last executing test programs:

9.733271001s ago: executing program 0 (id=264):
r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x101, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x20, 0x1, 0x0, "00e8ff030000000000000000000c03e0ff0200", 0x30453a10}) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
ftruncate(r1, 0xc17a)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x6, 0x9b}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x6d, 0x2a, 0x2183c8a1, 0x7, 0x5}, 0x14)
getpeername(0xffffffffffffffff, &(0x7f0000000400)=@ax25={{0x3, @netrom}, [@remote, @null, @rose, @null, @netrom, @default, @remote, @netrom]}, &(0x7f00000001c0)=0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000fe050000000000e9cf00000095166637eb6470de7fc9888c908eae3800fd941ead9cf9003c85ced79e9e96ab1b7574ab7e13ed1fbf69cda850be52c91497a7bd9dbba123d55c9e846ef0ff905bf9db1ca802b439360709c847f499af316a3699066f59f1414fe4ec58acca3626d3328996d756b5e02a81e18480a8de41d8ff6a0cc0dd19ef2f25d1ccba6413f6927d9aeec48e687e359d7518f8274ca06924f992a8ea1b39ac41cb32dd852526bbc3eb504e025b64477d761a1a745ff7e4ac5cab423ce4149c620918ac0846206107ed7d4d1e45273994ba45f526"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
pipe2$9p(0x0, 0x84080)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
r7 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) (async)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c)

9.378089301s ago: executing program 0 (id=267):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='workqueue_execute_end\x00', r0, 0x0, 0x4000000}, 0x18)
setitimer(0x2, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed, 0x9}, 0xe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711238"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2ef84f70e24722c2}, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(r7)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)

9.3311974s ago: executing program 2 (id=268):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)={0x34, 0x19, 0x15, 0x0, 0x25dfdbfb, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}]}]}, 0x34}], 0x1}, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x4080000)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0x2710}})

8.496814102s ago: executing program 2 (id=269):
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1cc02000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x20000000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
socket$inet(0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x3)
socket$packet(0x11, 0x2, 0x300)
eventfd(0x14)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0xd, 0x3, 0x9, 0x0, 0x8, 0xfff, 0x9, 0x10000000000000}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

7.819945794s ago: executing program 0 (id=273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x800448d2, 0x0)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "841d7cb49e5b8cc49dc6e85ffe45460b"}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r8=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_buf(r9, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f00000001c0)=0x1a)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r11, &(0x7f0000000080)={0x2020}, 0x2020)
r12 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r12, 0x30})
r13 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000020c0)={'wg0\x00'})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r15=>0x0})
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x64, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, 0x200, 0x1}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x9}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}]}, 0x64}}, 0x2)
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54ff0700", @ANYRESDEC=r8, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r8, @ANYRESDEC=r10], 0x54}}, 0x0)

7.076946062s ago: executing program 2 (id=274):
syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x20000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x3, 0x7ff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffeffc]})

6.807342617s ago: executing program 0 (id=275):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
fcntl$setstatus(r0, 0x4, 0x2000)
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8=r0], 0x0)

6.726404743s ago: executing program 2 (id=276):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x3)
accept4(r0, &(0x7f0000000080)=@generic, &(0x7f0000000040)=0x80, 0x800)
r1 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x65, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8]}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x40, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x8, 0x0, {0x7}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000001c80)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000002340)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000002740)={0x14, 0x0, &(0x7f00000026c0)={0x0, 0x3, 0x28, @string={0x28, 0x3, "738b3b385528364aa577c8c328fd84dbf0e4254ed1493c66e15f2dc7f8c33029919accd0cb30"}}}, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)

6.002660337s ago: executing program 4 (id=284):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/178, 0xb2, 0x0, &(0x7f0000000740)=""/4096, 0x1000}, &(0x7f0000000240)=0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000902000/0x2000)=nil, 0x2000, 0xb635773f05ebbeec, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x1})
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaeaaaaaa000000000000080045"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040}, 0x240280c4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"})
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x140, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, [], [0x0, 0x0, 0x0, 0xff], 'vlan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x110, 0x140, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connlimit={{0x40}, {[0xff000000, 0xff000000, 0xff, 0xffffff00], 0x6, 0x1, {0x9}}}, @common=@inet=@socket1={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x3, 0x4}, {0x4}, 0x3, 0x1}}}, {{@ipv6={@private1, @empty, [0x0, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x62e86355b076eae1, 0xff0000ff, 0xffffffff], 'nr0\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x5c, 0x6, 0x2, 0x20}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x6, 0x7, 0x4, 'snmp_trap\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)

4.629926144s ago: executing program 4 (id=286):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x20000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x3, 0x7ff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffeffc]})

4.558878749s ago: executing program 4 (id=287):
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000fc0)=[0x0]})
r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x12, 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="34003e0000000000000080ed0000", @ANYRES16=r3, @ANYBLOB="010129bd7000ffffffff2b00000008000300", @ANYRES32=r4, @ANYBLOB="05003400a1000000080026006c09000008009f0007000000"], 0x34}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r5, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, <r8=>0x0], &(0x7f0000000280), 0x2, r7})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x400000000000000b, &(0x7f00000000c0)=[r7], &(0x7f0000000300), &(0x7f0000000bc0)=[r8], &(0x7f0000000300)})

4.086950175s ago: executing program 2 (id=288):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x12c, 0x2, 0x104, 0xbe4e})
r1 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000ebff080400130103000000092100000001220500090581030000000000"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "a5247d20"}]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x25, {0x25, 0xd, "179a704aabd50c0c420715168eb50b6811d07fd1db7854b54037d15085155c23a02d54"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, &(0x7f00000000c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xa, 0x3, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5e, "5f24de650eea7a9e72be7b48494c19ea"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x4, 0x9}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x0, 0x7}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1626cb7861fef600, 0x5, 0x4, "5ec17b83", "4fe4b48f"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x1, 0xa, 0xfe, 0x3, 0x4, 0x2}}}, &(0x7f00000006c0)={0x84, &(0x7f00000001c0)={0x20, 0x13, 0xfd, "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"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x2fb279a021d6cc4c, 0x10, [0xf0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, '+@'}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xfa84}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="f706f2d2d842"}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "f891"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0xf800}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x3}})

3.716913741s ago: executing program 0 (id=289):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x5, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e2c", 0x4d}], 0x1}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000207010200000000000000000a000000000000030900010073797a31000000000c0002400000000000000003"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x400801c)
r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008a306cd0c000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.277094701s ago: executing program 3 (id=291):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000001c0)=0x8)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x83, &(0x7f00000077c0)={r3}, 0x8)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0))
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000003880)=@userptr={0x804, 0xa, 0x4, 0x0, 0x8, {0x77359400}, {0x6, 0xc, 0xcb, 0xe, 0xf8, 0x10, "a003dbb9"}, 0x5, 0x2, {0x0}, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r7 = syz_io_uring_setup(0x3ac6, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37b}, &(0x7f0000000180)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(r7, 0x92, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)

3.060685965s ago: executing program 3 (id=292):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000004c0)="66b80500000066b9080000000f01d9f40f06f2ad3e818d0080008066b94309000066b80300000066ba000000000f3066b80500000066b93d0000000f01d90f011a360f01c90f01cf", 0x48}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r5, 0xae9a)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010000004000000000000f000000"], 0x14}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}, @IFLA_EXT_MASK={0x8}]}, 0x3c}}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
io_setup(0x3, &(0x7f00000003c0)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r9}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
dup(r9)

2.797804521s ago: executing program 3 (id=294):
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x46000, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000c0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

2.643280474s ago: executing program 3 (id=296):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'gre0\x00', <r0=>0x0, 0x700, 0x700, 0x1, 0x0, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x68, 0x0, 0x5, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0x19, 0x0, 0x8, [0x5, 0x6]}, @timestamp={0x44, 0x14, 0xdd, 0x0, 0x4, [0x80000000, 0xb, 0x6, 0x3]}]}}}}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e8, 0x3f8, 0x0, 0x1b0, 0xd0, 0x3f8, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xf3dd}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x900064, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000000)={[], [{@obj_role}], 0x2f})
r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
accept$unix(r3, 0x0, &(0x7f0000000080))
getdents(r3, &(0x7f0000000180)=""/98, 0x62)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000340)="24000000010001", 0x7)

2.576901743s ago: executing program 4 (id=297):
r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x20000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x3, 0x7ff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffeffc]})

2.520796906s ago: executing program 1 (id=298):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d0802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x400000000000, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4], 0xffff1000})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000101010200000000000000000a0000000c00018006000340000100000c0019800800010008010100"], 0x2c}}, 0x0)
r5 = semget$private(0x0, 0x7, 0xa0)
r6 = socket(0x1e, 0x1, 0x0)
connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r6, &(0x7f0000000400), 0x2000011a)
recvmmsg(r6, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1, 0x0, 0xffffffffffffff22}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}}], 0x2, 0x0, 0x0)
close(r6)
semtimedop(r5, &(0x7f0000000080)=[{0x1, 0x3, 0x1800}, {0x1, 0x0, 0x800}], 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)
r8 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, 0x0, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r9)
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x6, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

2.519140058s ago: executing program 3 (id=299):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7)
ioperm(0x0, 0x87, 0x3ff)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x70000040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000100)='\x00', &(0x7f00000001c0)='./file0\x00', r4)
ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000340)={'pim6reg\x00'})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000003a00913a745c7388641f9c0e0a"], 0xfe33)
recvmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f0000001700)=""/4107, 0x100b}], 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e)
listen(r6, 0x3)
r7 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x28, 0x0, r6, 0x0})
io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0x0)
shutdown(r6, 0x0)
prlimit64(r1, 0xd, &(0x7f0000000040)={0x2, 0x8}, 0x0)

2.408520785s ago: executing program 4 (id=300):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
sendto$netrom(r1, &(0x7f0000000200)="8004acfc131a0ee56b0c8f06bd157c4498fb71f0cfc74fd5792ab7c11f93826456a6791e2a632fe9c47171e318560800c3e6222ada4bee34d1d9a298c323fe9550dfe18034cf2f35892b2fcb46891e6313784acbf02d7b5d4905b7101b872f79bc7c8119ee85112eff1ac4241c09b753a78fe8d6b0d27782c280548baca41b9d3b014ed43b3e13fe798ca8e3974a5b828881f1fc2c9f0f8af2b43d90b2f2e05070f368dc746698e701fa957d112de88111fe8f5b1a55ed5bbbaa8aa9c3eef00373dd6c", 0xc3, 0x20000080, &(0x7f0000000300)={{0x3, @default, 0x7}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fstat(r2, &(0x7f0000000000))
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f00000000c0)="4b0003000000", 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x8, 0x42}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=r2, @ANYRES16=r0], 0x1c}}, 0x0)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r10, 0x0, 0x0, 0x8812, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x7fffffff, 0x2}, 0x20)

2.275017994s ago: executing program 1 (id=301):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d001102000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0a651c1e465da9126bf933502a04d10999513dbbf1ac2d668424aea75d6af027"], 0x1c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000000080003400000000a0900010073797a30000000000c0006"], 0x5c}}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x24}}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x3, 0x0, &(0x7f00000000c0)) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x168, 0x0, 0x148, 0x168, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'erspan0\x00', 'wg2\x00', {}, {}, 0x6}, 0xffffe000, 0x100, 0x168, 0x0, {0x0, 0x1c030000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1\x00', {}, 'veth1_to_bridge\x00', {}, 0x0, 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "ee3a145e71108157c7a58fd52abd150cdc1d3c8bac3dd980a975afbb612f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r11, 0x0) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000040)=0x39)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000000c0)={r12, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x5a1}, 0x9c) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000002c0)={r12, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000003c0)=0x9c) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)

2.15278953s ago: executing program 1 (id=302):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000e80)=ANY=[@ANYBLOB="7261770000010000000000000000000000000000000000000000000000000000ab0000000fa5751125b5ee920a8393a0af921b4faf2f27af55afe073f0bbeb10392f114079aa5b8589d1c925822634c45ca464378fb34c642db3adb362ecde9c8fbc0a0900000000000000cf4d2e7ce51150b89202cfe298e4c3538804bdf53d82b9b16206f5d1013e31bb5dbd49346a6c8334724b067a9938434bd2acbfeb5dc7ea61c27328d3c1782dd32e6934726e28850c95acbcedeae3a210824747f288c08cd4d5cccc9f740c78da478f97ac8d7a12ab7148b1e45a60a5b92bafdd1480f8b2ce09051b9e5647709d46"], &(0x7f0000000100)=0xcf) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r2=>0x0, 0x40, 0x700, 0x7, 0x5, {{0x1c, 0x4, 0x2, 0x36, 0x70, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty, {[@ssrr={0x89, 0xb, 0x49, [@dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_prespec={0x44, 0x24, 0x7f, 0x3, 0xd, [{@broadcast, 0x4}, {@broadcast, 0x4}, {@rand_addr=0x64010102, 0x2}, {@local, 0x62d4b71e}]}, @generic={0x88, 0x5, "8be7f3"}, @end, @timestamp_prespec={0x44, 0x24, 0x9d, 0x3, 0xd, [{@empty, 0x8}, {@loopback, 0x8}, {@multicast1, 0x4}, {@multicast2, 0xa}]}]}}}}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%ps    \x00'}, 0x20) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="020001007702f0502a3134c34275cf8c6f519f1675de7627da93b869e513cd3c2d8b59e4e88b6e1ddbfd062164545a662ae7b76d8b516402afd75588b93c9ea65c226b5f22e598b626886c1f4296d41b454ad7b5802a2d8123c16a447fc39f96c871883e", @ANYRES32=0x1, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200"/28], 0x50) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, &(0x7f0000000500), &(0x7f0000000640)=r6}, 0x17) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x85}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x2e, &(0x7f0000000180)=""/46, 0x41100, 0x63, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r4, r5, 0xffffffffffffffff, r7], &(0x7f0000000580)=[{0x1, 0x2, 0x8, 0xa}, {0x2, 0x3, 0x5, 0x5}, {0x4, 0x1, 0x4, 0xc}, {0x0, 0x4, 0xe, 0x1}], 0x10, 0x3, @void, @value}, 0x94) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.137425717s ago: executing program 1 (id=303):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r0, 0x2) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602020000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0)
r3 = socket$inet(0x2b, 0x801, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x8905, &(0x7f0000000000)) (async)
recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/33, 0x21}, {&(0x7f00000000c0)=""/242, 0xf2}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/241, 0xf1}], 0x5, &(0x7f0000000680)=""/71, 0x47}, 0x8}, {{&(0x7f0000000700)=@x25, 0x80, 0x0, 0x0, &(0x7f0000000880)=""/171, 0xab}, 0xfff}], 0x2, 0x3, &(0x7f00000001c0))
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010005000500070000000000080009000000000014002000fec00000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)

2.08469442s ago: executing program 1 (id=304):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003f000fcffffff00"], 0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4, 0xfffffff8, 0x4, 0x41410, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000200)="af636ad16a6f81c2f1e7cb3f3538ccf71f40c6c0cf237363b68573798e229c7585f4e16f1a8acb81d9c7ad1b17069270256ce8b255423f0a03b0e6a71cdc0b3ace8293db558cbd7dc00cf81287b23cc5fc899594ab5a4d9db48edfba91da1c9b5d", &(0x7f0000000680)=""/213, &(0x7f0000000040)="6340328e0cb5ab6481859ecd903a14240aca2488db2b29b6b0306f6e186db26bacf6fb7e2776d145f5c7f7", &(0x7f0000000180)="bf25d6a1", 0x9, r2}, 0x38)
syz_usb_connect(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000005611e40cd061a01cb17010a03010902240001bdf19f55090400000009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0)

1.598093272s ago: executing program 3 (id=305):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) (async, rerun: 32)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) (rerun: 32)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x76, @string={0x76, 0x3, "79f341292ac0d1f95f5ebedf3bc286d035a8eac6e9673fa796da2d9793401ba0728c7c993d7e668c18509b9da56d26d9f19ab3b1aa7b2836e77b1e08415bcce54221f2e54540cb8052fe991ba300476e3d4a005829f653847f6a21871f5ac83c1ec4c3ab5f5dd501758e59b447c7b4e8f66d4530"}}, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3], 0x48}}, 0x0) (async)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="4800028044000100240001006d6f6465000600000000000000000000000000000000000000000000000000000500030005000000110004"], 0x64}}, 0x0) (async)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x10, 0xd, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x9, 0xf3}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xfc, 0xd1, 0x2, 0x20, 0x3e}, 0xc7, &(0x7f0000000140)={0x5, 0xf, 0xc7, 0x5, [@generic={0x92, 0x10, 0xb, "d1ca136bc87159d86c5d75a86eca0ac91f15ea855cf52d6dd275546b42c133548656557a9ef684c172895e4ba92169bb255321768bda4b5436e0a3b9664b6b9cc2fb12a1f24825462eb70d81312ede9e3e0a353a3dfebc76db375609e9b695b4aa4c1364ed244ab6dcd0e4cc25ff48ed139c5c78bd6259ada61df4dbd995ea00358ac64db89e2c8c9d212cad648192"}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "fb38497cffdcd99fa49a70f8e10dd601"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x3a, 0x6, 0x1a}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x7, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x54, 0x1, 0x7f, 0x401, 0x2}]}, 0x2, [{0xd6, &(0x7f0000000300)=@string={0xd6, 0x3, "df1fd1ea5bad80c2dcb657e148722ba1129c1ba9df6f60f4dcabe872f8ab4c0967e61a0719ac1523164225ad8826437ee8e86a8ea19e8b880488442f963072114b3050ded4edf1aeff3f91c1aaf71866b9a32002fc52500937a4ddf2537ef6bcbac1a6c519b48451232eb743017ffb115730a868df6d09c755db5d06655147dd591a196061ecce529b61c29b9e676fc285c28a0d3ed31086201804f5611b63c9e5a6e3ec5e204288d18b719c349764da3739cf54b3953b8258b50a308c9a0c0a15c8355d7b579c33d5f8284e4676421b4fe0fd2b"}}, {0x102, &(0x7f0000000400)=@string={0x102, 0x3, "6641690f8b9cb477fc63f1a3cde386b2d604116e110079fa75f1fbde3da518092a96fdd1158e1ac0e72f665914dc4acbeebb7efc24da09cc4a7152382ba8832fc0c443bb320d8d52b21714e738bfd80e082bd4e578d9245589db02d1ebefa6c54a4ef6779b910cf042c1d7eb1746fa530f52644480b5ce07799e23542859346f339418170071b65c3d64928c5b9dfa2aa05f024575f582960516dca5bd6eea9d8ecb793f1421ed5a7c76d71fedef3bf634799c119b8c84dc1690f497b7f6b80930156de7b1cb5de7d07967de229f358669051892bd93212b3e538a0952fc1c1dbb8ba627fae51d7964c66d75df429f04eb5a99e5e904298329491459b4a11933"}}]})

1.516976716s ago: executing program 4 (id=306):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
process_vm_readv(r0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/100, 0x64}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/27, 0x1b}], 0x3, &(0x7f0000001340)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/141, 0x8d}, {&(0x7f0000001040)=""/250, 0xfa}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/214, 0xd6}], 0x5, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0xf0, 0x0, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_vlan\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8de4"}}, @common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@dev, @private, 0x0, 0x0, 'pimreg1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_hsr\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
syz_usb_connect(0x0, 0xfffffffffffffe8f, &(0x7f0000000040)=ANY=[@ANYBLOB="c4ed13dbd448e54ff7d7e8e4034c6cb3e7c49544b85657901b56bb96a8c7b978f5f931d7f48aaaf52859f837cfd4cb283d44985e622a4b6d1d96bd7eb5f2646771bb093195ef6529c69857439325258537d9e78ceb62996aaf6c681eb7cce9e2fc5665186dda96b89243d7627d55036a7e9f2ab22eed85ce9d5ebd805246201f28584e56f4", @ANYRES64, @ANYRESOCT, @ANYRES16=r1], 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000001ac0)=[{&(0x7f00000007c0)="6e5fb47cf1340fb15f920d2d0923f7b30bb80e241072eef5439352f1475ff4d935dfbf9489058dbe238f0e57bad466dbef2735aaf71d72412b4581c515843eb6dd3f0fad4d17b05540d4c8b553fba0d3b185333f30656a5f91cfdeb7b9dbaf3e94a84c5cb66ce0247e65547b0b18cb5365ca9760ccc7ba062bc2e9b37954cff16f0b92b260b4343be89abfe1b0dabf2f8f8b7875e43d58845297953a7735d6f9c0591db22113083fac1dac8ed5d23debfd23f6c68c4ed6e9046c2766973d38b538082449f90ad808c26d4f529ad1c2846bc74d76e8a307917beb5b630e60d3638a68702b788de4015533e4cc5beb365bb7b1fc784262f4d04ac074750a07ef55d658228dd4179e446ac3ef3f3dac86ad00776842920888d646a9dc612ce6a82da27827d462df695201dc4c3da15f617368144ab5c3f0fbffedf00b2d62d6470382ef13297c95f808806d6a369ed05f6c2515569b19d21e53398e07e3cd2eae79107a2340893b9364562f1ca6e262f7cc82079b77703e6b1566c7cfd1e772a1866d3cb77a98cc4e8795052711d1c586f86c2e2bc47e7c0e8f9716f8575849726fdae3fa7163aee7ee68790b0b42c43c473109c4c64618fcf9681a87686d695d6a1493fea0aca84ad51376f10c2e85f3a03c7a32197e2853d28cfc7a7221702d6c71c9be1e2df5a65b00983c4e57fec608eb6b5706b5b23ae9b0d451745c7b9ce93eba2cfcc8cdff593564dd286634d09c7c83fab14be5424a6a2fcdd43a49d387c6a02bf9f0b92b5bba41fba50d53493bdcdaea8af1cf684465181c403005b23965f4f7e5a912bac7355e8ae18365933d6dd332da731c6323eef41d4326d2d8cecbda9248cf28837ee647bb1007c4e2ba311e9f33b37731d6f8a9216405d73c2dab419c257cfdfd8fa5741e8aa64e4e90ada2e6af970a0e7acd16ca3d95107c63387bdc78dc2ed14e6460cc4b53f81d23f50e222bd7cd0d79be4631c4e6f102d0ef7d667a32263d7b5ebd96938139bcc234abf3ca6767af7697fc2a6b61fd7763acce2d93cdb2643c6d4bde2b4ce19fbdf8e93ea35b867af9f396d3b4832df88661081e7819bdf2e7075c6326469966990c3581b94b9fb603c65dca75659fe908a5a1ccf4bc24ee04b7b98267a6fcce3f4f1416139df74ba64715a40a06e1b6d4a34d056218d6d1bd7749e5772c66606aeb626c3a479ee20587aad394e973ba6a95906006f11161cde6dd335af0ad80d845331c245058ffca27c2a9e8f7aff2843259f201131cca32b345e6c2c3664aa441f5f6601578fceb7fb0a28161ed52d080c1cc634490138ee7374d690df47ca1788e17f54bfa820bdd6c44997902722d9e184fab666a3264a9dbec1326debe85d88bf5d6b99e3ca3422e8e7d0622bf2afeeb268c97b6ee447bbe0efb31e7f6e391d793ab0fdb42fb5265a33674be507aa0f35ba1514374e272ffa11578bf74299026cf659116b65a028ec4d190a4037b2c0ad52d629674c979b769f9fa593f2583d7ba4b1c10f67a01322ca4d8d4693f080d32440943534b3f8364fc09cce9a140fb54bb1553bf8192c9bd42f2c84f9f24185e350747f7186a65d23ac9b90f37ed9041acec335ccbfdb4b26ea3c3344678702c0cde7cb4b90c2368b63b41eace5f1ce4e4d17b61304bcf8517c8769faf9939dba072d03f3249099225e6f42ac0a4b29b407fa7b30182047a743be5c2477c0bd6e71ecf786952987d4b5e5cbda44c3e4b022397412a0dca3ff1ea620b69c775b072d3b72ee11761b834cc54b36ccde59bbd96a530bb5a46fba30bad4a2e5f6e506fdae12aa75c1fb0f72f92e24588c31e326f5fbd3228a4c387077b9064a7f6a1028cce9115179821460a4d6638271fd53d95110c0cc6a422caf671bcebf4b06a87fd804c63c6e05d78857792612947b08eca833d47e11237e72a02524baa5e736d78073ac7ddf5ef04db59615cd4a5d1aad5bd4abd7535da38d9b2c2b4d8ba84fdd0db3814847f1c596a7202835b8f83ca042922fbcfb12e6e97f2158e1c647ffcbaa239d9793147b17d28e08a120673223e55d6c7dd1d9e7b99a15ebf5005b98d52e0759adfb65e6a21bcbd077b982f273f1e9a9f2bfb8174fb50e0effd3f3f5f1feecaf46ff48d025835074c5fbed5c6eacfa2ae92bae21a221f25332d9948df4da93317f3a8af0898874fc3bd77649b695cec0713a1b82af9a1bf805ed76e859ca2c3660e15b7ea66c50169f058df5aa1c871d343a6162769c97765234dab6df3835588cad49f54b2ed554ec3875c7963407c9fc86a17d237d6f2325484e901d13e65b0468327b0a79f2ce2717ac404832f623c55a2c680a8dfd48d67aad334404a87c475df2ed49219d8458c9205a00ec6553946b123f42dd3b20a918dd38d0e5874627e33ad373a81945589702095507a23cba23673397acdc804a2703c7b6a366e412daf586735a9d84c4f91b1a5c1aeab734e9124022d56033678a8a50da3f4d7a6c393b2bdb5e51f3f0ce12311da801e15c4f50b5578f8e5a0863a5e47972a02ebb724e0c90e4cdfc9e6c9d9c78701abb61c6e1cebee5bcfcbce945e836ae2c53fa090ed1786b6450cbea9da921ddecdd1314d07a24d712ec8dfa10e9f11cfaa8934fcdbe27c1c36454abf0b4212233fb0cec678ab01fc1cb4bc13f6365b8de7d9be79614664191c7bf573b758608e718e540a0b2e2c3803d4d9127d50d215447ad477e8d0cd0f17fcad3ce768454c564d6898aa25464e05ccf6f61a03215a2a1c1aa429a96cbf35db51411c9e104b9f5674b61bd73a8dcc3fb4fcde989c8a4100c0923a4e93db299caa741b1139b4f4e37608e8311af75db106d38f8180fac230f36bea8e7530d95ec6fc72a937c6efa657f10249afcb743ca48cdedeb4145a98460ba7897e5882f7a7f95d9d9d6ef2df0956a0796a6d0c2fcf9f572ba7fc9b8a6c7bd93ea7ab634a64febc9ea10482f13b2204e86767a6434b", 0x841}], 0x1, 0x2)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x17, 0x2, {0x1, 0x400}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_newnexthop={0x50, 0x68, 0x4, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x3, 0x0, 0x2}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x3}, {0x0, 0x13}, {0x0, 0x3}, {0x2, 0x81}, {0x2, 0x6}]}, @NHA_OIF={0x8, 0x5, r4}, @NHA_BLACKHOLE={0x4}]}, 0x50}}, 0x4000080)
getpid() (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async)
process_vm_readv(r0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/100, 0x64}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/27, 0x1b}], 0x3, &(0x7f0000001340)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/141, 0x8d}, {&(0x7f0000001040)=""/250, 0xfa}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/214, 0xd6}], 0x5, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0xf0, 0x0, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_vlan\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8de4"}}, @common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@dev, @private, 0x0, 0x0, 'pimreg1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_hsr\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) (async)
syz_usb_connect(0x0, 0xfffffffffffffe8f, &(0x7f0000000040)=ANY=[@ANYBLOB="c4ed13dbd448e54ff7d7e8e4034c6cb3e7c49544b85657901b56bb96a8c7b978f5f931d7f48aaaf52859f837cfd4cb283d44985e622a4b6d1d96bd7eb5f2646771bb093195ef6529c69857439325258537d9e78ceb62996aaf6c681eb7cce9e2fc5665186dda96b89243d7627d55036a7e9f2ab22eed85ce9d5ebd805246201f28584e56f4", @ANYRES64, @ANYRESOCT, @ANYRES16=r1], 0x0) (async)
pipe(&(0x7f0000000080)) (async)
vmsplice(r2, &(0x7f0000001ac0)=[{&(0x7f00000007c0)="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", 0x841}], 0x1, 0x2) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x17, 0x2, {0x1, 0x400}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_newnexthop={0x50, 0x68, 0x4, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x3, 0x0, 0x2}, [@NHA_GROUP={0x2c, 0x2, [{0x0, 0x3}, {0x0, 0x13}, {0x0, 0x3}, {0x2, 0x81}, {0x2, 0x6}]}, @NHA_OIF={0x8, 0x5, r4}, @NHA_BLACKHOLE={0x4}]}, 0x50}}, 0x4000080) (async)

1.002452532s ago: executing program 2 (id=307):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0)
syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006df57108e2042414ebc701020301090238"], 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3b, 0x0}, &(0x7f0000000340)=0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0)

648.593514ms ago: executing program 0 (id=308):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={<r1=>0x0, 0x4}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x3}, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xffff, @loopback, 0x6}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000100)=""/125, &(0x7f0000000180)=0x7d)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x2300)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000240)={r3, 0x8, {0x0, 0x0, 0x0, 0x3, 0x31d8dfc6, 0x0, 0xa, 0x1f, 0x1, "8e3ea079d96a37d94cc6bebc9e9eadcf29d3a83925bd13bbb1b525e4440630faff144e3cdf086930de4aac543702120d4c386375654158841af167dde4fd59a0", "90e12951b616a9bb9c3aedf3bb2469a010accd723baf9eaf4acb6c1bf3f0445ddf3b912fe83c0dcfec17ad7ad8eeba5d74aef194df4c8c8de596527cc336edb1", "ad6f76007ed753f3d55a5ad876af8e59b0dbdba95bc9b74952843f7256949bce", [0x5, 0x2d]}})
r4 = syz_clone(0x14120000, &(0x7f0000000380)="3b91fcf87f509a4210f6374425df7c7ed24160610c8bdf84cdb7377bb6a177aa3059e0617efa76437252826f95e1c707dac95153c280876870d9d762f9ce5b65b44d906f00bb3d9377d3e647244a1dea1dae3e5a62ad260f8456de725b77da9f289760d860ce0bcec65d6bde1a20d5dbd27d00bd20d76f0f896229f0493e32ef0601fca9bc519a1e6be979684d221dfd4a4a3211017c638ac10a8ac06ec84295a7b033feb368bdee14a855bced12d32c5d16d06526fe", 0xb6, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9bd951cbafc2c41c67f465763edf390e74cc5eaa31785cf05697c6d7e3ddee224aea27f8ba14cb9f13de9baddd6ee30784893641d0c95069bea85b59084d44fbfc5b8ad9db72e83fc6d1e9073df37bd45529c2d2a3a45b932bcf6c8009c77582029dc9e6ab10378f7292eb50209fa7d66a71873f7eb540a528b31020f34d9fbebac1a3db28975efdbc544f62ccc10b95c5d00bc95ee107106401febd5f8a6a44b4babfdd53bb2548ef8f5fdc29b16e")
prlimit64(r4, 0x0, &(0x7f0000000580)={0x5, 0xc448}, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000005c0)={r1, 0x1, 0x5, [0x9, 0x2, 0x8c97, 0x8, 0x101]}, 0x12)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x2, 0x0, 0x401, 0x28, 0x2, 0x77c9, 0x16b, 0x5, 0x9, 0x3, 0xad, 0x4, 0x2, 0x4541, 0x1ff, 0x3, 0x200, 0x23, 0x6, 0x500000, 0x2, 0xb15, 0x200, 0x401, 0x0, 0x1, 0x7f, 0xc7, 0xcaad, 0x4, 0x10, 0x240, 0x3, 0x473, 0x8, 0x7, 0x2, 0x8, 0x9, 0x8826, 0x4, 0x7, 0x3, 0x3, 0xbf, 0x81, 0x0, 0x8001, 0xfffffff7, 0x80, 0x4, 0xb, 0x3, 0xb, 0x5, 0x4, 0x193, 0x6, 0xd710, 0x3, 0x2, 0x1, 0x4, 0x22, 0xff, 0x3, 0x3, 0x4, 0x3, 0x5, 0x3, 0x0, 0x800, 0x1000, 0xb7c, 0xfff, 0xf, 0x6, 0x0, 0xfffffff8, 0x8, 0x10, 0x80000001, 0x120000, 0x0, 0x9, 0x80, 0x0, 0x9, 0x3, 0x3, 0x8, 0x1, 0x9c, 0x400, 0x1, 0x48f3, 0x40, 0x4, 0x7f, 0xfdf6, 0x1, 0xffffffff, 0x800, 0x8000, 0xe06, 0x3da605c2, 0x5, 0x2, 0x1, 0xe, 0x3a, 0x68d, 0x5, 0x800, 0x0, 0x9, 0x4db, 0x1, 0xb, 0xae13, 0x9, 0x78000, 0xf9, 0x0, 0x251e09e5, 0x766, 0x467, 0x40000, 0x5, 0x8, 0x3, 0x5, 0x3, 0x7fffffff, 0x8, 0x88, 0xff, 0x7, 0x6, 0xddf, 0x7fff, 0x6, 0x3, 0x0, 0x400, 0x1, 0x7ff, 0x8, 0x8001, 0x2, 0x4, 0x9, 0xd3, 0x7f, 0x5, 0x600, 0x5, 0x3, 0x3, 0xffffff80, 0x7fff, 0x9, 0x7f, 0x7, 0x5, 0x8, 0x40, 0x0, 0xc3bc, 0x973c, 0x200, 0x6, 0x7, 0x4, 0x2, 0xf86, 0xffffde67, 0x3, 0x4, 0x7, 0x6, 0x8, 0x3b, 0xffffffff, 0x1, 0xa9, 0x1, 0x5, 0x1, 0x0, 0x9, 0x4, 0x24, 0x7, 0x3, 0xffff, 0x7, 0x3, 0x8, 0x224, 0x8, 0x7fe1b382, 0x6, 0x3, 0x0, 0x100, 0x8, 0x401, 0x8, 0xfff, 0xe, 0x5, 0x9, 0x3, 0x4, 0x7, 0x3, 0x2, 0x7, 0x8, 0x0, 0xfffffff8, 0x10000, 0x1, 0x3, 0x7fb, 0x4, 0xa8e, 0x41, 0x0, 0x7, 0x9, 0x2, 0x5, 0x3, 0xb, 0x72, 0xa337, 0x4, 0x3ec, 0x100, 0x1, 0x3, 0x7, 0x5, 0x4, 0x1, 0x9, 0x7, 0x0, 0x1, 0x1, 0x9, 0x7, 0xff, 0x9, 0x2, 0x7, 0x8, 0x9, 0x67, 0x1, 0x2, 0x4, 0x3, 0x1, 0x7, 0x8000, 0x80, 0x8fb, 0x3, 0x8d, 0x1000, 0x5, 0x1cc, 0x8, 0xff, 0x0, 0x101, 0x9, 0x5, 0x28d0, 0x8000, 0x2, 0x9, 0x3, 0x6, 0x5, 0x80, 0x7f, 0xd2, 0x0, 0xa36e, 0x0, 0x6ada, 0x101, 0x6, 0x9a47, 0x8, 0xfffffd79, 0x5, 0x8, 0x1ff, 0x7, 0x1, 0x8, 0xb926, 0x6, 0x101, 0xffff, 0xd0d, 0x3, 0x9, 0x81, 0x17b, 0x7, 0x1, 0x6, 0x100, 0x7, 0x4, 0x0, 0x2, 0x0, 0x1ff, 0x7, 0x380, 0x0, 0x91cb, 0x75e4cb43, 0x3, 0x8, 0x9, 0x81, 0x4, 0xed, 0x2, 0x7, 0x7, 0xfffff801, 0x3680, 0x362, 0x10000, 0xffffffff, 0x9, 0x6, 0xf6f, 0x0, 0x4, 0x6, 0x10001, 0x6, 0xc, 0x2, 0x7, 0x68, 0x3bf0, 0x8, 0xb, 0x7, 0x6, 0x4, 0xfffffffd, 0x8, 0x0, 0x3, 0x3ff, 0x2, 0x5, 0x4, 0x6, 0x2, 0x9, 0x3, 0x2, 0x401, 0x3, 0x80000000, 0x0, 0x6a, 0x4, 0x80000001, 0x9, 0x0, 0x6, 0x9, 0x7, 0x7fffffff, 0x8, 0x9, 0xe, 0x4, 0x0, 0x100, 0x2, 0x2, 0x4, 0x1, 0x80000001, 0x3b9b, 0x2, 0x989, 0x7, 0x3, 0x2, 0x0, 0x3, 0x6, 0x8, 0x400, 0x6, 0x9, 0x6d1, 0x7fffffff, 0x4, 0x1, 0x1, 0x5, 0x3, 0x0, 0x5, 0x1, 0x8, 0x5, 0x200, 0x1, 0x3, 0x17, 0xffff5cfb, 0x7, 0x1, 0x101, 0x10, 0x4, 0x40, 0x10, 0xfffffff1, 0x1, 0x4, 0x6, 0x88d, 0x8, 0x10, 0x0, 0xf2, 0x4166, 0x9, 0xc13, 0x8, 0x2, 0x1ff, 0x9, 0x7ff, 0x7, 0x8, 0x4, 0x3, 0x0, 0xffffffff, 0x0, 0x2, 0x9, 0x3f2, 0x84a, 0x1, 0x1, 0x1, 0x7fff, 0x6, 0x0, 0xffff, 0x8, 0x9, 0x5, 0x6, 0x4, 0xb, 0x0, 0x1, 0x7fff, 0x33, 0x8, 0xfffffffb, 0xfffffffe, 0x1000, 0xa9, 0x433, 0x655, 0x0, 0x9d, 0x6, 0xd09, 0x1000, 0xfffffffe, 0xe0000, 0x2, 0x1ff, 0x8, 0xffffffff, 0x1, 0x1, 0x1, 0x7fffffff, 0x0, 0x2, 0x4, 0x6, 0x5, 0x6a2b, 0x5, 0x9, 0x6, 0x9, 0x5, 0x57dc, 0xe7, 0x74d0, 0xea5, 0x0, 0x80000000, 0x8bf, 0x5cd, 0x401, 0x4, 0x3ff, 0x10001, 0x5, 0x1, 0x7, 0x7b7c8f8d, 0xff, 0x2, 0x6, 0x80, 0x6, 0x6, 0xeea7, 0xc9, 0x9, 0x8, 0x1, 0xffffffff, 0x142, 0x260de828, 0x4, 0x102, 0x0, 0x3, 0x7, 0xf, 0x1ff, 0xcf, 0x13b53f7, 0x5, 0x80000001, 0x1, 0xc, 0x400, 0x6a5, 0x0, 0x6, 0xc, 0x4, 0x1, 0x9, 0x1d, 0x1, 0x6, 0x40, 0x2, 0x3ff, 0x7, 0x5, 0x3, 0x8000, 0xd07, 0x6bd, 0x7f58, 0x8, 0xffffffff, 0x5, 0x1, 0x3, 0x80e, 0x1, 0x1, 0x100, 0x3ff8000, 0x5, 0x0, 0x0, 0x80000000, 0x7, 0x1, 0x6, 0x2, 0xfffffffb, 0x8, 0x3ff, 0x9, 0x6, 0x9, 0x8, 0x0, 0x3, 0x6, 0x3d3, 0x4, 0x3, 0x8001, 0xd, 0x8, 0x6f, 0x1, 0x4, 0x48, 0x9, 0x7fffffff, 0x0, 0x4, 0x824, 0x16, 0x9, 0x4, 0x7c1e, 0x9, 0x8d, 0x3, 0x6, 0x2, 0x2, 0xbb, 0xa3e, 0x2, 0x5, 0x800, 0x3, 0x5, 0x2, 0x7, 0x80000001, 0x0, 0x9, 0x1, 0x7, 0x491, 0x8001, 0x4, 0x8, 0x6, 0xb, 0x6, 0xda8, 0x0, 0x1, 0x5, 0x4, 0x7, 0x9, 0xa, 0x3, 0x4dff, 0x40, 0xea47, 0x3, 0x4, 0xffff, 0xa0, 0xad6, 0x7fffffff, 0x80000000, 0x401, 0x4, 0x4, 0xffb3, 0x4, 0x56, 0x5c, 0x5, 0x7fffffff, 0x2, 0xc8, 0xfffffffb, 0x5, 0x6c000000, 0x3, 0x3ff, 0x6, 0x8, 0x2, 0x5, 0xbbd, 0x7fff, 0x8, 0x6, 0xffffffff, 0xa, 0x1, 0x9, 0xe, 0x9, 0x7, 0x0, 0x8, 0x2, 0x41, 0x800, 0x139, 0x0, 0x9, 0xa4, 0xe86b3ec9, 0x6, 0x1, 0x4, 0x800, 0x8, 0x5, 0x8000, 0x5413d5b1, 0xa9, 0xff, 0xf, 0x1000, 0x1000, 0x7, 0x4, 0x1, 0x10e, 0x6281, 0x81, 0x1, 0xffff2754, 0x0, 0x8, 0x9, 0x8, 0x5778, 0x5, 0x10, 0x1000, 0x7, 0x2, 0x1, 0x9f25, 0xfffffffd, 0x5, 0x9, 0x1, 0x61, 0x5, 0x7, 0xd1, 0x5, 0x4, 0x4d7c49e9, 0x54d0, 0x5, 0x1, 0xfffffff8, 0xcec1, 0xffff, 0x1, 0xce4, 0xffff, 0x8, 0x1, 0x764, 0x5, 0x3ba, 0x1, 0xc, 0x4, 0x3, 0x6, 0x82b4, 0x0, 0x380a, 0x1ff, 0x9, 0x3, 0x8, 0x80, 0xfffffffa, 0x7, 0x7, 0x9, 0x8, 0x4, 0x6, 0x3, 0x3, 0x1, 0x10000, 0xa8e, 0x80000001, 0xfffffff8, 0x7, 0x3, 0x7, 0x3, 0x600, 0xfffffff8, 0x8, 0x3, 0x9, 0x1, 0xff, 0x6, 0x4, 0x9, 0x3, 0x6, 0xffffff8b, 0x2d8d, 0x5, 0x6, 0x81, 0xfffff970, 0x4, 0x616, 0x2, 0xfffffff8, 0x4b2, 0x22, 0x2cba, 0x2, 0x7, 0x9, 0xfffffffb, 0x6, 0x0, 0x7fff, 0x7, 0xfffffffb, 0x3, 0x8, 0xfff, 0xc, 0x7, 0x8, 0x2, 0x101, 0xa6, 0x7, 0x78, 0x3, 0x7, 0x401, 0xfffffffd, 0xf, 0x0, 0xf, 0x8, 0xa09, 0x8, 0x3, 0x4, 0x8000, 0x0, 0xc76, 0x0, 0xd61, 0x3, 0x401, 0x9, 0xc5, 0x9, 0x8, 0x4, 0x9, 0x3fc2, 0x1, 0x3, 0x1, 0x14dc, 0x4, 0x3, 0x101, 0x9f6, 0x9e71, 0xf886, 0x6, 0x0, 0x95f1, 0x6, 0x9, 0xae61, 0x7, 0x2, 0xf, 0x200, 0x9, 0x5, 0x0, 0x7, 0x9, 0xfff, 0x6, 0x7, 0x4, 0x5, 0xffffffff, 0x4, 0x1ff, 0x10001, 0x7, 0x4, 0x1, 0x2, 0x9, 0xaf58, 0x1, 0x9, 0x7, 0x3, 0x5, 0x4, 0x5, 0x6, 0x6, 0x2, 0x7, 0x8, 0x80000000, 0x8000, 0xf, 0x0, 0x8, 0x9, 0x3ff, 0x3, 0x2, 0x3, 0x8c, 0xe7, 0x2700000, 0x4, 0x1, 0x2, 0xf, 0x8, 0x5f5, 0x7, 0x3, 0x8, 0x7fff, 0x7f, 0x81, 0x7e, 0x80, 0x200, 0x3, 0x7, 0x7, 0x7, 0x4, 0x8, 0x2, 0xd, 0x94, 0x2, 0xe0, 0x198, 0xfffffff9, 0xffff71cf, 0x5, 0x2, 0xc, 0x28, 0x9, 0x101, 0x1, 0x390, 0x0, 0x4, 0x2, 0x8d, 0x7f, 0x7, 0x3, 0x0, 0x5, 0x2, 0xc8d0, 0x101, 0xfffffff2, 0xffffffff, 0x2, 0x8, 0x7, 0xffff46cb, 0x3ad4d95, 0x4, 0x3, 0x5, 0x4, 0xf93, 0x2, 0x800, 0x7, 0xffffffff, 0x5, 0x5, 0x9, 0x9, 0xb000, 0x200, 0x4433, 0x9, 0x7ff, 0x401, 0x1, 0x2, 0x8, 0x0, 0x6, 0x4, 0x5b27, 0x6, 0x400, 0x80, 0x4], 0x1, 0x400, 0x7fff})
prlimit64(r4, 0xe, &(0x7f00000016c0)={0xfffffffffffffffd, 0x6}, &(0x7f0000001700))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001780), r3)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x84, r7, 0x2, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x40)
syz_open_pts(r3, 0x200000)
socket$nl_route(0x10, 0x3, 0x0)
r8 = userfaultfd(0x1)
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000001900)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x3000, 0x2})
getrlimit(0xf, &(0x7f0000001940))
ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x0, 0x5002)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x1, 0x5004)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001980))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000001a00)={'ip6tnl0\x00', <r9=>0x0, 0x2f, 0x0, 0x0, 0x26, 0x45, @remote, @private1, 0x80, 0x1, 0x7422, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001ac0)={'batadv_slave_0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001b00)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000001d40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x188, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x148, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xbe, 0x4, "105fffbd46d6e034f4344e19c46c177a2e74e1d0333cf2145f41dbad00bc8cf382318e3fa0e4727bd309c05ba73939163a26256adf77b61bdc07a1feb955425a8d555d58acc1fc576a3c01f8a5b4eb727929838bde227937acfd9fab6dcf201f45bb07d6f7e6139a4b4ac43244d0895d771e50b7eda4f680822f0934add1d9fe60274d5040efe05bcf8ecfe45be4dd2e7edb686fa118fe28c81707c7717d0e401dbde88c9598be0171f9f01c7232b75951819cb8ae5a4650b8e2"}, @ETHTOOL_A_BITSET_MASK={0x3a, 0x5, "b6c8fa4884c647ec5b7d23c4301d21a368f049ccdb8fd111c49aed4e34a4c79af347a20a295de6712a91616e62a2731947914dfd55c6"}, @ETHTOOL_A_BITSET_MASK={0x22, 0x5, "e3e30c4bc2562f2eb412e3f3f4216805aab2d11be6c0faaa58ec07f52019"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "7773d676a6e4"}, @ETHTOOL_A_BITSET_MASK={0xe, 0x5, "55a23b360e3899c243c7"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4)

0s ago: executing program 1 (id=309):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40005)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r5, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x2f}}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6(0xa, 0x80001, 0x0) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (async)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (async)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) (async)
prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40005) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r5, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x2f}}, 0x10) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r2, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts.
[   54.826215][ T5818] cgroup: Unknown subsys name 'net'
[   54.948372][ T5818] cgroup: Unknown subsys name 'cpuset'
[   54.956147][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.210479][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.917052][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.951143][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.964591][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.975195][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.982857][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   59.990613][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.033157][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.042463][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.052791][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.065549][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.073195][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   60.084528][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.113876][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.122230][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.130154][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.145383][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.152960][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   60.161104][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.176507][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   60.197278][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   60.225617][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   60.230806][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   60.244476][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   60.253598][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   60.261342][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   60.279683][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   60.287870][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   60.295389][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   60.303430][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   60.311756][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   60.439253][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   60.576299][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   60.632532][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.639807][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.648532][ T5828] bridge_slave_0: entered allmulticast mode
[   60.655234][ T5828] bridge_slave_0: entered promiscuous mode
[   60.663596][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.671091][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.678472][ T5828] bridge_slave_1: entered allmulticast mode
[   60.685222][ T5828] bridge_slave_1: entered promiscuous mode
[   60.760226][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.787316][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.842509][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.849950][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.857317][ T5832] bridge_slave_0: entered allmulticast mode
[   60.863824][ T5832] bridge_slave_0: entered promiscuous mode
[   60.872149][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.879711][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.887351][ T5832] bridge_slave_1: entered allmulticast mode
[   60.894278][ T5832] bridge_slave_1: entered promiscuous mode
[   60.900970][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   60.921858][ T5828] team0: Port device team_slave_0 added
[   60.950561][ T5828] team0: Port device team_slave_1 added
[   61.013405][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.021094][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.047981][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.061550][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.075198][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.096667][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.103619][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.129878][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.141171][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   61.184698][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   61.208727][ T5832] team0: Port device team_slave_0 added
[   61.216628][ T5832] team0: Port device team_slave_1 added
[   61.229610][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.236882][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.244008][ T5841] bridge_slave_0: entered allmulticast mode
[   61.251258][ T5841] bridge_slave_0: entered promiscuous mode
[   61.258609][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.265754][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.272951][ T5841] bridge_slave_1: entered allmulticast mode
[   61.280117][ T5841] bridge_slave_1: entered promiscuous mode
[   61.337313][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.344361][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.371125][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.421363][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.428445][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.454581][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.472902][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.489960][ T5828] hsr_slave_0: entered promiscuous mode
[   61.496492][ T5828] hsr_slave_1: entered promiscuous mode
[   61.518710][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.531594][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.540012][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.547527][ T5838] bridge_slave_0: entered allmulticast mode
[   61.554127][ T5838] bridge_slave_0: entered promiscuous mode
[   61.596505][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.603671][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.611543][ T5838] bridge_slave_1: entered allmulticast mode
[   61.619108][ T5838] bridge_slave_1: entered promiscuous mode
[   61.628265][ T5832] hsr_slave_0: entered promiscuous mode
[   61.636279][ T5832] hsr_slave_1: entered promiscuous mode
[   61.642281][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.650263][ T5832] Cannot create hsr debugfs directory
[   61.672173][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.679320][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.686906][ T5835] bridge_slave_0: entered allmulticast mode
[   61.693462][ T5835] bridge_slave_0: entered promiscuous mode
[   61.701879][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.709287][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.716554][ T5835] bridge_slave_1: entered allmulticast mode
[   61.723312][ T5835] bridge_slave_1: entered promiscuous mode
[   61.753889][ T5841] team0: Port device team_slave_0 added
[   61.764524][ T5841] team0: Port device team_slave_1 added
[   61.793357][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.825929][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.844586][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.861346][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.868430][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.895180][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.908132][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.931557][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.938643][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.965982][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.001692][ T5838] team0: Port device team_slave_0 added
[   62.027457][ T5838] team0: Port device team_slave_1 added
[   62.055539][ T5835] team0: Port device team_slave_0 added
[   62.078816][ T5841] hsr_slave_0: entered promiscuous mode
[   62.085613][ T5844] Bluetooth: hci0: command tx timeout
[   62.092019][ T5841] hsr_slave_1: entered promiscuous mode
[   62.098320][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.106577][ T5841] Cannot create hsr debugfs directory
[   62.113477][ T5835] team0: Port device team_slave_1 added
[   62.160138][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.167553][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.170190][ T5844] Bluetooth: hci1: command tx timeout
[   62.201797][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.234409][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.241377][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.267393][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.289577][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.299573][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.326290][ T5844] Bluetooth: hci2: command tx timeout
[   62.331778][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.334233][ T5844] Bluetooth: hci3: command tx timeout
[   62.350417][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.357629][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.383641][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.409978][ T5844] Bluetooth: hci4: command tx timeout
[   62.467602][ T5835] hsr_slave_0: entered promiscuous mode
[   62.474500][ T5835] hsr_slave_1: entered promiscuous mode
[   62.480546][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.489420][ T5835] Cannot create hsr debugfs directory
[   62.522652][ T5838] hsr_slave_0: entered promiscuous mode
[   62.529410][ T5838] hsr_slave_1: entered promiscuous mode
[   62.535728][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.543274][ T5838] Cannot create hsr debugfs directory
[   62.632844][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.668208][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.677695][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.697191][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.804338][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.813713][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.851848][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.863440][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.873098][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.893839][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.908603][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.926816][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   62.961050][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.003436][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.012361][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.022398][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.088063][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.107456][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.117089][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.130225][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.147939][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.220383][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   63.255006][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.262306][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.285384][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.332924][  T129] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.340064][  T129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.353280][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   63.362947][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.397684][  T129] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.404817][  T129] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.441940][  T129] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.449057][  T129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.468122][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   63.479780][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.491303][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.529266][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.536630][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.572003][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   63.589881][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   63.598217][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.605357][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.652431][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.659616][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.690894][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.698105][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.716008][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.723140][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.746001][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.753131][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.852969][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.935831][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.027994][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.132351][ T5832] veth0_vlan: entered promiscuous mode
[   64.164970][ T5844] Bluetooth: hci0: command tx timeout
[   64.200541][ T5832] veth1_vlan: entered promiscuous mode
[   64.209037][ T5828] veth0_vlan: entered promiscuous mode
[   64.244486][ T5844] Bluetooth: hci1: command tx timeout
[   64.249789][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.262092][ T5828] veth1_vlan: entered promiscuous mode
[   64.277615][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.299333][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.351168][ T5832] veth0_macvtap: entered promiscuous mode
[   64.396366][ T5832] veth1_macvtap: entered promiscuous mode
[   64.405006][ T5844] Bluetooth: hci3: command tx timeout
[   64.405814][ T5830] Bluetooth: hci2: command tx timeout
[   64.428516][ T5828] veth0_macvtap: entered promiscuous mode
[   64.456047][ T5835] veth0_vlan: entered promiscuous mode
[   64.472585][ T5828] veth1_macvtap: entered promiscuous mode
[   64.485165][ T5830] Bluetooth: hci4: command tx timeout
[   64.516054][ T5835] veth1_vlan: entered promiscuous mode
[   64.542691][ T5838] veth0_vlan: entered promiscuous mode
[   64.563436][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.576731][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.600696][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.611818][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.624365][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.633586][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.642660][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.652090][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.661441][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.687938][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.699108][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.710469][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.740533][ T5838] veth1_vlan: entered promiscuous mode
[   64.751894][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.762307][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.771841][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.780764][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.800623][ T5835] veth0_macvtap: entered promiscuous mode
[   64.827830][ T5835] veth1_macvtap: entered promiscuous mode
[   64.875586][ T5841] veth0_vlan: entered promiscuous mode
[   64.892735][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.905419][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.915438][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.926168][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.937378][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.968069][ T5841] veth1_vlan: entered promiscuous mode
[   64.985360][ T5838] veth0_macvtap: entered promiscuous mode
[   64.995851][ T5838] veth1_macvtap: entered promiscuous mode
[   65.008743][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.019610][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.029741][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.041248][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.052446][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.070456][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.079526][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.088519][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.097292][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.109357][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.123548][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.136162][ T5841] veth0_macvtap: entered promiscuous mode
[   65.159264][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.159832][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.171622][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.183342][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.195225][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.207434][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.217999][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.228481][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.239386][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.248051][ T5841] veth1_macvtap: entered promiscuous mode
[   65.278634][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.290516][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.301153][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.311654][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.322694][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.333259][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.344016][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.375631][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.384610][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.393318][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.403334][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.418469][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.427037][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.439011][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.451330][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.461555][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.472186][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.482227][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.492901][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.502911][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.513568][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.526201][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.551080][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.562358][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.574286][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.584967][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.595101][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.606091][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.616415][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.627360][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.640006][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.673417][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.683745][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.684453][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.693119][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.708463][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.709098][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.730035][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.761490][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.777353][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.962662][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.962814][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.978453][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.000303][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.059674][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.072903][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.165986][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.173849][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.210054][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   66.245183][ T5830] Bluetooth: hci0: command tx timeout
[   66.254626][   T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   66.271186][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.279598][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.326324][ T5830] Bluetooth: hci1: command tx timeout
[   66.461779][   T25] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[   66.481761][   T25] usb 3-1: config 0 has no interface number 0
[   66.504360][ T5830] Bluetooth: hci2: command tx timeout
[   66.509809][ T5830] Bluetooth: hci3: command tx timeout
[   66.533350][   T25] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.566815][ T5830] Bluetooth: hci4: command tx timeout
[   66.597800][   T25] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.669922][   T25] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[   66.682120][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.736104][   T25] usb 3-1: config 0 descriptor??
[   66.795042][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   66.819046][   T29] audit: type=1326 audit(1730599503.729:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5930 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c17e719 code=0x7fc00000
[   66.853246][   T29] audit: type=1326 audit(1730599503.749:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5930 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd21c17e719 code=0x7fc00000
[   66.947733][ T5876] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[   66.959362][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.968373][   T25] uclogic 0003:28BD:0905.0001: Interface probing failed: -22
[   66.987419][   T25] uclogic 0003:28BD:0905.0001: interface is invalid, ignoring
[   66.988976][ T5876] usb 4-1: Product: syz
[   67.009832][ T5876] usb 4-1: Manufacturer: syz
[   67.015975][ T5876] usb 4-1: SerialNumber: syz
[   67.036606][ T5876] usb 4-1: config 0 descriptor??
[   67.070547][ T5876] cypress_m8 4-1:0.0: Nokia CA-42 V2 Adapter converter detected
[   67.085032][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'.
[   67.092544][ T5876] nokiaca42v2 ttyUSB0: required endpoint is missing
[   67.159771][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.173413][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.208055][   T25] usb 3-1: USB disconnect, device number 2
[   67.277082][ T5879] usb 4-1: USB disconnect, device number 2
[   67.298154][ T5879] cypress_m8 4-1:0.0: device disconnected
[   67.302154][   T29] audit: type=1326 audit(1730599504.209:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5930 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c17e719 code=0x7fc00000
[   67.356368][   T29] audit: type=1326 audit(1730599504.209:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5930 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd21c17e719 code=0x7fc00000
[   67.994349][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   68.425587][ T5830] Bluetooth: hci0: command tx timeout
[   68.430748][ T5844] Bluetooth: hci1: command tx timeout
[   68.566098][ T5844] Bluetooth: hci3: command tx timeout
[   68.566616][ T5830] Bluetooth: hci2: command tx timeout
[   68.613489][    T9] usb 5-1: Using ep0 maxpacket: 16
[   68.646094][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   68.656219][ T5830] Bluetooth: hci4: command tx timeout
[   68.663818][    T9] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[   68.673188][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.681369][    T9] usb 5-1: Product: syz
[   68.685860][    T9] usb 5-1: Manufacturer: syz
[   68.690484][    T9] usb 5-1: SerialNumber: syz
[   68.698610][    T9] usb 5-1: config 0 descriptor??
[   68.708554][    T9] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22
[   68.912260][   T25] usb 5-1: USB disconnect, device number 2
[   69.021917][ T5979] netlink: 'syz.2.20': attribute type 3 has an invalid length.
[   69.030009][ T5979] netlink: 'syz.2.20': attribute type 11 has an invalid length.
[   69.038142][ T5979] netlink: 128512 bytes leftover after parsing attributes in process `syz.2.20'.
[   70.016927][   T29] audit: type=1326 audit(1730599506.909:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21c17e719 code=0x7ffc0000
[   70.064570][   T29] audit: type=1326 audit(1730599506.929:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd21c17d0b0 code=0x7ffc0000
[   70.079510][ T5997] input: syz0 as /devices/virtual/input/input6
[   70.101402][   T29] audit: type=1326 audit(1730599506.929:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd21c17e31b code=0x7ffc0000
[   70.139897][   T29] audit: type=1326 audit(1730599506.929:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd21c17e31b code=0x7ffc0000
[   70.194277][   T29] audit: type=1326 audit(1730599506.959:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd21c17e31b code=0x7ffc0000
[   70.275211][ T5918] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   70.313428][   T29] audit: type=1326 audit(1730599506.959:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.4.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd21c17e31b code=0x7ffc0000
[   70.454325][ T5918] usb 5-1: Using ep0 maxpacket: 8
[   70.473696][ T5918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   70.528087][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   70.586538][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   70.626437][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   70.670050][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   70.679231][ T6012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29'.
[   70.702126][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.956808][ T5918] usb 5-1: GET_CAPABILITIES returned 0
[   70.967556][ T5918] usbtmc 5-1:16.0: can't read capabilities
[   71.608592][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[   71.643891][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[   71.871382][  T970] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   71.877933][ T5918] usb 5-1: USB disconnect, device number 3
[   72.064376][  T970] usb 2-1: Using ep0 maxpacket: 8
[   72.092940][  T970] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   72.114249][  T970] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   72.124027][  T970] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   72.141912][  T970] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   72.160841][  T970] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[   72.189849][  T970] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   72.229643][  T970] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   72.251568][  T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.307549][  T970] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[   72.353424][ T6043] Illegal XDP return value 4294967274 on prog  (id 4) dev N/A, expect packet loss!
[   72.519078][  T970] usb 2-1: USB disconnect, device number 2
[   72.528818][ T6049] syz.4.38: attempt to access beyond end of device
[   72.528818][ T6049] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0
[   72.542372][ T6049] befs: (nbd4): unable to read superblock
[   73.331931][ T6063] netlink: 112 bytes leftover after parsing attributes in process `syz.4.40'.
[   74.016165][  T970] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   74.124997][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'.
[   74.654956][  T970] usb 4-1: Using ep0 maxpacket: 8
[   74.678505][  T970] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   74.691515][  T970] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   74.704523][  T970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   74.727921][  T970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   74.799557][  T970] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   74.820225][  T970] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   74.830831][  T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.063649][  T970] usb 4-1: usb_control_msg returned -32
[   75.069747][  T970] usbtmc 4-1:16.0: can't read capabilities
[   75.254812][ T5918] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   76.050749][ T5907] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   76.146231][ T5918] usb 3-1: Using ep0 maxpacket: 32
[   76.162487][ T5918] usb 3-1: no configurations
[   76.208866][ T5918] usb 3-1: can't read configurations, error -22
[   76.254252][ T5907] usb 2-1: Using ep0 maxpacket: 32
[   76.272777][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   76.305634][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.310409][   T25] usb 4-1: USB disconnect, device number 4
[   76.332565][ T5907] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[   76.357111][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15
[   76.385805][ T5907] usb 2-1: Product: syz
[   76.393267][ T5907] usb 2-1: Manufacturer: syz
[   76.398202][ T5918] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   76.416994][ T5907] usb 2-1: SerialNumber: syz
[   76.456301][ T5907] usb 2-1: config 0 descriptor??
[   76.483106][ T5907] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   76.574850][ T5907] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[   76.584859][ T5918] usb 3-1: Using ep0 maxpacket: 32
[   76.592549][ T5918] usb 3-1: no configurations
[   76.602635][ T5918] usb 3-1: can't read configurations, error -22
[   76.620304][ T5918] usb usb3-port1: attempt power cycle
[   76.697100][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.718567][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   76.743957][   T46] cfg80211: failed to load regulatory.db
[   76.773918][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.802310][ T5907] usb 2-1: USB disconnect, device number 3
[   77.014216][ T5918] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   77.045032][ T5918] usb 3-1: Using ep0 maxpacket: 32
[   77.061699][ T5918] usb 3-1: no configurations
[   77.073606][ T5918] usb 3-1: can't read configurations, error -22
[   77.099099][ T6099] syz.4.52 (6099): drop_caches: 2
[   77.115491][ T6099] syz.4.52 (6099): drop_caches: 2
[   77.226662][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   77.285029][ T5918] usb 3-1: Using ep0 maxpacket: 32
[   77.309919][ T5918] usb 3-1: no configurations
[   77.327709][ T5918] usb 3-1: can't read configurations, error -22
[   77.363866][ T5918] usb usb3-port1: unable to enumerate USB device
[   77.674173][    T9] usb 1-1: Using ep0 maxpacket: 16
[   77.728438][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   77.741532][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   77.750694][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.766991][    T9] usb 1-1: config 0 descriptor??
[   77.787405][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7
[   77.810692][ T6110] netlink: 'syz.1.55': attribute type 11 has an invalid length.
[   77.990072][ T6090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.103987][ T5191] bcm5974 1-1:0.0: could not read from device
[   78.130170][ T5191] bcm5974 1-1:0.0: could not read from device
[   78.275575][    T9] bcm5974 1-1:0.0: could not read from device
[   78.336933][ T6127] netlink: 124 bytes leftover after parsing attributes in process `syz.4.64'.
[   78.354309][ T6129] netlink: 124 bytes leftover after parsing attributes in process `syz.4.64'.
[   78.620636][ T6140] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   78.775980][    T9] input: failed to attach handler mousedev to device input7, error: -5
[   78.807989][    T9] usb 1-1: USB disconnect, device number 2
[   78.834210][  T970] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   79.003255][  T970] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   79.023965][  T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.416070][  T970] usb 4-1: config 0 descriptor??
[   79.441763][  T970] cp210x 4-1:0.0: cp210x converter detected
[   79.519482][ T6147] overlayfs: missing 'workdir'
[   79.579925][ T6139] ALSA: mixer_oss: invalid OSS volume 'j'
[   79.716007][ T6152] vlan2: entered promiscuous mode
[   79.732340][ T6152] veth1_to_bond: entered promiscuous mode
[   79.762378][ T6152] vlan2: entered allmulticast mode
[   79.777440][ T6152] veth1_to_bond: entered allmulticast mode
[   79.841035][ T6152] veth1_to_bond: left allmulticast mode
[   79.849792][ T6152] veth1_to_bond: left promiscuous mode
[   79.874252][  T970] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[   79.922676][  T970] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71
[   79.944238][  T970] cp210x 4-1:0.0: GPIO initialisation failed: -71
[   79.967049][  T970] usb 4-1: cp210x converter now attached to ttyUSB0
[   79.989520][  T970] usb 4-1: USB disconnect, device number 5
[   80.010982][  T970] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   80.036686][ T6163] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   80.043724][  T970] cp210x 4-1:0.0: device disconnected
[   80.048701][ T6164] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   80.159482][ T6169] random: crng reseeded on system resumption
[   80.588329][ T6184] warning: `syz.3.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.655660][ T6186] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 2, id = 0
[   80.975873][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   81.216844][ T5876] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   81.216892][ T5907] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   81.252899][    T9] usb 5-1: Using ep0 maxpacket: 16
[   81.259668][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   81.434270][ T5907] usb 3-1: Using ep0 maxpacket: 16
[   81.458333][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.488182][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   81.492133][ T5907] usb 3-1: config 0 interface 0 has no altsetting 0
[   81.498184][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.514432][    T9] usb 5-1: config 0 descriptor??
[   81.527078][    T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[   81.698798][ T5876] usb 4-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config
[   81.729081][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[   81.801857][ T5876] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.847864][ T5907] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[   81.849937][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.864200][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.884201][ T5907] usb 3-1: Product: syz
[   81.894302][ T5907] usb 3-1: Manufacturer: syz
[   81.904136][ T5907] usb 3-1: SerialNumber: syz
[   81.907184][ T5876] usb 4-1: config 0 descriptor??
[   81.920270][ T5907] usb 3-1: config 0 descriptor??
[   81.937743][ T5907] hub 3-1:0.0: bad descriptor, ignoring hub
[   81.956418][ T5907] hub 3-1:0.0: probe with driver hub failed with error -5
[   81.981451][ T5876] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   81.992948][ T5907] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   82.055706][   T35] usb 3-1: Failed to submit usb control message: -71
[   82.081695][   T35] usb 3-1: unable to send the bmi data to the device: -71
[   82.122180][   T35] usb 3-1: unable to get target info from device
[   82.169655][   T35] usb 3-1: could not get target info (-71)
[   82.188428][   T35] usb 3-1: could not probe fw (-71)
[   82.308771][ T5876] usb 3-1: USB disconnect, device number 7
[   82.543196][ T6214] FAULT_INJECTION: forcing a failure.
[   82.543196][ T6214] name failslab, interval 1, probability 0, space 0, times 1
[   82.572964][ T6214] CPU: 1 UID: 0 PID: 6214 Comm: syz.1.85 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[   82.583523][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   82.593616][ T6214] Call Trace:
[   82.596923][ T6214]  <TASK>
[   82.599878][ T6214]  dump_stack_lvl+0x241/0x360
[   82.604607][ T6214]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.609829][ T6214]  ? __pfx__printk+0x10/0x10
[   82.614447][ T6214]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[   82.615476][ T6215] netlink: 'syz.3.79': attribute type 6 has an invalid length.
[   82.620436][ T6214]  ? __pfx___might_resched+0x10/0x10
[   82.620471][ T6214]  should_fail_ex+0x3b0/0x4e0
[   82.620496][ T6214]  should_failslab+0xac/0x100
[   82.620518][ T6214]  ? __alloc_skb+0x1c3/0x440
[   82.620539][ T6214]  kmem_cache_alloc_node_noprof+0x71/0x320
[   82.620562][ T6214]  __alloc_skb+0x1c3/0x440
[   82.620587][ T6214]  ? __pfx___alloc_skb+0x10/0x10
[   82.620610][ T6214]  ? netlink_autobind+0xd6/0x2f0
[   82.620630][ T6214]  ? netlink_autobind+0x2b0/0x2f0
[   82.620654][ T6214]  netlink_sendmsg+0x638/0xcb0
[   82.620686][ T6214]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.620718][ T6214]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.620738][ T6214]  __sock_sendmsg+0x221/0x270
[   82.620760][ T6214]  ____sys_sendmsg+0x52a/0x7e0
[   82.620798][ T6214]  ? __pfx_____sys_sendmsg+0x10/0x10
[   82.620835][ T6214]  __sys_sendmsg+0x292/0x380
[   82.620860][ T6214]  ? __pfx___sys_sendmsg+0x10/0x10
[   82.620893][ T6214]  ? __pfx_vfs_write+0x10/0x10
[   82.620940][ T6214]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   82.620967][ T6214]  ? do_syscall_64+0x100/0x230
[   82.620991][ T6214]  ? do_syscall_64+0xb6/0x230
[   82.621015][ T6214]  do_syscall_64+0xf3/0x230
[   82.621035][ T6214]  ? clear_bhb_loop+0x35/0x90
[   82.621059][ T6214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.621089][ T6214] RIP: 0033:0x7f06ef57e719
[   82.752787][ T6214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.772425][ T6214] RSP: 002b:00007f06f03ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.780870][ T6214] RAX: ffffffffffffffda RBX: 00007f06ef735f80 RCX: 00007f06ef57e719
[   82.788861][ T6214] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006
[   82.796849][ T6214] RBP: 00007f06f03ff090 R08: 0000000000000000 R09: 0000000000000000
[   82.804838][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.812828][ T6214] R13: 0000000000000000 R14: 00007f06ef735f80 R15: 00007ffc81c32e08
[   82.820836][ T6214]  </TASK>
[   83.081428][   T29] kauditd_printk_skb: 41 callbacks suppressed
[   83.081444][   T29] audit: type=1326 audit(1730599519.991:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6220 comm="syz.0.87" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c3cd7e719 code=0x0
[   83.313145][ T5191] bcm5974 5-1:0.0: could not read from device
[   83.314347][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'.
[   83.332072][    T9] bcm5974 5-1:0.0: could not read from device
[   83.349578][ T5191] bcm5974 5-1:0.0: could not read from device
[   83.360233][    T9] input: failed to attach handler mousedev to device input8, error: -5
[   83.390797][ T5191] bcm5974 5-1:0.0: could not read from device
[   83.402264][    T9] usb 5-1: USB disconnect, device number 4
[   83.459112][ T6231] mmap: syz.1.90 (6231) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   84.016178][    T9] usb 4-1: USB disconnect, device number 6
[   84.824235][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   84.969832][ T6270] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET)
[   85.150980][    T9] usb 2-1: Using ep0 maxpacket: 16
[   85.159442][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   85.173529][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   85.183759][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.195550][    T9] usb 2-1: config 0 descriptor??
[   85.210252][    T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9
[   86.288103][ T6280] openvswitch: netlink: Actions may not be safe on all matching packets
[   87.515772][ T6302] overlayfs: missing 'workdir'
[   88.512932][ T6329] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.122'.
[   88.534565][ T6329] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[   88.678742][   T29] audit: type=1800 audit(1730599525.590:54): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.122" name="/" dev="fuse" ino=1 res=0 errno=0
[   88.954317][ T5907] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   89.126996][ T5907] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   89.137232][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.180314][ T5907] usb 5-1: Product: syz
[   89.190445][ T5907] usb 5-1: Manufacturer: syz
[   89.201710][ T5907] usb 5-1: SerialNumber: syz
[   89.231601][ T5907] usb 5-1: config 0 descriptor??
[   89.645410][ T5907] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[   89.691130][ T5907] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   89.708975][ T5907] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19)
[   89.814202][   T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   90.005786][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8
[   90.030808][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   90.058296][   T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00
[   90.080644][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.114952][   T25] usb 3-1: config 0 descriptor??
[   90.138170][   T25] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10
[   90.245505][ T5191] bcm5974 2-1:0.0: could not read from device
[   90.260030][    T9] bcm5974 2-1:0.0: could not read from device
[   90.269678][    T9] input: failed to attach handler mousedev to device input9, error: -5
[   90.306750][ T5191] bcm5974 2-1:0.0: could not read from device
[   90.326794][    T9] usb 2-1: USB disconnect, device number 4
[   90.334949][ T5191] bcm5974 2-1:0.0: could not read from device
[   90.359547][    C1] raw-gadget.2 gadget.2: ignoring, device is not running
[   90.367159][ T5191] bcm5974 3-1:0.0: could not read from device
[   90.389529][    C1] raw-gadget.2 gadget.2: ignoring, device is not running
[   90.411655][ T5191] bcm5974 3-1:0.0: could not read from device
[   90.418475][   T25] usb 3-1: USB disconnect, device number 8
[   90.868992][ T5907] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   91.214396][ T5907] usb 1-1: config index 0 descriptor too short (expected 4114, got 18)
[   91.396651][ T5907] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[   91.409943][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.420408][ T5907] usb 1-1: Product: syz
[   91.428311][ T5907] usb 1-1: Manufacturer: syz
[   91.438736][ T5907] usb 1-1: SerialNumber: syz
[   91.502745][ T5907] usb 1-1: config 0 descriptor??
[   91.546509][ T6359] FAULT_INJECTION: forcing a failure.
[   91.546509][ T6359] name failslab, interval 1, probability 0, space 0, times 0
[   91.559389][ T6359] CPU: 0 UID: 0 PID: 6359 Comm: syz.1.132 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[   91.570005][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   91.580082][ T6359] Call Trace:
[   91.583428][ T6359]  <TASK>
[   91.586386][ T6359]  dump_stack_lvl+0x241/0x360
[   91.591091][ T6359]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.596306][ T6359]  ? __pfx__printk+0x10/0x10
[   91.600921][ T6359]  should_fail_ex+0x3b0/0x4e0
[   91.605599][ T6359]  ? skb_clone+0x20c/0x390
[   91.610025][ T6359]  should_failslab+0xac/0x100
[   91.614731][ T6359]  ? skb_clone+0x20c/0x390
[   91.619167][ T6359]  kmem_cache_alloc_noprof+0x6c/0x2a0
[   91.624547][ T6359]  skb_clone+0x20c/0x390
[   91.628793][ T6359]  ? dev_queue_xmit_nit+0x220/0xc10
[   91.633998][ T6359]  dev_queue_xmit_nit+0x419/0xc10
[   91.639029][ T6359]  ? dev_queue_xmit_nit+0x2b/0xc10
[   91.644151][ T6359]  ? validate_xmit_skb+0x977/0xf90
[   91.649266][ T6359]  dev_hard_start_xmit+0x15f/0x7e0
[   91.654390][ T6359]  ? __pfx_validate_xmit_skb+0x10/0x10
[   91.659856][ T6359]  __dev_queue_xmit+0x1b11/0x3ed0
[   91.664886][ T6359]  ? kasan_save_track+0x51/0x80
[   91.669747][ T6359]  ? do_syscall_64+0xf3/0x230
[   91.674426][ T6359]  ? __dev_queue_xmit+0x2da/0x3ed0
[   91.679542][ T6359]  ? __pfx___dev_queue_xmit+0x10/0x10
[   91.684941][ T6359]  ? __copy_skb_header+0x437/0x5b0
[   91.690057][ T6359]  ? __asan_memcpy+0x40/0x70
[   91.694651][ T6359]  ? __copy_skb_header+0x437/0x5b0
[   91.699777][ T6359]  ? __skb_clone+0x454/0x6c0
[   91.704380][ T6359]  ? skb_clone+0x240/0x390
[   91.708805][ T6359]  __netlink_deliver_tap+0x54d/0x7c0
[   91.714121][ T6359]  ? netlink_deliver_tap+0x2e/0x1b0
[   91.719327][ T6359]  netlink_deliver_tap+0x19d/0x1b0
[   91.724437][ T6359]  netlink_unicast+0x7c4/0x990
[   91.729204][ T6359]  ? __pfx_netlink_unicast+0x10/0x10
[   91.734494][ T6359]  ? __virt_addr_valid+0x183/0x530
[   91.739620][ T6359]  ? __check_object_size+0x48e/0x900
[   91.744914][ T6359]  netlink_sendmsg+0x8e4/0xcb0
[   91.749688][ T6359]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.754980][ T6359]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.760260][ T6359]  __sock_sendmsg+0x221/0x270
[   91.764947][ T6359]  ____sys_sendmsg+0x52a/0x7e0
[   91.769726][ T6359]  ? __pfx_____sys_sendmsg+0x10/0x10
[   91.775030][ T6359]  __sys_sendmsg+0x292/0x380
[   91.779629][ T6359]  ? __pfx___sys_sendmsg+0x10/0x10
[   91.784748][ T6359]  ? __pfx_vfs_write+0x10/0x10
[   91.789528][ T6359]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   91.795858][ T6359]  ? do_syscall_64+0x100/0x230
[   91.800628][ T6359]  ? do_syscall_64+0xb6/0x230
[   91.805316][ T6359]  do_syscall_64+0xf3/0x230
[   91.809842][ T6359]  ? clear_bhb_loop+0x35/0x90
[   91.814532][ T6359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.820448][ T6359] RIP: 0033:0x7f06ef57e719
[   91.824860][ T6359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.844476][ T6359] RSP: 002b:00007f06f03ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.852898][ T6359] RAX: ffffffffffffffda RBX: 00007f06ef735f80 RCX: 00007f06ef57e719
[   91.860874][ T6359] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006
[   91.868845][ T6359] RBP: 00007f06f03ff090 R08: 0000000000000000 R09: 0000000000000000
[   91.876819][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.884800][ T6359] R13: 0000000000000000 R14: 00007f06ef735f80 R15: 00007ffc81c32e08
[   91.892791][ T6359]  </TASK>
[   91.941564][   T46] usb 5-1: USB disconnect, device number 5
[   92.204647][ T6372] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.412087][ T5907] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   92.413911][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   92.435012][ T5907] asix 1-1:0.0: probe with driver asix failed with error -71
[   92.644269][    T9] usb 2-1: Using ep0 maxpacket: 16
[   92.665060][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.685558][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.722988][ T5907] usb 1-1: USB disconnect, device number 3
[   92.733741][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.284438][   T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   93.374682][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   93.471351][    T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[   93.471714][   T25] usb 4-1: too many configurations: 118, using maximum allowed: 8
[   93.482068][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.520007][    T9] usb 2-1: config 0 descriptor??
[   93.528425][   T25] usb 4-1: unable to read config index 0 descriptor/start: -61
[   93.540810][   T25] usb 4-1: can't read configurations, error -61
[   93.617801][    T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11
[   93.676032][ T5191] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   93.717855][ T5191] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   93.757604][ T5191] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   93.764164][ T5907] usb 1-1: Using ep0 maxpacket: 16
[   93.771827][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.783453][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.794427][   T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   93.806389][ T5911] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   93.814440][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   93.827409][ T5907] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   94.290122][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.315147][ T5907] usb 1-1: config 0 descriptor??
[   94.410614][ T5191] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   94.444227][   T25] usb 4-1: too many configurations: 118, using maximum allowed: 8
[   94.498532][   T25] usb 4-1: unable to read config index 0 descriptor/start: -61
[   94.526960][   T25] usb 4-1: can't read configurations, error -61
[   94.595882][ T6396] sp0: Synchronizing with TNC
[   94.597704][   T25] usb usb4-port1: attempt power cycle
[   94.694799][ T5191] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   94.706392][ T5191] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   94.753690][ T5907] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input12
[   95.648483][    T9] usb 2-1: USB disconnect, device number 5
[   95.746076][ T5907] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   95.767769][ T5907] usb 1-1: USB disconnect, device number 4
[   95.794153][   T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   95.988519][ T6410] netlink: 188 bytes leftover after parsing attributes in process `syz.2.146'.
[   96.023671][   T25] usb 4-1: device not accepting address 9, error -71
[   96.632351][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'.
[   97.184796][ T6430] netlink: 'syz.1.153': attribute type 10 has an invalid length.
[   97.212665][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.221292][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.282150][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.289350][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.297313][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.304481][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.344326][ T6430] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   97.403675][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   97.469089][ T6433] bridge_slave_1: left allmulticast mode
[   97.506329][ T6433] bridge_slave_1: left promiscuous mode
[   97.513208][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.531949][ T6433] bridge_slave_0: left allmulticast mode
[   97.537880][ T6433] bridge_slave_0: left promiscuous mode
[   97.548552][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.335339][   T29] audit: type=1326 audit(1730599535.240:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6435 comm="syz.2.154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90d997e719 code=0x0
[   98.373275][ T6433] bond0: (slave bridge0): Releasing backup interface
[   98.758396][ T6454] tmpfs: Bad value for 'size'
[   99.916570][ T6478] netlink: 'syz.1.165': attribute type 2 has an invalid length.
[   99.925061][   T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   99.968950][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'.
[  101.214104][   T25] usb 3-1: Using ep0 maxpacket: 8
[  101.220724][   T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  101.229357][   T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.239373][   T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  101.258414][   T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  101.270291][   T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.283969][   T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  101.293279][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.306980][ T6493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.169'.
[  101.324244][ T5837] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  101.377050][ T6496] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  101.464531][ T5837] usb 2-1: device descriptor read/64, error -71
[  101.506431][   T25] usb 3-1: usb_control_msg returned -32
[  101.514407][   T25] usbtmc 3-1:16.0: can't read capabilities
[  101.664206][ T5907] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  101.704240][ T5837] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  101.754541][ T5876] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  101.814128][ T5907] usb 5-1: Using ep0 maxpacket: 8
[  101.821950][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  101.838708][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  101.851835][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  101.864136][ T5837] usb 2-1: device descriptor read/64, error -71
[  101.882561][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  101.902930][ T5907] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13
[  101.913705][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.927715][ T5907] usb 5-1: Product: syz
[  101.931981][ T5907] usb 5-1: Manufacturer: syz
[  101.938138][ T5907] usb 5-1: SerialNumber: syz
[  101.951997][ T5907] usb 5-1: config 0 descriptor??
[  101.974447][ T5837] usb usb2-port1: attempt power cycle
[  101.980556][ T5907] mct_u232 5-1:0.0: MCT U232 converter detected
[  101.999286][ T5907] mct_u232 ttyUSB0: expected endpoint missing
[  102.191394][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.222047][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.259889][ T5879] usb 5-1: USB disconnect, device number 6
[  102.268799][ T5879] mct_u232 5-1:0.0: device disconnected
[  102.334231][ T5837] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  102.374884][ T5837] usb 2-1: device descriptor read/8, error -71
[  102.565095][ T6520] block nbd4: Device being setup by another task
[  102.626037][ T5837] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  102.654874][ T5837] usb 2-1: device descriptor read/8, error -71
[  102.676805][ T6520] block nbd4: shutting down sockets
[  102.776085][ T5837] usb usb2-port1: unable to enumerate USB device
[  102.923013][ T5837] usb 3-1: USB disconnect, device number 9
[  103.013382][ T6528] UBIFS error (pid: 6528): cannot open "(null)", error -22
[  103.173647][ T6529] ipvlan2: entered promiscuous mode
[  103.238377][ T6529] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  103.270858][ T6529] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  103.358389][ T6548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.179'.
[  103.476159][ T6538] serio: Serial port ptm1
[  103.522858][ T6553] capability: warning: `syz.3.182' uses deprecated v2 capabilities in a way that may be insecure
[  103.566575][ T6555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.183'.
[  103.587511][ T6555] FAULT_INJECTION: forcing a failure.
[  103.587511][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  103.602628][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.0.183 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  103.613266][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  103.623340][ T6555] Call Trace:
[  103.626623][ T6555]  <TASK>
[  103.629566][ T6555]  dump_stack_lvl+0x241/0x360
[  103.634253][ T6555]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.639453][ T6555]  ? __pfx__printk+0x10/0x10
[  103.644049][ T6555]  ? snprintf+0xda/0x120
[  103.648307][ T6555]  should_fail_ex+0x3b0/0x4e0
[  103.652987][ T6555]  _copy_to_user+0x31/0xb0
[  103.657402][ T6555]  simple_read_from_buffer+0xca/0x150
[  103.662776][ T6555]  proc_fail_nth_read+0x1e9/0x250
[  103.667803][ T6555]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  103.673351][ T6555]  ? rw_verify_area+0x55e/0x6f0
[  103.678199][ T6555]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  103.683750][ T6555]  vfs_read+0x1fc/0xb70
[  103.687919][ T6555]  ? fdget_pos+0x24e/0x320
[  103.692336][ T6555]  ? __pfx_vfs_read+0x10/0x10
[  103.697015][ T6555]  ? __fget_files+0x3f3/0x470
[  103.701704][ T6555]  ? fdget_pos+0x24e/0x320
[  103.706129][ T6555]  ksys_read+0x183/0x2b0
[  103.710377][ T6555]  ? __pfx_ksys_read+0x10/0x10
[  103.715148][ T6555]  ? do_syscall_64+0x100/0x230
[  103.719922][ T6555]  ? do_syscall_64+0xb6/0x230
[  103.724600][ T6555]  do_syscall_64+0xf3/0x230
[  103.729105][ T6555]  ? clear_bhb_loop+0x35/0x90
[  103.733781][ T6555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.739680][ T6555] RIP: 0033:0x7f5c3cd7d15c
[  103.744105][ T6555] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  103.763710][ T6555] RSP: 002b:00007f5c3dba7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  103.772134][ T6555] RAX: ffffffffffffffda RBX: 00007f5c3cf35f80 RCX: 00007f5c3cd7d15c
[  103.780105][ T6555] RDX: 000000000000000f RSI: 00007f5c3dba70a0 RDI: 0000000000000004
[  103.788072][ T6555] RBP: 00007f5c3dba7090 R08: 0000000000000000 R09: 0000000000000000
[  103.796038][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.804005][ T6555] R13: 0000000000000000 R14: 00007f5c3cf35f80 R15: 00007ffca4704278
[  103.811990][ T6555]  </TASK>
[  103.815126][    C1] vkms_vblank_simulate: vblank timer overrun
[  103.864295][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.872960][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.881515][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.890177][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.946205][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.978356][ T6560] vlan2: entered promiscuous mode
[  103.983435][ T6560] vlan2: entered allmulticast mode
[  103.989068][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.997625][ T5837] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  104.180101][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.191189][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.203120][ T5837] usb 4-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00
[  104.220723][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.335498][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  104.603015][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  104.636971][ T5837] usb 4-1: config 0 descriptor??
[  104.682770][ T6574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.189'.
[  104.764845][ T5879] usb 1-1: too many configurations: 65, using maximum allowed: 8
[  104.774209][ T5876] usb 2-1: Using ep0 maxpacket: 16
[  104.782717][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.796461][ T5876] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=a8.43
[  104.803745][ T6576] sg_write: data in/out 42219/14 bytes for SCSI command 0x0-- guessing data in;
[  104.803745][ T6576]    program syz.4.189 not setting count and/or reply_len properly
[  104.805886][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.831304][ T5876] usb 2-1: Product: syz
[  104.836887][ T5879] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  104.848059][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.858192][ T5876] usb 2-1: Manufacturer: syz
[  104.873639][ T5876] usb 2-1: SerialNumber: syz
[  104.880690][ T5876] usb 2-1: config 0 descriptor??
[  104.908706][ T5876] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[  104.922187][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  104.936983][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  104.948728][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  104.959269][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82
[  104.984462][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  105.002837][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  105.010573][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  105.018487][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  105.027329][ T5876] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  105.036756][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[  105.046822][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84
[  105.054831][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3
[  105.062732][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  105.074848][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86
[  105.083408][ T5876] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  105.093236][ T5876] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  105.195610][ T5876] usb 2-1: USB disconnect, device number 10
[  105.207556][ T5876] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  105.233557][ T5876] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  105.245401][ T5876] keyspan 2-1:0.0: device disconnected
[  105.274760][ T5879] usb 1-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  105.281755][ T5879] usb 1-1: No valid video chain found.
[  105.487759][ T2065] usb 1-1: USB disconnect, device number 5
[  106.009929][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.073521][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.264157][ T2065] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  106.591392][ T5837] usbhid 4-1:0.0: can't add hid device: -71
[  106.600798][ T5837] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  106.656409][ T5837] usb 4-1: USB disconnect, device number 12
[  107.207754][ T6607] program syz.2.198 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.274441][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.282947][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.291536][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  107.496221][ T6615] overlayfs: missing 'workdir'
[  107.674354][ T2065] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  107.691312][ T6627] vlan2: entered allmulticast mode
[  107.726457][ T6627] bridge_slave_0: entered allmulticast mode
[  107.884253][ T2065] usb 3-1: Using ep0 maxpacket: 8
[  107.899478][ T2065] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  108.613963][ T2065] usb 3-1: config 179 has no interface number 0
[  108.652009][   T29] audit: type=1326 audit(1730599544.960:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6631 comm="syz.0.204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c3cd7e719 code=0x0
[  108.673154][ T2065] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  108.684587][ T2065] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  108.696265][ T2065] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  108.707476][ T2065] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  108.719158][ T2065] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  108.733412][ T2065] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  108.742964][ T2065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.783674][ T6622] bond0: (slave bond_slave_0): Releasing backup interface
[  108.813110][ T6607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  108.845631][ T6622] bond0: (slave bond_slave_1): Releasing backup interface
[  108.916526][ T6622] team0: Port device team_slave_0 removed
[  108.932713][ T6622] team0: Port device team_slave_1 removed
[  109.081286][ T5879] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  109.088298][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.096682][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.125561][ T2065] usb 3-1: USB disconnect, device number 11
[  109.125617][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  109.125662][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  110.186467][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.193950][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.259455][ T5879] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  110.267868][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  110.365826][ T5879] usb 4-1: can't read configurations, error -22
[  110.684460][ T5879] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  110.895836][ T5879] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  110.933715][ T5879] usb 4-1: can't read configurations, error -22
[  111.000628][ T5879] usb usb4-port1: attempt power cycle
[  111.674528][ T5879] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  111.726530][ T5879] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  111.758473][ T5879] usb 4-1: can't read configurations, error -22
[  111.785982][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'.
[  112.053734][ T6664] overlayfs: missing 'workdir'
[  112.060171][ T5879] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  112.198306][ T6655] Cannot find set identified by id 0 to match
[  112.213223][ T6655] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.209'.
[  112.354455][ T5837] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  112.445234][ T6655] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.209'.
[  112.536847][ T5837] usb 2-1: Using ep0 maxpacket: 8
[  112.543973][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  112.572341][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  112.629286][ T5837] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85
[  112.645439][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.673483][ T5837] usb 2-1: Product: syz
[  112.690338][ T5879] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  112.698504][ T5879] usb 4-1: can't read configurations, error -22
[  112.705150][ T5879] usb usb4-port1: unable to enumerate USB device
[  112.720025][ T5837] usb 2-1: Manufacturer: syz
[  112.738807][ T5837] usb 2-1: SerialNumber: syz
[  112.762351][ T5837] usb 2-1: config 0 descriptor??
[  112.787266][ T5837] ipw 2-1:0.0: IPWireless converter converter detected
[  113.022412][ T5837] usb 2-1: USB disconnect, device number 11
[  113.063952][ T5879] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  113.084014][ T5837] ipw 2-1:0.0: device disconnected
[  113.441140][ T5879] usb 3-1: device descriptor read/64, error -71
[  113.824282][ T5879] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  113.954965][ T5879] usb 3-1: device descriptor read/64, error -71
[  114.046416][ T6690] overlayfs: missing 'workdir'
[  114.084562][ T5879] usb usb3-port1: attempt power cycle
[  114.359704][ T6697] usb usb1: usbfs: process 6697 (syz.3.219) did not claim interface 0 before use
[  114.444267][ T5879] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  114.504700][ T5879] usb 3-1: device descriptor read/8, error -71
[  114.734206][ T5837] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  114.799380][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'.
[  114.895297][ T5879] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  114.926363][ T5879] usb 3-1: device descriptor read/8, error -71
[  115.106196][ T5879] usb usb3-port1: unable to enumerate USB device
[  115.543625][ T5837] usb 4-1: Using ep0 maxpacket: 16
[  115.550494][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.562883][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.584356][ T5837] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  115.603400][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.615054][ T5837] usb 4-1: config 0 descriptor??
[  116.738173][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.822607][ T5837] hid-led 0003:1294:1320.0003: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0
[  116.828686][ T5879] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  116.981044][ T5837] hid-led 0003:1294:1320.0003: Riso Kagaku Webmail Notifier initialized
[  117.035776][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.141208][ T5876] usb 4-1: USB disconnect, device number 17
[  117.144513][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.164474][  T970] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[  117.164770][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.176098][  T970] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[  117.191311][  T970] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  117.212755][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.233109][ T5879] usb 5-1: Using ep0 maxpacket: 16
[  117.235571][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.241211][ T5879] usb 5-1: config 0 has an invalid interface number: 9 but max is 0
[  117.252911][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.263167][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.279698][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.290218][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.297940][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.297965][ T5879] usb 5-1: config 0 has no interface number 0
[  117.298001][ T5879] usb 5-1: config 0 interface 9 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  117.298026][ T5879] usb 5-1: config 0 interface 9 has no altsetting 0
[  117.300174][ T5879] usb 5-1: New USB device found, idVendor=069a, idProduct=0320, bcdDevice=d3.ae
[  117.328602][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.352104][ T5837] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  117.365245][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.373059][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.374496][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.389395][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.395274][ T5879] usb 5-1: Product: syz
[  117.402368][ T5879] usb 5-1: Manufacturer: syz
[  117.413468][ T5879] usb 5-1: SerialNumber: syz
[  117.421764][ T5879] usb 5-1: config 0 descriptor??
[  117.434318][   T46] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  117.470785][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.484395][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.492164][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.500916][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.508924][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.517061][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.525560][ T5837] usb 1-1: Using ep0 maxpacket: 32
[  117.536655][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.548183][ T5837] usb 1-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config
[  117.558582][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.567488][ T5837] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  117.576902][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.588347][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.596685][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.604718][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.612677][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.620707][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.629174][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.637774][ T5837] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  117.647282][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.655415][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.663077][ T5876] usb 5-1: USB disconnect, device number 7
[  117.664159][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.677281][ T5837] usb 1-1: Product: syz
[  117.686645][ T5837] usb 1-1: Manufacturer: syz
[  117.705213][ T5837] usb 1-1: SerialNumber: syz
[  117.712182][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.721006][ T5837] usb 1-1: config 0 descriptor??
[  117.740864][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.755893][   T25] hid-generic 0000:0000:FFFFFFFF.0004: unknown main item tag 0x0
[  117.774922][   T25] hid-generic 0000:0000:FFFFFFFF.0004: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz0
[  119.078974][ T6778] netlink: 52 bytes leftover after parsing attributes in process `syz.4.243'.
[  119.164203][ T5876] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  119.346433][ T5876] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  119.361084][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.374559][ T5876] usb 2-1: Product: syz
[  119.378760][ T5876] usb 2-1: Manufacturer: syz
[  119.414130][ T5876] usb 2-1: SerialNumber: syz
[  119.421323][ T5876] usb 2-1: config 0 descriptor??
[  119.514572][ T6784] netlink: 'syz.4.245': attribute type 10 has an invalid length.
[  119.553122][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.561658][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.582666][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.589831][ T6784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.597312][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.604477][ T6784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.622937][ T6784] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  119.632148][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'.
[  119.649672][ T6793] bridge_slave_1: left allmulticast mode
[  119.660179][ T6793] bridge_slave_1: left promiscuous mode
[  119.666260][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.675830][ T6793] bridge_slave_0: left allmulticast mode
[  119.681756][ T6793] bridge_slave_0: left promiscuous mode
[  119.698904][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.736472][ T6793] bond0: (slave bridge0): Releasing backup interface
[  119.822996][ T5876] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  119.845943][ T5876] usb 2-1: USB disconnect, device number 12
[  119.853322][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'.
[  119.902582][ T6773] capability: warning: `syz.2.237' uses 32-bit capabilities (legacy support in use)
[  119.938347][ T6757] Cannot find del_set index 4 as target
[  120.124528][   T46] usb 1-1: USB disconnect, device number 6
[  120.279072][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'.
[  120.294205][   T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  120.310782][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'.
[  120.477153][   T25] usb 2-1: Using ep0 maxpacket: 16
[  120.611913][   T25] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  120.723578][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.834845][   T25] usb 2-1: Product: syz
[  120.898536][   T25] usb 2-1: Manufacturer: syz
[  120.981068][   T25] usb 2-1: SerialNumber: syz
[  121.040109][   T25] usb 2-1: config 0 descriptor??
[  121.196665][  T970] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  121.386660][  T970] usb 3-1: Using ep0 maxpacket: 8
[  121.488946][ T6832] overlay: ./file1 is not a directory
[  121.606294][   T25] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  121.682971][   T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  121.819173][   T25] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  121.989155][   T25] usb 2-1: media controller created
[  122.042590][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  122.065306][  T970] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  122.076112][  T970] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  122.087846][  T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  122.097888][  T970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  122.121878][  T970] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  122.131071][  T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.144116][  T970] usb 3-1: Product: syz
[  122.150728][  T970] usb 3-1: Manufacturer: syz
[  122.155500][  T970] usb 3-1: SerialNumber: syz
[  122.155651][   T25] zl10353_read_register: readreg error (reg=127, ret==0)
[  122.170797][   T25] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  122.171648][  T970] usb 3-1: config 0 descriptor??
[  122.179332][   T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  122.224217][   T25] usb 2-1: USB disconnect, device number 13
[  122.257959][ T6838] syz.4.259 (6838): attempted to duplicate a private mapping with mremap.  This is not supported.
[  122.267127][  T970] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  122.277306][  T970] imon 3-1:0.0: unable to initialize intf0, err -19
[  122.283926][  T970] imon:imon_probe: failed to initialize context!
[  122.300634][  T970] imon 3-1:0.0: unable to register, err -19
[  122.320586][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'.
[  122.330033][   T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  122.446081][   T46] usb 3-1: USB disconnect, device number 17
[  123.304494][  T970] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  123.336358][ T6850] process 'syz.1.261' launched './file1' with NULL argv: empty string added
[  123.724238][  T970] usb 5-1: Using ep0 maxpacket: 32
[  123.736059][  T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.755825][  T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.771953][  T970] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  124.346950][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'.
[  124.355889][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'.
[  124.369484][ T6872] bridge1: entered promiscuous mode
[  124.374784][ T6872] bridge1: entered allmulticast mode
[  124.679752][  T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.747950][  T970] usb 5-1: config 0 descriptor??
[  124.773543][ T6875] syz.0.267 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  124.831573][  T970] hub 5-1:0.0: USB hub found
[  125.247538][  T970] hub 5-1:0.0: 1 port detected
[  126.314350][ T5879] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  126.475275][ T5879] usb 4-1: Using ep0 maxpacket: 16
[  126.487152][ T5879] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  126.499320][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 26214, setting to 64
[  126.524372][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  126.542812][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  126.567480][ T5879] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  126.583315][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.593649][ T5879] usb 4-1: Product: syz
[  126.599697][ T5879] usb 4-1: Manufacturer: syz
[  126.605162][ T5879] usb 4-1: SerialNumber: syz
[  126.615361][ T5879] usb 4-1: config 0 descriptor??
[  126.635785][ T5879] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8
[  126.650092][ T5879] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -8)
[  126.664223][    T9] usb 1-1: device descriptor read/64, error -71
[  126.694248][   T46] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  126.735245][ T5879] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8
[  126.817586][ T5837] usb 5-1: USB disconnect, device number 8
[  126.868173][   T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  126.880939][   T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  126.892571][   T46] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  126.910434][   T46] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  126.919914][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.934245][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  126.938611][   T46] usb 3-1: Product: syz
[  126.952380][   T46] usb 3-1: Manufacturer: syz
[  126.959363][   T46] usb 3-1: SerialNumber: syz
[  127.254129][    T9] usb 1-1: device descriptor read/64, error -71
[  127.278582][ T6922] Cannot find del_set index 4 as target
[  127.393984][    T9] usb usb1-port1: attempt power cycle
[  127.657703][  T970] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  127.754458][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.835712][    T9] usb 1-1: device descriptor read/8, error -71
[  127.949596][   T46] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  127.957132][   T46] usb 3-1: 2:1 : sample bitwidth 64 in over sample bytes 2
[  127.964462][   T46] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  127.970553][   T46] usb 3-1: 2:1 : invalid channels 0
[  127.983530][  T970] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  127.992964][  T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.001086][  T970] usb 2-1: Product: syz
[  128.005344][  T970] usb 2-1: Manufacturer: syz
[  128.009972][  T970] usb 2-1: SerialNumber: syz
[  128.018201][  T970] usb 2-1: config 0 descriptor??
[  128.023863][ T5879] usb 4-1: USB disconnect, device number 18
[  128.034672][  T970] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 014
[  128.074854][ T5830] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  128.084994][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: kworker/u9:2 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  128.095878][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  128.105965][ T5830] Workqueue: hci1 hci_rx_work
[  128.110697][ T5830] Call Trace:
[  128.113990][ T5830]  <TASK>
[  128.116935][ T5830]  dump_stack_lvl+0x241/0x360
[  128.121641][ T5830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.126865][ T5830]  ? __pfx__printk+0x10/0x10
[  128.131480][ T5830]  ? sysfs_create_dir_ns+0x28a/0x3a0
[  128.136789][ T5830]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[  128.142362][ T5830]  sysfs_create_dir_ns+0x2ce/0x3a0
[  128.147511][ T5830]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  128.153193][ T5830]  kobject_add_internal+0x435/0x8d0
[  128.158434][ T5830]  kobject_add+0x152/0x220
[  128.162879][ T5830]  ? do_raw_spin_unlock+0x13c/0x8b0
[  128.168110][ T5830]  ? device_add+0x3e7/0xbf0
[  128.172644][ T5830]  ? __pfx_kobject_add+0x10/0x10
[  128.177615][ T5830]  ? _raw_spin_unlock+0x28/0x50
[  128.182496][ T5830]  ? get_device_parent+0x165/0x410
[  128.187643][ T5830]  device_add+0x4e5/0xbf0
[  128.192011][ T5830]  hci_conn_add_sysfs+0xe8/0x200
[  128.196992][ T5830]  le_conn_complete_evt+0xc9f/0x12e0
[  128.202297][ T5830]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  128.208029][ T5830]  ? __mutex_unlock_slowpath+0x21d/0x750
[  128.213674][ T5830]  ? __copy_skb_header+0x437/0x5b0
[  128.218791][ T5830]  ? skb_pull_data+0x112/0x230
[  128.223567][ T5830]  hci_le_conn_complete_evt+0x18c/0x420
[  128.229123][ T5830]  hci_event_packet+0xa55/0x1540
[  128.234070][ T5830]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  128.239371][ T5830]  ? __pfx_hci_event_packet+0x10/0x10
[  128.244758][ T5830]  ? pairing_complete+0x240/0x290
[  128.249791][ T5830]  ? kcov_remote_start+0x97/0x7d0
[  128.254822][ T5830]  hci_rx_work+0x3fe/0xd80
[  128.259246][ T5830]  ? process_scheduled_works+0x976/0x1850
[  128.264972][ T5830]  process_scheduled_works+0xa63/0x1850
[  128.270541][ T5830]  ? __pfx_process_scheduled_works+0x10/0x10
[  128.276535][ T5830]  ? assign_work+0x364/0x3d0
[  128.281133][ T5830]  worker_thread+0x870/0xd30
[  128.285762][ T5830]  ? __kthread_parkme+0x169/0x1d0
[  128.290804][ T5830]  ? __pfx_worker_thread+0x10/0x10
[  128.295932][ T5830]  kthread+0x2f0/0x390
[  128.300007][ T5830]  ? __pfx_worker_thread+0x10/0x10
[  128.305119][ T5830]  ? __pfx_kthread+0x10/0x10
[  128.309710][ T5830]  ret_from_fork+0x4b/0x80
[  128.314130][ T5830]  ? __pfx_kthread+0x10/0x10
[  128.318724][ T5830]  ret_from_fork_asm+0x1a/0x30
[  128.323510][ T5830]  </TASK>
[  128.358053][ T5830] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  128.373945][ T5830] Bluetooth: hci1: failed to register connection device
[  128.384679][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  128.414979][    T9] usb 1-1: device descriptor read/8, error -71
[  128.466609][   T46] usb 3-1: USB disconnect, device number 18
[  128.538999][    T9] usb usb1-port1: unable to enumerate USB device
[  128.744253][ T5879] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  128.784334][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  128.894434][ T5879] usb 4-1: Using ep0 maxpacket: 16
[  128.905324][ T5879] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  128.916941][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.925040][ T5879] usb 4-1: Product: syz
[  128.929621][ T5879] usb 4-1: Manufacturer: syz
[  128.934644][ T5879] usb 4-1: SerialNumber: syz
[  128.942234][ T5879] usb 4-1: config 0 descriptor??
[  128.958610][ T5879] usb 4-1: Found UVC 0.00 device syz (046d:0721)
[  128.965621][    T8] usb 5-1: Using ep0 maxpacket: 32
[  128.971079][ T5879] usb 4-1: No valid video chain found.
[  128.979267][    T8] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  129.010093][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.026177][    T8] usb 5-1: config 0 descriptor??
[  129.043682][    T8] gspca_main: sunplus-2.14.0 probing 0458:7006
[  129.154568][ T5907] usb 4-1: USB disconnect, device number 19
[  129.254220][   T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  129.404132][   T46] usb 3-1: Using ep0 maxpacket: 32
[  129.411099][   T46] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping
[  129.421453][   T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.431661][   T46] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  129.440761][   T46] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  129.450806][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.463375][   T46] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  129.472300][   T46] usb 3-1: no configuration chosen from 1 choice
[  129.698128][ T5879] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  129.865015][    T8] gspca_sunplus: reg_w_riv err -71
[  129.872491][    T8] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  129.881195][ T5879] usb 1-1: device descriptor read/64, error -71
[  129.897461][    T8] usb 5-1: USB disconnect, device number 9
[  130.074508][  T970] i2c i2c-1: failure reading functionality
[  130.127799][  T970] i2c i2c-1: connected i2c-tiny-usb device
[  130.137355][  T970] usb 2-1: USB disconnect, device number 14
[  130.194623][ T5879] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  130.236878][ T6949] usb usb7: usbfs: process 6949 (syz.1.293) did not claim interface 0 before use
[  130.285170][ T6952] loop2: detected capacity change from 0 to 7
[  130.296254][ T6952] Dev loop2: unable to read RDB block 7
[  130.302084][ T6952]  loop2: AHDI p1 p2
[  130.318314][ T6952] loop2: partition table partially beyond EOD, truncated
[  130.326832][ T6952] loop2: p1 start 2214592512 is beyond EOD, truncated
[  130.334144][ T5879] usb 1-1: device descriptor read/64, error -71
[  130.378633][ T6954] netlink: 'syz.1.295': attribute type 3 has an invalid length.
[  130.397443][ T6954] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.295'.
[  130.420502][ T6956] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  130.432214][ T6956] =======================================================
[  130.432214][ T6956] WARNING: The mand mount option has been deprecated and
[  130.432214][ T6956]          and is ignored by this kernel. Remove the mand
[  130.432214][ T6956]          option from the mount to silence this warning.
[  130.432214][ T6956] =======================================================
[  130.467092][    C0] vkms_vblank_simulate: vblank timer overrun
[  130.478965][ T6956] Bluetooth: MGMT ver 1.23
[  130.536371][ T5879] usb usb1-port1: attempt power cycle
[  130.568886][ T6959] netlink: 'syz.3.299': attribute type 1 has an invalid length.
[  130.577637][ T6959] netlink: 224 bytes leftover after parsing attributes in process `syz.3.299'.
[  130.750710][ T6968] Bluetooth: MGMT ver 1.23
[  130.809294][ T6970] No such timeout policy "syz0"
[  130.925564][ T6982] netlink: 'syz.1.303': attribute type 10 has an invalid length.
[  130.944270][ T5879] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  130.964869][ T5879] usb 1-1: device descriptor read/8, error -71
[  131.214154][   T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  131.214231][ T5879] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  131.244889][ T5879] usb 1-1: device descriptor read/8, error -71
[  131.375495][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.381433][ T5879] usb usb1-port1: unable to enumerate USB device
[  131.415100][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.429651][   T46] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  131.439577][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.455158][   T46] usb 2-1: config 0 descriptor??
[  131.674386][    T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  131.784975][ T5879] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  131.824263][    T8] usb 4-1: device descriptor read/64, error -71
[  131.914227][ T5879] usb 5-1: device descriptor read/64, error -71
[  132.017207][  T970] usb 3-1: USB disconnect, device number 19
[  132.076143][    T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  132.154670][ T5879] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  132.214211][    T8] usb 4-1: device descriptor read/64, error -71
[  132.276437][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.285888][ T5879] usb 5-1: device descriptor read/64, error -71
[  132.292522][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.334528][    T8] usb usb4-port1: attempt power cycle
[  132.387498][  T970] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  132.396942][ T5879] usb usb5-port1: attempt power cycle
[  132.502861][   T46] usb 2-1: string descriptor 0 read error: -71
[  132.511571][   T46] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71
[  132.520547][   T46] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71
[  132.528806][   T46] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71
[  132.537085][   T46] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  132.546017][   T46] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71
[  132.557299][   T46] usb 2-1: USB disconnect, device number 15
[  132.559885][  T970] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  132.575715][  T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  132.587117][  T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  132.598452][  T970] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  132.613812][  T970] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  132.623249][  T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.632957][  T970] usb 3-1: config 0 descriptor??
[  132.704302][    T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  132.725644][    T8] usb 4-1: device descriptor read/8, error -71
[  132.744204][ T5879] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  132.765556][ T5879] usb 5-1: device descriptor read/8, error -71
[  132.977411][    T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  133.005546][    T8] usb 4-1: device descriptor read/8, error -71
[  133.014277][ T5879] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  133.051188][  T970] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  133.063131][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.078949][ T5879] usb 5-1: device descriptor read/8, error -71
[  133.114207][  T970] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  133.117051][ T6999] ------------[ cut here ]------------
[  133.132232][    T8] usb usb4-port1: unable to enumerate USB device
[  133.132604][ T6999] kernel BUG at mm/page_table_check.c:157!
[  133.155912][ T6999] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  133.162869][ T6999] CPU: 1 UID: 0 PID: 6999 Comm: syz.1.309 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0
[  133.173436][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  133.183473][ T6999] RIP: 0010:__page_table_check_zero+0x274/0x350
[  133.189706][ T6999] Code: c1 0f 8c 39 fe ff ff 48 89 df e8 97 2a f3 ff e9 2c fe ff ff e8 ad 8f 8c ff 90 0f 0b e8 a5 8f 8c ff 90 0f 0b e8 9d 8f 8c ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 65 94 8c
[  133.209299][ T6999] RSP: 0018:ffffc9000ad6f6e0 EFLAGS: 00010293
[  133.215364][ T6999] RAX: ffffffff82084a23 RBX: dffffc0000000000 RCX: ffff88802fdcda00
[  133.216457][ T5879] usb usb5-port1: unable to enumerate USB device
[  133.223329][ T6999] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801d1a404c
[  133.223346][ T6999] RBP: ffff88801d1a404c R08: ffff88801d1a404f R09: 1ffff11003a34809
[  133.223358][ T6999] R10: dffffc0000000000 R11: ffffed1003a3480a R12: ffff88801d1a4000
[  133.223370][ T6999] R13: 1ffffffff3481db4 R14: 000000000000000a R15: 0000000000000000
[  133.223382][ T6999] FS:  00007f06f03bd6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  133.270391][ T6999] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.276960][ T6999] CR2: 0000000020000dc0 CR3: 0000000061064000 CR4: 00000000003526f0
[  133.284919][ T6999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  133.292881][ T6999] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  133.300839][ T6999] Call Trace:
[  133.304105][ T6999]  <TASK>
[  133.307035][ T6999]  ? __die_body+0x5f/0xb0
[  133.311457][ T6999]  ? die+0x9e/0xc0
[  133.315168][ T6999]  ? do_trap+0x15a/0x3a0
[  133.319391][ T6999]  ? __page_table_check_zero+0x274/0x350
[  133.325098][ T6999]  ? do_error_trap+0x1dc/0x2c0
[  133.329845][ T6999]  ? __page_table_check_zero+0x274/0x350
[  133.335479][ T6999]  ? __pfx_do_error_trap+0x10/0x10
[  133.340580][ T6999]  ? report_bug+0x3e8/0x500
[  133.345073][ T6999]  ? handle_invalid_op+0x34/0x40
[  133.349998][ T6999]  ? __page_table_check_zero+0x274/0x350
[  133.355621][ T6999]  ? exc_invalid_op+0x38/0x50
[  133.360285][ T6999]  ? asm_exc_invalid_op+0x1a/0x20
[  133.365305][ T6999]  ? __page_table_check_zero+0x273/0x350
[  133.370926][ T6999]  ? __page_table_check_zero+0x274/0x350
[  133.376544][ T6999]  __free_pages_ok+0xaa5/0xc70
[  133.381306][ T6999]  dec_usb_memory_use_count+0x259/0x350
[  133.386851][ T6999]  ? __pfx_usbdev_vm_close+0x10/0x10
[  133.392129][ T6999]  mmap_region+0x2073/0x2940
[  133.396713][ T6999]  ? __pfx_mmap_region+0x10/0x10
[  133.401648][ T6999]  ? __asan_memset+0x23/0x50
[  133.406227][ T6999]  ? process_measurement+0x3ca/0x1fb0
[  133.411599][ T6999]  ? mm_get_unmapped_area_vmflags+0xb9/0xf0
[  133.417490][ T6999]  ? bpf_lsm_mmap_addr+0x9/0x10
[  133.422337][ T6999]  ? security_mmap_addr+0x6f/0x250
[  133.427451][ T6999]  ? __get_unmapped_area+0x2ed/0x350
[  133.432725][ T6999]  do_mmap+0x8f0/0x1000
[  133.436870][ T6999]  ? __pfx_do_mmap+0x10/0x10
[  133.441451][ T6999]  ? __pfx_down_write_killable+0x10/0x10
[  133.447073][ T6999]  ? __pfx_lock_acquire+0x10/0x10
[  133.452096][ T6999]  vm_mmap_pgoff+0x1dd/0x3d0
[  133.456692][ T6999]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  133.461810][ T6999]  ? __fget_files+0x29/0x470
[  133.466386][ T6999]  ? __fget_files+0x3f3/0x470
[  133.471060][ T6999]  ? __fget_files+0x29/0x470
[  133.475637][ T6999]  ksys_mmap_pgoff+0x4eb/0x720
[  133.480381][ T6999]  ? __x64_sys_mmap+0x7f/0x140
[  133.485125][ T6999]  do_syscall_64+0xf3/0x230
[  133.489612][ T6999]  ? clear_bhb_loop+0x35/0x90
[  133.494272][ T6999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.500143][ T6999] RIP: 0033:0x7f06ef57e719
[  133.504552][ T6999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.524143][ T6999] RSP: 002b:00007f06f03bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  133.532538][ T6999] RAX: ffffffffffffffda RBX: 00007f06ef736130 RCX: 00007f06ef57e719
[  133.540489][ T6999] RDX: 000000000000000f RSI: 0000000000400000 RDI: 0000000020000000
[  133.548445][ T6999] RBP: 00007f06ef5f132e R08: 0000000000000006 R09: 0000000000000000
[  133.556398][ T6999] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000000
[  133.564361][ T6999] R13: 0000000000000000 R14: 00007f06ef736130 R15: 00007ffc81c32e08
[  133.572315][ T6999]  </TASK>
[  133.575314][ T6999] Modules linked in:
[  133.579760][ T6999] ---[ end trace 0000000000000000 ]---
[  133.591258][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.599891][ T6999] RIP: 0010:__page_table_check_zero+0x274/0x350
[  133.606272][ T6999] Code: c1 0f 8c 39 fe ff ff 48 89 df e8 97 2a f3 ff e9 2c fe ff ff e8 ad 8f 8c ff 90 0f 0b e8 a5 8f 8c ff 90 0f 0b e8 9d 8f 8c ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 65 94 8c
[  133.626225][ T6999] RSP: 0018:ffffc9000ad6f6e0 EFLAGS: 00010293
[  133.632308][ T6999] RAX: ffffffff82084a23 RBX: dffffc0000000000 RCX: ffff88802fdcda00
[  133.640329][ T6999] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801d1a404c
[  133.648325][ T6999] RBP: ffff88801d1a404c R08: ffff88801d1a404f R09: 1ffff11003a34809
[  133.656527][ T6999] R10: dffffc0000000000 R11: ffffed1003a3480a R12: ffff88801d1a4000
[  133.664563][ T6999] R13: 1ffffffff3481db4 R14: 000000000000000a R15: 0000000000000000
[  133.672533][ T6999] FS:  00007f06f03bd6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  133.681510][ T6999] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.688568][ T6999] CR2: 00007f90d9c61000 CR3: 0000000061064000 CR4: 00000000003526f0
[  133.696616][ T6999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  133.704651][ T6999] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  133.712634][ T6999] Kernel panic - not syncing: Fatal exception
[  133.718948][ T6999] Kernel Offset: disabled
[  133.723260][ T6999] Rebooting in 86400 seconds..