965][T17995] cdc_ncm 2-1:1.0: bind() failure
[ 1433.586638][T17995] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1433.604422][T17995] cdc_ncm 2-1:1.1: bind() failure
[ 1433.613692][ T5145] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1433.623019][T17995] usb 2-1: USB disconnect, device number 96
[ 1433.801950][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1433.809050][ T5092] Bluetooth: Wrong link type (-22)
[ 1433.814779][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1433.818548][ T5145] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.00
[ 1433.821841][ T5092] Bluetooth: Wrong link type (-22)
[ 1433.833808][ T5133] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1433.875357][ T5145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1433.910702][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1433.917701][ T5092] Bluetooth: Wrong link type (-22)
[ 1433.917704][ T5145] usb 4-1: Product: syz
[ 1433.917728][ T5145] usb 4-1: Manufacturer: syz
[ 1433.923155][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1433.938943][ T5092] Bluetooth: Wrong link type (-22)
[ 1433.944546][ T5092] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 1433.948498][ T5145] usb 4-1: SerialNumber: syz
[ 1433.953312][ T5092] Bluetooth: Wrong link type (-22)
[ 1433.997517][ T5145] usb 4-1: config 0 descriptor??
[ 1434.014267][ T5145] ch341 4-1:0.0: ch341-uart converter detected
[ 1434.066072][ T5133] usb 3-1: config index 0 descriptor too short (expected 9533, got 36)
[ 1434.085864][ T5133] usb 3-1: config 161 has too many interfaces: 81, using maximum allowed: 32
[ 1434.130431][T21491] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[ 1434.142537][T21491] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[ 1434.156898][ T5133] usb 3-1: config 161 has an invalid interface descriptor of length 7, skipping
[ 1434.203777][ T5133] usb 3-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config
[ 1434.235835][ T5145] usb 4-1: failed to receive control message: -121
[ 1434.242548][ T5145] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[ 1434.272776][ T5133] usb 3-1: config 161 has 0 interfaces, different from the descriptor's value: 81
[ 1434.302530][ T5133] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1434.333688][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1434.564444][T15410] usb 3-1: USB disconnect, device number 106
[ 1435.793957][ T5092] Bluetooth: hci2: command 0x0406 tx timeout
[ 1435.865551][ T5092] Bluetooth: hci0: command 0x0406 tx timeout
[ 1436.010468][T10103] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1436.196675][T21483] binder: 21481:21483 ioctl 89f3 20000380 returned -22
[ 1437.430109][T17997] usb 4-1: USB disconnect, device number 112
[ 1437.452843][T17997] ch341 4-1:0.0: device disconnected
[ 1437.802428][T21535] tipc: Failed to obtain node identity
[ 1437.825271][T21535] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[ 1438.034365][ T5090] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1438.041602][ T5092] Bluetooth: hci3: command 0x1003 tx timeout
[ 1438.289477][T21539] input: syz0 as /devices/virtual/input/input147
[ 1438.621753][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1438.628615][ T5090] Bluetooth: Wrong link type (-22)
[ 1438.634191][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1438.640750][ T5090] Bluetooth: Wrong link type (-22)
[ 1438.646330][ T5090] Bluetooth: hci5: link tx timeout
[ 1438.653175][ T5090] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1438.896522][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1438.903376][ T5090] Bluetooth: Wrong link type (-22)
[ 1439.523792][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1439.530367][ T5090] Bluetooth: Wrong link type (-22)
[ 1439.535811][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 1439.542345][ T5090] Bluetooth: Wrong link type (-22)
[ 1439.673220][ T5090] Bluetooth: hci5: link tx timeout
[ 1439.679090][ T5090] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1439.809786][T21545] netdevsim netdevsim3: Direct firmware load for ng failed with error -2
[ 1439.827053][T21545] netdevsim netdevsim3: Falling back to sysfs fallback for: ng
[ 1440.267209][T21555] overlayfs: missing 'lowerdir'
[ 1440.383400][T21562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1440.398494][T21562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1440.408277][T21559] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1440.460602][T21559] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1440.674282][ T5090] Bluetooth: hci5: command tx timeout
[ 1440.716497][ T5090] Bluetooth: hci4: unexpected event for opcode 0x080c
[ 1441.425227][   T11] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1441.483795][T15405] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1441.683670][T15405] usb 3-1: Using ep0 maxpacket: 16
[ 1441.698718][T15405] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=1b.b2
[ 1441.708761][T15405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1441.721415][T15405] usb 3-1: Product: syz
[ 1441.742917][T15405] usb 3-1: Manufacturer: syz
[ 1441.748415][T15405] usb 3-1: SerialNumber: syz
[ 1441.765435][T15405] usb 3-1: config 0 descriptor??
[ 1441.776809][T15405] ati_remote2 3-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint
[ 1441.801427][T21583] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[ 1441.875034][T17997] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1441.895241][T21585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1441.904151][T21585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1441.984619][ T5145] usb 3-1: USB disconnect, device number 107
[ 1442.063847][T17997] usb 4-1: Using ep0 maxpacket: 32
[ 1442.071179][T17997] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1442.082951][T17997] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1442.097509][T17997] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1442.125574][T17997] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1442.134807][T17997] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1442.143162][T17997] usb 4-1: Product: syz
[ 1442.147644][T17997] usb 4-1: Manufacturer: syz
[ 1442.152283][T17997] usb 4-1: SerialNumber: syz
[ 1442.162486][T21579] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1442.178261][T17997] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input148
[ 1442.667769][T21591] netdevsim netdevsim1: Direct firmware load for ng failed with error -2
[ 1442.712613][T21591] netdevsim netdevsim1: Falling back to sysfs fallback for: ng
[ 1442.738033][ T5145] usb 4-1: USB disconnect, device number 113
[ 1442.748850][ T5090] Bluetooth: hci5: command 0x0406 tx timeout
[ 1442.970695][ T5145] appletouch 4-1:1.0: input: appletouch disconnected
[ 1443.393892][T17985] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1444.190533][T21605] overlayfs: missing 'lowerdir'
[ 1444.274645][T21610] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1444.304118][T21610] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1444.743770][ T5090] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1444.754687][ T5090] Bluetooth: hci4: Injecting HCI hardware error event
[ 1444.766680][T17985] Bluetooth: hci4: hardware error 0x00
[ 1445.199490][T21620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1445.214316][T21620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1445.516578][T21625] program syz.4.3939 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1446.594788][T10387] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1446.903928][T17985] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1446.924402][T17985] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1446.931102][T17985] Bluetooth: Wrong link type (-22)
[ 1446.936514][T17985] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1446.943127][T17985] Bluetooth: Wrong link type (-22)
[ 1447.005568][T17985] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1447.012301][T17985] Bluetooth: Wrong link type (-22)
[ 1447.017683][T17985] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1447.024500][T17985] Bluetooth: Wrong link type (-22)
[ 1447.029702][T17985] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 1447.037010][T17985] Bluetooth: Wrong link type (-22)
[ 1447.165255][T21641] netdevsim netdevsim3: Direct firmware load for ng failed with error -2
[ 1447.175543][T21641] netdevsim netdevsim3: Falling back to sysfs fallback for: ng
[ 1447.213746][   T25] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1447.384756][T17995] usb 3-1: new full-speed USB device number 108 using dummy_hcd
[ 1447.416022][   T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1447.441749][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1447.456525][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1447.483003][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1447.514988][   T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1447.542145][   T25] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1447.559819][   T25] usb 2-1: Manufacturer: syz
[ 1447.572293][   T25] usb 2-1: config 0 descriptor??
[ 1447.618901][T17995] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1447.643868][T17995] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1447.657950][T17995] usb 3-1: can't read configurations, error -71
[ 1448.192048][   T25] usbhid 2-1:0.0: can't add hid device: -71
[ 1448.204499][T15405] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1448.218879][   T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1448.294022][   T25] usb 2-1: USB disconnect, device number 97
[ 1448.383835][ T5145] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1448.428205][T15405] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1448.453640][T15405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1448.477617][T15405] usb 5-1: config 0 descriptor??
[ 1448.581129][ T5145] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1448.591309][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1448.593956][ T5090] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1448.599805][T17985] Bluetooth: hci3: command 0x1003 tx timeout
[ 1448.770667][ T5145] usb 4-1: config 0 descriptor??
[ 1448.904707][ T5090] Bluetooth: hci5: command 0x0406 tx timeout
[ 1449.384446][ T5145] [drm:udl_init] *ERROR* Selecting channel failed
[ 1449.419013][T15405] [drm:udl_init] *ERROR* Selecting channel failed
[ 1449.465207][ T5145] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 3
[ 1449.468635][T15405] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[ 1449.484069][T15405] [drm] Initialized udl on minor 2
[ 1449.490368][ T5145] [drm] Initialized udl on minor 3
[ 1449.491609][T15405] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1449.510453][ T5145] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1449.541996][T15405] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1449.544642][ T5145] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1449.550200][T17997] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1449.584129][T15405] usb 5-1: USB disconnect, device number 111
[ 1449.589229][   T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1449.604703][T17997] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1449.611816][ T5145] usb 4-1: USB disconnect, device number 114
[ 1449.632346][   T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1449.646781][T14906] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1449.808371][T21674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1449.820861][T21674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1449.903674][T14906] usb 2-1: Using ep0 maxpacket: 32
[ 1449.911667][T14906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1449.987973][T14906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1450.019290][T14906] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1450.053712][T14906] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1450.098322][T14906] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1450.130032][T14906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1450.164316][T14906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.204322][T14906] usb 2-1: Product: syz
[ 1450.220163][T14906] usb 2-1: Manufacturer: syz
[ 1450.237903][T14906] usb 2-1: SerialNumber: syz
[ 1450.264213][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3952'.
[ 1450.466140][T14906] cdc_ncm 2-1:1.0: bind() failure
[ 1450.488290][T14906] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1450.497554][T14906] cdc_ncm 2-1:1.1: bind() failure
[ 1450.516443][T14906] usb 2-1: USB disconnect, device number 98
[ 1450.527944][T17997] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1450.723849][T17997] usb 5-1: Using ep0 maxpacket: 8
[ 1450.743392][T17997] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1450.768835][T17997] usb 5-1: config 179 has no interface number 0
[ 1450.779535][T17997] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1450.792174][T17997] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1450.813288][T17997] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1450.825077][T17997] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1450.839752][T17997] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1450.853754][T17997] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1450.862956][T17997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1450.890763][T21680] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1451.575495][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1451.584794][ T5090] Bluetooth: Wrong link type (-22)
[ 1451.590376][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1451.597020][ T5090] Bluetooth: Wrong link type (-22)
[ 1451.633006][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x10
[ 1451.639804][ T5090] Bluetooth: Wrong link type (-22)
[ 1451.645231][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x0d
[ 1451.651959][ T5090] Bluetooth: Wrong link type (-22)
[ 1451.660356][ T5090] Bluetooth: Unknown BR/EDR signaling command 0x11
[ 1451.667198][ T5090] Bluetooth: Wrong link type (-22)
[ 1451.782383][T21699] netdevsim netdevsim3: Direct firmware load for ng failed with error -2
[ 1451.812951][T14906] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input149
[ 1451.829801][T21699] netdevsim netdevsim3: Falling back to sysfs fallback for: ng
[ 1452.599349][ T6060] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1452.909011][ T5145] usb 5-1: USB disconnect, device number 112
[ 1452.909014][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1452.909204][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1452.932603][    C0] ==================================================================
[ 1452.940690][    C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x8d1/0x980
[ 1452.948767][    C0] Read of size 1 at addr ffff888029715891 by task syz.1.3960/21707
[ 1452.956653][    C0] 
[ 1452.958982][    C0] CPU: 0 PID: 21707 Comm: syz.1.3960 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1452.969261][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1452.979346][    C0] Call Trace:
[ 1452.982638][    C0]  <IRQ>
[ 1452.985495][    C0]  dump_stack_lvl+0x241/0x360
[ 1452.990278][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1452.995500][    C0]  ? __pfx__printk+0x10/0x10
[ 1453.000103][    C0]  ? _printk+0xd5/0x120
[ 1453.004270][    C0]  ? __virt_addr_valid+0x183/0x520
[ 1453.009395][    C0]  ? __virt_addr_valid+0x183/0x520
[ 1453.014538][    C0]  print_report+0x169/0x550
[ 1453.019060][    C0]  ? __virt_addr_valid+0x183/0x520
[ 1453.024193][    C0]  ? __virt_addr_valid+0x183/0x520
[ 1453.029507][    C0]  ? __virt_addr_valid+0x44e/0x520
[ 1453.034739][    C0]  ? __phys_addr+0xba/0x170
[ 1453.039263][    C0]  ? register_lock_class+0x8d1/0x980
[ 1453.044654][    C0]  kasan_report+0x143/0x180
[ 1453.049183][    C0]  ? register_lock_class+0x8d1/0x980
[ 1453.054496][    C0]  register_lock_class+0x8d1/0x980
[ 1453.059627][    C0]  ? __pfx_register_lock_class+0x10/0x10
[ 1453.065289][    C0]  ? __lock_acquire+0x1346/0x1fd0
[ 1453.070343][    C0]  __lock_acquire+0xda/0x1fd0
[ 1453.075047][    C0]  lock_acquire+0x1ed/0x550
[ 1453.079566][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[ 1453.084957][    C0]  ? __pfx_lock_acquire+0x10/0x10
[ 1453.090011][    C0]  ? __usb_hcd_giveback_urb+0x42c/0x6e0
[ 1453.095653][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1453.100699][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1453.105928][    C0]  ? _raw_spin_lock_irqsave+0xe1/0x120
[ 1453.111424][    C0]  _raw_spin_lock_irqsave+0xd5/0x120
[ 1453.116754][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[ 1453.122163][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 1453.128079][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1453.133994][    C0]  __wake_up_common_lock+0x25/0x1e0
[ 1453.139203][    C0]  __usb_hcd_giveback_urb+0x4ff/0x6e0
[ 1453.144593][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[ 1453.150495][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1453.155706][    C0]  dummy_timer+0x830/0x45d0
[ 1453.160215][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1453.165261][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1453.171600][    C0]  ? __hrtimer_run_queues+0x477/0xd50
[ 1453.176985][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1453.182193][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1453.187138][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1453.192080][    C0]  __hrtimer_run_queues+0x59b/0xd50
[ 1453.197290][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[ 1453.203305][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1453.209134][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[ 1453.215229][    C0]  hrtimer_interrupt+0x396/0x990
[ 1453.220196][    C0]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 1453.226306][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1453.231960][    C0]  </IRQ>
[ 1453.234902][    C0]  <TASK>
[ 1453.237851][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1453.243868][    C0] RIP: 0010:__virt_addr_valid+0x23b/0x520
[ 1453.249598][    C0] Code: 00 48 c7 c2 e0 69 c8 8b e8 b2 78 30 00 4d 85 ff 74 36 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 38 43 b6 00 49 8b 1f <48> 89 de 48 83 e6 02 31 ff e8 57 dc 53 00 48 89 d8 48 83 e0 02 75
[ 1453.269215][    C0] RSP: 0018:ffffc9000ab77598 EFLAGS: 00000246
[ 1453.275289][    C0] RAX: 1ffff11027fff22c RBX: ffffea000000000f RCX: ffff888056c7da00
[ 1453.283416][    C0] RDX: 0000000000000000 RSI: ffffffff8c1f15e0 RDI: ffffffff8c1f15a0
[ 1453.291390][    C0] RBP: dffffc0000000000 R08: ffffffff81424eb4 R09: 1ffffffff25ee2b0
[ 1453.299454][    C0] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: 000000005c030000
[ 1453.307430][    C0] R13: 00000000ffffff00 R14: ffffffff81424e83 R15: ffff88813fff9160
[ 1453.315505][    C0]  ? __virt_addr_valid+0x183/0x520
[ 1453.320630][    C0]  ? __virt_addr_valid+0x1b4/0x520
[ 1453.325785][    C0]  ? __virt_addr_valid+0x1c6/0x520
[ 1453.330910][    C0]  free_pages+0x15/0x50
[ 1453.335075][    C0]  packet_set_ring+0x18f6/0x2450
[ 1453.340033][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1453.346019][    C0]  ? __pfx_packet_set_ring+0x10/0x10
[ 1453.351339][    C0]  ? __local_bh_enable_ip+0x168/0x200
[ 1453.356713][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[ 1453.361918][    C0]  ? __local_bh_enable_ip+0x168/0x200
[ 1453.367294][    C0]  ? packet_release+0x790/0xcc0
[ 1453.372159][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1453.377996][    C0]  packet_release+0x7de/0xcc0
[ 1453.382687][    C0]  ? __pfx_packet_release+0x10/0x10
[ 1453.387905][    C0]  sock_close+0xbc/0x240
[ 1453.392157][    C0]  ? __pfx_sock_close+0x10/0x10
[ 1453.397018][    C0]  __fput+0x24a/0x8a0
[ 1453.401031][    C0]  task_work_run+0x24f/0x310
[ 1453.405662][    C0]  ? __pfx_task_work_run+0x10/0x10
[ 1453.410797][    C0]  ? switch_task_namespaces+0xe1/0x110
[ 1453.416271][    C0]  do_exit+0xa27/0x27e0
[ 1453.420465][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1453.425098][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1453.431108][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1453.437449][    C0]  ? cgroup_freezing+0x2a8/0x350
[ 1453.442394][    C0]  do_group_exit+0x207/0x2c0
[ 1453.446995][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1453.452208][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[ 1453.457442][    C0]  get_signal+0x16a1/0x1740
[ 1453.462053][    C0]  ? __pfx_get_signal+0x10/0x10
[ 1453.466945][    C0]  arch_do_signal_or_restart+0x96/0x860
[ 1453.472499][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1453.478658][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1453.484649][    C0]  ? syscall_exit_to_user_mode+0xa3/0x360
[ 1453.490378][    C0]  syscall_exit_to_user_mode+0xc9/0x360
[ 1453.495936][    C0]  do_syscall_64+0x100/0x230
[ 1453.500536][    C0]  ? clear_bhb_loop+0x35/0x90
[ 1453.505247][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1453.511149][    C0] RIP: 0033:0x7f082e575bd9
[ 1453.515651][    C0] Code: Unable to access opcode bytes at 0x7f082e575baf.
[ 1453.522665][    C0] RSP: 002b:00007f082f2660f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1453.531088][    C0] RAX: 0000000000000001 RBX: 00007f082e703f68 RCX: 00007f082e575bd9
[ 1453.539094][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f082e703f6c
[ 1453.547071][    C0] RBP: 00007f082e703f60 R08: 7fffffffffffffff R09: 00007f082f2666c0
[ 1453.555131][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f082e703f6c
[ 1453.563104][    C0] R13: 000000000000000b R14: 00007ffc83f04780 R15: 00007ffc83f04868
[ 1453.571114][    C0]  </TASK>
[ 1453.574137][    C0] 
[ 1453.576459][    C0] Allocated by task 17997:
[ 1453.580871][    C0]  kasan_save_track+0x3f/0x80
[ 1453.585558][    C0]  __kasan_kmalloc+0x98/0xb0
[ 1453.590157][    C0]  kmalloc_trace_noprof+0x19c/0x2c0
[ 1453.595357][    C0]  xpad_probe+0x3c8/0x1b90
[ 1453.599867][    C0]  usb_probe_interface+0x645/0xbb0
[ 1453.604984][    C0]  really_probe+0x2b8/0xad0
[ 1453.609490][    C0]  __driver_probe_device+0x1a2/0x390
[ 1453.614778][    C0]  driver_probe_device+0x50/0x430
[ 1453.619808][    C0]  __device_attach_driver+0x2d6/0x530
[ 1453.625184][    C0]  bus_for_each_drv+0x24e/0x2e0
[ 1453.630050][    C0]  __device_attach+0x333/0x520
[ 1453.634827][    C0]  bus_probe_device+0x189/0x260
[ 1453.639775][    C0]  device_add+0x856/0xbf0
[ 1453.644114][    C0]  usb_set_configuration+0x1976/0x1fb0
[ 1453.649580][    C0]  usb_generic_driver_probe+0x88/0x140
[ 1453.655050][    C0]  usb_probe_device+0x1b8/0x380
[ 1453.659901][    C0]  really_probe+0x2b8/0xad0
[ 1453.664406][    C0]  __driver_probe_device+0x1a2/0x390
[ 1453.669688][    C0]  driver_probe_device+0x50/0x430
[ 1453.674801][    C0]  __device_attach_driver+0x2d6/0x530
[ 1453.680172][    C0]  bus_for_each_drv+0x24e/0x2e0
[ 1453.685239][    C0]  __device_attach+0x333/0x520
[ 1453.690011][    C0]  bus_probe_device+0x189/0x260
[ 1453.694886][    C0]  device_add+0x856/0xbf0
[ 1453.699225][    C0]  usb_new_device+0x104a/0x19a0
[ 1453.704198][    C0]  hub_event+0x2d6a/0x5150
[ 1453.708615][    C0]  process_scheduled_works+0xa2c/0x1830
[ 1453.714162][    C0]  worker_thread+0x86d/0xd50
[ 1453.718752][    C0]  kthread+0x2f0/0x390
[ 1453.722822][    C0]  ret_from_fork+0x4b/0x80
[ 1453.727243][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1453.732030][    C0] 
[ 1453.734366][    C0] Freed by task 5145:
[ 1453.738360][    C0]  kasan_save_track+0x3f/0x80
[ 1453.743049][    C0]  kasan_save_free_info+0x40/0x50
[ 1453.748079][    C0]  poison_slab_object+0xe0/0x150
[ 1453.753023][    C0]  __kasan_slab_free+0x37/0x60
[ 1453.757796][    C0]  kfree+0x149/0x360
[ 1453.761692][    C0]  xpad_disconnect+0x359/0x490
[ 1453.766466][    C0]  usb_unbind_interface+0x25e/0x940
[ 1453.771667][    C0]  device_release_driver_internal+0x503/0x7c0
[ 1453.777732][    C0]  bus_remove_device+0x34f/0x420
[ 1453.782672][    C0]  device_del+0x57a/0x9b0
[ 1453.787008][    C0]  usb_disable_device+0x3bf/0x850
[ 1453.792031][    C0]  usb_disconnect+0x340/0x950
[ 1453.796716][    C0]  hub_event+0x1eb9/0x5150
[ 1453.801152][    C0]  process_scheduled_works+0xa2c/0x1830
[ 1453.806725][    C0]  worker_thread+0x86d/0xd50
[ 1453.811330][    C0]  kthread+0x2f0/0x390
[ 1453.815428][    C0]  ret_from_fork+0x4b/0x80
[ 1453.819878][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1453.824756][    C0] 
[ 1453.827081][    C0] Last potentially related work creation:
[ 1453.832818][    C0]  kasan_save_stack+0x3f/0x60
[ 1453.837525][    C0]  __kasan_record_aux_stack+0xac/0xc0
[ 1453.842942][    C0]  insert_work+0x3e/0x330
[ 1453.847280][    C0]  __queue_work+0xc16/0xee0
[ 1453.851792][    C0]  queue_work_on+0x1c2/0x380
[ 1453.856388][    C0]  xpad_irq_in+0xab0/0x2510
[ 1453.860904][    C0]  __usb_hcd_giveback_urb+0x42c/0x6e0
[ 1453.866387][    C0]  dummy_timer+0x830/0x45d0
[ 1453.870908][    C0]  __hrtimer_run_queues+0x59b/0xd50
[ 1453.876123][    C0]  hrtimer_interrupt+0x396/0x990
[ 1453.881072][    C0]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 1453.887070][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1453.892712][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1453.898701][    C0] 
[ 1453.901042][    C0] Second to last potentially related work creation:
[ 1453.907635][    C0]  kasan_save_stack+0x3f/0x60
[ 1453.912323][    C0]  __kasan_record_aux_stack+0xac/0xc0
[ 1453.917702][    C0]  insert_work+0x3e/0x330
[ 1453.922052][    C0]  __queue_work+0xc16/0xee0
[ 1453.926658][    C0]  queue_work_on+0x1c2/0x380
[ 1453.931339][    C0]  xpad_irq_in+0xab0/0x2510
[ 1453.935848][    C0]  __usb_hcd_giveback_urb+0x42c/0x6e0
[ 1453.941243][    C0]  dummy_timer+0x830/0x45d0
[ 1453.945782][    C0]  __hrtimer_run_queues+0x59b/0xd50
[ 1453.950992][    C0]  hrtimer_interrupt+0x396/0x990
[ 1453.955964][    C0]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 1453.961951][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1453.967589][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1453.973609][    C0] 
[ 1453.975931][    C0] The buggy address belongs to the object at ffff888029715800
[ 1453.975931][    C0]  which belongs to the cache kmalloc-1k of size 1024
[ 1453.990001][    C0] The buggy address is located 145 bytes inside of
[ 1453.990001][    C0]  freed 1024-byte region [ffff888029715800, ffff888029715c00)
[ 1454.003914][    C0] 
[ 1454.006245][    C0] The buggy address belongs to the physical page:
[ 1454.012661][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29710
[ 1454.021424][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1454.029935][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1454.037487][    C0] page_type: 0xffffefff(slab)
[ 1454.042180][    C0] raw: 00fff00000000040 ffff888015041dc0 ffffea00015df400 dead000000000002
[ 1454.050777][    C0] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 1454.059383][    C0] head: 00fff00000000040 ffff888015041dc0 ffffea00015df400 dead000000000002
[ 1454.068057][    C0] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000
[ 1454.076734][    C0] head: 00fff00000000003 ffffea0000a5c401 ffffffffffffffff 0000000000000000
[ 1454.085436][    C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 1454.094107][    C0] page dumped because: kasan: bad access detected
[ 1454.100532][    C0] page_owner tracks the page as allocated
[ 1454.106274][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4756, tgid 4756 (dhcpcd-run-hook), ts 49149095081, free_ts 49124394368
[ 1454.127121][    C0]  post_alloc_hook+0x1f3/0x230
[ 1454.131892][    C0]  get_page_from_freelist+0x2e4c/0x2f10
[ 1454.137448][    C0]  __alloc_pages_noprof+0x256/0x6c0
[ 1454.142660][    C0]  alloc_slab_page+0x5f/0x120
[ 1454.147354][    C0]  allocate_slab+0x5a/0x2f0
[ 1454.151869][    C0]  ___slab_alloc+0xcd1/0x14b0
[ 1454.156555][    C0]  __slab_alloc+0x58/0xa0
[ 1454.160887][    C0]  __kmalloc_noprof+0x257/0x400
[ 1454.165740][    C0]  tomoyo_init_log+0x1b3e/0x2050
[ 1454.170680][    C0]  tomoyo_supervisor+0x38a/0x11f0
[ 1454.175710][    C0]  tomoyo_env_perm+0x178/0x210
[ 1454.180480][    C0]  tomoyo_find_next_domain+0x1384/0x1cf0
[ 1454.186123][    C0]  tomoyo_bprm_check_security+0x115/0x180
[ 1454.191847][    C0]  security_bprm_check+0x65/0x90
[ 1454.196820][    C0]  bprm_execve+0xa56/0x17c0
[ 1454.201417][    C0]  do_execveat_common+0x553/0x700
[ 1454.206450][    C0] page last free pid 4755 tgid 4755 stack trace:
[ 1454.212792][    C0]  free_unref_page+0xd19/0xea0
[ 1454.217558][    C0]  __put_partials+0xeb/0x130
[ 1454.222177][    C0]  put_cpu_partial+0x17c/0x250
[ 1454.226950][    C0]  __slab_free+0x2ea/0x3d0
[ 1454.231376][    C0]  qlist_free_all+0x9e/0x140
[ 1454.236146][    C0]  kasan_quarantine_reduce+0x14f/0x170
[ 1454.241613][    C0]  __kasan_slab_alloc+0x23/0x80
[ 1454.246502][    C0]  kmem_cache_alloc_noprof+0x135/0x2a0
[ 1454.251979][    C0]  getname_flags+0xbd/0x4f0
[ 1454.256489][    C0]  vfs_fstatat+0x11c/0x190
[ 1454.260909][    C0]  __x64_sys_newfstatat+0x125/0x1b0
[ 1454.266123][    C0]  do_syscall_64+0xf3/0x230
[ 1454.270760][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1454.276669][    C0] 
[ 1454.278996][    C0] Memory state around the buggy address:
[ 1454.284626][    C0]  ffff888029715780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1454.292684][    C0]  ffff888029715800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1454.300743][    C0] >ffff888029715880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1454.308799][    C0]                          ^
[ 1454.313388][    C0]  ffff888029715900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1454.321552][    C0]  ffff888029715980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1454.329788][    C0] ==================================================================
[ 1454.337844][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1454.345037][    C0] CPU: 0 PID: 21707 Comm: syz.1.3960 Not tainted 6.10.0-rc6-syzkaller-00212-g1dd28064d416 #0
[ 1454.355195][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1454.365256][    C0] Call Trace:
[ 1454.368540][    C0]  <IRQ>
[ 1454.371384][    C0]  dump_stack_lvl+0x241/0x360
[ 1454.376106][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1454.381375][    C0]  ? __pfx__printk+0x10/0x10
[ 1454.385989][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1454.390768][    C0]  ? lock_release+0xbf/0x9f0
[ 1454.395369][    C0]  ? vscnprintf+0x5d/0x90
[ 1454.399706][    C0]  panic+0x349/0x860
[ 1454.403613][    C0]  ? check_panic_on_warn+0x21/0xb0
[ 1454.408734][    C0]  ? __pfx_panic+0x10/0x10
[ 1454.413161][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1454.418462][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1454.424370][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1454.430714][    C0]  ? print_report+0x502/0x550
[ 1454.435399][    C0]  check_panic_on_warn+0x86/0xb0
[ 1454.440440][    C0]  ? register_lock_class+0x8d1/0x980
[ 1454.445728][    C0]  end_report+0x77/0x160
[ 1454.449977][    C0]  kasan_report+0x154/0x180
[ 1454.454492][    C0]  ? register_lock_class+0x8d1/0x980
[ 1454.459798][    C0]  register_lock_class+0x8d1/0x980
[ 1454.464921][    C0]  ? __pfx_register_lock_class+0x10/0x10
[ 1454.470577][    C0]  ? __lock_acquire+0x1346/0x1fd0
[ 1454.475605][    C0]  __lock_acquire+0xda/0x1fd0
[ 1454.480294][    C0]  lock_acquire+0x1ed/0x550
[ 1454.484797][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[ 1454.490176][    C0]  ? __pfx_lock_acquire+0x10/0x10
[ 1454.495205][    C0]  ? __usb_hcd_giveback_urb+0x42c/0x6e0
[ 1454.500756][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1454.505784][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1454.510991][    C0]  ? _raw_spin_lock_irqsave+0xe1/0x120
[ 1454.516489][    C0]  _raw_spin_lock_irqsave+0xd5/0x120
[ 1454.521784][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[ 1454.527162][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 1454.533067][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1454.539058][    C0]  __wake_up_common_lock+0x25/0x1e0
[ 1454.544270][    C0]  __usb_hcd_giveback_urb+0x4ff/0x6e0
[ 1454.549650][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[ 1454.555557][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1454.560775][    C0]  dummy_timer+0x830/0x45d0
[ 1454.565293][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1454.570338][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1454.576677][    C0]  ? __hrtimer_run_queues+0x477/0xd50
[ 1454.582060][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1454.587273][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1454.592222][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 1454.597164][    C0]  __hrtimer_run_queues+0x59b/0xd50
[ 1454.602456][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[ 1454.608464][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1454.614190][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[ 1454.620264][    C0]  hrtimer_interrupt+0x396/0x990
[ 1454.625247][    C0]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 1454.631328][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1454.636999][    C0]  </IRQ>
[ 1454.639928][    C0]  <TASK>
[ 1454.642858][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1454.648847][    C0] RIP: 0010:__virt_addr_valid+0x23b/0x520
[ 1454.654584][    C0] Code: 00 48 c7 c2 e0 69 c8 8b e8 b2 78 30 00 4d 85 ff 74 36 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 38 43 b6 00 49 8b 1f <48> 89 de 48 83 e6 02 31 ff e8 57 dc 53 00 48 89 d8 48 83 e0 02 75
[ 1454.674201][    C0] RSP: 0018:ffffc9000ab77598 EFLAGS: 00000246
[ 1454.680275][    C0] RAX: 1ffff11027fff22c RBX: ffffea000000000f RCX: ffff888056c7da00
[ 1454.688250][    C0] RDX: 0000000000000000 RSI: ffffffff8c1f15e0 RDI: ffffffff8c1f15a0
[ 1454.696225][    C0] RBP: dffffc0000000000 R08: ffffffff81424eb4 R09: 1ffffffff25ee2b0
[ 1454.704199][    C0] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: 000000005c030000
[ 1454.712194][    C0] R13: 00000000ffffff00 R14: ffffffff81424e83 R15: ffff88813fff9160
[ 1454.720183][    C0]  ? __virt_addr_valid+0x183/0x520
[ 1454.725309][    C0]  ? __virt_addr_valid+0x1b4/0x520
[ 1454.730433][    C0]  ? __virt_addr_valid+0x1c6/0x520
[ 1454.735562][    C0]  free_pages+0x15/0x50
[ 1454.739729][    C0]  packet_set_ring+0x18f6/0x2450
[ 1454.744696][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1454.750768][    C0]  ? __pfx_packet_set_ring+0x10/0x10
[ 1454.756072][    C0]  ? __local_bh_enable_ip+0x168/0x200
[ 1454.761472][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[ 1454.766694][    C0]  ? __local_bh_enable_ip+0x168/0x200
[ 1454.772078][    C0]  ? packet_release+0x790/0xcc0
[ 1454.777031][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1454.782757][    C0]  packet_release+0x7de/0xcc0
[ 1454.787448][    C0]  ? __pfx_packet_release+0x10/0x10
[ 1454.792665][    C0]  sock_close+0xbc/0x240
[ 1454.796916][    C0]  ? __pfx_sock_close+0x10/0x10
[ 1454.801773][    C0]  __fput+0x24a/0x8a0
[ 1454.805776][    C0]  task_work_run+0x24f/0x310
[ 1454.810472][    C0]  ? __pfx_task_work_run+0x10/0x10
[ 1454.815590][    C0]  ? switch_task_namespaces+0xe1/0x110
[ 1454.821051][    C0]  do_exit+0xa27/0x27e0
[ 1454.825218][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1454.829814][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1454.835799][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1454.842214][    C0]  ? cgroup_freezing+0x2a8/0x350
[ 1454.847158][    C0]  do_group_exit+0x207/0x2c0
[ 1454.851754][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1454.856963][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[ 1454.862178][    C0]  get_signal+0x16a1/0x1740
[ 1454.866708][    C0]  ? __pfx_get_signal+0x10/0x10
[ 1454.871663][    C0]  arch_do_signal_or_restart+0x96/0x860
[ 1454.877215][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1454.883372][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1454.889388][    C0]  ? syscall_exit_to_user_mode+0xa3/0x360
[ 1454.895136][    C0]  syscall_exit_to_user_mode+0xc9/0x360
[ 1454.900707][    C0]  do_syscall_64+0x100/0x230
[ 1454.905318][    C0]  ? clear_bhb_loop+0x35/0x90
[ 1454.910015][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1454.915925][    C0] RIP: 0033:0x7f082e575bd9
[ 1454.920342][    C0] Code: Unable to access opcode bytes at 0x7f082e575baf.
[ 1454.927375][    C0] RSP: 002b:00007f082f2660f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1454.935796][    C0] RAX: 0000000000000001 RBX: 00007f082e703f68 RCX: 00007f082e575bd9
[ 1454.943784][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f082e703f6c
[ 1454.951754][    C0] RBP: 00007f082e703f60 R08: 7fffffffffffffff R09: 00007f082f2666c0
[ 1454.959829][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f082e703f6c
[ 1454.967865][    C0] R13: 000000000000000b R14: 00007ffc83f04780 R15: 00007ffc83f04868
[ 1454.975863][    C0]  </TASK>
[ 1454.979126][    C0] Kernel Offset: disabled
[ 1454.983469][    C0] Rebooting in 86400 seconds..