last executing test programs:

9.747189467s ago: executing program 3 (id=1164):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008508000000000000000900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)
syz_usb_connect(0x0, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x29, 0xb6, 0x45, 0x40, 0x8086, 0xb03, 0x3a45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xbe0}, [@dmm={0x7}, @network_terminal={0x7}]}]}}]}}]}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
pwritev(r2, &(0x7f0000000640)=[{&(0x7f0000000ec0)="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", 0x156}], 0x1, 0x6, 0x0)
write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x20)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ac141400000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac14140000000000000000000000000000f100000000000000000200ff010000000000000000000000000001ff"], 0xec}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r6, 0x84, 0x2, 0x0, &(0x7f00000000c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r7 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r7, 0x0, 0x0)
request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000e40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r8=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000e80)={0x4, 0x8, 0xfa00, {r8, 0x800}}, 0x10)
syz_usb_connect(0x1, 0x7f6, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x16, 0x30, 0xed, 0x78, 0x5c6, 0x9062, 0xa21c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e4, 0x3, 0x2, 0x7, 0x0, 0xb, [{{0x9, 0x4, 0x5, 0x0, 0x6, 0xed, 0x6e, 0xfd, 0xf, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "7ed393"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x100}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0x841}]}, @uac_control={{0xa, 0x24, 0x1, 0x8, 0x4}}], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x81, 0x92, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}, @generic={0xa3, 0x1, "286b80207ed905beb73dac1248383c65cdd4ae1900d1f58fbe467076a8cb304f89e4b03fb1f7fc14e5d551932e1fcf886690d46fc716f7e018caced9cd6425115463f3087ae863f7abf3360c0ec6b56b7286741ad46d56c149ede3b7176a76e00aea8ed98e6bf599934f817224b7b890b0d9d9d066225219f94c248e74478b5cffd45d057773fe647caa1c7d761f4c1fdfcf7a173e31f05d4fd5af8a620a3cb970"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xba, 0x10, 0x7d, [@generic={0x7f, 0xc, "48f00ddb6580f4315d29bb9cf4cd95a08f68129d69d3cd86626c99b5e1439c18ab76d4350aaedf7022ca6734bb3dc354817deaa826a47daeab1b2e26f8e72bffb7aa46dd53998c3bda752597f141b39e6aa782456ec559f371fecd9b8eb8dc4c686bd0a0a687665d66e470bc1b9ccb65d813f4c556d3d9f17b544fe7dd"}, @generic={0x4b, 0x10, "a24374b79b8453882b72ecc41723485d74f159082dca74fd7a8357fe1ff4dd0e69639df7329da0a52eff9906ac819b0b532e73c0469315e7d0f27a688b5682d191a28de3cc4774a7e9"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x50, 0x22, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe4, 0x1000}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xe, 0x9, 0x9, [@generic={0x7e, 0x30, "a1092596f54f510050e10de2b9e77fc61006e89037e5f95fe3f6ac979ee8fe62c8ba8d8ef67e64f62a305090befc3c98cb7f4dcf35edd02264f391a0430ac6d78435fc53891532230a5ada225a3244eaf900c9504466f21aa34fef2fb1867a8092c7257b09029c289d3bd73e742eb29ecb47ccb067d63584ab08cb2f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x0, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7e, 0x5, 0x52}}]}}, {{0x9, 0x4, 0xfc, 0x8, 0x2, 0x15, 0xdc, 0xae, 0x2e, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '/'}, {0x5, 0x24, 0x0, 0x3a}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0xfffa, 0x7}, {0x6, 0x24, 0x1a, 0xfffc, 0xc}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x4, 0xe, 0x7, [@generic={0x7, 0x24, "9184be6441"}]}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x2, 0x8, 0x7f, [@generic={0x8b, 0xe, "92150a19a93c468d1fb86a9187e348cf0aa1c63efa60769ed47ab118c89d34500c0ccfc74bf45eb94b30685e5fff443b8fd41fa2b814a786f024c5ab564acfffc8f45e843ab99e0c8c7ae2374c29e598e3a83fb5ff52d6f4ead7f9486de3beed0d8dc6c7c79d818964354bc145ebf99d6a513167ed3dcd5facce8fd01c2a06654f0a9e29ed7df05b32"}]}}]}}, {{0x9, 0x4, 0xcb, 0x9, 0xd, 0xff, 0xff, 0x0, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x40}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x4, 0x2, [0x6, 0x4], 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x5, "c83af458259d"}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0x7, 0x7, [@generic={0x24, 0x22, "f4824abb571f51cb5966e67fe52d7d9ccde7d0297e4216bce09c5920d3e948543a99"}, @generic={0x34, 0x3, "e96a9ae38d6ad2abe8f02724c0459171483ff3ece5fb1fd663779e177f679e29e2304284ce4bac140268f8eb28eb304997fd"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0xee, 0x70, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}, @generic={0xda, 0x22, "6a8062e2bc2a29e3eccbc410a0f1d49ea56000cba401953cbdf5c55ae8861fea0093f817351a6e03468fe37e4e500d59be4b82fbb3a400aa9b0a8222c3aa203cfc365b24d65c4b3ff840f9eaa11548b8cf8e698929c176aeebb17c8265aededfc94ba7715890ee145aae5fa40e723a3f9d9460401dea4d654a754c1e6a0af0e3926fc7918489b5faf12a58b4f57854e8e3834374235ea78ffa7e517bb04a0b1550ef7899d17b603f4e6af35a8fd8b8248b4196e30f92236dfeec317eaa0183a5226f0f4fa99572b8d21e76d0a486b63e9ce6b1c8f6cab16e"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x2, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xa}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x1, 0x80, 0x4, [@generic={0x3f, 0x22, "4cd6f0835c422b1cdfde76e952e74bbd432a9719fbde54f7e748ecd56429c7b9e866846a8bacd2169c7251e76812a92c21808aadda2f06a0ff8975399a"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0xa6, 0x4, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xc}, @generic={0xc0, 0x7, "7be435e72a6ea1216b8cf0959712b92322683e2527cb9679c8f774bde1b3c86658a3f6edc97536297b9f366fec5da0ce05f85559c64d21169d9bb697320d698d8d79acd99d15ad91c60ca4219adf0966e9141281695f7ffe09d2c04186566328057d899ed2632dd84773e634b26909cf523ae4277f8ee6f5ae00dcb5f1f5e57bc18379d49bdb414a6c8b51e9a483118219173b2fc950ff601cd19ed09c679791c751f33c5a7b197c74b72749afbe3399db51c84fb82153f19dd532497a2c"}]}}, {{0x9, 0x5, 0x4, 0x13, 0x418, 0x3, 0x5, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0x86, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x2, 0x3, 0x10, [@generic={0xa, 0x23, "98190713e25874a2"}, @uac_iso={0x7, 0x25, 0x1, 0xf4fca0242f82fcfb, 0xf, 0x8}]}}, {{0x9, 0x5, 0xe, 0x10, 0x640, 0x4, 0x5, 0xfe}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x80, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xffff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x40, 0x7, 0x81, [@generic={0xe1, 0x1, "dac54b620739258f8cc38340e817ee0b83fb8a26e9c4617dcae8627e5029a8b3f92dd22689092eec127f4a6c632000e3758ccc7ed5f4f6a7a73ad80e7cfa43fb74e4a2fdb08bfe38679deea01fbff5993a4370efd359d8c493921390fc9ac1ab0ea9344ddb2ac99a7d75fbf2ba9ae0c5a0a48897af8ac414b60e25a5743fc7887dbba424f4b96347e7e3118bf6331a892a5e9005513dc1ab571f994a6a702713dd83909faa51b6f5c53aea35f25ba1aaf1649bce9c2f2c66df3a306cdf1d1a9b972b10a14ea5f93264bd317335bdab3606c9e8f2650d3c9466ce81d5a967ed"}, @generic={0x8d, 0x31, "ebb4fb02337243edc0b7ed3028f15f778d072e4ff0fc7e36b31101b6df9faf23aaa1f88599c1983ecd5b0664f217490c774299d6c2a9c68d3e1446b1b0b2e9e2cece9a0edb7ee852ff1f075c77004c6a7d14db032f3fac68a5d54203deede866fe8812147e0df3495c74c14f69d158afaf127b6485037d67c11dc02eabdc1889b61d1691a3c6c3d511e6b4"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x7, 0x28, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x14d}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x7, 0xfa, 0xe, 0x8, 0x9}, 0x175, &(0x7f00000000c0)={0x5, 0xf, 0x175, 0x4, [@generic={0xc5, 0x10, 0x3, "170079dcdb283ab76dd38dd1a2f17f2a6e04d798b6316bfc50f91db28763ca3ea90eab281b07603848d23d2f3136d78a92d42321c02456a2f6e83c7296bc4d9df288eabca8e618703e95539f7f95e2cc6f77cf3eb8dab731de883ae84a2e8f00d2b17c2f6d6a3737d74244bc6c138a0b0ddc7d394f5c4225d9159d990371af99272887650dfc8a5d80f339773158ac42dd2cf568c454187df3b924d55631e72783bfba37f3b96b0c60d9d3d47a01a70fc4822c33441210891184ad7233650dfcf1b1"}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x83a9, 0xf8537b86ae4ab2eb, 0x2, [0xff000f]}, @generic={0x91, 0x10, 0xb, "3efdfa24cb844bc8eddcf90f2692b4ff1477b3dcb9c310faf26b7acd38a380194d6edee88c2423dcf9598889d4d563c2182ebbc5c9de22ca73de014c02775f48755d1facdffba7105bf37335b4cbf76fc9602f2a86b33b9fae6e2bd5495865142b309c316e589801520d64eead5b13ca1e6e97d69b30da049b5b9c16eb796e3b697786bf324c57209dd5cb56d1ea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x77, 0x4}]}, 0x7, [{0x1e, &(0x7f0000000b40)=@string={0x1e, 0x3, "37114f09d51e6f18ee13aa97ec04b3a55db9e6003602b52e2560a799"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2409}}, {0x24, &(0x7f0000000bc0)=@string={0x24, 0x3, "17192e8cc6deededbf0d997f020c979c49144eec10f12c0c8fae01e515c2865d3d40"}}, {0x68, &(0x7f0000000c00)=@string={0x68, 0x3, "fbe504be0282cdc3d10149f1c21d15c7e42dbd74a7bd8f05a0c5b69de8409c32888e7cfed326ef69dcb410d4326866cb48c139ec993f1efd1dc3de4cf519791292d915af736d60eb407114271849aba9db37c26e9d14fc9bc2ac6e1802a901ef51a5ade991b4"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x444}}, {0xa7, &(0x7f0000000cc0)=@string={0xa7, 0x3, "b4ad25f9acfcb87c14a40c7859a91006d5dfde06df2c8581cff6074d08062d2bfeb90e2379b5b7174a14a0a1c79385a0f2da05fd8da874b352788b1163df5a258311fbbfd54b2667b5eba6ee2eac2916383ad691e4eba28de7e72dcc844e1de33ce04503159037d466aa54ce11d06c714aee9ed8ec6b97d86595537ee80803c6035da69cf1b2a6bfc4d17a5ce89a4ead00c926323ec104638a32a804e26940d4b40ad91533"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x3c01}}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000000000b3242d7a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000002000"/28], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

8.079483115s ago: executing program 3 (id=1173):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r4, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)

5.628511849s ago: executing program 2 (id=1186):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000140081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)

5.427454908s ago: executing program 2 (id=1187):
syz_io_uring_setup(0x222f, &(0x7f0000000080)={0x0, 0x0, 0x800}, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x80000001, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/30}, {&(0x7f0000000380)=""/58}, {&(0x7f0000000440)=""/39}, {&(0x7f0000000540)=""/120}], 0x19, 0x0, 0x0)
r2 = getpid()
creat(&(0x7f0000000280)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "d9b0db7b77b7ea4df776f6b4061440d6ef44477d5b183973aa0ec402b72eed48529a44fe36e91a79344b777fd81334346ff64025e77fcfbc91e29ed9895d69d06e4dc56bbc6a4879d0b34d9b0f0069f9"}, 0xd8)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75825f69643d", @ANYRESDEC=0x0, @ANYRESOCT])
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='mountinfo\x00')
preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2, 0x4b6, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0xc0684608, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0})
r6 = getpgrp(0xffffffffffffffff)
kcmp$KCMP_EPOLL_TFD(r2, r6, 0x7, r1, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x9})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r7, &(0x7f0000004440)={0x2020}, 0x2020)

5.192518575s ago: executing program 2 (id=1188):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100000dd00000000000000000000000a68000000060a010400000000000000"], 0x90}}, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
bind$can_raw(r2, &(0x7f0000000000), 0x10)
dup3(r1, r2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0xff, 0x2, 0x2})
ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc04c5609, &(0x7f0000000240)=@multiplanar_fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "19893bbb"}, 0x0, 0x4, {0x0}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x100, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYRES32=r6, @ANYRES32, @ANYBLOB="04008e00080057001b0a000004"], 0x398}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$inet(r7, &(0x7f0000000680)={0x0, 0x60, &(0x7f0000000600)=[{&(0x7f00000000c0)="d2", 0x70000}], 0x1}, 0x0)

4.669322522s ago: executing program 3 (id=1192):
syz_open_dev$usbfs(&(0x7f0000000000), 0x9fb3, 0x4a4140)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
dup3(r0, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x2, 0x3, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x4, @local}}]}, 0x28}, 0x1, 0x7}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04001220"], 0x7)

4.535480693s ago: executing program 1 (id=1193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305000000000000000800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100", @ANYRES32], 0x68}}, 0x0)

4.366496294s ago: executing program 3 (id=1194):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x12, 0xfa00, {0x200000000000, &(0x7f0000000500), 0x106, 0x2}}, 0x20)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xf01}], 0x3)

4.340434745s ago: executing program 1 (id=1196):
r0 = io_uring_setup(0x30d3, &(0x7f0000000380))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x86c22, 0x0)
r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x80, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@cgroup, 0xffffffffffffffff, 0x1c, 0x28, 0x0, @void, @void, @void, @value}, 0x20)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.199371032s ago: executing program 2 (id=1197):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x7, 0x33, @deauth={{{}, {}, @device_b, @broadcast}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="094c1f2501e02962"}}}}]}, 0x4c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a4, 0x0, 0x2b8, 0x182, 0x0, 0x0, 0x1dc, 0x3a8, 0x3a8, 0x1dc, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x0, 0x1800}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macsec0\x00', 'netdevsim0\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x2000, 0x1fc}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x14, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

4.199217372s ago: executing program 1 (id=1198):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x3c, r0, 0x801, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x3c}}, 0x0)

3.949357852s ago: executing program 3 (id=1199):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8803, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"])
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0xa00, &(0x7f00000006c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x0, 0x0, 0x0)

3.706645255s ago: executing program 1 (id=1201):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc0000001000010400000000fbdbdf2500000000", @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB='\b\x00.'], 0xdc}, 0x1, 0xf303000000000000}, 0x0)

3.70500023s ago: executing program 2 (id=1202):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r4, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)

3.437640116s ago: executing program 3 (id=1203):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
symlink(0x0, &(0x7f0000000040)='./file0\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
signalfd(0xffffffffffffffff, &(0x7f0000000700), 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1e, 0x1, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r2 = socket$inet6(0xa, 0x3, 0x103)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_int(r3, 0x28, 0x0, 0x0, &(0x7f00000001c0)=0x700)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x40)
sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fd, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

3.412501839s ago: executing program 1 (id=1204):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_clone3(&(0x7f0000000340)={0x105480, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)

2.987542712s ago: executing program 1 (id=1206):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
recvmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)

2.543912408s ago: executing program 4 (id=1208):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x1) (fail_nth: 1)

2.412888129s ago: executing program 0 (id=1209):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x12, 0xfa00, {0x200000000000, &(0x7f0000000500), 0x106, 0x2}}, 0x20)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xf01}], 0x3)

1.927579749s ago: executing program 0 (id=1210):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8a02)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0xb, 0x4)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x1)

1.850214489s ago: executing program 4 (id=1211):
r0 = eventfd2(0x0, 0x0)
r1 = io_uring_setup(0xc91, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x4})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000280)=[@register_looper, @free_buffer, @release, @increfs_done={0x40106308, 0x3, 0x4000000000000000}], 0x3b, 0x100000000000000, 0x0})
dup3(r0, r1, 0x0)

1.711990696s ago: executing program 0 (id=1212):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x400, 0x0)
r3 = epoll_create(0x208000)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc901, 0x0)
futex_waitv(&(0x7f0000002140)=[{0x40, 0x0, 0x82}, {0x6, 0x0, 0x8ab2f6c706f9ba89}, {0x5, 0x0}, {0x8, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x395, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x81, 0x0, 0x82}, {0x185, 0x0, 0x2}, {0xfe, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x40, 0x0, 0x82}, {0xc4, 0x0, 0x82}, {0x80000000, 0x0}, {0x36c90000, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x8638, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x80}, {0xd, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x16, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x101, 0x0}, {0x9, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x8000000000000000, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x401, 0x0, 0x2}, {0x5d, 0x0, 0x82}, {0x100000001, 0x0}, {0x20000000000, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0xfffffffffffff26c, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0xfff, 0x0, 0x82}], 0x36, 0x0, 0x0, 0x1)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r7, 0x10d, 0x10, &(0x7f0000000180)="80d68a83", 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7f}]}, 0x24}}, 0x0)

1.641606768s ago: executing program 4 (id=1213):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x0, 0xb18, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) (async)
syz_usb_connect(0x0, 0xb18, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0xc0300)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0))
openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) (async)
r3 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8001)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc01000000003ed300000000000000000000000002001000"/49], 0xb8}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000800) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc01000000003ed300000000000000000000000002001000"/49], 0xb8}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000800)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0)
syz_clone3(&(0x7f0000000300)={0x4002200, &(0x7f00000000c0)=<r5=>0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x3d}, &(0x7f0000000180)=""/12, 0xc, &(0x7f00000001c0)=""/251, &(0x7f00000002c0)=[0x0], 0x1, {r1}}, 0x58)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40106435, &(0x7f0000000700))
preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000740)=""/111, 0x6f}], 0x5, 0x7, 0x8)

1.379559838s ago: executing program 0 (id=1214):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc0000001000010400000000fbdbdf2500000000", @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\b', @ANYRES32, @ANYBLOB='\b\x00.'], 0xdc}, 0x1, 0xf303000000000000}, 0x0)

1.223708962s ago: executing program 0 (id=1215):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x29)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000})
io_setup(0xedf, &(0x7f0000001740)=<r2=>0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
listen(r3, 0x82)
io_submit(r2, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r5 = gettid()
mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x12, r1, 0x0)
tkill(r5, 0x10)
openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x8000)
fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, r5})
fcntl$lock(r1, 0x5, &(0x7f0000005e80)={0x0, 0x0, 0x0, 0x6})
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card3/oss_mixer\x00', 0x426780, 0x0)
write$proc_mixer(r6, &(0x7f0000000180)=ANY=[], 0x68)
ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f0000000040)={[0x4, 0xdfa]})

1.008488789s ago: executing program 4 (id=1216):
syz_io_uring_setup(0x222c, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xb00, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x14}}}}}, 0x0)

831.577587ms ago: executing program 4 (id=1217):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x60c00)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x604)

538.84946ms ago: executing program 4 (id=1218):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
symlink(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = socket$inet6(0xa, 0x3, 0x103)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

106.785016ms ago: executing program 0 (id=1219):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x800)
pipe2(&(0x7f0000000000)={0x0, <r2=>0x0}, 0x0)
r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pwritev(r4, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x0, 0x31, 0xcd, "5a76d96481c8c8668b5fbd8a5963fb988d3fa2a227348fcc76c5caa6e09aaecf479af5abb31425967df2adada2f77080ab351588f448e792184758df9727b5d53dd3fb900ea3c77a8fbc9cf428a8881fb43731883caf2b3f6636a4d97b942e83c1ccef38e515c822f88ac8910d1f246af3f281572dd9416497fd358c88ad9808b105ff71e355a57c16591c0758573802259a5291c551242f4233ff370fede2ea79a34afaf926b1dec15a6ca85177b30072872acb24ecf3177bbe750a1258314fb5492b7ea2dbd4cdd073a7a9b0"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x0, 0x53, {0x51, "b5b635c5735a7bd4b1b8c6fc02482bd6b23ed3bfb6055c91602f8037afc0e88d8ffbd5e154a765e22c2981e1fa5debac8c23fc444f79b3f39c937258d432c69b5509646187971508d5b6c9d831f7f6c650"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x7a}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x1}})
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002500)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000)
sendmmsg$inet6(r1, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="92", 0x1}], 0x1}}], 0x1, 0x48874)
sendmsg$key(r1, &(0x7f0000000640)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x80}}, 0x10)

0s ago: executing program 2 (id=1220):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
prctl$PR_GET_TSC(0x43, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x2172, 0xffffffffffffffff, 0x0)
r2 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x260842, 0x100, 0x24}, 0x18)
prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x20000000, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000180)=0x200, 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r3, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0)
bind$netlink(r0, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0xa382)
pwritev(r4, &(0x7f0000000840)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x800000, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00"], 0x1c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x334, 0x160, 0x2b8, 0x0, 0x160, 0x6000000, 0x26c, 0x3a8, 0x3a8, 0x26c, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg2\x00', 'bond0\x00', {}, {}, 0x5c}, 0x0, 0xf8, 0x160, 0x0, {0xd2030000}, [@common=@frag={{0x30}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x390)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f00000001c0)={0x10})
recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000030c0)=""/4082, 0xff2}], 0x1}}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

4-1: Manufacturer: syz
[  147.453539][    T8] usb 4-1: SerialNumber: syz
[  147.472237][ T7002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  147.479664][ T5282] usb 2-1: config 0 has no interface number 0
[  147.524922][ T5282] usb 2-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64
[  147.545862][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.579136][ T5282] usb 2-1: Product: syz
[  147.670761][ T5282] usb 2-1: Manufacturer: syz
[  147.709702][ T5282] usb 2-1: SerialNumber: syz
[  147.727695][ T5282] usb 2-1: config 0 descriptor??
[  147.749695][ T5282] sierra 2-1:0.153: Sierra USB modem converter detected
[  147.913833][ T5239] Bluetooth: hci4: command tx timeout
[  147.915555][    T8] kobil_sct 4-1:81.159: KOBIL USB smart card terminal converter detected
[  147.958126][ T5282] usb 2-1: USB disconnect, device number 16
[  147.973150][ T5282] sierra 2-1:0.153: device disconnected
[  148.036037][    T8] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  148.098392][    T8] usb 4-1: USB disconnect, device number 10
[  148.146413][    T8] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  148.167207][ T6954] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  148.191305][    T8] kobil_sct 4-1:81.159: device disconnected
[  148.209408][ T6954] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  148.248932][ T6954] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  148.271310][ T6954] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  148.441240][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.465782][ T6954] 8021q: adding VLAN 0 to HW filter on device team0
[  148.486020][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.493210][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.520031][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.527174][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.707542][ T6954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.801191][ T6954] veth0_vlan: entered promiscuous mode
[  148.867109][ T6954] veth1_vlan: entered promiscuous mode
[  148.908380][ T6954] veth0_macvtap: entered promiscuous mode
[  148.958391][ T6954] veth1_macvtap: entered promiscuous mode
[  149.107089][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.128592][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.140047][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.159450][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.178942][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.238551][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.271326][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.303429][ T6954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.332921][ T6954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.351890][ T6954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.437388][ T6954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.465373][ T6954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.489554][ T6954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.508062][ T6954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.629775][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.644397][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.659434][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.668460][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.679519][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  149.688698][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  149.840546][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.849447][   T61] bridge_slave_1: left allmulticast mode
[  149.858093][   T61] bridge_slave_1: left promiscuous mode
[  149.864555][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.872331][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.882911][   T61] bridge_slave_0: left allmulticast mode
[  149.889362][   T61] bridge_slave_0: left promiscuous mode
[  149.895468][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.999303][ T5233] Bluetooth: hci4: command tx timeout
[  150.200017][   T61] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  150.603303][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.707636][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.740973][   T61] bond0 (unregistering): Released all slaves
[  150.817616][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.825967][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.250618][ T7120] netlink: 'syz.4.403': attribute type 4 has an invalid length.
[  151.360964][ T7123] netlink: 'syz.0.402': attribute type 4 has an invalid length.
[  151.497849][   T61] hsr_slave_0: left promiscuous mode
[  151.507309][   T61] hsr_slave_1: left promiscuous mode
[  151.517097][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.530127][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.752717][ T5233] Bluetooth: hci3: command tx timeout
[  152.082885][ T5233] Bluetooth: hci4: command tx timeout
[  152.302401][   T61] team0 (unregistering): Port device team_slave_1 removed
[  152.369342][   T61] team0 (unregistering): Port device team_slave_0 removed
[  152.710138][ T7079] chnl_net:caif_netlink_parms(): no params data found
[  152.987539][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.036102][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.083960][ T7079] bridge_slave_0: entered allmulticast mode
[  153.140279][ T7079] bridge_slave_0: entered promiscuous mode
[  153.182616][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.200013][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.217646][ T7079] bridge_slave_1: entered allmulticast mode
[  153.231200][ T7079] bridge_slave_1: entered promiscuous mode
[  153.347099][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.361531][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.446156][ T7079] team0: Port device team_slave_0 added
[  153.459879][ T7079] team0: Port device team_slave_1 added
[  153.502932][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.517163][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.579767][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.636569][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.651537][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.690042][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.761463][ T7079] hsr_slave_0: entered promiscuous mode
[  153.790294][ T7079] hsr_slave_1: entered promiscuous mode
[  153.810438][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.834296][ T5233] Bluetooth: hci3: command tx timeout
[  153.845901][ T7079] Cannot create hsr debugfs directory
[  154.546578][ T7079] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  154.584821][ T7079] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  154.621443][ T7079] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  154.724738][ T7079] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  154.961312][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.002322][ T7079] 8021q: adding VLAN 0 to HW filter on device team0
[  155.020550][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.027688][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.063900][ T7199] netlink: 'syz.1.418': attribute type 4 has an invalid length.
[  155.079839][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.087000][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.166169][ T7079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.180506][ T7079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.257638][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.370676][ T7079] veth0_vlan: entered promiscuous mode
[  155.417100][ T7079] veth1_vlan: entered promiscuous mode
[  155.475859][ T7079] veth0_macvtap: entered promiscuous mode
[  155.501737][ T7079] veth1_macvtap: entered promiscuous mode
[  155.528679][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.541209][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.555210][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.566454][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.596508][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.610611][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.626924][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.655723][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.695465][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.774909][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.856048][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.912673][ T5233] Bluetooth: hci3: command tx timeout
[  155.942866][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.953863][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.965771][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.978568][ T7079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.987907][ T7079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.006000][ T7079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.016162][ T7079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.316554][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.397760][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.491406][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.511848][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.952636][   T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  158.002811][ T5233] Bluetooth: hci3: command tx timeout
[  158.117251][   T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  158.160626][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.184755][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.197366][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  158.212039][   T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  158.221618][   T25] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  158.230157][   T25] usb 4-1: Manufacturer: syz
[  158.252173][   T25] usb 4-1: config 0 descriptor??
[  158.701031][   T25] appleir 0003:05AC:8243.000E: unknown main item tag 0x0
[  158.719678][   T25] appleir 0003:05AC:8243.000E: No inputs registered, leaving
[  158.731050][   T25] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  160.087804][ T7311] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  160.104056][ T7313] netlink: 'syz.1.445': attribute type 4 has an invalid length.
[  160.135043][ T7311] netlink: 'syz.0.444': attribute type 10 has an invalid length.
[  160.160155][ T7313] netlink: 'syz.1.445': attribute type 4 has an invalid length.
[  160.180437][ T7311] netlink: 'syz.0.444': attribute type 29 has an invalid length.
[  160.864318][ T5279] usb 4-1: USB disconnect, device number 11
[  163.302575][    T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  163.464715][    T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  163.477039][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.499406][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.520031][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  163.546155][    T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  163.566486][    T8] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  163.578502][    T8] usb 3-1: Manufacturer: syz
[  163.585242][    T8] usb 3-1: config 0 descriptor??
[  164.011651][    T8] appleir 0003:05AC:8243.000F: unknown main item tag 0x0
[  164.023581][    T8] appleir 0003:05AC:8243.000F: No inputs registered, leaving
[  164.036978][    T8] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  164.588467][ T5280] usb 3-1: USB disconnect, device number 9
[  165.688615][ T7406] syzkaller0: entered promiscuous mode
[  165.694498][ T7406] syzkaller0: entered allmulticast mode
[  167.494900][ T7410] netlink: 'syz.3.478': attribute type 4 has an invalid length.
[  167.546378][ T7411] netlink: 'syz.3.478': attribute type 4 has an invalid length.
[  170.809757][ T7487] netlink: 'syz.3.501': attribute type 4 has an invalid length.
[  170.861204][ T7490] netlink: 164 bytes leftover after parsing attributes in process `syz.4.500'.
[  172.814456][ T7539] netlink: 'syz.4.514': attribute type 4 has an invalid length.
[  175.267310][ T7580] syzkaller0: entered promiscuous mode
[  175.277816][ T7580] syzkaller0: entered allmulticast mode
[  182.101556][ T7664] syzkaller0: entered promiscuous mode
[  182.109453][ T7664] syzkaller0: entered allmulticast mode
[  183.725067][ T7688] binder: BINDER_SET_CONTEXT_MGR already set
[  183.752602][ T7688] binder: 7687:7688 ioctl 4018620d 200002c0 returned -16
[  183.802147][ T7688] binder: 7687:7688 ioctl c0306201 20000200 returned -11
[  191.352565][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  192.481629][ T7787] syzkaller0: entered promiscuous mode
[  192.622606][ T7787] syzkaller0: entered allmulticast mode
[  194.394139][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  194.400467][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  203.808905][ T7886] syzkaller0: entered promiscuous mode
[  203.814824][ T7886] syzkaller0: entered allmulticast mode
[  210.798009][ T7949] netlink: 188 bytes leftover after parsing attributes in process `syz.2.604'.
[  211.204441][ T7963] syzkaller0: entered promiscuous mode
[  211.221593][ T7963] syzkaller0: entered allmulticast mode
[  211.429127][ T7966] syzkaller0: entered promiscuous mode
[  211.434948][ T7966] syzkaller0: entered allmulticast mode
[  218.219564][ T8001] netlink: 188 bytes leftover after parsing attributes in process `syz.4.616'.
[  218.577013][ T8017] syzkaller0: entered promiscuous mode
[  218.587464][ T8017] syzkaller0: entered allmulticast mode
[  222.073424][ T5239] Bluetooth: hci0: command 0x0406 tx timeout
[  225.651852][ T5280] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  225.742642][ T5281] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  225.864288][ T5280] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  225.876283][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.887619][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.897721][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  225.912104][ T5280] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  225.921285][ T5280] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  225.932500][ T5280] usb 1-1: Manufacturer: syz
[  225.939568][ T5280] usb 1-1: config 0 descriptor??
[  226.202812][ T5281] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  226.213750][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.223598][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  226.241429][ T5281] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  226.251200][ T5281] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  226.259561][ T5281] usb 3-1: Manufacturer: syz
[  226.271032][ T5281] usb 3-1: config 0 descriptor??
[  226.297325][ T5281] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  226.356320][ T5280] appleir 0003:05AC:8243.0010: unknown main item tag 0x0
[  226.363873][ T5280] appleir 0003:05AC:8243.0010: No inputs registered, leaving
[  226.396521][ T5280] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  226.951324][ T5348] usb 1-1: USB disconnect, device number 7
[  228.519660][ T5279] usb 3-1: USB disconnect, device number 10
[  230.962531][  T936] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  231.134650][  T936] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  231.145670][  T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.185745][  T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.202273][  T936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  231.244990][  T936] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  231.256550][  T936] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  231.269516][  T936] usb 3-1: Manufacturer: syz
[  231.282665][  T936] usb 3-1: config 0 descriptor??
[  231.711329][  T936] appleir 0003:05AC:8243.0011: unknown main item tag 0x0
[  231.723668][  T936] appleir 0003:05AC:8243.0011: No inputs registered, leaving
[  231.794956][  T936] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  232.333183][ T5279] usb 3-1: USB disconnect, device number 11
[  233.352560][ T5348] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  233.558664][ T5348] usb 2-1: device descriptor read/64, error -71
[  233.812529][ T5348] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  233.967383][ T5348] usb 2-1: device descriptor read/64, error -71
[  234.190933][ T5348] usb usb2-port1: attempt power cycle
[  234.572834][ T5348] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  234.606008][ T5348] usb 2-1: device descriptor read/8, error -71
[  234.886639][ T5348] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  234.992149][ T5348] usb 2-1: device descriptor read/8, error -71
[  235.146887][ T5348] usb usb2-port1: unable to enumerate USB device
[  236.582558][ T5282] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  236.733304][ T5282] usb 4-1: Using ep0 maxpacket: 8
[  236.754617][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.832144][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  236.900480][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  236.935584][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  236.960075][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  236.980384][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  237.026188][ T5282] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  237.039606][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.075587][ T5282] usb 4-1: Product: syz
[  237.085131][ T5282] usb 4-1: Manufacturer: syz
[  237.101861][ T5282] usb 4-1: SerialNumber: syz
[  237.126586][ T5282] usb 4-1: config 0 descriptor??
[  237.170632][ T8231] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  237.383548][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'.
[  238.202497][ T5280] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  238.382573][ T5280] usb 1-1: Using ep0 maxpacket: 16
[  238.408069][ T5280] usb 1-1: config 0 has too many interfaces: 98, using maximum allowed: 32
[  238.417905][ T5280] usb 1-1: config 0 has an invalid interface number: 153 but max is 97
[  238.426730][ T5280] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 98
[  238.436487][ T5280] usb 1-1: config 0 has no interface number 0
[  238.445739][ T5280] usb 1-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64
[  238.455410][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.466888][ T5280] usb 1-1: Product: syz
[  238.471350][ T5280] usb 1-1: Manufacturer: syz
[  238.477204][ T5280] usb 1-1: SerialNumber: syz
[  238.486929][ T5280] usb 1-1: config 0 descriptor??
[  238.498099][ T5280] sierra 1-1:0.153: Sierra USB modem converter detected
[  239.101072][ T5280] usb 1-1: USB disconnect, device number 8
[  239.123010][ T5280] sierra 1-1:0.153: device disconnected
[  239.362884][ T5282] rc_core: IR keymap rc-snapstream-firefly not found
[  239.378435][ T5282] Registered IR keymap rc-empty
[  239.394725][ T5282] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  239.419145][ T5282] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29
[  239.439180][ T5282] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30
[  239.497064][ T5282] usb 4-1: USB disconnect, device number 12
[  239.503168][    C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  239.540814][ T8263] netlink: 'syz.2.675': attribute type 27 has an invalid length.
[  239.967909][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.982902][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.066585][ T8263] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.084239][ T8263] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.105057][ T8263] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.222558][ T8263] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.561684][ T8263] hsr1: left allmulticast mode
[  240.589002][ T8263] syz_tun: left allmulticast mode
[  240.645449][ T8263] batadv_slave_0: left allmulticast mode
[  241.608373][   T29] audit: type=1326 audit(1728380926.262:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  241.670910][   T29] audit: type=1326 audit(1728380926.282:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747d579 code=0x7ffc0000
[  241.715977][   T29] audit: type=1326 audit(1728380926.282:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  241.829200][   T29] audit: type=1326 audit(1728380926.282:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf747d579 code=0x7ffc0000
[  241.930292][   T29] audit: type=1326 audit(1728380926.282:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  242.013339][   T29] audit: type=1326 audit(1728380926.282:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf747d579 code=0x7ffc0000
[  242.160694][   T29] audit: type=1326 audit(1728380926.282:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  243.932516][ T5282] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  244.112671][ T5282] usb 1-1: Using ep0 maxpacket: 8
[  244.135611][ T5282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.171997][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  244.229725][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  244.260505][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  244.288643][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  244.325999][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  244.372211][ T5282] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  244.385098][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.415173][ T5282] usb 1-1: Product: syz
[  244.430750][ T5282] usb 1-1: Manufacturer: syz
[  244.441386][ T5282] usb 1-1: SerialNumber: syz
[  244.503535][ T5282] usb 1-1: config 0 descriptor??
[  244.511555][ T8325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  244.736831][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'.
[  245.415743][ T8331] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  245.427797][ T8331] netlink: 'syz.2.694': attribute type 10 has an invalid length.
[  245.478037][ T8331] netlink: 'syz.2.694': attribute type 29 has an invalid length.
[  245.517262][ T8331] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4)
[  245.590765][ T5348] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  245.752724][ T5348] usb 2-1: Using ep0 maxpacket: 8
[  245.759475][ T5348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.781475][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  245.797174][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  245.810413][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  245.825789][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  245.855951][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  245.873200][ T5348] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  245.898985][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.908617][ T5348] usb 2-1: Product: syz
[  245.915730][ T5348] usb 2-1: Manufacturer: syz
[  245.920706][ T5348] usb 2-1: SerialNumber: syz
[  245.934000][ T5348] usb 2-1: config 0 descriptor??
[  245.943567][ T8329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  246.082991][   T29] audit: type=1326 audit(1728380930.802:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  246.118795][   T29] audit: type=1326 audit(1728380930.822:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  246.159413][   T29] audit: type=1326 audit(1728380930.822:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  246.190121][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[  246.356570][   T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.506565][   T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.732310][   T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.752685][ T5282] rc_core: IR keymap rc-snapstream-firefly not found
[  246.760744][ T5282] Registered IR keymap rc-empty
[  246.769348][ T5282] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  246.792281][ T5282] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31
[  246.831512][ T5282] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33
[  246.872721][ T5281] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  246.881343][ T5282] usb 1-1: USB disconnect, device number 9
[  246.887417][    C1] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  246.942054][   T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.074481][ T5281] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  247.111485][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.140146][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.168416][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  247.215981][ T5281] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  247.240463][ T5281] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  247.264881][ T5281] usb 3-1: Manufacturer: syz
[  247.291408][ T5281] usb 3-1: config 0 descriptor??
[  247.322276][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  247.335396][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.345019][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.353545][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.361293][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  247.371417][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.577907][   T61] bridge_slave_1: left allmulticast mode
[  247.586060][   T61] bridge_slave_1: left promiscuous mode
[  247.592290][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.612174][   T61] bridge_slave_0: left allmulticast mode
[  247.618194][   T61] bridge_slave_0: left promiscuous mode
[  247.632878][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.847305][ T5281] appleir 0003:05AC:8243.0012: unknown main item tag 0x0
[  247.883049][ T5281] appleir 0003:05AC:8243.0012: No inputs registered, leaving
[  247.943343][ T5281] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  248.196077][ T5348] rc_core: IR keymap rc-snapstream-firefly not found
[  248.218503][ T5348] Registered IR keymap rc-empty
[  248.244091][ T5348] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  248.257196][ T5348] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32
[  248.281515][ T5348] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34
[  248.357074][    C1] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  248.403247][ T5348] usb 2-1: USB disconnect, device number 21
[  248.736378][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.777720][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.846485][   T61] bond0 (unregistering): Released all slaves
[  248.916101][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'.
[  249.096324][ T8359] chnl_net:caif_netlink_parms(): no params data found
[  249.110087][ T8382] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  249.224335][ T8382] netlink: 'syz.0.709': attribute type 10 has an invalid length.
[  249.401282][ T8388] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4)
[  249.432549][ T5239] Bluetooth: hci3: command tx timeout
[  249.530774][ T8359] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.600280][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.648491][ T8359] bridge_slave_0: entered allmulticast mode
[  249.695681][ T8359] bridge_slave_0: entered promiscuous mode
[  249.753498][ T5279] usb 3-1: USB disconnect, device number 12
[  249.892696][ T8359] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.906128][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.978680][ T8359] bridge_slave_1: entered allmulticast mode
[  250.007722][ T8359] bridge_slave_1: entered promiscuous mode
[  250.298424][   T61] hsr_slave_0: left promiscuous mode
[  250.357945][   T61] hsr_slave_1: left promiscuous mode
[  250.399434][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.437741][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.473412][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.502338][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.633455][   T61] veth1_macvtap: left promiscuous mode
[  250.641342][   T61] veth0_macvtap: left promiscuous mode
[  250.660655][   T61] veth1_vlan: left promiscuous mode
[  250.675062][   T61] veth0_vlan: left promiscuous mode
[  251.518251][ T5239] Bluetooth: hci3: command tx timeout
[  251.873374][   T61] team0 (unregistering): Port device team_slave_1 removed
[  252.063920][   T61] team0 (unregistering): Port device team_slave_0 removed
[  253.015682][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  253.015700][   T29] audit: type=1326 audit(1728380937.732:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.049098][   T29] audit: type=1326 audit(1728380937.732:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.090096][   T29] audit: type=1326 audit(1728380937.732:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.127279][   T29] audit: type=1326 audit(1728380937.732:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.153333][   T29] audit: type=1326 audit(1728380937.732:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.180943][ T8359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.201537][ T8359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.231200][   T29] audit: type=1326 audit(1728380937.732:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.234492][ T8425] syz_tun: entered promiscuous mode
[  253.260160][   T29] audit: type=1326 audit(1728380937.732:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.283173][ T8425] batadv_slave_0: entered promiscuous mode
[  253.289885][   T29] audit: type=1326 audit(1728380937.732:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.312150][ T8425] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  253.312926][   T29] audit: type=1326 audit(1728380937.732:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.329668][ T8425] Cannot create hsr debugfs directory
[  253.352941][ T8425] hsr1: entered allmulticast mode
[  253.364991][   T29] audit: type=1326 audit(1728380937.732:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.2.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  253.366128][ T8425] syz_tun: entered allmulticast mode
[  253.400639][ T8425] batadv_slave_0: entered allmulticast mode
[  253.539078][ T8437] syzkaller0: entered promiscuous mode
[  253.545671][ T8437] syzkaller0: entered allmulticast mode
[  253.588579][ T8359] team0: Port device team_slave_0 added
[  253.594536][ T5239] Bluetooth: hci3: command tx timeout
[  255.672972][ T5239] Bluetooth: hci3: command tx timeout
[  255.835151][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  255.841621][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  257.923055][ T5233] Bluetooth: hci2: command 0x0406 tx timeout
[  258.502545][ T8359] team0: Port device team_slave_1 added
[  258.725908][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.765953][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.808723][ T8359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.821054][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.828107][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.857555][ T8359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.022300][ T8359] hsr_slave_0: entered promiscuous mode
[  259.109068][ T8359] hsr_slave_1: entered promiscuous mode
[  259.197765][ T8359] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.227876][ T8359] Cannot create hsr debugfs directory
[  261.216389][ T8359] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  261.275558][ T8359] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  261.387609][ T8359] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  261.543068][ T8359] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  262.088663][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.243845][ T8359] 8021q: adding VLAN 0 to HW filter on device team0
[  262.307907][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.315054][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.410822][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.417938][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.673155][ T8359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.841914][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.881053][ T8359] veth0_vlan: entered promiscuous mode
[  262.891059][ T8359] veth1_vlan: entered promiscuous mode
[  262.913164][ T8359] veth0_macvtap: entered promiscuous mode
[  262.922017][ T8359] veth1_macvtap: entered promiscuous mode
[  262.963749][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.974478][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.992961][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.003629][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.039347][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.083743][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'.
[  263.249424][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.287291][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.311913][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.350989][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.410056][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.450469][ T8359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.476191][ T8359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.509244][ T8359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.538023][ T8359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.766667][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.798640][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.798764][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.815334][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.102886][ T8593] syzkaller0: entered promiscuous mode
[  264.109045][ T8593] syzkaller0: entered allmulticast mode
[  264.346169][ T8609] netlink: 'syz.1.742': attribute type 29 has an invalid length.
[  267.431575][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'.
[  268.155076][ T5239] Bluetooth: hci4: command 0x0406 tx timeout
[  268.349507][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'.
[  268.421071][ T8602] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  268.430454][ T8607] netlink: 'syz.1.742': attribute type 10 has an invalid length.
[  268.438745][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.445931][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.514580][   T11] bond0: (slave bridge0): link status definitely down, disabling slave
[  268.563051][ T8609] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4)
[  268.597712][ T8673] vlan2: entered allmulticast mode
[  268.603768][ T8673] bond0: entered allmulticast mode
[  268.609087][ T8673] bond_slave_0: entered allmulticast mode
[  268.615185][ T8673] bond_slave_1: entered allmulticast mode
[  268.640531][ T8673] bond0: left allmulticast mode
[  268.645800][ T8673] bond_slave_0: left allmulticast mode
[  268.651998][ T8673] bond_slave_1: left allmulticast mode
[  268.904566][ T8682] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  268.932650][ T8682] netlink: 'syz.2.752': attribute type 10 has an invalid length.
[  268.968412][ T8682] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4)
[  268.968477][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[  272.596295][ T8723] syzkaller0: entered promiscuous mode
[  272.617984][ T8723] syzkaller0: entered allmulticast mode
[  277.185292][ T8763] syzkaller0: entered promiscuous mode
[  277.224793][ T8763] syzkaller0: entered allmulticast mode
[  280.994350][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'.
[  281.321974][ T8795] syzkaller0: entered promiscuous mode
[  281.340829][ T8795] syzkaller0: entered allmulticast mode
[  292.913889][ T8908] syzkaller0: entered promiscuous mode
[  292.938978][ T8908] syzkaller0: entered allmulticast mode
[  304.645214][ T9024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.834'.
[  307.070856][ T9065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.845'.
[  312.565321][ T9114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.857'.
[  314.830742][ T9151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.870'.
[  317.292830][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  317.301241][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  317.638725][ T9190] netlink: 32 bytes leftover after parsing attributes in process `syz.3.882'.
[  318.890468][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.893'.
[  319.154910][ T9225] FAULT_INJECTION: forcing a failure.
[  319.154910][ T9225] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  319.206922][ T9225] CPU: 0 UID: 0 PID: 9225 Comm: syz.2.896 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  319.217576][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  319.227644][ T9225] Call Trace:
[  319.230915][ T9225]  <TASK>
[  319.233842][ T9225]  dump_stack_lvl+0x241/0x360
[  319.238534][ T9225]  ? __pfx_dump_stack_lvl+0x10/0x10
[  319.243726][ T9225]  ? __pfx__printk+0x10/0x10
[  319.248318][ T9225]  ? __pfx_lock_release+0x10/0x10
[  319.253350][ T9225]  should_fail_ex+0x3b0/0x4e0
[  319.258031][ T9225]  _copy_from_user+0x2f/0xe0
[  319.262626][ T9225]  do_mcast_group_source+0x251/0x8e0
[  319.267910][ T9225]  ? __pfx_do_mcast_group_source+0x10/0x10
[  319.273753][ T9225]  ? __local_bh_enable_ip+0x168/0x200
[  319.279124][ T9225]  ? do_ip_setsockopt+0x1a2d/0x3cd0
[  319.284349][ T9225]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  319.290071][ T9225]  do_ip_setsockopt+0x1f36/0x3cd0
[  319.295093][ T9225]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  319.300459][ T9225]  ? aa_sk_perm+0x96d/0xab0
[  319.304962][ T9225]  ? __pfx_aa_sk_perm+0x10/0x10
[  319.309808][ T9225]  ? __pfx_lock_acquire+0x10/0x10
[  319.314835][ T9225]  ip_setsockopt+0x63/0x100
[  319.319332][ T9225]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  319.325222][ T9225]  do_sock_setsockopt+0x3af/0x720
[  319.330243][ T9225]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  319.335781][ T9225]  ? __fget_files+0x3f3/0x470
[  319.340455][ T9225]  ? __fget_files+0x29/0x470
[  319.345042][ T9225]  __sys_setsockopt+0x1a2/0x250
[  319.349890][ T9225]  __ia32_sys_setsockopt+0xb5/0xd0
[  319.354994][ T9225]  __do_fast_syscall_32+0xb4/0x110
[  319.360098][ T9225]  ? exc_page_fault+0x590/0x8c0
[  319.364950][ T9225]  do_fast_syscall_32+0x34/0x80
[  319.369794][ T9225]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  319.376122][ T9225] RIP: 0023:0xf7ff6579
[  319.380187][ T9225] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  319.399796][ T9225] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  319.408214][ T9225] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  319.416176][ T9225] RDX: 000000000000002e RSI: 00000000200000c0 RDI: 0000000000000104
[  319.424138][ T9225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  319.432099][ T9225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  319.440146][ T9225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  319.448119][ T9225]  </TASK>
[  320.023789][ T5280] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  320.203230][ T5280] usb 3-1: too many configurations: 100, using maximum allowed: 8
[  320.243771][ T5280] usb 3-1: unable to read config index 0 descriptor/start: -61
[  320.255211][ T5280] usb 3-1: can't read configurations, error -61
[  320.382551][  T936] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  320.402586][ T5280] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  320.542637][  T936] usb 1-1: Using ep0 maxpacket: 32
[  320.560380][  T936] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  320.572315][ T5280] usb 3-1: too many configurations: 100, using maximum allowed: 8
[  320.607362][  T936] usb 1-1: config 0 has no interface number 0
[  320.620075][ T5280] usb 3-1: unable to read config index 0 descriptor/start: -61
[  320.638340][ T5280] usb 3-1: can't read configurations, error -61
[  320.650010][  T936] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  320.666409][ T5280] usb usb3-port1: attempt power cycle
[  320.675884][  T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.695511][  T936] usb 1-1: Product: syz
[  320.702286][  T936] usb 1-1: Manufacturer: syz
[  320.707054][  T936] usb 1-1: SerialNumber: syz
[  320.724132][  T936] usb 1-1: config 0 descriptor??
[  320.755216][  T936] smsc95xx v2.0.0
[  321.142550][ T5280] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  321.169552][  T936] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  321.181010][  T936] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  321.191412][ T5280] usb 3-1: too many configurations: 100, using maximum allowed: 8
[  321.207048][ T5280] usb 3-1: unable to read config index 0 descriptor/start: -61
[  321.218028][ T5280] usb 3-1: can't read configurations, error -61
[  321.362563][ T5280] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  321.389088][ T5280] usb 3-1: too many configurations: 100, using maximum allowed: 8
[  321.407485][ T5280] usb 3-1: unable to read config index 0 descriptor/start: -61
[  321.418117][ T5280] usb 3-1: can't read configurations, error -61
[  321.429888][ T5280] usb usb3-port1: unable to enumerate USB device
[  322.616008][  T936] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  322.639178][ T9265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.907'.
[  322.641335][  T936] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  322.670399][  T936] usb 1-1: USB disconnect, device number 10
[  323.861907][ T9308] netlink: 32 bytes leftover after parsing attributes in process `syz.0.919'.
[  327.352500][ T5279] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  327.504779][ T5279] usb 2-1: config 252 has an invalid interface number: 254 but max is 0
[  327.527625][ T5279] usb 2-1: config 252 has no interface number 0
[  327.556742][ T5279] usb 2-1: config 252 interface 254 has no altsetting 0
[  327.585464][ T5279] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29
[  327.597035][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.646467][ T5279] usb 2-1: Product: syz
[  327.654732][ T5279] usb 2-1: Manufacturer: syz
[  327.660528][ T5279] usb 2-1: SerialNumber: syz
[  327.696227][ T5279] bfusb 2-1:252.254: probe with driver bfusb failed with error -5
[  327.907936][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.995743][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.025023][ T5279] usb 2-1: USB disconnect, device number 22
[  328.363989][ T9342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.930'.
[  328.544611][ T5280] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  328.579944][ T5280] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  328.810123][ T9350] syzkaller0: entered promiscuous mode
[  328.823092][ T9350] syzkaller0: entered allmulticast mode
[  330.802713][ T5279] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  330.966444][ T5279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.994404][ T5279] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  331.011012][ T5279] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  331.020291][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  331.028371][ T5279] usb 4-1: SerialNumber: syz
[  331.323409][ T5279] usb 4-1: 0:2 : does not exist
[  331.460599][ T5279] usb 4-1: USB disconnect, device number 13
[  331.507441][ T9333] udevd[9333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  332.142463][   T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  332.296767][   T25] usb 4-1: Using ep0 maxpacket: 32
[  332.305794][   T25] usb 4-1: config 107 has an invalid interface number: 29 but max is 0
[  332.316117][   T25] usb 4-1: config 107 has no interface number 0
[  332.322872][   T25] usb 4-1: config 107 interface 29 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  332.345679][   T25] usb 4-1: config 107 interface 29 has no altsetting 0
[  332.367398][   T25] usb 4-1: New USB device found, idVendor=07ca, idProduct=a807, bcdDevice=87.10
[  332.376646][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.388124][   T25] usb 4-1: Product: syz
[  332.393167][   T25] usb 4-1: Manufacturer: syz
[  332.409183][   T25] usb 4-1: SerialNumber: syz
[  332.626764][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.656850][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.173997][   T25] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in warm state.
[  333.226100][   T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  333.252308][   T25] dvbdev: DVB: registering new adapter (AVerMedia AVerTV DVB-T Volar)
[  333.277254][   T25] usb 4-1: media controller created
[  333.374383][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  333.432465][ T5279] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  333.461369][   T25] DVB: Unable to find symbol dib7000p_attach()
[  333.491435][   T25] dvb-usb: no frontend was attached by 'AVerMedia AVerTV DVB-T Volar'
[  333.582459][   T25] rc_core: IR keymap rc-dib0700-rc5 not found
[  333.592818][   T25] Registered IR keymap rc-empty
[  333.614870][   T25] dvb-usb: could not initialize remote control.
[  333.621299][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.638894][ T5279] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  333.648122][   T25] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully initialized and connected.
[  333.669117][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.684627][   T25] dib0700: There's no endpoint for remote controller
[  333.724275][ T5279] usb 2-1: config 0 descriptor??
[  333.775517][ T5279] pwc: Askey VC010 type 2 USB webcam detected.
[  333.899030][   T25] usb 4-1: USB disconnect, device number 14
[  333.954199][ T9401] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  333.970364][ T5279] pwc: send_video_command error -71
[  333.992253][ T5279] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  334.045581][ T5279] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  334.055705][   T25] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully deinitialized and disconnected.
[  334.125496][ T5279] usb 2-1: USB disconnect, device number 23
[  334.502470][ T5279] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  334.674312][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.716724][ T5279] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  334.741213][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.832861][ T5279] usb 2-1: config 0 descriptor??
[  334.863723][ T5279] pwc: Askey VC010 type 2 USB webcam detected.
[  335.263623][ T5279] pwc: recv_control_msg error -32 req 02 val 2b00
[  336.862239][ T9427] syzkaller0: entered promiscuous mode
[  336.868798][ T9427] syzkaller0: entered allmulticast mode
[  337.061812][ T5279] pwc: recv_control_msg error -71 req 02 val 2700
[  337.105394][ T5279] pwc: recv_control_msg error -71 req 02 val 2c00
[  337.120253][ T5279] pwc: recv_control_msg error -71 req 04 val 1000
[  337.137026][ T5279] pwc: recv_control_msg error -71 req 04 val 1300
[  337.157539][ T5279] pwc: recv_control_msg error -71 req 04 val 1400
[  337.238338][ T5279] pwc: recv_control_msg error -71 req 02 val 2000
[  337.275944][ T5279] pwc: recv_control_msg error -71 req 02 val 2100
[  337.295730][ T5279] pwc: recv_control_msg error -71 req 04 val 1500
[  337.316225][ T5279] pwc: recv_control_msg error -71 req 02 val 2500
[  337.318037][ T9434] FAULT_INJECTION: forcing a failure.
[  337.318037][ T9434] name failslab, interval 1, probability 0, space 0, times 0
[  337.338848][ T5279] pwc: recv_control_msg error -71 req 02 val 2400
[  337.358714][ T5279] pwc: recv_control_msg error -71 req 02 val 2600
[  337.372623][ T9434] CPU: 1 UID: 0 PID: 9434 Comm: syz.4.960 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  337.383263][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  337.393335][ T9434] Call Trace:
[  337.396612][ T9434]  <TASK>
[  337.399531][ T9434]  dump_stack_lvl+0x241/0x360
[  337.404205][ T9434]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.409394][ T9434]  ? __pfx__printk+0x10/0x10
[  337.414150][ T9434]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[  337.419698][ T9434]  ? __pfx___might_resched+0x10/0x10
[  337.425070][ T9434]  should_fail_ex+0x3b0/0x4e0
[  337.429745][ T9434]  ? getname_flags+0xb7/0x540
[  337.434412][ T9434]  should_failslab+0xac/0x100
[  337.439079][ T9434]  ? getname_flags+0xb7/0x540
[  337.443746][ T9434]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  337.449110][ T9434]  getname_flags+0xb7/0x540
[  337.453603][ T9434]  user_path_at+0x24/0x60
[  337.457923][ T9434]  path_setxattr+0x224/0x4d0
[  337.462526][ T9434]  ? vfs_write+0x7bf/0xc90
[  337.466934][ T9434]  ? __pfx_path_setxattr+0x10/0x10
[  337.472041][ T9434]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  337.478014][ T9434]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  337.484338][ T9434]  __ia32_sys_lsetxattr+0xb8/0xd0
[  337.489358][ T9434]  __do_fast_syscall_32+0xb4/0x110
[  337.494459][ T9434]  ? exc_page_fault+0x590/0x8c0
[  337.499303][ T9434]  do_fast_syscall_32+0x34/0x80
[  337.504138][ T9434]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  337.510452][ T9434] RIP: 0023:0xf741d579
[  337.514505][ T9434] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  337.534123][ T9434] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 00000000000000e3
[  337.542527][ T9434] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000020000040
[  337.550487][ T9434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  337.558448][ T9434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  337.566432][ T9434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  337.574416][ T9434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  337.582393][ T9434]  </TASK>
[  337.608025][ T5279] pwc: recv_control_msg error -71 req 02 val 2900
[  337.635334][ T5279] pwc: recv_control_msg error -71 req 02 val 2800
[  337.723466][ T5279] pwc: recv_control_msg error -71 req 04 val 1100
[  337.737130][ T5279] pwc: recv_control_msg error -71 req 04 val 1200
[  337.760773][ T5279] pwc: Registered as video71.
[  337.766908][ T5279] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36
[  337.875001][ T5279] usb 2-1: USB disconnect, device number 24
[  338.732571][  T936] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  338.872552][  T936] usb 4-1: device descriptor read/64, error -71
[  339.152552][  T936] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  339.312576][  T936] usb 4-1: device descriptor read/64, error -71
[  339.442708][  T936] usb usb4-port1: attempt power cycle
[  339.812557][  T936] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  339.866355][ T9463] netlink: 'syz.0.972': attribute type 21 has an invalid length.
[  339.873154][  T936] usb 4-1: device descriptor read/8, error -71
[  339.874455][ T9463] netlink: 'syz.0.972': attribute type 1 has an invalid length.
[  339.888740][ T9463] netlink: 144 bytes leftover after parsing attributes in process `syz.0.972'.
[  340.143434][   T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  340.302527][   T25] usb 1-1: Using ep0 maxpacket: 16
[  340.329643][   T25] usb 1-1: unable to read config index 0 descriptor/start: -61
[  340.361941][   T25] usb 1-1: can't read configurations, error -61
[  340.402450][  T936] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  340.512448][   T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  340.522427][  T936] usb 4-1: device descriptor read/8, error -71
[  340.752445][   T25] usb 1-1: Using ep0 maxpacket: 16
[  340.768043][   T25] usb 1-1: unable to read config index 0 descriptor/start: -61
[  340.775888][   T25] usb 1-1: can't read configurations, error -61
[  340.801498][   T25] usb usb1-port1: attempt power cycle
[  340.862808][  T936] usb usb4-port1: unable to enumerate USB device
[  341.152735][   T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  341.184698][   T25] usb 1-1: Using ep0 maxpacket: 16
[  341.196441][   T25] usb 1-1: unable to read config index 0 descriptor/start: -61
[  341.212733][   T25] usb 1-1: can't read configurations, error -61
[  341.372501][   T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  341.423115][   T25] usb 1-1: Using ep0 maxpacket: 16
[  341.431297][   T25] usb 1-1: unable to read config index 0 descriptor/start: -61
[  341.450434][   T25] usb 1-1: can't read configurations, error -61
[  341.479057][   T25] usb usb1-port1: unable to enumerate USB device
[  343.073768][ T9499] syzkaller0: entered promiscuous mode
[  343.086738][ T9499] syzkaller0: entered allmulticast mode
[  343.149901][ T9494] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  343.289729][ T9506] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  347.252501][ T9546] program syz.3.991 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  347.502787][ T5348] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  347.535730][ T5281] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  347.616254][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  347.616273][   T29] audit: type=1800 audit(1728381032.332:48): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.995" name="/" dev="fuse" ino=1 res=0 errno=0
[  347.653859][ T5348] usb 2-1: Using ep0 maxpacket: 16
[  347.662127][ T5348] usb 2-1: config index 0 descriptor too short (expected 6162, got 18)
[  347.681655][ T5348] usb 2-1: config 37 has too many interfaces: 216, using maximum allowed: 32
[  347.692692][ T5348] usb 2-1: config 37 has an invalid descriptor of length 162, skipping remainder of the config
[  347.706335][ T5348] usb 2-1: config 37 has 0 interfaces, different from the descriptor's value: 216
[  347.716494][ T5281] usb 3-1: config 0 has an invalid interface number: 170 but max is 0
[  347.732587][ T5281] usb 3-1: config 0 has no interface number 0
[  347.740239][ T5348] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  347.749574][ T5281] usb 3-1: config 0 interface 170 altsetting 68 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.749757][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.762543][ T5281] usb 3-1: config 0 interface 170 altsetting 68 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.778347][ T5348] usb 2-1: Product: syz
[  347.783575][ T5348] usb 2-1: Manufacturer: syz
[  347.788339][ T5348] usb 2-1: SerialNumber: syz
[  347.793433][ T5281] usb 3-1: config 0 interface 170 has no altsetting 0
[  347.801076][ T5281] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  347.810282][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.820708][ T5281] usb 3-1: config 0 descriptor??
[  347.834957][ T5348] r8152-cfgselector 2-1: Unknown version 0x0000
[  348.236169][ T5281] uclogic 0003:5543:004D.0014: interface is invalid, ignoring
[  348.456003][ T5281] usb 3-1: USB disconnect, device number 17
[  348.913135][ T5281] r8152-cfgselector 2-1: USB disconnect, device number 25
[  349.238642][ T5233] Bluetooth: hci4: unexpected event for opcode 0x080d
[  349.761506][ T9594] usb usb8: usbfs: process 9594 (syz.1.1003) did not claim interface 0 before use
[  350.207335][ T9597] syzkaller0: entered promiscuous mode
[  350.213768][ T9597] syzkaller0: entered allmulticast mode
[  352.624595][   T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  352.818786][   T25] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  352.827384][   T25] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  352.860563][   T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.884055][   T25] usb 1-1: config 0 has no interface number 0
[  352.890206][   T25] usb 1-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  352.923982][   T25] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  352.933251][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.941237][   T25] usb 1-1: Product: syz
[  352.945953][   T25] usb 1-1: Manufacturer: syz
[  352.956634][   T25] usb 1-1: SerialNumber: syz
[  352.987699][   T25] usb 1-1: config 0 descriptor??
[  353.023151][   T25] usb-storage 1-1:0.2: USB Mass Storage device detected
[  353.075952][   T25] usb-storage 1-1:0.2: Quirks match for vid 1908 pid 1315: 20000
[  353.270593][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.274793][ T5233] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  353.287564][ T5233] Bluetooth: hci4: Injecting HCI hardware error event
[  353.295551][ T5233] Bluetooth: hci4: hardware error 0x00
[  353.308147][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.330914][  T936] usb 1-1: USB disconnect, device number 15
[  353.726999][ T9625] netlink: 'syz.4.1013': attribute type 3 has an invalid length.
[  353.773007][  T936] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  353.804694][ T9625] xt_CT: No such helper "snmp"
[  353.953720][  T936] usb 1-1: Using ep0 maxpacket: 8
[  353.966666][  T936] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  353.981754][  T936] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  353.987232][   T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.001635][  T936] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  354.022965][  T936] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  354.038742][  T936] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  354.052131][ T9636] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1018'.
[  354.062241][  T936] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  354.077953][  T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.127795][   T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.233540][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  354.254416][   T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.299877][  T936] usb 1-1: GET_CAPABILITIES returned 0
[  354.319763][  T936] usbtmc 1-1:16.0: can't read capabilities
[  354.376774][   T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.412804][    T8] usb 5-1: Using ep0 maxpacket: 32
[  354.429978][    T8] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74
[  354.444635][ T4622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  354.456890][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.462566][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  354.465877][    T8] usb 5-1: Product: syz
[  354.483315][    T8] usb 5-1: Manufacturer: syz
[  354.487356][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  354.488194][    T8] usb 5-1: SerialNumber: syz
[  354.515641][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  354.524543][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  354.531771][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  354.536083][  T936] usb 1-1: USB disconnect, device number 16
[  354.584972][    T8] usb 5-1: config 0 descriptor??
[  354.632582][    T8] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  354.858788][ T5348] usb 5-1: USB disconnect, device number 9
[  354.921221][   T52] bridge_slave_1: left allmulticast mode
[  354.947919][   T52] bridge_slave_1: left promiscuous mode
[  354.964509][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.999675][   T52] bridge_slave_0: left allmulticast mode
[  355.014136][   T52] bridge_slave_0: left promiscuous mode
[  355.030299][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.364025][ T5233] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  355.890046][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.904165][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.917276][   T52] bond0 (unregistering): Released all slaves
[  355.944107][ T5348] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  355.979524][ T9662] syzkaller0: entered promiscuous mode
[  355.998425][ T9662] syzkaller0: entered allmulticast mode
[  356.105877][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.152635][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.189512][ T5348] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  356.209130][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.229827][ T5348] usb 5-1: config 0 descriptor??
[  356.635680][ T5233] Bluetooth: hci3: command tx timeout
[  357.532886][ T9688] netlink: 'syz.2.1029': attribute type 3 has an invalid length.
[  357.548441][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'.
[  358.176163][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[  358.188802][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1030'.
[  358.473747][ T9653] chnl_net:caif_netlink_parms(): no params data found
[  358.576889][   T52] hsr_slave_0: left promiscuous mode
[  358.608554][ T5348] usbhid 5-1:0.0: can't add hid device: -71
[  358.615424][ T5348] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  358.633722][   T52] hsr_slave_1: left promiscuous mode
[  358.640647][ T5348] usb 5-1: USB disconnect, device number 10
[  358.666335][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.678745][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.712477][ T5233] Bluetooth: hci3: command tx timeout
[  358.719719][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.763553][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.918957][   T52] veth1_macvtap: left promiscuous mode
[  358.948260][   T52] veth0_macvtap: left promiscuous mode
[  358.976584][   T52] veth1_vlan: left promiscuous mode
[  359.006729][   T52] veth0_vlan: left promiscuous mode
[  359.201141][   T29] audit: type=1326 audit(1728381043.912:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  359.296672][   T29] audit: type=1326 audit(1728381043.912:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000
[  359.767510][ T9745] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  360.158748][   T52] team0 (unregistering): Port device team_slave_1 removed
[  360.256840][   T52] team0 (unregistering): Port device team_slave_0 removed
[  360.795872][ T5233] Bluetooth: hci3: command tx timeout
[  360.891330][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'.
[  361.304318][ T9653] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.320341][ T9653] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.346888][ T9653] bridge_slave_0: entered allmulticast mode
[  361.366824][ T9653] bridge_slave_0: entered promiscuous mode
[  361.384922][ T9653] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.422544][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.429755][ T9653] bridge_slave_1: entered allmulticast mode
[  361.464169][ T9653] bridge_slave_1: entered promiscuous mode
[  361.594694][ T9653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.635888][ T9653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.745438][ T9653] team0: Port device team_slave_0 added
[  361.776327][ T9784] pim6reg: entered allmulticast mode
[  361.794138][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'.
[  361.817015][ T9653] team0: Port device team_slave_1 added
[  361.825001][ T9792] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1051'.
[  361.834282][ T1863] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  361.855485][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'.
[  361.926452][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.942400][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.992893][ T9653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.012469][ T1863] usb 5-1: Using ep0 maxpacket: 32
[  362.027493][ T1863] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32
[  362.046264][ T9653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.066262][ T1863] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 65
[  362.076135][ T9653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.103258][ T9653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.121770][ T1863] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  362.131014][ T1863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.158422][ T1863] usb 5-1: Product: syz
[  362.170712][ T1863] usb 5-1: Manufacturer: syz
[  362.191742][ T1863] usb 5-1: SerialNumber: syz
[  362.219916][ T1863] usb 5-1: config 0 descriptor??
[  362.232534][ T5348] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  362.249132][ T1863] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  362.256713][ T9799] syzkaller0: entered promiscuous mode
[  362.262292][ T9799] syzkaller0: entered allmulticast mode
[  362.308361][ T9653] hsr_slave_0: entered promiscuous mode
[  362.356555][ T9653] hsr_slave_1: entered promiscuous mode
[  362.369139][ T9653] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  362.386628][ T5348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.397880][ T9653] Cannot create hsr debugfs directory
[  362.407379][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  362.440752][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  362.473432][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  362.500836][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  362.553497][ T5348] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  362.583518][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  362.652443][ T5348] usb 2-1: Product: syz
[  362.673452][ T5348] usb 2-1: Manufacturer: syz
[  362.678154][ T5348] usb 2-1: SerialNumber: syz
[  362.693207][ T5348] usb 2-1: config 0 descriptor??
[  362.844633][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.869989][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.878983][ T5233] Bluetooth: hci3: command tx timeout
[  362.909298][ T5348] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  362.918433][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.935262][ T5348] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  362.958336][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.981169][ T1863] gspca_stk1135: reg_w 0x0 err -110
[  362.993970][ T5348] usb 2-1: USB disconnect, device number 26
[  363.006262][ T1863] gspca_stk1135: serial bus timeout: status=0x00
[  363.045886][ T1863] gspca_stk1135: Sensor write failed
[  363.057587][ T1863] gspca_stk1135: serial bus timeout: status=0x00
[  363.066837][ T1863] gspca_stk1135: Sensor write failed
[  363.076436][ T1863] gspca_stk1135: serial bus timeout: status=0x00
[  363.116998][ T1863] gspca_stk1135: Sensor read failed
[  363.154984][ T1863] gspca_stk1135: serial bus timeout: status=0x00
[  363.178484][ T1863] gspca_stk1135: Sensor read failed
[  363.214373][ T1863] gspca_stk1135: Detected sensor type unknown (0x0)
[  363.239572][ T1863] gspca_stk1135: serial bus timeout: status=0x00
[  363.260187][ T1863] gspca_stk1135: Sensor read failed
[  363.268483][ T1863] gspca_stk1135: serial bus timeout: status=0x00
[  363.282511][ T1863] gspca_stk1135: Sensor read failed
[  363.288025][ T1863] gspca_stk1135: serial bus timeout: status=0x00
[  363.294818][ T1863] gspca_stk1135: Sensor write failed
[  363.304943][ T1863] gspca_stk1135: serial bus timeout: status=0x00
[  363.314501][ T1863] gspca_stk1135: Sensor write failed
[  363.319975][ T1863] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110
[  364.238763][  T936] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  364.408090][  T936] usb 2-1: Using ep0 maxpacket: 16
[  364.414578][  T936] usb 2-1: no configurations
[  364.419415][  T936] usb 2-1: can't read configurations, error -22
[  364.552763][  T936] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  364.707013][  T936] usb 2-1: Using ep0 maxpacket: 16
[  364.713436][  T936] usb 2-1: no configurations
[  364.718089][  T936] usb 2-1: can't read configurations, error -22
[  364.737284][  T936] usb usb2-port1: attempt power cycle
[  365.082653][  T936] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  365.110316][  T936] usb 2-1: Using ep0 maxpacket: 16
[  365.121566][    T8] usb 5-1: USB disconnect, device number 11
[  365.147753][  T936] usb 2-1: no configurations
[  365.152718][  T936] usb 2-1: can't read configurations, error -22
[  365.283397][  T936] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  365.324766][  T936] usb 2-1: Using ep0 maxpacket: 16
[  365.330964][  T936] usb 2-1: no configurations
[  365.339959][  T936] usb 2-1: can't read configurations, error -22
[  365.362306][  T936] usb usb2-port1: unable to enumerate USB device
[  365.458963][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'.
[  365.973546][  T936] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  366.106236][ T9653] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  366.142080][ T9653] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  366.154435][  T936] usb 1-1: unable to get BOS descriptor or descriptor too short
[  366.172114][  T936] usb 1-1: not running at top speed; connect to a high speed hub
[  366.179939][ T9858] capability: warning: `syz.2.1066' uses deprecated v2 capabilities in a way that may be insecure
[  366.230097][  T936] usb 1-1: config 11 has an invalid interface number: 244 but max is 0
[  366.230118][  T936] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[  366.230130][  T936] usb 1-1: config 11 has no interface number 0
[  366.230148][  T936] usb 1-1: config 11 interface 244 altsetting 133 endpoint 0x3 has invalid wMaxPacketSize 0
[  366.230164][  T936] usb 1-1: config 11 interface 244 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  366.230180][  T936] usb 1-1: config 11 interface 244 has no altsetting 0
[  366.231310][  T936] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a
[  366.231328][  T936] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  366.231341][  T936] usb 1-1: Manufacturer: syz
[  366.231350][  T936] usb 1-1: SerialNumber: syz
[  366.277546][ T9653] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  366.286586][ T9653] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  366.447581][ T9653] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.457281][ T9653] 8021q: adding VLAN 0 to HW filter on device team0
[  366.465377][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.465458][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.477122][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.477202][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.543641][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  366.666359][ T9653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  366.677693][ T9653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  366.695152][  T936] peak_usb 1-1:11.244 can0: unable to request usb[type=0 value=1] err=-71
[  366.707414][  T936] peak_usb 1-1:11.244: unable to read PCAN-USB X6 firmware info (err -71)
[  366.777855][ T9653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.794177][  T936] peak_usb 1-1:11.244: probe with driver peak_usb failed with error -71
[  366.809105][ T9653] veth0_vlan: entered promiscuous mode
[  366.812068][  T936] usb 1-1: USB disconnect, device number 17
[  366.820355][ T9653] veth1_vlan: entered promiscuous mode
[  366.849558][ T9653] veth0_macvtap: entered promiscuous mode
[  366.859140][ T9653] veth1_macvtap: entered promiscuous mode
[  366.864702][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  366.874159][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.885002][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.892410][    T9] usb 3-1: can't read configurations, error -61
[  366.895062][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.911530][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.923830][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.016118][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.027518][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.036507][ T9865] FAULT_INJECTION: forcing a failure.
[  367.036507][ T9865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.037524][ T9653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.061336][ T9653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.072140][ T9653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.081571][ T9653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.090414][ T9653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.093406][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  367.099235][ T9653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.115647][ T9653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.178387][ T9865] CPU: 0 UID: 0 PID: 9865 Comm: syz.1.1067 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  367.189152][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  367.199237][ T9865] Call Trace:
[  367.202524][ T9865]  <TASK>
[  367.205468][ T9865]  dump_stack_lvl+0x241/0x360
[  367.210134][ T9865]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.215339][ T9865]  ? __pfx__printk+0x10/0x10
[  367.219956][ T9865]  ? snprintf+0xda/0x120
[  367.224213][ T9865]  should_fail_ex+0x3b0/0x4e0
[  367.228883][ T9865]  _copy_to_user+0x2f/0xb0
[  367.233290][ T9865]  simple_read_from_buffer+0xca/0x150
[  367.238654][ T9865]  proc_fail_nth_read+0x1e9/0x250
[  367.243697][ T9865]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  367.249234][ T9865]  ? rw_verify_area+0x55e/0x6f0
[  367.254072][ T9865]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  367.259605][ T9865]  vfs_read+0x201/0xbc0
[  367.263750][ T9865]  ? __pfx_lock_release+0x10/0x10
[  367.268787][ T9865]  ? __pfx_vfs_read+0x10/0x10
[  367.273479][ T9865]  ? __fget_files+0x3f3/0x470
[  367.278148][ T9865]  ? fdget_pos+0x24e/0x320
[  367.282554][ T9865]  ksys_read+0x183/0x2b0
[  367.286783][ T9865]  ? __pfx_ksys_read+0x10/0x10
[  367.291531][ T9865]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  367.298128][ T9865]  ? lockdep_hardirqs_on+0x99/0x150
[  367.303316][ T9865]  __do_fast_syscall_32+0xb4/0x110
[  367.308413][ T9865]  ? exc_page_fault+0x590/0x8c0
[  367.313252][ T9865]  do_fast_syscall_32+0x34/0x80
[  367.318087][ T9865]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  367.324401][ T9865] RIP: 0023:0xf747d579
[  367.328453][ T9865] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  367.348046][ T9865] RSP: 002b:00000000f57665a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  367.356445][ T9865] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000f5766620
[  367.364402][ T9865] RDX: 000000000000000f RSI: 00000000f746bff4 RDI: 0000000000000000
[  367.372368][ T9865] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  367.380334][ T9865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  367.388289][ T9865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  367.396254][ T9865]  </TASK>
[  367.595323][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  367.604355][    T9] usb 3-1: can't read configurations, error -61
[  367.624130][    T9] usb usb3-port1: attempt power cycle
[  367.650223][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.664779][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.745240][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.755949][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.941125][ T9883] syzkaller0: entered promiscuous mode
[  367.956003][ T9883] syzkaller0: entered allmulticast mode
[  368.112493][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  368.149727][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  368.158014][    T9] usb 3-1: can't read configurations, error -61
[  368.315123][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  368.407458][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  368.441960][    T9] usb 3-1: can't read configurations, error -61
[  368.486377][    T9] usb usb3-port1: unable to enumerate USB device
[  369.332601][   T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  369.482493][   T25] usb 1-1: Using ep0 maxpacket: 16
[  369.505419][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.534948][ T5279] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  369.546503][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.586489][   T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  369.600667][ T5348] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  369.608557][   T25] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  369.619620][   T25] usb 1-1: Product: syz
[  369.630340][   T25] usb 1-1: Manufacturer: syz
[  369.664173][   T25] usb 1-1: config 0 descriptor??
[  369.728047][ T5279] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  369.746001][ T5279] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  369.776546][ T5348] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  369.791229][ T5279] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  369.822479][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  369.830544][ T5279] usb 5-1: SerialNumber: syz
[  369.837377][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  369.857601][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  369.960945][ T5348] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1
[  369.972560][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.980621][ T5348] usb 3-1: Product: syz
[  369.990743][ T5348] usb 3-1: Manufacturer: syz
[  369.995683][ T5348] usb 3-1: SerialNumber: syz
[  370.003019][ T5348] usb 3-1: config 0 descriptor??
[  370.087640][   T25] kovaplus 0003:1E7D:2D50.0015: item fetching failed at offset 5/7
[  370.097420][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.110286][   T25] kovaplus 0003:1E7D:2D50.0015: parse failed
[  370.117543][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.140453][   T25] kovaplus 0003:1E7D:2D50.0015: probe with driver kovaplus failed with error -22
[  370.230080][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.339979][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.393860][    T8] usb 1-1: USB disconnect, device number 18
[  370.603397][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.629701][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.729067][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.778234][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.949040][ T5348] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[  370.965037][ T5348] powermate 3-1:0.0: probe with driver powermate failed with error -5
[  371.001515][ T5348] usb 3-1: USB disconnect, device number 22
[  371.391472][ T5233] Bluetooth: hci1: unexpected event for opcode 0x1405
[  373.457572][ T5279] usb 5-1: 0:2 : does not exist
[  373.490356][ T5279] usb 5-1: USB disconnect, device number 12
[  373.611620][ T9399] udevd[9399]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  373.652864][ T1863] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  373.846611][ T1863] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  373.863855][ T1863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.872204][ T1863] usb 4-1: Product: syz
[  373.880220][ T1863] usb 4-1: Manufacturer: syz
[  373.894718][ T1863] usb 4-1: SerialNumber: syz
[  373.914100][ T1863] usb 4-1: config 0 descriptor??
[  374.129761][ T1863] usb 4-1: ignoring: probably an ADSL modem
[  374.910391][ T1863] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  374.958270][ T1863] usb 4-1: USB disconnect, device number 19
[  375.077710][T10049] netlink: 'syz.1.1087': attribute type 4 has an invalid length.
[  375.510204][ T5233] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  375.519126][ T5233] Bluetooth: hci1: Injecting HCI hardware error event
[  375.527721][ T5233] Bluetooth: hci1: hardware error 0x00
[  375.816431][T10057] mmap: syz.3.1090 (10057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  376.558282][T10063] FAULT_INJECTION: forcing a failure.
[  376.558282][T10063] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  376.607594][T10063] CPU: 1 UID: 0 PID: 10063 Comm: syz.3.1091 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  376.618421][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  376.628513][T10063] Call Trace:
[  376.631824][T10063]  <TASK>
[  376.634779][T10063]  dump_stack_lvl+0x241/0x360
[  376.639491][T10063]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.644830][T10063]  ? __pfx__printk+0x10/0x10
[  376.649463][T10063]  should_fail_ex+0x3b0/0x4e0
[  376.654177][T10063]  prepare_alloc_pages+0x1da/0x5d0
[  376.659321][T10063]  __alloc_pages_noprof+0x166/0x6c0
[  376.664542][T10063]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  376.670275][T10063]  alloc_pages_mpol_noprof+0x3e8/0x680
[  376.675828][T10063]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  376.681811][T10063]  ? do_raw_spin_unlock+0x13c/0x8b0
[  376.687121][T10063]  folio_alloc_mpol_noprof+0x36/0x50
[  376.692419][T10063]  __read_swap_cache_async+0x250/0x8e0
[  376.697898][T10063]  ? __pfx___read_swap_cache_async+0x10/0x10
[  376.703886][T10063]  ? blk_start_plug+0x53/0x1b0
[  376.708654][T10063]  swap_cluster_readahead+0x392/0x7f0
[  376.714026][T10063]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  376.719916][T10063]  ? xas_load+0x59b/0x5c0
[  376.724247][T10063]  swapin_readahead+0x1bb/0xdf0
[  376.729089][T10063]  ? filemap_get_entry+0x123/0x3b0
[  376.734202][T10063]  ? __pfx_swapin_readahead+0x10/0x10
[  376.739571][T10063]  ? __filemap_get_folio+0x949/0xbd0
[  376.744871][T10063]  ? swap_cache_get_folio+0xa6/0x570
[  376.750185][T10063]  do_swap_page+0x584/0x7b30
[  376.754788][T10063]  ? mt_find+0x6c8/0x920
[  376.759040][T10063]  ? mt_find+0x2a9/0x920
[  376.763294][T10063]  ? do_swap_page+0x15e/0x7b30
[  376.768062][T10063]  ? __pfx_do_swap_page+0x10/0x10
[  376.773089][T10063]  ? __pfx___pte_offset_map+0x10/0x10
[  376.778474][T10063]  ? __thp_vma_allowable_orders+0x8ed/0x9f0
[  376.784370][T10063]  ? pte_offset_map_nolock+0x137/0x1f0
[  376.789830][T10063]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[  376.795637][T10063]  ? hugepage_vma_revalidate+0x4df/0x530
[  376.801268][T10063]  hpage_collapse_scan_pmd+0x21de/0x4dc0
[  376.806975][T10063]  ? hpage_collapse_scan_pmd+0x5f1/0x4dc0
[  376.812705][T10063]  ? hpage_collapse_scan_pmd+0x15f7/0x4dc0
[  376.818536][T10063]  ? __pfx_hpage_collapse_scan_pmd+0x10/0x10
[  376.824521][T10063]  ? debug_object_free+0x3a6/0x460
[  376.829631][T10063]  ? __pfx_debug_object_free+0x10/0x10
[  376.835088][T10063]  ? __pfx_wait_for_completion+0x10/0x10
[  376.840730][T10063]  ? __pfx_lock_release+0x10/0x10
[  376.845761][T10063]  ? __pfx_wq_barrier_func+0x10/0x10
[  376.851043][T10063]  ? __mutex_unlock_slowpath+0x21d/0x750
[  376.856670][T10063]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  376.862653][T10063]  madvise_collapse+0x523/0xd30
[  376.867508][T10063]  ? __pfx_madvise_collapse+0x10/0x10
[  376.872882][T10063]  do_madvise+0xcb1/0x4720
[  376.877294][T10063]  ? mark_lock+0x9a/0x360
[  376.881634][T10063]  ? __pfx_do_madvise+0x10/0x10
[  376.886478][T10063]  ? __pfx_lock_acquire+0x10/0x10
[  376.891496][T10063]  ? get_pid_task+0x23/0x1f0
[  376.896079][T10063]  ? __pfx_lock_release+0x10/0x10
[  376.901098][T10063]  ? kstrtouint_from_user+0x128/0x190
[  376.906480][T10063]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  376.912374][T10063]  ? ksys_write+0x229/0x2b0
[  376.916879][T10063]  ? __pfx_lock_release+0x10/0x10
[  376.921906][T10063]  ? vfs_write+0x7bf/0xc90
[  376.926319][T10063]  ? __mutex_unlock_slowpath+0x21d/0x750
[  376.931944][T10063]  ? __pfx_vfs_write+0x10/0x10
[  376.936700][T10063]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  376.942671][T10063]  ? __fget_files+0x3f3/0x470
[  376.947350][T10063]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  376.953679][T10063]  __ia32_sys_madvise+0xa6/0xc0
[  376.958526][T10063]  __do_fast_syscall_32+0xb4/0x110
[  376.963635][T10063]  ? exc_page_fault+0x590/0x8c0
[  376.968489][T10063]  do_fast_syscall_32+0x34/0x80
[  376.973333][T10063]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  376.979654][T10063] RIP: 0023:0xf73bd579
[  376.983802][T10063] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  377.003401][T10063] RSP: 002b:00000000f568556c EFLAGS: 00000206 ORIG_RAX: 00000000000000db
[  377.011811][T10063] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000600000
[  377.019775][T10063] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000
[  377.027743][T10063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  377.035706][T10063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  377.043670][T10063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  377.051645][T10063]  </TASK>
[  377.344879][T10075] netlink: 'syz.3.1094': attribute type 1 has an invalid length.
[  377.363362][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'.
[  377.593491][ T5233] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  377.630177][T10081] fuse: Invalid uid '00000000000000000003'
[  377.666040][T10083] netlink: 'syz.1.1097': attribute type 29 has an invalid length.
[  377.676366][T10083] netlink: 'syz.1.1097': attribute type 29 has an invalid length.
[  377.756416][   T29] audit: type=1326 audit(1728381062.472:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000
[  377.942452][    T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  378.032463][ T1863] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  378.055899][T10092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1101'.
[  378.068362][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'.
[  378.102804][    T8] usb 2-1: device descriptor read/64, error -71
[  378.192488][ T1863] usb 1-1: Using ep0 maxpacket: 32
[  378.205296][ T1863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.220582][ T1863] usb 1-1: config 0 interface 0 has no altsetting 0
[  378.238058][ T1863] usb 1-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19
[  378.248791][ T1863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.259238][ T1863] usb 1-1: Product: syz
[  378.265486][ T1863] usb 1-1: Manufacturer: syz
[  378.270239][ T1863] usb 1-1: SerialNumber: syz
[  378.280044][ T1863] usb 1-1: config 0 descriptor??
[  378.288029][ T1863] rndis_host 1-1:0.0: skipping garbage
[  378.295726][ T1863] usb 1-1: bad CDC descriptors
[  378.300740][ T1863] cdc_acm 1-1:0.0: skipping garbage
[  378.382763][    T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  378.491130][T10087] fuse: Invalid uid '00000000000000000003'
[  378.509713][   T29] audit: type=1326 audit(1728381063.222:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.0.1098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f03579 code=0x7fc00000
[  378.542878][ T1863] usb 1-1: USB disconnect, device number 19
[  378.558252][    T8] usb 2-1: device descriptor read/64, error -71
[  378.627952][T10096] x_tables: duplicate underflow at hook 4
[  378.693417][    T8] usb usb2-port1: attempt power cycle
[  378.714156][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  378.720567][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  378.744781][T10097] binder_alloc: 10091: binder_alloc_buf size 8 failed, no address space
[  378.754074][T10097] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0)
[  378.960977][T10104] FAULT_INJECTION: forcing a failure.
[  378.960977][T10104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  379.232431][    T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  379.332562][T10104] CPU: 1 UID: 0 PID: 10104 Comm: syz.3.1105 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  379.332613][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  379.332627][T10104] Call Trace:
[  379.332636][T10104]  <TASK>
[  379.332645][T10104]  dump_stack_lvl+0x241/0x360
[  379.332663][T10104]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.332675][T10104]  ? __pfx__printk+0x10/0x10
[  379.332693][T10104]  ? __pfx_lock_release+0x10/0x10
[  379.332709][T10104]  ? __lock_acquire+0x1384/0x2050
[  379.332728][T10104]  should_fail_ex+0x3b0/0x4e0
[  379.332746][T10104]  _copy_from_user+0x2f/0xe0
[  379.332761][T10104]  kstrtouint_from_user+0xc6/0x190
[  379.332775][T10104]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  379.332789][T10104]  ? __pfx_lock_acquire+0x10/0x10
[  379.332810][T10104]  proc_fail_nth_write+0xaa/0x2d0
[  379.332827][T10104]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  379.332841][T10104]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  379.332860][T10104]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  379.332877][T10104]  vfs_write+0x29c/0xc90
[  379.332892][T10104]  ? __pfx_vfs_write+0x10/0x10
[  379.332906][T10104]  ? __fget_files+0x3f3/0x470
[  379.332924][T10104]  ? fdget_pos+0x24e/0x320
[  379.332938][T10104]  ksys_write+0x183/0x2b0
[  379.332950][T10104]  ? __pfx_ksys_write+0x10/0x10
[  379.332962][T10104]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  379.332978][T10104]  ? lockdep_hardirqs_on+0x99/0x150
[  379.332995][T10104]  __do_fast_syscall_32+0xb4/0x110
[  379.333006][T10104]  ? exc_page_fault+0x590/0x8c0
[  379.333023][T10104]  do_fast_syscall_32+0x34/0x80
[  379.333034][T10104]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  379.333047][T10104] RIP: 0023:0xf73bd579
[  379.333059][T10104] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  379.333068][T10104] RSP: 002b:00000000f56a65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  379.333083][T10104] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56a6620
[  379.333092][T10104] RDX: 0000000000000001 RSI: 00000000f73abff4 RDI: 0000000000000000
[  379.333099][T10104] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  379.333107][T10104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  379.333114][T10104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  379.333129][T10104]  </TASK>
[  379.343924][    T8] usb 2-1: device descriptor read/8, error -71
[  379.527944][   T29] audit: type=1326 audit(1728381064.192:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  379.527990][   T29] audit: type=1326 audit(1728381064.192:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  379.528023][   T29] audit: type=1326 audit(1728381064.192:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  379.528044][   T29] audit: type=1326 audit(1728381064.192:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  379.528063][   T29] audit: type=1326 audit(1728381064.192:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  379.528103][   T29] audit: type=1326 audit(1728381064.192:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  379.528122][   T29] audit: type=1326 audit(1728381064.192:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  379.528140][   T29] audit: type=1326 audit(1728381064.192:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  379.592547][    T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  379.615632][    T8] usb 2-1: device descriptor read/8, error -71
[  379.723236][    T8] usb usb2-port1: unable to enumerate USB device
[  382.092424][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  382.258277][    T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  382.267238][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.290129][    T9] usb 3-1: config 0 has no interface number 0
[  382.310126][    T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  382.367916][    T9] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  382.446684][    T9] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  382.456861][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.467125][    T9] usb 3-1: Product: syz
[  382.489398][    T9] usb 3-1: Manufacturer: syz
[  382.506857][    T9] usb 3-1: SerialNumber: syz
[  382.568469][    T9] usb 3-1: config 0 descriptor??
[  384.950248][ T1863] usb 3-1: USB disconnect, device number 23
[  385.902485][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  386.087103][    T9] usb 3-1: Using ep0 maxpacket: 32
[  386.114879][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.151154][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.233129][    T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  386.246997][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.259639][    T9] usb 3-1: config 0 descriptor??
[  386.475315][T10198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.499738][T10198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.606611][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  386.619218][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  386.694957][    T9] usb 3-1: USB disconnect, device number 24
[  386.967591][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'.
[  387.542583][ T5279] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  387.707038][ T5279] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  387.727401][ T5279] usb 4-1: config 0 has no interface number 0
[  387.751605][ T5279] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  387.790173][ T5279] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  387.825644][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.861447][ T5279] usb 4-1: config 0 descriptor??
[  387.888706][ T5279] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  388.088693][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.142001][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.180406][    T9] usb 4-1: USB disconnect, device number 20
[  388.192594][    T9] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected
[  389.392561][ T5279] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  389.554225][ T5279] usb 1-1: Using ep0 maxpacket: 32
[  389.584540][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.637393][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.687644][ T5279] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  389.730509][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.781986][ T5279] usb 1-1: config 0 descriptor??
[  390.313293][ T5279] ft260 0003:0403:6030.0016: unknown main item tag 0x0
[  390.484746][ T5279] ft260 0003:0403:6030.0016: chip code: 5e81 abf2
[  391.071965][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.303203][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.429093][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  391.429109][   T29] audit: type=1326 audit(1728381076.142:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000
[  391.481536][   T29] audit: type=1326 audit(1728381076.142:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7f03579 code=0x7ffc0000
[  391.514980][   T29] audit: type=1326 audit(1728381076.142:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000
[  391.540234][   T29] audit: type=1326 audit(1728381076.142:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f03579 code=0x7ffc0000
[  391.569430][   T29] audit: type=1326 audit(1728381076.142:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000
[  391.639515][   T29] audit: type=1326 audit(1728381076.142:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.0.1141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7ffc0000
[  391.724072][ T5279] usb 1-1: USB disconnect, device number 20
[  391.797240][T10263] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1146'.
[  391.815716][T10263] openvswitch: netlink: Missing key (keys=400040, expected=200000)
[  391.936451][ T1863] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  392.106483][ T1863] usb 5-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  392.131133][ T1863] usb 5-1: config 1 interface 0 has no altsetting 0
[  392.153859][ T1863] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  392.166918][ T1863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.178616][ T1863] usb 5-1: Product: syz
[  392.194247][ T1863] usb 5-1: Manufacturer: syz
[  392.208793][ T1863] usb 5-1: SerialNumber: syz
[  392.432529][    T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  392.594171][    T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  392.619913][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.688036][    T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  392.709038][ T1863] usbhid 5-1:1.0: can't add hid device: -71
[  392.752368][ T1863] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  392.763878][    T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  392.779792][ T1863] usb 5-1: USB disconnect, device number 13
[  392.787490][    T9] usb 2-1: Manufacturer: syz
[  392.841425][    T9] usb 2-1: config 0 descriptor??
[  392.983211][    T9] rc_core: IR keymap rc-hauppauge not found
[  393.001291][    T9] Registered IR keymap rc-empty
[  393.050773][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  393.089394][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40
[  395.010785][ T5282] usb 2-1: USB disconnect, device number 35
[  395.842791][  T936] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  395.997310][  T936] usb 5-1: Using ep0 maxpacket: 32
[  396.007091][  T936] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  396.019581][  T936] usb 5-1: config 0 has no interface number 0
[  396.048433][  T936] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  396.070785][  T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.107211][  T936] usb 5-1: Product: syz
[  396.113686][  T936] usb 5-1: Manufacturer: syz
[  396.118371][  T936] usb 5-1: SerialNumber: syz
[  396.137012][  T936] usb 5-1: config 0 descriptor??
[  396.149648][  T936] smsc95xx v2.0.0
[  396.642519][  T936] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  396.694570][  T936] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  397.692443][ T5279] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  397.936370][ T5279] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45
[  397.945719][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.965097][ T5279] usb 4-1: Product: syz
[  397.975361][ T5279] usb 4-1: Manufacturer: syz
[  397.986133][ T5279] usb 4-1: SerialNumber: syz
[  398.002497][ T5279] usb 4-1: config 0 descriptor??
[  398.017442][ T5279] usb 4-1: Found UVC 0.00 device syz (8086:0b03)
[  398.027978][ T5279] usb 4-1: No valid video chain found.
[  398.228755][T10327] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1164'.
[  398.265032][T10327] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1164'.
[  398.340269][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.350609][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.454395][ T5279] usb 4-1: USB disconnect, device number 21
[  399.107313][  T936] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  399.118295][  T936] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  399.143443][  T936] usb 5-1: USB disconnect, device number 14
[  399.597896][ T5233] Bluetooth: hci0: unexpected event for opcode 0x2002
[  400.021579][T10376] fuse: Unknown parameter 'veth1_virt_wifi'
[  400.100576][T10378] netlink: 'syz.1.1181': attribute type 11 has an invalid length.
[  401.188754][T10391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1185'.
[  401.716970][T10396] fuse: Bad value for 'fd'
[  402.232699][T10410] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1190'.
[  402.269182][T10411] usb usb8: usbfs: process 10411 (syz.1.1189) did not claim interface 0 before use
[  402.602614][ T5279] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  402.623597][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'.
[  402.640369][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1193'.
[  402.807358][ T5279] usb 1-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  402.818429][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.842103][ T5279] usb 1-1: config 0 descriptor??
[  402.894036][T10427] FAULT_INJECTION: forcing a failure.
[  402.894036][T10427] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.936988][T10427] CPU: 0 UID: 0 PID: 10427 Comm: syz.4.1195 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  402.947806][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  402.957869][T10427] Call Trace:
[  402.961143][T10427]  <TASK>
[  402.964072][T10427]  dump_stack_lvl+0x241/0x360
[  402.968751][T10427]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.973977][T10427]  ? __pfx__printk+0x10/0x10
[  402.978576][T10427]  should_fail_ex+0x3b0/0x4e0
[  402.983262][T10427]  _copy_from_user+0x2f/0xe0
[  402.987858][T10427]  move_addr_to_kernel+0x82/0x150
[  402.992887][T10427]  get_compat_msghdr+0x425/0x730
[  402.997832][T10427]  ? __pfx_get_compat_msghdr+0x10/0x10
[  403.003286][T10427]  ? __sys_sendmmsg+0x4cb/0x730
[  403.008145][T10427]  ? kfree+0x4e/0x440
[  403.012130][T10427]  __sys_sendmmsg+0x467/0x730
[  403.016894][T10427]  ? __pfx___sys_sendmmsg+0x10/0x10
[  403.022091][T10427]  ? __pfx_lock_acquire+0x10/0x10
[  403.027125][T10427]  ? get_pid_task+0x23/0x1f0
[  403.031711][T10427]  ? __pfx_lock_release+0x10/0x10
[  403.036740][T10427]  ? kstrtouint_from_user+0x128/0x190
[  403.042140][T10427]  ? ksys_write+0x229/0x2b0
[  403.046654][T10427]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  403.052643][T10427]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  403.058628][T10427]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  403.064963][T10427]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  403.070508][T10427]  __do_fast_syscall_32+0xb4/0x110
[  403.075618][T10427]  ? exc_page_fault+0x590/0x8c0
[  403.080472][T10427]  do_fast_syscall_32+0x34/0x80
[  403.085325][T10427]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  403.091649][T10427] RIP: 0023:0xf741d579
[  403.095710][T10427] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  403.115659][T10427] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  403.124074][T10427] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020002940
[  403.132042][T10427] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  403.140095][T10427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  403.148061][T10427] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  403.156034][T10427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  403.164017][T10427]  </TASK>
[  403.237889][T10430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1197'.
[  403.284842][T10430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  403.300419][T10430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  403.310548][T10430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  403.326530][T10430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  403.482711][ T5279] aquacomputer_d5next 0003:0C70:F010.0017: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.0-1/input0
[  403.528951][T10444] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1201'.
[  403.654325][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.675916][ T5233] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  403.684778][ T5233] Bluetooth: hci0: Injecting HCI hardware error event
[  403.694621][ T5233] Bluetooth: hci0: hardware error 0x00
[  403.732595][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.894851][ T5279] usb 1-1: USB disconnect, device number 21
[  404.701626][T10475] FAULT_INJECTION: forcing a failure.
[  404.701626][T10475] name failslab, interval 1, probability 0, space 0, times 0
[  404.774500][T10475] CPU: 1 UID: 0 PID: 10475 Comm: syz.4.1208 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  404.785281][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  404.795325][T10475] Call Trace:
[  404.798592][T10475]  <TASK>
[  404.801504][T10475]  dump_stack_lvl+0x241/0x360
[  404.806180][T10475]  ? __pfx_dump_stack_lvl+0x10/0x10
[  404.811367][T10475]  ? __pfx__printk+0x10/0x10
[  404.815948][T10475]  ? fs_reclaim_acquire+0x93/0x140
[  404.821041][T10475]  ? __pfx___might_resched+0x10/0x10
[  404.826325][T10475]  should_fail_ex+0x3b0/0x4e0
[  404.831008][T10475]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  404.836723][T10475]  should_failslab+0xac/0x100
[  404.841399][T10475]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  404.847128][T10475]  __kmalloc_noprof+0xd8/0x400
[  404.851902][T10475]  tomoyo_realpath_from_path+0xcf/0x5e0
[  404.857455][T10475]  tomoyo_path_number_perm+0x23a/0x880
[  404.862926][T10475]  ? tomoyo_path_number_perm+0x208/0x880
[  404.868567][T10475]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  404.874573][T10475]  ? __pfx_lock_acquire+0x10/0x10
[  404.879628][T10475]  ? __fget_files+0x29/0x470
[  404.884219][T10475]  ? __fget_files+0x3f3/0x470
[  404.888903][T10475]  security_file_ioctl_compat+0xc6/0x2a0
[  404.894548][T10475]  __se_compat_sys_ioctl+0xd6/0xc90
[  404.899750][T10475]  ? __pfx___se_compat_sys_ioctl+0x10/0x10
[  404.905564][T10475]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  404.911544][T10475]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  404.917876][T10475]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  404.924466][T10475]  ? lockdep_hardirqs_on+0x99/0x150
[  404.929666][T10475]  __do_fast_syscall_32+0xb4/0x110
[  404.934772][T10475]  ? exc_page_fault+0x590/0x8c0
[  404.939630][T10475]  do_fast_syscall_32+0x34/0x80
[  404.944559][T10475]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  404.950882][T10475] RIP: 0023:0xf741d579
[  404.954944][T10475] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  404.974549][T10475] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  404.982963][T10475] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002271
[  404.990926][T10475] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[  404.998891][T10475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  405.006855][T10475] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  405.014821][T10475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  405.022800][T10475]  </TASK>
[  405.088324][T10475] ERROR: Out of memory at tomoyo_realpath_from_path.
[  405.336222][T10480] binder: 10479:10480 ioctl 4018620d 0 returned -22
[  405.504297][T10484] netlink: 'syz.0.1212': attribute type 12 has an invalid length.
[  405.541828][T10484] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1212'.
[  405.560220][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.629386][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.730536][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'.
[  405.763714][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'.
[  405.792509][ T5279] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  405.811270][T10491] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1214'.
[  405.814686][T10489] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1213'.
[  405.840469][ T5233] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  405.945540][ T5279] usb 5-1: device descriptor read/64, error -71
[  405.972527][T10489] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1213'.
[  406.712736][ T5233] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  406.724339][ T5233] Bluetooth: hci3: Injecting HCI hardware error event
[  406.732865][ T5239] Bluetooth: hci3: hardware error 0x00
[  407.187245][T10506] 
[  407.189586][T10506] ======================================================
[  407.196689][T10506] WARNING: possible circular locking dependency detected
[  407.203721][T10506] 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 Not tainted
[  407.210834][T10506] ------------------------------------------------------
[  407.217859][T10506] syz.2.1220/10506 is trying to acquire lock:
[  407.223931][T10506] ffff888065a5ba98 (&mm->mmap_lock){++++}-{3:3}, at: upgrade_mmap_lock_carefully+0xb6/0x160
[  407.234060][T10506] 
[  407.234060][T10506] but task is already holding lock:
[  407.241423][T10506] ffff888074714aa0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120
[  407.252140][T10506] 
[  407.252140][T10506] which lock already depends on the new lock.
[  407.252140][T10506] 
[  407.262527][T10506] 
[  407.262527][T10506] the existing dependency chain (in reverse order) is:
[  407.271524][T10506] 
[  407.271524][T10506] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}:
[  407.280212][T10506]        lock_acquire+0x1ed/0x550
[  407.285243][T10506]        down_write+0x99/0x220
[  407.290001][T10506]        process_measurement+0x439/0x1fb0
[  407.295710][T10506]        ima_file_mmap+0x13d/0x2b0
[  407.300810][T10506]        security_mmap_file+0x7e7/0xa40
[  407.306349][T10506]        __se_sys_remap_file_pages+0x6e6/0xa50
[  407.312491][T10506]        __do_fast_syscall_32+0xb4/0x110
[  407.318112][T10506]        do_fast_syscall_32+0x34/0x80
[  407.323476][T10506]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  407.330316][T10506] 
[  407.330316][T10506] -> #0 (&mm->mmap_lock){++++}-{3:3}:
[  407.337877][T10506]        validate_chain+0x18ef/0x5920
[  407.343242][T10506]        __lock_acquire+0x1384/0x2050
[  407.348607][T10506]        lock_acquire+0x1ed/0x550
[  407.353623][T10506]        down_write_killable+0xab/0x260
[  407.359163][T10506]        upgrade_mmap_lock_carefully+0xb6/0x160
[  407.365403][T10506]        lock_mm_and_find_vma+0x107/0x2f0
[  407.371115][T10506]        exc_page_fault+0x1bf/0x8c0
[  407.376306][T10506]        asm_exc_page_fault+0x26/0x30
[  407.381696][T10506]        fault_in_readable+0x165/0x2b0
[  407.387155][T10506]        fault_in_iov_iter_readable+0x229/0x280
[  407.393391][T10506]        generic_perform_write+0x259/0x6d0
[  407.399189][T10506]        shmem_file_write_iter+0xf9/0x120
[  407.404898][T10506]        vfs_write+0xa6d/0xc90
[  407.409648][T10506]        ksys_write+0x183/0x2b0
[  407.414484][T10506]        __do_fast_syscall_32+0xb4/0x110
[  407.420103][T10506]        do_fast_syscall_32+0x34/0x80
[  407.425464][T10506]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  407.432305][T10506] 
[  407.432305][T10506] other info that might help us debug this:
[  407.432305][T10506] 
[  407.442522][T10506]  Possible unsafe locking scenario:
[  407.442522][T10506] 
[  407.449957][T10506]        CPU0                    CPU1
[  407.455306][T10506]        ----                    ----
[  407.460742][T10506]   lock(&sb->s_type->i_mutex_key#12);
[  407.466203][T10506]                                lock(&mm->mmap_lock);
[  407.473048][T10506]                                lock(&sb->s_type->i_mutex_key#12);
[  407.481024][T10506]   lock(&mm->mmap_lock);
[  407.485345][T10506] 
[  407.485345][T10506]  *** DEADLOCK ***
[  407.485345][T10506] 
[  407.493470][T10506] 3 locks held by syz.2.1220/10506:
[  407.498654][T10506]  #0: ffff888011b83438 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320
[  407.507708][T10506]  #1: ffff88801cb66420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  407.516672][T10506]  #2: ffff888074714aa0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x80/0x120
[  407.527816][T10506] 
[  407.527816][T10506] stack backtrace:
[  407.533693][T10506] CPU: 1 UID: 0 PID: 10506 Comm: syz.2.1220 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0
[  407.544442][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  407.554485][T10506] Call Trace:
[  407.557754][T10506]  <TASK>
[  407.560675][T10506]  dump_stack_lvl+0x241/0x360
[  407.565345][T10506]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.570534][T10506]  ? __pfx__printk+0x10/0x10
[  407.575122][T10506]  print_circular_bug+0x13a/0x1b0
[  407.580139][T10506]  check_noncircular+0x36a/0x4a0
[  407.585067][T10506]  ? __pfx_register_lock_class+0x10/0x10
[  407.590716][T10506]  ? __pfx_check_noncircular+0x10/0x10
[  407.596178][T10506]  ? lockdep_lock+0x123/0x2b0
[  407.600873][T10506]  ? validate_chain+0x11e/0x5920
[  407.605810][T10506]  validate_chain+0x18ef/0x5920
[  407.610657][T10506]  ? __pfx_validate_chain+0x10/0x10
[  407.615862][T10506]  ? __pfx_validate_chain+0x10/0x10
[  407.621058][T10506]  ? ima_match_policy+0x115/0x22f0
[  407.626170][T10506]  ? cgroup_rstat_updated+0x13b/0xc60
[  407.631542][T10506]  ? __pfx_validate_chain+0x10/0x10
[  407.636747][T10506]  ? mark_lock+0x9a/0x360
[  407.641071][T10506]  ? mark_lock+0x9a/0x360
[  407.645391][T10506]  ? __lock_acquire+0x1384/0x2050
[  407.650415][T10506]  ? mark_lock+0x9a/0x360
[  407.654733][T10506]  __lock_acquire+0x1384/0x2050
[  407.659580][T10506]  lock_acquire+0x1ed/0x550
[  407.664080][T10506]  ? upgrade_mmap_lock_carefully+0xb6/0x160
[  407.669968][T10506]  ? __pfx_lock_acquire+0x10/0x10
[  407.674992][T10506]  ? __pfx___might_resched+0x10/0x10
[  407.680277][T10506]  ? cmp_ex_search+0x74/0xa0
[  407.684864][T10506]  ? bsearch+0x98/0xc0
[  407.688929][T10506]  down_write_killable+0xab/0x260
[  407.693941][T10506]  ? upgrade_mmap_lock_carefully+0xb6/0x160
[  407.699827][T10506]  ? upgrade_mmap_lock_carefully+0xb6/0x160
[  407.705713][T10506]  ? __pfx_down_write_killable+0x10/0x10
[  407.711333][T10506]  ? fault_in_readable+0x165/0x2b0
[  407.716469][T10506]  ? find_vma+0xf9/0x170
[  407.720733][T10506]  ? __pfx_find_vma+0x10/0x10
[  407.725521][T10506]  ? fault_in_readable+0x165/0x2b0
[  407.730652][T10506]  upgrade_mmap_lock_carefully+0xb6/0x160
[  407.736388][T10506]  lock_mm_and_find_vma+0x107/0x2f0
[  407.741588][T10506]  exc_page_fault+0x1bf/0x8c0
[  407.746270][T10506]  asm_exc_page_fault+0x26/0x30
[  407.751127][T10506] RIP: 0010:fault_in_readable+0x165/0x2b0
[  407.756845][T10506] Code: b3 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 f5 c9 b3 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10
[  407.776442][T10506] RSP: 0018:ffffc9000b5cfa20 EFLAGS: 00050283
[  407.782518][T10506] RAX: ffffffff81e11ca7 RBX: 0000000020002000 RCX: 0000000000040000
[  407.790488][T10506] RDX: ffffc90004a43000 RSI: 000000000000007e RDI: 000000000000007f
[  407.798457][T10506] RBP: ffffc9000b5cfad8 R08: ffffffff81e11c18 R09: ffffffff84b96d19
[  407.806427][T10506] R10: 0000000000000002 R11: ffff888031dc0000 R12: 000000000000fe00
[  407.814396][T10506] R13: dffffc0000000000 R14: 0000000020010000 R15: 1ffff920016b9f4c
[  407.822361][T10506]  ? fault_in_iov_iter_readable+0x49/0x280
[  407.828169][T10506]  ? fault_in_readable+0xf8/0x2b0
[  407.833192][T10506]  ? fault_in_readable+0x187/0x2b0
[  407.838306][T10506]  ? seqcount_lockdep_reader_access+0x157/0x220
[  407.844540][T10506]  ? __pfx_fault_in_readable+0x10/0x10
[  407.849994][T10506]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[  407.856225][T10506]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  407.862805][T10506]  ? inode_to_bdi+0x69/0xf0
[  407.867298][T10506]  fault_in_iov_iter_readable+0x229/0x280
[  407.873013][T10506]  generic_perform_write+0x259/0x6d0
[  407.878292][T10506]  ? __pfx_generic_perform_write+0x10/0x10
[  407.884088][T10506]  ? __pfx_generic_write_checks+0x10/0x10
[  407.889799][T10506]  ? rcu_read_lock_any_held+0xb7/0x160
[  407.895248][T10506]  ? file_update_time+0x2a0/0x430
[  407.900266][T10506]  shmem_file_write_iter+0xf9/0x120
[  407.905458][T10506]  vfs_write+0xa6d/0xc90
[  407.909690][T10506]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  407.915496][T10506]  ? __pfx_vfs_write+0x10/0x10
[  407.920253][T10506]  ? fdget_pos+0x24e/0x320
[  407.924660][T10506]  ksys_write+0x183/0x2b0
[  407.928983][T10506]  ? __pfx_ksys_write+0x10/0x10
[  407.933825][T10506]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  407.940412][T10506]  ? lockdep_hardirqs_on+0x99/0x150
[  407.945606][T10506]  __do_fast_syscall_32+0xb4/0x110
[  407.950718][T10506]  ? exc_page_fault+0x590/0x8c0
[  407.955565][T10506]  do_fast_syscall_32+0x34/0x80
[  407.960403][T10506]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  407.967155][T10506] RIP: 0023:0xf7ff6579
[  407.971209][T10506] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  407.990804][T10506] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  407.999221][T10506] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000100
[  408.007182][T10506] RDX: 000000000000fecc RSI: 0000000000000000 RDI: 0000000000000000
[  408.015142][T10506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  408.023100][T10506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  408.031059][T10506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  408.039025][T10506]  </TASK>
[  408.132394][  T936] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  408.283033][  T936] usb 1-1: Using ep0 maxpacket: 8
[  408.291994][  T936] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  408.301430][  T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.310444][  T936] usb 1-1: Product: syz
[  408.314702][  T936] usb 1-1: Manufacturer: syz
[  408.319466][  T936] usb 1-1: SerialNumber: syz
[  408.527764][  T936] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  409.033259][ T5239] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  410.157673][  T936] usb 1-1: USB disconnect, device number 22
[  410.167176][  T936] usblp0: removed