last executing test programs:

17.076848408s ago: executing program 2 (id=1360):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070700000083"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x1, "fd"}, 0x0, 0x0, 0x0, 0x0, 0x0})

15.021489187s ago: executing program 4 (id=1366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0d000000350001072f8ed89ee4e3924901000000"], 0x14}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/192, 0xc0}]}, &(0x7f0000000180)="2e1cd343758c", 0x0, 0x7, 0x12, 0x0, 0x0})
r2 = memfd_create(&(0x7f00000008c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000006c0)={0x7, &(0x7f0000000680)=[{0x7ff, 0x5, 0x5}, {0x0, 0x0, 0x3, 0x4}, {0x498a, 0x0, 0x0, 0x7}, {0x3d2, 0x7, 0xf, 0x20}, {0x1ff, 0x4, 0x33, 0x8}, {0x100, 0x0, 0xd0, 0x6}, {0x6, 0x8, 0x3f, 0x8733}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000))
epoll_create(0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040))
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000940)=""/4106, 0x100a}, {&(0x7f00000003c0)=""/23, 0x17}], 0x2}, 0x0)
r9 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f00000001c0))
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x100)
io_uring_enter(r9, 0x30c6, 0x0, 0x0, 0x0, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f00000000c0)="e036bfe9f6080f3c8a4947f18279b10b307f3efdb5a3b3a7851038a2ef751e948ccfd28db727d49f1959ebbd81a7e52cb5e5afd7", 0x55}, {&(0x7f0000000280)="b3a5ae96edf445f20e24a5bffbb42edda7fb80f90a380fd19bc768466f18eebb24", 0x21}], 0x2)
write(r2, &(0x7f0000002140)='i', 0x1)

14.516003655s ago: executing program 4 (id=1369):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x0)
preadv(r2, &(0x7f0000000540)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000300)=""/12, 0x3}, {&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/60, 0x3c}], 0x5, 0x0, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020000000002020207b1af8ff00000000bfa10000000000f0ffffb702000005000000b703000000000000850000007300000095a5fec3ec83dd81725b3da6cb63a2584b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b4, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bf0bc37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x79, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x9200e6, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000111410002abd7000ffdbdf2508003e000300000008004f000400000008003e0004000000080001000100000008004b000008004b0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8081)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="aa5ecdc1f19af5fa7ca674aaaaaaaaaafffffffffffffffffffffffb000000000000fe8000000000000000000000000000aa00000000001090780200104783da3f7c4ee8000600"/80], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20)

14.144772777s ago: executing program 4 (id=1371):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x2000000)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, &(0x7f00000000c0))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xa2ea)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
tee(r3, 0xffffffffffffffff, 0x8, 0x0)

13.379927289s ago: executing program 4 (id=1375):
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10000000})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ptrace(0x10, 0x0)
ptrace(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0xffffffffffffffff, 0x0)
landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x10, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f363b6c090890e0879b0a0a42e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2afffbd85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94275c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787f007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb44c3f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6ac9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b40866a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da7368101cb839ddd083dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee61189e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8a01f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27691102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08c2117d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6f651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de592587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000fd6f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff5a}}, 0xffffffffffffffc4)
ptrace(0x10, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4)
ptrace(0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ptrace(0x10, 0x0)
ptrace(0xffffffffffffffff, r1)
ptrace(0xffffffffffffffff, 0x0)
fstat(r0, 0x0)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f9, 0x300, 0x70bd26, 0x25dfdbff, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2008082, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_open_procfs(0x0, &(0x7f00000020c0)='mountinfo\x00')

11.6000366s ago: executing program 2 (id=1379):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0xec, 0x10, 0x1, 0x4, 0x1800, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0xc0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast2, 0x0, 0x2b}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f0000000}, {}, {0xffffff7f, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x60}}, 0xec}}, 0x4000000)

11.544882861s ago: executing program 4 (id=1380):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000308010300000000000000000000000005000300060000002400"], 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f0000000340)={&(0x7f00000000c0)="10", 0x6fffff9}}, 0xfeffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x1, @private=0xa010101}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x10, 0xffffffffffffffff, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x21, 0x0, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x20000000)
socket$inet_sctp(0x2, 0x0, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
memfd_secret(0x0)
openat$6lowpan_enable(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)

11.437517534s ago: executing program 2 (id=1381):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = io_uring_setup(0x4fe1, &(0x7f0000000000))
r1 = dup2(r0, r0)
r2 = eventfd(0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000200)=r2, 0x1)
io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_int(r3, 0x1, 0xf, 0x0, &(0x7f0000000100))
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pwritev(r7, &(0x7f0000001640)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a16", 0x5}], 0x2, 0x0, 0x8000)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xcc}}, 0x0)
syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000240)=0x4)

11.024504616s ago: executing program 4 (id=1382):
r0 = openat$full(0xffffff9c, 0x0, 0x9a000, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
setsockopt(r1, 0x84, 0x7d, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mq_unlink(0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="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", 0x13b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.034063349s ago: executing program 1 (id=1389):
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x70, 0x9c, 0x31, 0x20, 0x4e8, 0x6601, 0x819b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa3, 0x5f, 0x50}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r3, 0x3f)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ptrace$setregset(0x4205, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000008440)=""/102392, 0x18ff8}], 0x1, 0xfffffe01, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
sendmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x200000}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="32000000840000000000000010000000ccde472e38b3"], 0x18}}], 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x3b4, 0xffffffff, 0x1dc, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2ec, 0x2ec, 0x2ec, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff, 0xffffffff], [0x0, 0xff, 0x0, 0xffffffff], 'bond_slave_1\x00', 'wg1\x00', {}, {}, 0x4, 0xe, 0x7, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@mh={{0x24}, {"1f64"}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x9}}}, {{@ipv6={@remote, @mcast1, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xff, 0xff, 0xffffffff], 'bridge0\x00', 'ip6gre0\x00', {0xff}, {}, 0x33, 0x10, 0x4, 0x19}, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'veth1_to_batadv\x00'}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0xff000000, 0x0, 0x0, 0xff0000ff], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'veth0_to_hsr\x00', 'bond_slave_1\x00', {0xff}, {}, 0x33, 0x4, 0x0, 0x67}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@hbh={{0x48}, {0x254137a0, 0x0, 0x0, [0x7, 0x62, 0x7ff, 0x3e, 0xfc00, 0x7ec8, 0x7, 0xf9, 0x4, 0xd5, 0xa2, 0x4, 0x80, 0x101, 0x0, 0x3], 0x8}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x410)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {0x0, 0x5, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x3c}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {0x0, 0x5, 0x4, '\x00', 0x2}, {0x0, 0x26}, {0x0, 0x4}, {0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x34, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x80}]}})

8.161200856s ago: executing program 2 (id=1391):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x118}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000280)={0x0, 0x2}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r3 = open(&(0x7f0000000580)='./file0\x00', 0x100000001a1540, 0x88)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0)
recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000001900)=""/84, 0x54}, {&(0x7f0000000640)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x140, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000440)={0x0, 'erspan0\x00'}, 0x18)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000040)=@v2={0x2000000, [{0x3ff, 0x3}]}, 0x14, 0x1)
r5 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000840)=ANY=[@ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r5], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000185802, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}})

7.973486679s ago: executing program 0 (id=1393):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="dc6ca1354c803f0454a9e63ae0854e8c09272dedb086fdb4208cbf160be145b3ea2b2a9920de8ad64e565a1515b1d274ffc43db794e27b2ae8a4cf3ac3f9683fb3e12069bdce5edbfdff1cb76559f9d41903c3229a54c84493707fe48178d1ebbda42c1618a1627b8814038f732bc0d4272757e1194f0a949f9e73c79fe9c29aff616a3a1ef6a371d40621c7c031cfa30ffcb99a769596a183e5e3587d7c10394171303d7d49097dbcb89a8caea2a0c7951b5acd644d9bf094a9ae41d8", 0xbd}, {&(0x7f0000000140)="cb7f2972f66bafdc60f72da6429c24bb7a2309fd66108139b16ca8a0954525953ed2a9c788a1969b36ace57f21f60be5c939265075292059ab15a7a0ad1252a79d9fedbe25", 0x45}], 0x2, 0xe, 0x5, 0xa)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xffffffff, 0x0)
syz_usb_connect(0x0, 0x461, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0)

7.746509092s ago: executing program 2 (id=1394):
r0 = openat$full(0xffffff9c, 0x0, 0x9a000, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
setsockopt(r1, 0x84, 0x7d, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mq_unlink(0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="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", 0x13b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.013030452s ago: executing program 2 (id=1395):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x90, 0xf1, 0x9c, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x0, 0x22, 0x75, {0x75, 0x5, "2ad694c0c2adaa210e9fde46e4d41c4736d79dc946c6ba42b0665eca47e56852b56ea3fb6affeb8310ba28711e1314e90849afde783cf33adeb7e7502dce407a576ebfbb61ac8ff15e227469b3f3333d2da2487abcf9c9ec1445390cd79f2ce477a8f87a55aa46b77a2227c9face94721a698f"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x33b}}}}, &(0x7f0000000480)={0x18, &(0x7f0000000280)={0x40, 0x14, 0xd0, "e0f6658b29c491be67d588b8d45124bd0cf0cfe92eb17c114349a92b151bfcf3565e86212ac7df5797d2c96819ddd1de5532c3564197b3350e28f1b7f1d5a69b64af270ac56b518cad0f29a51f02630fc562e2448e2ed2647cbd8264c17f56307fc85b75902fd6a0b2ba1b7f01df285826ff3cfd5197cf02069372a00864f67289c119b116a1e790d3dabfa4f35bcb64149eaaca1d9a788b85f4f3558f52f14b29f54f73c729c53a784ece73a34d70513dd20b4a1fc55425a17814c484f38d6ab39b2ecfa33b152c2cbf23fdaf5106d3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000400)={0x20, 0x1, 0x2d, "a802f86d4d605fbd31370aeb1c2ec602243f45bcaa4cfbb52f4f6109edbd1a2bc4adaf11c2f5d2e24f10047054"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x7}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

6.68118707s ago: executing program 1 (id=1397):
syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {0xf0}, 0x0, 0x0, 0x0, 0x0}, 0x58)

6.541881161s ago: executing program 1 (id=1398):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc600400214002000003053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}, 0x6, 0x100, 0x5, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4})
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/kernel/warn_count', 0x200000, 0x4)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
recvmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)

5.475077598s ago: executing program 3 (id=1400):
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000440)=0xa000, 0x4) (async)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async, rerun: 64)
set_mempolicy(0xc006, &(0x7f0000000000)=0x1000000000001, 0x3ff) (rerun: 64)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x7)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r2 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='virtiofs\x00', &(0x7f0000000300)='\x00\x8a\xac\xf26\xdc\xdf\x80\xd5\xd4\x9c\xda\xc2\xc4Mhs`O\x99\x87{%B\xe7\x171\xf6\xba\x80:iU\xf0\ap\x97cQ\x83\xdb\x88_\x9c\xab-\xe9\xca\\\x8c0f\x82q\xfd\x87\a\xdc\x94\x9d\x1b\x8f\x05\xe6\xcb)h\x01\xcbaM\x85GM\rr\x8f\'\x01\xa2\xb14\xaf\xa9\xed\xed\xb2jI#\xdc\x14l%\x88\x00\xc4\x05\x12=\xb8\xc2\x8fGH\xbdgaz\x14D\x106\xfe\xbbA\x82\x9a\x1bM\b\xeaE\xdd\xbf\xb0\x1c\v\xb0\x86\xfa\xacD\xbc9\x14%ag\xd4F\xbd\xc2\a\x10R9n\xd6{\xfcf!\x0f<\x895\xf1\x16\x1b\xd8\x9e\x10*T\x05[6\xb2K\xbe$\x85\f\xe0\x16\x9e\x06\xb1\xd7?\xd5\xe3\xf5\x84\x84\xd4\xde\x93\xcb\xc4\x8b\xde\x86\x99\x10\a\x9bO\xb1\x05\xb7\x95\xf5\x80\x1a\xbe\x8f\xb0r\xfb\xe7\x81\xb9\xea\xbf\xcf\xc3\xee\x19A\xd86]\xa2\xe5\n\x87\x9a\xd4c\"\x89\xaa\xed\x0f\xaa\x80\x97\xf1\xd4\x1f\xd0\xaf%\xc1s\xc9\xaf\xd9\x92k#\xa9<\x82\x9c\xae\xa5\x1b\x04\xd6\xe2\x8eGor\x01\x7fQ\xfe%\b\xb2v\xec\x18u3\xc4\xe5\xe5\x807\xe7\xc3X\xbd\x83\x7f\x06\xd9VF\xb5\xbc\xcc\xcc\xea6\x85h\x1a2\xb7\xce\xa1\xd05l\xbc\x86', 0x0) (async)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 64)
dup3(0xffffffffffffffff, r2, 0x0) (async, rerun: 64)
inotify_init1(0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14527e, 0x80)
write$P9_RSTATu(r0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x509) (async)
mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x210902, 0x4) (async)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r4 = socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fc"], 0x48}}, 0x400400c0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2101, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) (async)
ioctl$PPPIOCSMRRU(r5, 0x4004743b, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x131040, 0x100) (async, rerun: 32)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 32)
ftruncate(r6, 0x2000009)
sendfile(r3, r6, 0x0, 0x6)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

5.293440474s ago: executing program 3 (id=1401):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0', [{0x20, 'SET\x00'}], 0xa, "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"}, 0x100c)
r1 = openat$binderfs(0xffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001840)={0x100, 0x0, &(0x7f0000001680)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/100, 0x64, 0x0, 0x19}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0xa, 0x0, 0x37}, @fda={0x66646185, 0x7, 0x0, 0x2c}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000001580)={0x0, 0x1c, 0x38}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000015c0)={@fda={0x66646185, 0x5, 0x0, 0xd}, @fda={0x66646185, 0x2, 0x1, 0x32}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000001640)={0x0, 0x1c, 0x38}}, 0x2000}, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x1}, @register_looper], 0x8c, 0x0, &(0x7f0000001780)="62c20aae5684679947924d58189799332d5ece2333f218ac6dd0340b7dc4b0a27444a449bfa385df0835411a0f4f370a369340d20c48f09067acce97b622e6b0f9ba9a8d78415228b2557e05508c6d569347acb49c01aab40871167298047d163136f0dc1d20a30b7a95b87146e0c09e63ce596029d1a353f39bf78f065eeca68d1b674c64587e71d0777f02"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x0, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
r3 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000e2ff0f00240000000000000000", @ANYRES32=r5, @ANYBLOB="1602040000000000"], 0x20}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000002040)={&(0x7f0000001880)=@l2={0x1f, 0x8, @any, 0x7, 0x2}, 0x80, &(0x7f0000001d40)=[{&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000019c0)}, {&(0x7f0000001ac0)="21a82dd07f93b07ce931e36f7884155db59ecbe312e1804c0e298a8efd9078a8a3d79397d6a5831e26a1cc4b954b0bca2c8c2d45c509d16e8ae4a14266cb8e0a99d734aba1ab2d7f7ec887ad9b0016ea3f7ad698fa968c9b00c6d29835ba13121c82a5ef2427a9e4075502fb63e456d3b79a7ea165a9f04700ed62e6c006ad34cb25bf8e9f243b10fafc4007b4bab0799d8c606f25717336373f0539237ae0755a9056c99820f03aab2930b5cd3acf26e9a754c66179889bdcef7fdc", 0xbc}, {&(0x7f0000001b80)="04ea90f1042773d064925543b590e3b6a7f38ca4e7568c5520125a57d7aef91e52b3b60ece3f602920b649502223fb2d45b189e5bf2b527693816d0d92dabb1e386cb948f6945475c06d47df798adb75d4c4d919", 0x54}, {&(0x7f0000001c00)="7979f75f0dfe6107839b28126f7da4211eb6ead4157af17b93e1a34a9ce04c6281a2ef834bca1f1eed0bc498aa28125e7de6896f0a06230709671642c38ded4be607bbd1c78ab6a167", 0x49}, {&(0x7f0000001c80)="aafd5e04cd2c35e8fde4febafa7960b669b7f6f791f55aa04857be230c1beb355c2612a0e88e19c3993d3e3968293c2b7ef9b65d05374a71452ff252bfdc04dbe52297da3454ec805694d5a2c93b35585943f58a6fe7c0a91815830c0cb73fdf835c8342c3165fce2bc83e3ecccf93e77547ff66e07b039fe4e20361e60de7f257740fbbfbd837542549fdbc0aa99df34e866d427e9ffb1e5cbd4ef3faecbe431342e3b8d2e7621a03ac7c0df94881", 0xaf}], 0x6, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x274}, 0x40000)
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1804000000000000000000000000000063018e000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendfile(r9, r8, &(0x7f0000002080)=0x64, 0x23b)
r10 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f00000000c0)={@hyper})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r10, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x400, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2376, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x400})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r10, 0x7b0, &(0x7f0000001100)={0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000001900)=ANY=[@ANYBLOB="0000d51edac3716c412c5501"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0xcc, 0x178, 0xc, 0xcc, 0x178, 0x1c8, 0x258, 0x258, 0x1c8, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @loopback, [], [], 'team0\x00', 'pim6reg0\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xc8, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x10}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2ec)

4.857551575s ago: executing program 0 (id=1402):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
sysinfo(&(0x7f0000000140)=""/158)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)='9', 0x1}], 0x3)
r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
write$snapshot(r3, &(0x7f0000000200)='T', 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB="1802000063f9fffe00000000000000008500000041000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0))
r5 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x5}, 0x10)
write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5)
recvmmsg(r5, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000ac0)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)

4.354979084s ago: executing program 0 (id=1403):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x5000)=nil, 0x5000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004540)=""/4106, 0x100a}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000003540)=""/4093, 0xffd}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f0000001140)=""/172, 0xac}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f0000001300)=""/214, 0xd6}], 0x7}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
syz_usb_control_io(r4, 0x0, 0x0)
bind$alg(r3, 0x0, 0x0)
pipe(0x0)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xfffffffe)

3.599691421s ago: executing program 1 (id=1404):
r0 = openat$full(0xffffff9c, 0x0, 0x9a000, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
setsockopt(r1, 0x84, 0x7d, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mq_unlink(0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="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", 0x151}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.031556632s ago: executing program 0 (id=1405):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000, 0x0, 0x300})

2.640996857s ago: executing program 0 (id=1406):
io_setup(0x800, &(0x7f0000000040))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x3, 0x0, 0xff, 0xc, 0xb}, 0x20)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pipe2(&(0x7f0000000040), 0x84080)
syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000340)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRESDEC=r0, @ANYBLOB="05"], 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x161842, 0x0)
fcntl$getflags(r1, 0x401)
openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0xff)
sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="3d34a3869d5e618cee8a99352a04060383c80009d8086ca39346686927eaefd45a2c66dbf3fee990fd2ce37cb10a4b1acdf3e1c4a2833bb3bc8a97b12a68"], 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0xc, 0x3, 0x0, 0x62, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x59}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90)

1.634941731s ago: executing program 3 (id=1407):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000003c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
read(r3, &(0x7f0000000180)=""/227, 0xe3)
syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c57000), 0x0)
ioctl$UFFDIO_ZEROPAGE(r3, 0x8010aa01, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})
socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4)
sendmmsg$inet6(r4, &(0x7f00000027c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, &(0x7f0000001180)=[{&(0x7f00000000c0)="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", 0x201}], 0x1}}], 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x5ac0b6b7d38c97ef, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0)

1.408667724s ago: executing program 1 (id=1408):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x2000000)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, &(0x7f00000000c0))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xa2ea)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
tee(r3, 0xffffffffffffffff, 0x8, 0x0)

856.951227ms ago: executing program 0 (id=1409):
r0 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x8a, 0x0)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x0, 0x2000}, &(0x7f0000000100), &(0x7f0000000000))
io_uring_enter(r2, 0x1, 0xffffffff, 0x1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_io_uring_setup(0x5166, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000))
ioctl$int_in(r3, 0x5421, &(0x7f0000000180)=0x9)
syz_io_uring_setup(0xa94, &(0x7f0000000080), &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1})
syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x0, 0x23, 0x65, {0x65, 0x23, "4e24b4cc9d33b16e1fee321d8875aa31eb538ab901084504ab412a93590c8c46fde5ca459222430bd32e102db739b47615639f88315be822936cbd4386c1aacafe6d5216cd3b570b314a4b1475e1ec826d4ecbccc3df36470c62cd2b21079442b669d4"}}, &(0x7f0000000280)=ANY=[@ANYBLOB="00033a009a5903004e0000000026764f3c48416aeb6548f4d4427ccc8e919cba070000000000000032f24a4eeb6aebee19b2a1b3f59d25d125ca58bf"], &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "79e3e87f"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff3, 0x2, 0x1, {0x22, 0x3d6}}}}, &(0x7f0000000800)={0x18, &(0x7f0000000580)={0x40, 0xb, 0xdd, "fdd2d4057f3a4df8760b0b3c3d3b941c2a293ae48efad40e7d11d68c55f89aec13453572229cc67989f965cf4d47252e0b85cef55cc98d31a13fa206938745f5248b8be1f4643f5213ede538745c358e9a87ba32396847f63688a7f76410c71c4f7a3eb9ba8c0bccc97b633c1ccc3441c6065090b011272025eb8199efa35da9e1b10a474d1cd514704fb317f6b43168a82d8a711c99e7be044102d92d2222369cc82a5651be19e7315483b0d3fd8da0d365ac2764bdcde936c5de0c1eaee841da984db5156b29aa7a9388eeaadf35c095664291c65f8c22377491e05a"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000740)={0x20, 0x1, 0x68, "a8267d18b4c928bf479951b14f775d5573e25ebe7819b2ad571afb3c23efc3ad294bd3cb00b523c0d83096f5ff788292d6af6d6cc956776aa3c1d9c7dbf0c1c0cd7e0c06e89e26a08b036ca631f9862cd5206e1da4d9280f2c7a03ba49e1ee393457026c81ba9761"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x8}})
io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f00000002c0)={0x0, 0x40000000}, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000002340)={0x40, 0x4, 0x2}, 0x10)
r7 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$FUSE_IOCTL(r7, &(0x7f0000000100)={0x20}, 0xfdef)
r8 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020)
splice(r6, 0x0, r8, 0x0, 0xffffffe1, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x2, 0x0)
r9 = openat$vimc2(0xffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r9, 0xc0cc5640, &(0x7f0000000040)={0xa, 0xfffffffe, 0x0, 0x33565348})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))

696.668708ms ago: executing program 3 (id=1410):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ff557a4c4c0a000007000000440c0801e00000010000000092b6c2b91443a6f52ec96d99cdaa918ebe2cbef2ece221b8d9a921d20cecbb32da55c8dd137e10"], 0x18}, 0x0)
dup(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000440))
r4 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
r7 = eventfd(0x0)
readv(r7, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1)
fcntl$setsig(r5, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r6}], 0x1, 0x0, 0x0, 0x0)
dup2(r5, r6)
fcntl$setown(r6, 0x8, r4)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0))
tkill(r4, 0x13)
io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000004c0)="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", 0x108, 0x4000, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xff}, 0x4}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa000000000010"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

549.768148ms ago: executing program 1 (id=1411):
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0xff, @mcast1, 0x2, 0x3}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0xfffd, 0x0, 0x0, {[@md5sig={0x13, 0xfffffeb9, "c5a7b796e1d5ec8b59e2ac10928dbfd5"}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000442f00fc000000000000000000000000000000fe8000000000000000000000000000aa042081000000000000000800000086dd080088be000000001000000001000000ec000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000006ab41, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000380)=0xfffff801)
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x8010500c, &(0x7f0000000100))
sendmmsg$inet(r3, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="ee4b1de9cc6bb5910e", 0x9}], 0x1}}], 0x1, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x2101)
pread64(r5, &(0x7f0000000340)=""/109, 0x6d, 0xffffffff)
io_setup(0xff, &(0x7f0000000380))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000200)=@assoc_value, &(0x7f0000000040)=0x8)
mount$fuse(0x20000000, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27}}, 0x50)

241.222788ms ago: executing program 3 (id=1412):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
socket$inet6(0xa, 0x802, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'wlan1\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x13}})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r3], 0x4c}}, 0x0)

0s ago: executing program 3 (id=1413):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f00000007c0)='./file0\x00', 0x920004d3)
open(&(0x7f0000000000)='./file0\x00', 0x41cd01, 0x0)
r2 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r2, 0x80000000000)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x8, 0x7, 0x3, 0x7, 0x5, 0x4, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000500)=0x401)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x1f)
read$dsp(r3, &(0x7f0000000200)=""/115, 0x73)
futex(&(0x7f0000000040), 0x84, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ummy_hcd
[  409.691338][ T5288] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8
[  409.701260][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.718283][ T5288] usb 1-1: Product: syz
[  409.722515][ T5288] usb 1-1: Manufacturer: syz
[  409.727146][ T5288] usb 1-1: SerialNumber: syz
[  409.742224][ T5288] usb 1-1: config 0 descriptor??
[  409.744721][ T5364] team0 (unregistering): Port device team_slave_0 removed
[  409.758407][ T5288] redrat3 1-1:0.0: Couldn't find all endpoints
[  409.888278][ T5283] usb 2-1: Using ep0 maxpacket: 16
[  409.908852][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  409.930710][ T5283] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  409.940935][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.949074][ T5283] usb 2-1: Product: syz
[  409.953278][ T5283] usb 2-1: Manufacturer: syz
[  409.957903][ T5283] usb 2-1: SerialNumber: syz
[  409.979655][ T5283] usb 2-1: config 0 descriptor??
[  410.024033][ T5283] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  410.188590][ T5235] Bluetooth: hci4: command tx timeout
[  410.317441][T11566] input: syz0 as /devices/virtual/input/input32
[  410.550822][ T1065] usb 2-1: Failed to submit usb control message: -71
[  410.557567][ T5283] usb 2-1: USB disconnect, device number 54
[  410.575481][ T1065] usb 2-1: unable to send the bmi data to the device: -71
[  410.589599][ T1065] usb 2-1: unable to get target info from device
[  410.602993][ T1065] usb 2-1: could not get target info (-71)
[  410.622912][ T1065] usb 2-1: could not probe fw (-71)
[  410.629743][   T29] kauditd_printk_skb: 39 callbacks suppressed
[  410.629759][   T29] audit: type=1326 audit(1725577907.519:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  410.659277][   T29] audit: type=1326 audit(1725577907.519:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  410.681931][   T29] audit: type=1326 audit(1725577907.519:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  410.757881][   T29] audit: type=1326 audit(1725577907.529:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  410.809401][   T29] audit: type=1326 audit(1725577907.529:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  410.854906][   T29] audit: type=1326 audit(1725577907.529:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  410.905083][   T29] audit: type=1326 audit(1725577907.529:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  410.942071][   T29] audit: type=1326 audit(1725577907.529:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  410.979143][   T29] audit: type=1326 audit(1725577907.529:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  411.006271][   T29] audit: type=1326 audit(1725577907.529:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf73bd579 code=0x7ffc0000
[  411.317360][T11482] chnl_net:caif_netlink_parms(): no params data found
[  411.435180][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.454583][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.467215][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.479348][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.504610][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.513108][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.609801][T11482] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.619552][T11482] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.626872][T11482] bridge_slave_0: entered allmulticast mode
[  411.636241][T11482] bridge_slave_0: entered promiscuous mode
[  411.645352][T11482] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.653392][T11482] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.661993][T11482] bridge_slave_1: entered allmulticast mode
[  411.673944][T11482] bridge_slave_1: entered promiscuous mode
[  411.699601][ T5283] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  411.708476][    T8] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  411.811743][T11482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.852258][T11482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.898592][ T5283] usb 2-1: Using ep0 maxpacket: 32
[  411.907287][ T5283] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  411.920210][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.952296][ T5283] usb 2-1: config 0 descriptor??
[  411.959250][T11482] team0: Port device team_slave_0 added
[  411.987492][ T5283] gspca_main: sunplus-2.14.0 probing 0458:7006
[  412.002310][T11482] team0: Port device team_slave_1 added
[  412.126256][T11482] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.146673][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.172598][    C1] vkms_vblank_simulate: vblank timer overrun
[  412.219458][T11482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.258643][ T5235] Bluetooth: hci4: command tx timeout
[  412.290668][T11482] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.353004][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.399779][   T25] usb 1-1: USB disconnect, device number 51
[  412.447125][T11482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.530096][ T5283] gspca_sunplus: reg_w_riv err -110
[  412.541270][ T5283] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  412.843027][T11619] syz.2.1231: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  412.843109][T11619] CPU: 1 UID: 0 PID: 11619 Comm: syz.2.1231 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0
[  412.843134][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  412.843148][T11619] Call Trace:
[  412.843157][T11619]  <TASK>
[  412.843168][T11619]  dump_stack_lvl+0x241/0x360
[  412.843198][T11619]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.843223][T11619]  ? __pfx__printk+0x10/0x10
[  412.843250][T11619]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  412.843273][T11619]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  412.843298][T11619]  warn_alloc+0x278/0x410
[  412.843325][T11619]  ? stack_depot_save_flags+0x29/0x830
[  412.843346][T11619]  ? __vmalloc_node_range_noprof+0x106/0x1400
[  412.843368][T11619]  ? __pfx_warn_alloc+0x10/0x10
[  412.843396][T11619]  ? kasan_save_track+0x3f/0x80
[  412.843419][T11619]  ? __kasan_kmalloc+0x98/0xb0
[  412.843446][T11619]  ? xsk_setsockopt+0x598/0x950
[  412.843471][T11619]  ? do_sock_setsockopt+0x3af/0x720
[  412.843491][T11619]  ? __sys_setsockopt+0x1ae/0x250
[  412.843511][T11619]  ? __ia32_sys_setsockopt+0xb5/0xd0
[  412.843532][T11619]  ? __do_fast_syscall_32+0xb4/0x110
[  412.843551][T11619]  ? do_fast_syscall_32+0x34/0x80
[  412.843570][T11619]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  412.843602][T11619]  __vmalloc_node_range_noprof+0x126/0x1400
[  412.843646][T11619]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  412.843671][T11619]  ? __kasan_kmalloc+0x98/0xb0
[  412.843692][T11619]  ? xskq_create+0x54/0x170
[  412.843721][T11619]  vmalloc_user_noprof+0x74/0x80
[  412.843739][T11619]  ? xskq_create+0xb6/0x170
[  412.843762][T11619]  xskq_create+0xb6/0x170
[  412.843790][T11619]  xsk_init_queue+0xa1/0x100
[  412.843819][T11619]  xsk_setsockopt+0x598/0x950
[  412.843848][T11619]  ? __pfx_xsk_setsockopt+0x10/0x10
[  412.843879][T11619]  ? __pfx_lock_acquire+0x10/0x10
[  412.843904][T11619]  ? aa_sock_opt_perm+0x79/0x120
[  412.843928][T11619]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  412.843953][T11619]  ? security_socket_setsockopt+0x87/0xb0
[  412.843980][T11619]  ? __pfx_xsk_setsockopt+0x10/0x10
[  412.844006][T11619]  do_sock_setsockopt+0x3af/0x720
[  412.844037][T11619]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  412.844062][T11619]  ? __fget_files+0x3f6/0x470
[  412.844107][T11619]  __sys_setsockopt+0x1ae/0x250
[  412.844137][T11619]  __ia32_sys_setsockopt+0xb5/0xd0
[  412.844165][T11619]  __do_fast_syscall_32+0xb4/0x110
[  412.844186][T11619]  ? ret_from_fork_asm+0x1a/0x30
[  412.844213][T11619]  ? lockdep_hardirqs_on+0x99/0x150
[  412.844239][T11619]  do_fast_syscall_32+0x34/0x80
[  412.844261][T11619]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  412.844288][T11619] RIP: 0023:0xf73bd579
[  412.844306][T11619] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  412.844323][T11619] RSP: 002b:00000000f569556c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  412.844346][T11619] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b
[  412.844362][T11619] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000020
[  412.844377][T11619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  412.844391][T11619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  412.844404][T11619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  412.844436][T11619]  </TASK>
[  412.844446][T11619] Mem-Info:
[  412.844457][T11619] active_anon:7236 inactive_anon:101 isolated_anon:0
[  412.844457][T11619]  active_file:16469 inactive_file:38507 isolated_file:0
[  412.844457][T11619]  unevictable:768 dirty:263 writeback:0
[  412.844457][T11619]  slab_reclaimable:7265 slab_unreclaimable:98079
[  412.844457][T11619]  mapped:22792 shmem:1256 pagetables:759
[  412.844457][T11619]  sec_pagetables:0 bounce:0
[  412.844457][T11619]  kernel_misc_reclaimable:0
[  412.844457][T11619]  free:1344544 free_pcp:1143 free_cma:0
[  412.844511][T11619] Node 0 active_anon:28944kB inactive_anon:404kB active_file:65876kB inactive_file:153956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:91168kB dirty:1048kB writeback:0kB shmem:3488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10304kB pagetables:3036kB sec_pagetables:0kB all_unreclaimable? no
[  412.844565][T11619] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  412.844615][T11619] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  412.844672][T11619] lowmem_reserve[]: 0 2467 2468 0 0
[  412.844720][T11619] Node 0 DMA32 free:1409596kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:28908kB inactive_anon:404kB active_file:65876kB inactive_file:153136kB unevictable:1536kB writepending:1044kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:4564kB local_pcp:3524kB free_cma:0kB
[  412.844779][T11619] lowmem_reserve[]: 0 0 0 0 0
[  412.844824][T11619] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  412.844878][T11619] lowmem_reserve[]: 0 0 0 0 0
[  412.844921][T11619] Node 1 Normal free:3953212kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  412.844978][T11619] lowmem_reserve[]: 0 0 0 0 0
[  412.845022][T11619] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  412.845170][T11619] Node 0 DMA32: 29*4kB (UME) 53*8kB (UE) 93*16kB (UME) 380*32kB (UME) 352*64kB (UME) 47*128kB (UME) 27*256kB (UME) 34*512kB (UME) 21*1024kB (UME) 13*2048kB (UME) 316*4096kB (UM) = 1409516kB
[  412.845363][T11619] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  412.845484][T11619] Node 1 Normal: 3*4kB (UM) 12*8kB (UM) 11*16kB (UM) 13*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 2*512kB (UM) 4*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3953212kB
[  412.845675][T11619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  412.845693][T11619] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  412.845711][T11619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  412.845729][T11619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  412.845746][T11619] 56334 total pagecache pages
[  412.845756][T11619] 101 pages in swap cache
[  412.845765][T11619] Free swap  = 123556kB
[  412.845775][T11619] Total swap = 124996kB
[  412.845784][T11619] 2097051 pages RAM
[  412.845793][T11619] 0 pages HighMem/MovableOnly
[  412.845802][T11619] 426967 pages reserved
[  412.845812][T11619] 0 pages cma reserved
[  412.892327][T11482] hsr_slave_0: entered promiscuous mode
[  413.573665][ T5235] Bluetooth: hci3: unexpected event 0x01 length: 12 > 1
[  413.621751][T11482] hsr_slave_1: entered promiscuous mode
[  413.634061][T11482] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  413.651521][T11482] Cannot create hsr debugfs directory
[  413.728544][ T5283] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  413.730114][ T5288] usb 2-1: USB disconnect, device number 55
[  413.908928][ T5283] usb 1-1: Using ep0 maxpacket: 16
[  413.921584][ T5283] usb 1-1: no configurations
[  413.936685][ T5283] usb 1-1: can't read configurations, error -22
[  414.109830][ T5283] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  414.318422][ T5283] usb 1-1: Using ep0 maxpacket: 16
[  414.324628][ T5283] usb 1-1: no configurations
[  414.329524][ T5283] usb 1-1: can't read configurations, error -22
[  414.338424][ T5235] Bluetooth: hci4: command tx timeout
[  414.356434][ T5283] usb usb1-port1: attempt power cycle
[  414.520454][T11656] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.529451][T11656] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.559286][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'.
[  414.575023][T11656] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.583499][T11656] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.593042][T11656] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.600337][T11656] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.622048][T11660] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1238'.
[  414.631900][T11660] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1238'.
[  414.639757][T11656] team0: Port device bridge0 added
[  414.644977][T11654] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1238'.
[  414.830296][ T5283] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  414.863474][ T5283] usb 1-1: Using ep0 maxpacket: 16
[  414.866611][ T5283] usb 1-1: no configurations
[  414.866634][ T5283] usb 1-1: can't read configurations, error -22
[  414.959881][T11482] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  414.970143][T11482] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  414.991567][T11482] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  415.011512][ T5283] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  415.024585][T11482] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  415.048658][   T25] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  415.058944][ T5283] usb 1-1: Using ep0 maxpacket: 16
[  415.075000][ T5283] usb 1-1: no configurations
[  415.094739][ T5283] usb 1-1: can't read configurations, error -22
[  415.111134][ T5283] usb usb1-port1: unable to enumerate USB device
[  415.248313][   T25] usb 4-1: Using ep0 maxpacket: 32
[  415.264889][   T25] usb 4-1: descriptor type invalid, skip
[  415.274690][T11482] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.286921][   T25] usb 4-1: descriptor type invalid, skip
[  415.307143][   T25] usb 4-1: descriptor type invalid, skip
[  415.324797][   T25] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  415.350518][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  415.362707][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.371479][   T25] usb 4-1: Product: syz
[  415.375804][   T25] usb 4-1: Manufacturer: syz
[  415.397512][   T25] usb 4-1: SerialNumber: syz
[  415.413240][T11482] 8021q: adding VLAN 0 to HW filter on device team0
[  415.444120][   T25] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  415.514455][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.521727][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.565215][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.572577][ T5364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.654596][   T29] kauditd_printk_skb: 109 callbacks suppressed
[  415.654647][   T29] audit: type=1326 audit(1725577912.539:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  415.695726][   T29] audit: type=1326 audit(1725577912.539:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  415.774761][   T29] audit: type=1326 audit(1725577912.579:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  415.796881][    C1] vkms_vblank_simulate: vblank timer overrun
[  415.816936][T11482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  415.856985][   T29] audit: type=1326 audit(1725577912.579:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  415.879134][    C1] vkms_vblank_simulate: vblank timer overrun
[  415.889468][   T29] audit: type=1326 audit(1725577912.579:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  415.911562][    C1] vkms_vblank_simulate: vblank timer overrun
[  415.917992][   T29] audit: type=1326 audit(1725577912.579:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  415.979183][   T29] audit: type=1326 audit(1725577912.579:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=383 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  416.015699][   T29] audit: type=1326 audit(1725577912.579:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  416.041893][T11482] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.057853][   T29] audit: type=1326 audit(1725577912.589:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1238" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000
[  416.080005][    C1] vkms_vblank_simulate: vblank timer overrun
[  416.123365][   T29] audit: type=1326 audit(1725577912.859:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000
[  416.128080][T11482] veth0_vlan: entered promiscuous mode
[  416.145463][    C1] vkms_vblank_simulate: vblank timer overrun
[  416.254742][ T5288] usb 4-1: USB disconnect, device number 47
[  416.255164][T11482] veth1_vlan: entered promiscuous mode
[  416.473306][T11482] veth0_macvtap: entered promiscuous mode
[  416.527480][T11482] veth1_macvtap: entered promiscuous mode
[  416.584190][T11704] fuse: Unknown parameter '0x0000000000000007'
[  416.590375][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.590400][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.590411][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.590423][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.590435][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.590447][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.590458][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.590470][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.590482][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.590495][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.786741][T11482] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.812949][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.848350][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.888197][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.919408][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.939172][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.957792][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.978673][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.989294][    T8] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  416.998398][ T5288] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  417.008609][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.024210][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.035023][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.046888][T11482] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.190500][ T5288] usb 4-1: Using ep0 maxpacket: 32
[  417.199183][    T8] usb 2-1: Using ep0 maxpacket: 16
[  417.212769][    T8] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  417.212782][ T5288] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  417.212808][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.228628][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.262159][    T8] usb 2-1: Product: syz
[  417.286179][    T8] usb 2-1: Manufacturer: syz
[  417.300375][ T5288] usb 4-1: config 0 descriptor??
[  417.305000][    T8] usb 2-1: SerialNumber: syz
[  417.312866][ T1065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.320456][ T5288] gspca_main: sunplus-2.14.0 probing 0458:7006
[  417.333471][    T8] usb 2-1: config 0 descriptor??
[  417.352674][    T8] visor 2-1:0.0: Sony Clie 3.5 converter detected
[  417.428721][T11482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.437865][T11482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.466611][T11482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.478833][T11482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.538629][ T5283] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  417.582383][    T8] usb 2-1: clie_3_5_startup: get config number bad return length: 0
[  417.598527][    T8] visor 2-1:0.0: probe with driver visor failed with error -5
[  417.632563][ T1065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.758667][ T5283] usb 1-1: Using ep0 maxpacket: 16
[  417.767634][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  417.794327][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  417.810812][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  417.822235][ T5240] usb 2-1: USB disconnect, device number 56
[  417.834313][ T5283] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  417.845256][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  417.854536][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.858593][ T5288] gspca_sunplus: reg_w_riv err -110
[  417.866328][ T5283] usb 1-1: Product: syz
[  417.872454][ T5283] usb 1-1: Manufacturer: syz
[  417.879168][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  417.886634][ T5283] usb 1-1: SerialNumber: syz
[  417.891611][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  417.901187][ T5283] usb 1-1: config 0 descriptor??
[  417.906535][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  417.914107][ T5288] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[  417.917357][ T5283] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  417.932148][ T5283] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  418.010256][ T1065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.190175][ T1065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.234991][T11735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.273118][T11735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.341880][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'.
[  418.500800][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.529410][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.569709][ T5235] Bluetooth: hci2: unexpected event 0x01 length: 12 > 1
[  418.630863][ T5285] usb 4-1: USB disconnect, device number 48
[  418.669898][ T5283] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  418.747042][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.768165][ T5283] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  418.776324][ T5283] em28xx 1-1:0.0: board has no eeprom
[  418.792465][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.870141][ T5283] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  418.885688][ T5283] em28xx 1-1:0.0: dvb set to bulk mode.
[  418.899785][ T1065] bridge_slave_1: left allmulticast mode
[  418.910245][ T5286] em28xx 1-1:0.0: Binding DVB extension
[  418.926607][ T5283] usb 1-1: USB disconnect, device number 56
[  418.935622][ T1065] bridge_slave_1: left promiscuous mode
[  418.939738][ T5283] em28xx 1-1:0.0: Disconnecting em28xx
[  418.956695][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.982734][ T1065] bridge_slave_0: left allmulticast mode
[  419.005858][ T1065] bridge_slave_0: left promiscuous mode
[  419.034886][ T5286] em28xx 1-1:0.0: Registering input extension
[  419.035482][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.058609][ T5283] em28xx 1-1:0.0: Closing input extension
[  419.119081][ T5283] em28xx 1-1:0.0: Freeing device
[  419.537372][T11762] FAULT_INJECTION: forcing a failure.
[  419.537372][T11762] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  419.554384][T11762] CPU: 1 UID: 0 PID: 11762 Comm: syz.0.1256 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0
[  419.565184][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  419.575235][T11762] Call Trace:
[  419.578508][T11762]  <TASK>
[  419.581428][T11762]  dump_stack_lvl+0x241/0x360
[  419.586124][T11762]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.591307][T11762]  ? __pfx__printk+0x10/0x10
[  419.595882][T11762]  ? __pfx_lock_release+0x10/0x10
[  419.600896][T11762]  should_fail_ex+0x3b0/0x4e0
[  419.605560][T11762]  _copy_from_user+0x2f/0xe0
[  419.610131][T11762]  drm_ioctl+0x577/0xad0
[  419.614356][T11762]  ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10
[  419.620595][T11762]  ? __pfx_drm_ioctl+0x10/0x10
[  419.625360][T11762]  ? drm_compat_ioctl+0x11f/0x350
[  419.630392][T11762]  ? bpf_lsm_file_ioctl_compat+0x9/0x10
[  419.635962][T11762]  ? security_file_ioctl_compat+0x87/0xb0
[  419.641728][T11762]  __se_compat_sys_ioctl+0x51c/0xca0
[  419.647019][T11762]  ? __pfx___se_compat_sys_ioctl+0x10/0x10
[  419.652855][T11762]  ? ksys_write+0x220/0x2c0
[  419.657356][T11762]  ? ksys_write+0x234/0x2c0
[  419.661882][T11762]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  419.667857][T11762]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  419.674182][T11762]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  419.680784][T11762]  ? lockdep_hardirqs_on+0x99/0x150
[  419.686016][T11762]  __do_fast_syscall_32+0xb4/0x110
[  419.691146][T11762]  ? asm_common_interrupt+0x26/0x40
[  419.696343][T11762]  ? lockdep_hardirqs_on+0x99/0x150
[  419.701535][T11762]  do_fast_syscall_32+0x34/0x80
[  419.706375][T11762]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  419.712693][T11762] RIP: 0023:0xf7fa2579
[  419.716924][T11762] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  419.736533][T11762] RSP: 002b:00000000f571556c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  419.744944][T11762] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c02064b2
[  419.752906][T11762] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000
[  419.760866][T11762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  419.768823][T11762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  419.776781][T11762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  419.784757][T11762]  </TASK>
[  419.787830][    C1] vkms_vblank_simulate: vblank timer overrun
[  419.962541][ T1065] team0: Port device bridge0 removed
[  420.018979][ T5235] Bluetooth: hci1: command tx timeout
[  420.526393][ T1065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.553648][ T1065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.581798][ T1065] bond0 (unregistering): Released all slaves
[  420.971429][T11729] chnl_net:caif_netlink_parms(): no params data found
[  421.477796][ T1065] hsr_slave_0: left promiscuous mode
[  421.492929][ T1065] hsr_slave_1: left promiscuous mode
[  421.499579][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.507039][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.519780][ T5286] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  421.528840][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.536387][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.582245][ T1065] veth1_macvtap: left promiscuous mode
[  421.587983][ T1065] veth0_macvtap: left promiscuous mode
[  421.592034][T11789] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  421.593958][ T1065] veth1_vlan: left promiscuous mode
[  421.606795][ T1065] veth0_vlan: left promiscuous mode
[  421.719051][ T5286] usb 4-1: Using ep0 maxpacket: 32
[  421.751396][ T5286] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  421.771299][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.795077][ T5286] usb 4-1: config 0 descriptor??
[  421.816378][ T5286] gspca_main: sunplus-2.14.0 probing 0458:7006
[  422.098481][ T5235] Bluetooth: hci1: command tx timeout
[  422.358599][ T5286] gspca_sunplus: reg_w_riv err -110
[  422.365743][ T5286] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[  422.917181][ T5235] Bluetooth: hci2: unexpected event 0x01 length: 12 > 1
[  423.245025][   T29] kauditd_printk_skb: 89 callbacks suppressed
[  423.245045][   T29] audit: type=1326 audit(1725577920.129:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.288444][   T29] audit: type=1326 audit(1725577920.149:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.313400][   T29] audit: type=1326 audit(1725577920.179:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.335983][   T29] audit: type=1326 audit(1725577920.179:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.360841][   T29] audit: type=1326 audit(1725577920.179:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.410428][   T29] audit: type=1326 audit(1725577920.179:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.434446][   T29] audit: type=1326 audit(1725577920.179:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.482456][   T29] audit: type=1326 audit(1725577920.179:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.539489][ T1065] team0 (unregistering): Port device team_slave_1 removed
[  423.559397][   T29] audit: type=1326 audit(1725577920.179:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.641446][   T29] audit: type=1326 audit(1725577920.179:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.1.1266" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000
[  423.708995][ T1065] team0 (unregistering): Port device team_slave_0 removed
[  423.758015][T11832] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1267'.
[  424.178439][ T5235] Bluetooth: hci1: command tx timeout
[  424.797400][T11729] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.808464][T11729] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.815757][T11729] bridge_slave_0: entered allmulticast mode
[  424.915833][T11729] bridge_slave_0: entered promiscuous mode
[  424.946887][T11729] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.972379][T11729] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.985559][T11729] bridge_slave_1: entered allmulticast mode
[  425.006092][T11729] bridge_slave_1: entered promiscuous mode
[  425.052038][   T25] usb 4-1: USB disconnect, device number 49
[  425.216757][T11729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.256871][T11729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.572749][T11729] team0: Port device team_slave_0 added
[  425.633235][T11729] team0: Port device team_slave_1 added
[  425.849277][T11729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.874138][T11729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.970979][T11729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.987501][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'.
[  426.045670][T11729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.068338][T11729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.152567][T11729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.258407][ T5235] Bluetooth: hci1: command tx timeout
[  426.411539][T11729] hsr_slave_0: entered promiscuous mode
[  426.480896][T11729] hsr_slave_1: entered promiscuous mode
[  426.713538][T11891] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  426.720108][T11891] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  426.754969][T11891] vhci_hcd vhci_hcd.0: Device attached
[  427.078288][   T25] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  427.086191][ T5240] usb 16-1: SetAddress Request (2) to port 0
[  427.100087][ T5240] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd
[  427.168785][T11896] input: syz1 as /devices/virtual/input/input34
[  427.268250][ T5288] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  427.303455][   T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[  427.303493][   T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  427.303517][   T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  427.303557][   T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  427.303580][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.327360][   T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  427.422837][ T5288] usb 4-1: device descriptor read/64, error -71
[  427.581532][   T25] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12
[  427.608478][   T25] usb 5-1: USB disconnect, device number 53
[  427.699553][ T5288] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  427.876176][ T5288] usb 4-1: device descriptor read/64, error -71
[  427.956709][T11729] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  427.984081][T11729] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  428.010890][ T5288] usb usb4-port1: attempt power cycle
[  428.088820][ T1065] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.110845][T11729] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  428.122577][T11729] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  428.178553][ T6515] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  428.205984][ T1065] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.405617][ T1065] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.418713][ T6515] usb 1-1: Using ep0 maxpacket: 32
[  428.428694][ T6515] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  428.448265][ T5288] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  428.458225][ T6515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.489390][ T6515] usb 1-1: config 0 descriptor??
[  428.525539][ T5288] usb 4-1: device descriptor read/8, error -71
[  428.535332][ T6515] gspca_main: sunplus-2.14.0 probing 0458:7006
[  428.594373][ T1065] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.669312][T11729] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.689435][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  428.704001][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  428.716788][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  428.727748][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  428.742648][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  428.753085][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  428.828313][ T5288] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  428.882558][T11729] 8021q: adding VLAN 0 to HW filter on device team0
[  428.918831][ T5288] usb 4-1: device descriptor read/8, error -71
[  429.000267][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.007507][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.042724][ T5288] usb usb4-port1: unable to enumerate USB device
[  429.061653][ T6515] gspca_sunplus: reg_w_riv err -110
[  429.085377][ T6515] sunplus 1-1:0.0: probe with driver sunplus failed with error -110
[  429.160419][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.167578][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.283425][ T1065] bridge_slave_1: left allmulticast mode
[  429.302957][ T1065] bridge_slave_1: left promiscuous mode
[  429.318783][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.336490][ T1065] bridge_slave_0: left allmulticast mode
[  429.343600][ T1065] bridge_slave_0: left promiscuous mode
[  429.344769][   T29] kauditd_printk_skb: 83 callbacks suppressed
[  429.344783][   T29] audit: type=1326 audit(1725577926.239:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.359810][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.427932][   T29] audit: type=1326 audit(1725577926.269:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.478339][   T29] audit: type=1326 audit(1725577926.279:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.517821][ T5231] Bluetooth: hci0: unexpected event 0x01 length: 12 > 1
[  429.517921][   T29] audit: type=1326 audit(1725577926.279:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.548626][   T29] audit: type=1326 audit(1725577926.279:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.573502][   T29] audit: type=1326 audit(1725577926.289:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.595968][   T29] audit: type=1326 audit(1725577926.289:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.618392][   T29] audit: type=1326 audit(1725577926.289:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.651117][   T29] audit: type=1326 audit(1725577926.289:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.682972][   T29] audit: type=1326 audit(1725577926.289:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  429.767509][T11892] vhci_hcd: connection reset by peer
[  429.782963][   T53] vhci_hcd: stop threads
[  429.796922][   T53] vhci_hcd: release socket
[  429.842968][   T53] vhci_hcd: disconnect device
[  430.022893][T11953] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1291'.
[  430.172975][ T5283] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  430.341437][ T5283] usb 5-1: device descriptor read/64, error -71
[  430.366031][ T1065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  430.379063][ T1065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  430.394019][ T1065] bond0 (unregistering): Released all slaves
[  430.500916][T11953] Êü�: entered promiscuous mode
[  430.569791][ T5286] usb 1-1: USB disconnect, device number 57
[  430.629877][ T5283] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  430.798255][ T5283] usb 5-1: device descriptor read/64, error -71
[  430.827923][ T5231] Bluetooth: hci3: command tx timeout
[  430.938059][ T5283] usb usb5-port1: attempt power cycle
[  431.104280][T11729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.199015][ T1065] hsr_slave_0: left promiscuous mode
[  431.228386][ T1065] hsr_slave_1: left promiscuous mode
[  431.272623][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  431.292394][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_0
[  431.315591][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  431.348970][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.368374][ T5283] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  431.424163][ T1065] veth1_macvtap: left promiscuous mode
[  431.438363][ T5283] usb 5-1: device descriptor read/8, error -71
[  431.454456][ T1065] veth0_macvtap: left promiscuous mode
[  431.488501][ T1065] veth1_vlan: left promiscuous mode
[  431.522553][ T1065] veth0_vlan: left promiscuous mode
[  431.708334][ T5283] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  431.751905][ T5283] usb 5-1: device descriptor read/8, error -71
[  431.888548][ T5283] usb usb5-port1: unable to enumerate USB device
[  432.186546][ T5240] usb 16-1: device descriptor read/8, error -110
[  432.620229][ T5240] usb usb16-port1: attempt power cycle
[  432.670571][ T1065] team0 (unregistering): Port device team_slave_1 removed
[  432.695127][ T5283] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  432.747503][ T1065] team0 (unregistering): Port device team_slave_0 removed
[  432.863597][ T5283] usb 4-1: device descriptor read/64, error -71
[  432.902718][ T5231] Bluetooth: hci3: command tx timeout
[  433.152682][ T5283] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  433.287156][ T5240] usb usb16-port1: unable to enumerate USB device
[  433.326088][ T5283] usb 4-1: device descriptor read/64, error -71
[  433.458911][ T5283] usb usb4-port1: attempt power cycle
[  433.651163][T11729] veth0_vlan: entered promiscuous mode
[  433.685252][T11729] veth1_vlan: entered promiscuous mode
[  433.703894][T11931] chnl_net:caif_netlink_parms(): no params data found
[  433.878375][ T5283] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  433.928804][ T5283] usb 4-1: device descriptor read/8, error -71
[  434.017323][T11931] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.053804][T11931] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.090695][T11931] bridge_slave_0: entered allmulticast mode
[  434.101965][T11931] bridge_slave_0: entered promiscuous mode
[  434.117207][T11729] veth0_macvtap: entered promiscuous mode
[  434.131291][T11931] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.156863][T11931] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.177353][T11931] bridge_slave_1: entered allmulticast mode
[  434.185713][T11931] bridge_slave_1: entered promiscuous mode
[  434.208468][ T5283] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  434.216470][T11729] veth1_macvtap: entered promiscuous mode
[  434.259636][ T5283] usb 4-1: device descriptor read/8, error -71
[  434.301400][T11931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.315041][T11931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.330489][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  434.342949][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.353122][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  434.366025][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.376285][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  434.386940][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.397314][ T5283] usb usb4-port1: unable to enumerate USB device
[  434.404600][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  434.416111][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.427857][T11729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.465034][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.483157][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.494431][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.505581][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.515604][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.526173][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.536678][T11729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.547207][T11729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.558913][T11729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.575509][T11931] team0: Port device team_slave_0 added
[  434.594020][T11729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.606596][T11729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.616135][T11729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.629938][T11729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.645373][T11931] team0: Port device team_slave_1 added
[  434.687106][T11931] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.694949][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.724214][T11931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.737153][T11931] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.746593][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.774932][T11931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  434.905810][T11931] hsr_slave_0: entered promiscuous mode
[  434.929661][T11931] hsr_slave_1: entered promiscuous mode
[  434.937162][T11931] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  434.946102][T11931] Cannot create hsr debugfs directory
[  434.978976][ T5231] Bluetooth: hci3: command tx timeout
[  435.114404][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.132154][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.207011][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.227103][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.735382][   T29] kauditd_printk_skb: 80 callbacks suppressed
[  435.735399][   T29] audit: type=1326 audit(1725577932.619:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.2.1302" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746d579 code=0x0
[  436.103826][T11931] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  436.165454][T11931] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  436.241603][T11931] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  436.292007][T11931] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  436.505174][T11931] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.572513][T11931] 8021q: adding VLAN 0 to HW filter on device team0
[  436.613091][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.620352][ T5364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.669930][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.677182][ T5364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.906641][T11931] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.938446][T12085] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1308'.
[  437.059064][ T5231] Bluetooth: hci3: command tx timeout
[  437.084282][T11931] veth0_vlan: entered promiscuous mode
[  437.137739][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  437.152169][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  437.163884][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  437.196385][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  437.205904][T11931] veth1_vlan: entered promiscuous mode
[  437.228643][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  437.245608][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  437.374096][T11931] veth0_macvtap: entered promiscuous mode
[  437.474824][T11931] veth1_macvtap: entered promiscuous mode
[  437.567992][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.582648][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.594239][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.605222][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.615227][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.626876][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.638023][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.659589][ T5240] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  437.668250][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.692483][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.711350][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.724667][T11931] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.770996][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.783489][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.794863][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.806620][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.816897][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.828038][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.838050][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.850439][ T5240] usb 3-1: Using ep0 maxpacket: 32
[  437.856053][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.866610][T11931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.877404][T11931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.889375][ T5240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.904522][T11931] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.912989][ T5240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.928802][ T5240] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  437.938094][ T5240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.941133][T11931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.967035][ T5240] usb 3-1: config 0 descriptor??
[  437.976707][T11931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.995789][T11931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.009291][T11931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.010529][ T5240] hub 3-1:0.0: USB hub found
[  438.138057][T12098] chnl_net:caif_netlink_parms(): no params data found
[  438.212031][ T5240] hub 3-1:0.0: 1 port detected
[  438.250854][ T5364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.276201][ T5364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.342090][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.353054][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.365913][T12098] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.376926][T12098] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.386984][T12098] bridge_slave_0: entered allmulticast mode
[  438.394994][T12098] bridge_slave_0: entered promiscuous mode
[  438.407910][T12098] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.416272][T12098] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.424832][T12098] bridge_slave_1: entered allmulticast mode
[  438.433186][T12098] bridge_slave_1: entered promiscuous mode
[  438.513863][T12098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.528602][    T8] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  438.535830][T12098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.649208][T12098] team0: Port device team_slave_0 added
[  438.684534][T12098] team0: Port device team_slave_1 added
[  438.728453][    T8] usb 1-1: Using ep0 maxpacket: 16
[  438.749484][    T8] usb 1-1: config index 0 descriptor too short (expected 45033, got 36)
[  438.764321][    T8] usb 1-1: config 42 has too many interfaces: 241, using maximum allowed: 32
[  438.774859][    T8] usb 1-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config
[  438.787223][    T8] usb 1-1: config 42 has 1 interface, different from the descriptor's value: 241
[  438.804521][    T8] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  438.824106][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.829192][T12098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.848498][    T8] usb 1-1: Product: syz
[  438.852706][    T8] usb 1-1: Manufacturer: syz
[  438.858415][T12098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  438.898624][    T8] usb 1-1: SerialNumber: syz
[  438.938365][T12098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.951267][T12098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.965073][   T25] hub 3-1:0.0: activate --> -90
[  438.974868][T12098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.005747][T12098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.055352][    T8] peak_usb 1-1:42.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[  439.077923][    T8] peak_usb 1-1:42.0: unable to read PCAN-USB serial number (err -22)
[  439.142536][T12098] hsr_slave_0: entered promiscuous mode
[  439.156948][T12098] hsr_slave_1: entered promiscuous mode
[  439.164416][T12098] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  439.175421][    T8] peak_usb 1-1:42.0: probe with driver peak_usb failed with error -22
[  439.195342][T12098] Cannot create hsr debugfs directory
[  439.300072][ T5231] Bluetooth: hci2: command tx timeout
[  439.525218][   T25] usb 3-1-port1: cannot disable (err = -71)
[  439.548879][ T5240] usb 3-1: USB disconnect, device number 47
[  439.674721][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'.
[  439.685682][T12131] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1315'.
[  439.696907][T12131] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1315'.
[  439.726842][T12098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.812672][T12098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.915653][T12098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.983618][    T8] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  439.993323][T12098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.160608][T12098] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  440.172290][    T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  440.172962][T12098] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  440.210335][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  440.211433][T12098] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  440.237634][T12098] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  440.245693][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  440.271527][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  440.285129][    T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  440.299043][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.315927][    T8] usb 2-1: config 0 descriptor??
[  440.380947][T12098] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.410883][T12098] 8021q: adding VLAN 0 to HW filter on device team0
[  440.434872][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.442125][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.467216][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.474866][ T5364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.503185][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  440.518788][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  440.527050][T12098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  440.539530][T12098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  440.602805][T12098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.666623][T12098] veth0_vlan: entered promiscuous mode
[  440.686022][T12098] veth1_vlan: entered promiscuous mode
[  440.727532][T12098] veth0_macvtap: entered promiscuous mode
[  440.741741][T12098] veth1_macvtap: entered promiscuous mode
[  440.755290][    T8] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  440.770378][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.782638][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.793367][    T8] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  440.803145][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.828902][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.840062][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.853283][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.863629][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.875664][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.886158][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.897145][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.907825][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.921358][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.934161][T12098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.951052][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  440.962116][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.973291][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  440.984366][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.994650][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.008229][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.022728][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.035348][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.046758][ T5240] usb 1-1: USB disconnect, device number 58
[  441.047225][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.080331][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.082303][T12135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.090336][T12098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.090358][T12098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.092151][T12098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.134993][T12098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.154888][T12098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.165261][T12098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.176059][T12098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.185602][T12135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.276256][    T8] usb 2-1: USB disconnect, device number 57
[  441.378953][ T5231] Bluetooth: hci2: command tx timeout
[  441.418885][ T5364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.440614][T12142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1318'.
[  441.467121][ T5364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.495875][ T5364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.504407][ T5364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.599889][T12144] fuse: Bad value for 'group_id'
[  441.613485][T12144] fuse: Bad value for 'group_id'
[  441.792947][ T5285] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  441.960378][ T5285] usb 1-1: device descriptor read/64, error -71
[  442.026707][   T29] audit: type=1326 audit(1725577938.909:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.059140][   T29] audit: type=1326 audit(1725577938.909:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.088116][   T29] audit: type=1326 audit(1725577938.939:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.126982][   T29] audit: type=1326 audit(1725577938.939:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.152440][   T29] audit: type=1326 audit(1725577938.939:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.177538][   T29] audit: type=1326 audit(1725577938.939:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.203899][   T29] audit: type=1326 audit(1725577938.939:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.226457][   T29] audit: type=1326 audit(1725577938.939:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.250877][ T5285] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  442.273284][   T29] audit: type=1326 audit(1725577938.939:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.295784][   T29] audit: type=1326 audit(1725577938.939:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  442.328810][ T5240] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  442.420784][ T5285] usb 1-1: device descriptor read/64, error -71
[  442.522141][ T5240] usb 2-1: Using ep0 maxpacket: 8
[  442.536837][ T5240] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  442.550482][ T5285] usb usb1-port1: attempt power cycle
[  442.572816][ T5240] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  442.598265][ T5240] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  442.625482][ T5240] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  442.647747][ T5240] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  442.654136][T12166] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1325'.
[  442.657443][ T5240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.704810][T12166] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1325'.
[  442.904201][T12171] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  442.932180][ T5240] usb 2-1: GET_CAPABILITIES returned 0
[  442.939907][ T5240] usbtmc 2-1:16.0: can't read capabilities
[  442.999121][ T5285] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  443.063703][ T5285] usb 1-1: device descriptor read/8, error -71
[  443.178478][ T5288] usb 5-1: new low-speed USB device number 58 using dummy_hcd
[  443.228479][ T1178] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  443.372068][ T5288] usb 5-1: config 3 has an invalid interface number: 96 but max is 1
[  443.386304][ T5288] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping
[  443.388668][ T5285] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  443.405535][ T5288] usb 5-1: config 3 has an invalid interface number: 16 but max is 1
[  443.416660][ T5288] usb 5-1: config 3 has an invalid descriptor of length 126, skipping remainder of the config
[  443.427676][ T5288] usb 5-1: config 3 has no interface number 0
[  443.435210][ T5288] usb 5-1: config 3 has no interface number 1
[  443.438340][ T1178] usb 4-1: Using ep0 maxpacket: 16
[  443.441659][ T5288] usb 5-1: config 3 interface 96 altsetting 255 endpoint 0xC has invalid maxpacket 1024, setting to 8
[  443.448048][ T5285] usb 1-1: device descriptor read/8, error -71
[  443.466478][ T5231] Bluetooth: hci2: command tx timeout
[  443.466493][ T5288] usb 5-1: config 3 interface 96 altsetting 255 endpoint 0xA has invalid maxpacket 512, setting to 8
[  443.485674][ T1178] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  443.494029][ T1178] usb 4-1: config 0 has no interface number 0
[  443.500025][ T5288] usb 5-1: config 3 interface 96 altsetting 255 endpoint 0x5 has invalid maxpacket 80, setting to 8
[  443.500249][ T1178] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  443.523787][ T1178] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  443.523935][ T5288] usb 5-1: config 3 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  443.532914][ T1178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.532942][ T1178] usb 4-1: Product: syz
[  443.532957][ T1178] usb 4-1: Manufacturer: syz
[  443.532972][ T1178] usb 4-1: SerialNumber: syz
[  443.560556][ T1178] usb 4-1: config 0 descriptor??
[  443.599013][ T5285] usb usb1-port1: unable to enumerate USB device
[  443.602516][ T5288] usb 5-1: config 3 interface 96 has no altsetting 0
[  443.675110][ T5240] usb 2-1: USB disconnect, device number 58
[  443.783536][ T1178] usbtouchscreen 4-1:0.214: Failed to read FW rev: 0
[  443.813128][ T1178] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -5
[  443.933300][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1331'.
[  444.138755][ T6515] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  444.244337][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'.
[  444.253586][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'.
[  444.318381][ T6515] usb 3-1: Using ep0 maxpacket: 16
[  444.329930][ T6515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  444.352716][ T6515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.366312][ T6515] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  444.380282][ T6515] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  444.393418][ T6515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.420942][ T6515] usb 3-1: config 0 descriptor??
[  444.853613][ T6515] microsoft 0003:045E:07DA.0018: unbalanced collection at end of report description
[  444.872839][ T6515] microsoft 0003:045E:07DA.0018: parse failed
[  444.885566][ T6515] microsoft 0003:045E:07DA.0018: probe with driver microsoft failed with error -22
[  445.108314][ T5285] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  445.133478][ T1178] usb 3-1: USB disconnect, device number 48
[  445.308794][ T5285] usb 1-1: Using ep0 maxpacket: 8
[  445.324698][ T5285] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=58.58
[  445.334130][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.344908][ T5285] usb 1-1: config 0 descriptor??
[  445.355431][ T5285] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now attached
[  445.418267][    T8] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  445.538482][ T5231] Bluetooth: hci2: command tx timeout
[  445.565166][ T5285] usb 1-1: USB disconnect, device number 63
[  445.575618][ T5285] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now disconnected
[  445.588224][    T8] usb 2-1: device descriptor read/64, error -71
[  445.868471][    T8] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  445.900161][ T5286] usb 4-1: USB disconnect, device number 58
[  445.966543][ T5288] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=3d.37
[  445.976453][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.025501][ T5288] usb 5-1: can't set config #3, error -71
[  446.068278][    T8] usb 2-1: device descriptor read/64, error -71
[  446.068374][ T5288] usb 5-1: USB disconnect, device number 58
[  446.226706][    T8] usb usb2-port1: attempt power cycle
[  446.254940][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'.
[  446.578279][ T5288] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  446.650675][    T8] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  446.699466][    T8] usb 2-1: device descriptor read/8, error -71
[  446.770215][ T5288] usb 5-1: Using ep0 maxpacket: 8
[  446.798541][ T5288] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  446.828484][ T5288] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  446.849095][ T5288] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  446.880211][ T5288] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  446.945409][ T5288] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  446.956055][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.008539][    T8] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  447.047409][    T8] usb 2-1: device descriptor read/8, error -71
[  447.190447][    T8] usb usb2-port1: unable to enumerate USB device
[  447.221897][   T29] kauditd_printk_skb: 151 callbacks suppressed
[  447.221917][   T29] audit: type=1326 audit(1725577944.109:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  447.227363][ T5288] usb 5-1: GET_CAPABILITIES returned 0
[  447.243875][   T29] audit: type=1326 audit(1725577944.109:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  447.307240][ T5288] usbtmc 5-1:16.0: can't read capabilities
[  447.363019][   T29] audit: type=1326 audit(1725577944.109:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  447.385032][    C0] vkms_vblank_simulate: vblank timer overrun
[  447.446657][T12228] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1348'.
[  447.448209][   T29] audit: type=1326 audit(1725577944.109:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  447.493964][T12228] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1348'.
[  447.510597][   T29] audit: type=1326 audit(1725577944.109:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  447.532708][    C0] vkms_vblank_simulate: vblank timer overrun
[  447.565755][   T29] audit: type=1326 audit(1725577944.309:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  447.591393][   T29] audit: type=1326 audit(1725577944.319:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  448.002455][ T5288] usb 5-1: USB disconnect, device number 59
[  448.199833][ T5287] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  448.329612][T12257] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1354'.
[  448.390194][ T5287] usb 3-1: Using ep0 maxpacket: 16
[  448.413155][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.456092][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.485945][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  448.518915][ T5287] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  448.555103][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.587569][ T5287] usb 3-1: config 0 descriptor??
[  448.808307][ T5285] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  448.810857][ T5287] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max
[  448.837071][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  448.846697][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  448.864907][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  448.875294][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  448.901026][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  448.921537][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  448.934583][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  448.949969][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  448.970811][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  448.990449][ T5287] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  449.008778][ T5285] usb 4-1: Using ep0 maxpacket: 8
[  449.019970][ T5285] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  449.033527][ T5287] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0019/input/input36
[  449.045345][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.073659][ T5285] usb 4-1: Product: syz
[  449.080844][ T5285] usb 4-1: Manufacturer: syz
[  449.085499][ T5285] usb 4-1: SerialNumber: syz
[  449.098808][ T5285] usb 4-1: config 0 descriptor??
[  449.107605][ T5285] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  449.131256][ T5287] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  449.218940][    T8] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  449.257288][ T5283] usb 3-1: USB disconnect, device number 49
[  449.307575][ T5285] gspca_sn9c2028: read1 error -32
[  449.324518][ T5285] gspca_sn9c2028: read1 error 0
[  449.378710][ T5286] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  449.440609][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.463414][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.493769][    T8] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  449.520713][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.549593][    T8] usb 2-1: config 0 descriptor??
[  449.608407][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11
[  449.641251][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024
[  449.656800][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  449.670366][ T5286] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  449.682001][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.699249][ T5286] usb 5-1: config 0 descriptor??
[  449.705853][T12284] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  449.778378][ T5283] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  449.811207][    T8] dragonrise 0003:0079:0006.001A: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0
[  449.823801][    T8] dragonrise 0003:0079:0006.001A: no inputs found
[  449.837577][    T8] dragonrise 0003:0079:0006.001A: force feedback init failed
[  449.858867][ T5285] gspca_sn9c2028: read1 error -110
[  449.866391][ T5285] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -110
[  449.998649][ T5285] usb 2-1: USB disconnect, device number 63
[  450.011590][ T5283] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  450.033944][ T5288] usb 4-1: USB disconnect, device number 59
[  450.043006][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.069635][ T5283] usb 3-1: config 0 descriptor??
[  450.169869][T12280] fuse: Bad value for 'rootmode'
[  450.209505][ T5286] usbhid 5-1:0.0: can't add hid device: -71
[  450.222477][ T5286] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  450.250419][ T5286] usb 5-1: USB disconnect, device number 60
[  450.638955][ T5288] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  450.689050][   T29] audit: type=1326 audit(1725577947.579:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.1.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  450.723881][   T29] audit: type=1326 audit(1725577947.579:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.1.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  450.764710][   T29] audit: type=1326 audit(1725577947.579:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.1.1364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf739d579 code=0x7ffc0000
[  450.786856][    C0] vkms_vblank_simulate: vblank timer overrun
[  450.838304][ T5288] usb 4-1: Using ep0 maxpacket: 32
[  450.852226][ T5288] usb 4-1: config 5 has an invalid interface number: 19 but max is 0
[  450.868225][ T5288] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  450.890335][ T5288] usb 4-1: config 5 has no interface number 0
[  450.896489][ T5288] usb 4-1: config 5 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  450.925534][ T5288] usb 4-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38
[  450.938380][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.948512][ T5288] usb 4-1: Product: syz
[  450.954611][ T5288] usb 4-1: Manufacturer: syz
[  450.961486][   T25] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  450.978737][ T5288] usb 4-1: SerialNumber: syz
[  450.995549][ T5288] hub 4-1:5.19: bad descriptor, ignoring hub
[  451.002106][ T5288] hub 4-1:5.19: probe with driver hub failed with error -5
[  451.010901][ T5288] sierra 4-1:5.19: Sierra USB modem converter detected
[  451.133305][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'.
[  451.148684][   T25] usb 2-1: Using ep0 maxpacket: 8
[  451.159360][T12311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  451.166680][T12311] IPv6: NLM_F_CREATE should be set when creating new route
[  451.186180][   T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  451.228232][   T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  451.268488][   T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  451.299060][   T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  451.307759][T12304] syzkaller1: entered promiscuous mode
[  451.347020][   T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  451.357553][T12304] syzkaller1: entered allmulticast mode
[  451.385296][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.541998][T12314] netlink: 'syz.4.1366': attribute type 29 has an invalid length.
[  451.550179][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.559416][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.591550][ T5288] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  451.600856][T12314] netlink: 'syz.4.1366': attribute type 29 has an invalid length.
[  451.633872][   T25] usb 2-1: GET_CAPABILITIES returned 0
[  451.644413][ T5288] usb 4-1: USB disconnect, device number 60
[  451.655277][   T25] usbtmc 2-1:16.0: can't read capabilities
[  451.678720][ T5288] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  451.707002][ T5288] sierra 4-1:5.19: device disconnected
[  452.037164][T12320] Cannot find add_set index 0 as target
[  452.411577][   T25] usb 2-1: USB disconnect, device number 64
[  452.415471][ T5283] pegasus 3-1:0.0: setup Pegasus II specific registers
[  452.529519][ T5286] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  452.595737][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.617079][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.638893][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.665050][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.684525][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.701946][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.719368][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.742143][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.750024][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.764693][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.778522][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.781096][ T5286] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  452.786219][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.804811][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.813303][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.824573][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.849333][ T5286] usb 4-1: config 0 descriptor??
[  452.863992][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.894369][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.918250][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.945192][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.955350][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.963601][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.989933][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  452.997376][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.026983][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.042183][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.051807][   T29] kauditd_printk_skb: 34 callbacks suppressed
[  453.051825][   T29] audit: type=1326 audit(1725577949.949:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.089888][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.104789][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.123195][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.130797][   T29] audit: type=1326 audit(1725577949.949:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.162656][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178422][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178460][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178487][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178513][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178539][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178565][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178591][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178617][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178643][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178669][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178694][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178720][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178745][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178771][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178796][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178822][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178847][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178872][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178898][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178923][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178948][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.178974][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179000][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179026][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179049][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179074][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179100][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179126][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179151][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179176][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179202][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179227][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179253][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179278][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179310][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179336][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179361][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179388][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179413][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179438][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179463][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179489][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179514][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179539][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179565][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179591][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179616][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179642][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179668][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179693][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179719][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179745][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179771][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179796][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.179822][ T5288] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  453.209811][   T29] audit: type=1326 audit(1725577949.979:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.209861][   T29] audit: type=1326 audit(1725577949.979:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.209902][   T29] audit: type=1326 audit(1725577949.979:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=446 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.209941][   T29] audit: type=1326 audit(1725577949.979:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.209980][   T29] audit: type=1326 audit(1725577949.979:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.210018][   T29] audit: type=1326 audit(1725577950.009:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.210056][   T29] audit: type=1326 audit(1725577950.009:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.210094][   T29] audit: type=1326 audit(1725577950.009:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.4.1375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f54579 code=0x7ffc0000
[  453.210779][ T5288] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  453.399667][T12344] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1377'.
[  453.409670][T12344] FAULT_INJECTION: forcing a failure.
[  453.409670][T12344] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.409704][T12344] CPU: 1 UID: 0 PID: 12344 Comm: syz.1.1377 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0
[  453.409727][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  453.409740][T12344] Call Trace:
[  453.409750][T12344]  <TASK>
[  453.409762][T12344]  dump_stack_lvl+0x241/0x360
[  453.409793][T12344]  ? __pfx_dump_stack_lvl+0x10/0x10
[  453.409814][T12344]  ? __pfx__printk+0x10/0x10
[  453.409838][T12344]  ? snprintf+0xda/0x120
[  453.409864][T12344]  should_fail_ex+0x3b0/0x4e0
[  453.409895][T12344]  _copy_to_user+0x2f/0xb0
[  453.409920][T12344]  simple_read_from_buffer+0xca/0x150
[  453.409946][T12344]  proc_fail_nth_read+0x1ec/0x260
[  453.409971][T12344]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  453.409994][T12344]  ? rw_verify_area+0x520/0x6b0
[  453.410015][T12344]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  453.410037][T12344]  vfs_read+0x204/0xbc0
[  453.410056][T12344]  ? __pfx_lock_release+0x10/0x10
[  453.410083][T12344]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  453.410107][T12344]  ? __pfx_vfs_read+0x10/0x10
[  453.410129][T12344]  ? __fget_files+0x29/0x470
[  453.410154][T12344]  ? __fget_files+0x3f6/0x470
[  453.410190][T12344]  ksys_read+0x1a0/0x2c0
[  453.410216][T12344]  ? __pfx_ksys_read+0x10/0x10
[  453.410262][T12344]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  453.410284][T12344]  ? lockdep_hardirqs_on+0x99/0x150
[  453.410306][T12344]  __do_fast_syscall_32+0xb4/0x110
[  453.410327][T12344]  ? exc_page_fault+0x590/0x8c0
[  453.410369][T12344]  do_fast_syscall_32+0x34/0x80
[  453.410390][T12344]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  453.410416][T12344] RIP: 0023:0xf739d579
[  453.410435][T12344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  453.410451][T12344] RSP: 002b:00000000f56965a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  453.410474][T12344] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5696620
[  453.410488][T12344] RDX: 000000000000000f RSI: 00000000f738fff4 RDI: 0000000000000000
[  453.410501][T12344] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  453.410514][T12344] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  453.410527][T12344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  453.410555][T12344]  </TASK>
[  454.065052][ T5283] pegasus 3-1:0.0: can't locate MII phy, using default
[  454.096795][ T5283] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 7e:8e:a4:75:b9:2f
[  454.118034][ T5283] usb 3-1: USB disconnect, device number 50
[  454.238208][    C0] vkms_vblank_simulate: vblank timer overrun
[  454.708874][ T5286] pegasus 4-1:0.0: setup Pegasus II specific registers
[  454.841725][ T5286] pegasus 4-1:0.0: can't locate MII phy, using default
[  454.961143][ T5286] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 3e:ee:54:40:cf:57
[  454.995248][ T5286] usb 4-1: USB disconnect, device number 61
[  455.488437][ T5283] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  455.546480][ T1125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.735806][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.778094][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.782377][ T5231] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  455.797222][ T5231] Bluetooth: hci0: Injecting HCI hardware error event
[  455.807033][ T5231] Bluetooth: hci0: hardware error 0x00
[  455.818345][ T5283] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  455.827453][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.909513][ T5283] usb 3-1: config 0 descriptor??
[  455.952605][ T1125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.190839][ T1125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.368470][ T5288] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  456.433566][ T1125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.590370][ T5288] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  456.609011][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.704200][ T5288] usb 4-1: config 0 descriptor??
[  456.842734][T12392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1388'.
[  456.930252][T12394] netlink: 'syz.1.1388': attribute type 10 has an invalid length.
[  456.981353][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  456.993269][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  457.006040][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  457.014789][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  457.026060][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  457.031288][T12377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.043178][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  457.083701][T12394] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  457.118930][T12377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.312287][T12377] fuse: Bad value for 'group_id'
[  457.337216][T12377] fuse: Bad value for 'group_id'
[  457.365880][ T1125] bridge_slave_1: left allmulticast mode
[  457.390638][ T1125] bridge_slave_1: left promiscuous mode
[  457.414076][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.487893][ T1125] bridge_slave_0: left allmulticast mode
[  457.495344][ T1125] bridge_slave_0: left promiscuous mode
[  457.501708][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.564571][ T5288] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  457.596377][ T5288] asix 4-1:0.0: probe with driver asix failed with error -71
[  457.621660][ T5288] usb 4-1: USB disconnect, device number 62
[  457.708461][    T8] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  457.819558][T12407] vivid-001: =================  START STATUS  =================
[  457.828413][T12407] vivid-001: Radio HW Seek Mode: Bounded
[  457.838703][T12407] vivid-001: Radio Programmable HW Seek: false
[  457.844999][T12407] vivid-001: RDS Rx I/O Mode: Block I/O
[  457.871551][T12407] vivid-001: Generate RBDS Instead of RDS: false
[  457.878071][T12407] vivid-001: RDS Reception: true
[  457.886096][T12407] vivid-001: RDS Program Type: 0 inactive
[  457.905307][T12407] vivid-001: RDS PS Name:  inactive
[  457.925422][    T8] usb 2-1: Using ep0 maxpacket: 32
[  457.931472][T12407] vivid-001: RDS Radio Text:  inactive
[  457.953282][T12407] vivid-001: RDS Traffic Announcement: false inactive
[  457.959197][    T8] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  457.988845][T12407] vivid-001: RDS Traffic Program: false inactive
[  457.993472][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.020228][ T5231] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  458.028663][T12407] vivid-001: RDS Music: false inactive
[  458.034539][T12407] vivid-001: ==================  END STATUS  ==================
[  458.065915][    T8] usb 2-1: Product: syz
[  458.095665][    T8] usb 2-1: Manufacturer: syz
[  458.101046][ T5283] usbhid 3-1:0.0: can't add hid device: -71
[  458.123011][ T5283] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  458.138767][    T8] usb 2-1: SerialNumber: syz
[  458.147049][    T8] usb 2-1: config 0 descriptor??
[  458.170662][ T5283] usb 3-1: USB disconnect, device number 51
[  458.198906][    T8] usb 2-1: active config #0 != 1 ??
[  458.498728][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.559190][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.758098][   T25] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  458.788468][ T5288] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  458.868752][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  458.908462][T12401] hub 9-0:1.0: USB hub found
[  458.913657][T12401] hub 9-0:1.0: 8 ports detected
[  458.931746][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  458.958313][   T25] usb 4-1: Using ep0 maxpacket: 32
[  458.963784][T12401] x_tables: duplicate underflow at hook 2
[  458.973585][ T5288] usb 1-1: device descriptor read/64, error -71
[  458.991770][   T25] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  458.992666][ T1125] bond0 (unregistering): Released all slaves
[  459.008425][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.036480][   T25] usb 4-1: Product: syz
[  459.045067][   T25] usb 4-1: Manufacturer: syz
[  459.049869][   T25] usb 4-1: SerialNumber: syz
[  459.056766][   T25] usb 4-1: config 0 descriptor??
[  459.080958][ T5286] usb 2-1: USB disconnect, device number 65
[  459.218422][ T5231] Bluetooth: hci4: command tx timeout
[  459.258817][ T5288] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  459.275414][T12416] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1392'.
[  459.305549][T12416] openvswitch: netlink: Tunnel attr 0 has unexpected len 32 expected 8
[  459.347564][   T25] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37
[  459.428319][ T5288] usb 1-1: device descriptor read/64, error -71
[  459.556050][ T5288] usb usb1-port1: attempt power cycle
[  459.631396][ T5286] usb 4-1: USB disconnect, device number 63
[  459.949334][ T1125] hsr_slave_0: left promiscuous mode
[  459.968341][ T5288] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  459.988977][ T1125] hsr_slave_1: left promiscuous mode
[  460.006385][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.020388][ T5288] usb 1-1: device descriptor read/8, error -71
[  460.027104][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.051043][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.068298][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.121362][ T1125] veth1_macvtap: left promiscuous mode
[  460.137292][ T1125] veth0_macvtap: left promiscuous mode
[  460.147524][ T1125] veth1_vlan: left promiscuous mode
[  460.157595][ T1125] veth0_vlan: left promiscuous mode
[  460.227396][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  460.239656][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  460.250565][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  460.261703][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  460.278885][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  460.286444][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  460.318279][ T5288] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  460.376868][ T5288] usb 1-1: device descriptor read/8, error -71
[  460.513221][ T5288] usb usb1-port1: unable to enumerate USB device
[  461.307225][ T5231] Bluetooth: hci4: command tx timeout
[  461.343880][ T1125] team0 (unregistering): Port device team_slave_1 removed
[  461.423075][ T1125] team0 (unregistering): Port device team_slave_0 removed
[  461.485047][ T5240] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  461.678561][ T5240] usb 4-1: Using ep0 maxpacket: 16
[  461.695604][ T5240] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  461.718362][ T5240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.748414][ T5240] usb 4-1: Product: syz
[  461.752678][ T5240] usb 4-1: Manufacturer: syz
[  461.757381][ T5240] usb 4-1: SerialNumber: syz
[  461.786134][ T5240] r8152-cfgselector 4-1: Unknown version 0x0000
[  461.808637][ T5240] r8152-cfgselector 4-1: config 0 descriptor??
[  462.316588][T12462] ip6t_rpfilter: unknown options
[  462.340046][ T5231] Bluetooth: hci1: command tx timeout
[  462.404601][T12468] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  462.907137][T12397] chnl_net:caif_netlink_parms(): no params data found
[  462.981243][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  462.981261][   T29] audit: type=1326 audit(1725577959.869:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.126326][   T29] audit: type=1326 audit(1725577959.869:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.228529][   T29] audit: type=1326 audit(1725577959.869:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.258258][ T5283] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  463.327515][   T29] audit: type=1326 audit(1725577959.869:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.378393][ T5231] Bluetooth: hci4: command tx timeout
[  463.431457][   T29] audit: type=1326 audit(1725577959.869:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.459230][ T5283] usb 2-1: Using ep0 maxpacket: 8
[  463.467943][   T29] audit: type=1326 audit(1725577959.869:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.476726][ T5283] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  463.581785][ T5283] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  463.618539][   T29] audit: type=1326 audit(1725577959.869:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.677823][ T5283] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  463.721152][ T5283] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  463.774049][   T29] audit: type=1326 audit(1725577959.869:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.813130][ T5283] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  463.835924][T12397] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.842824][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.870945][   T29] audit: type=1326 audit(1725577959.869:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.873899][T12397] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.936217][   T29] audit: type=1326 audit(1725577959.869:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12471 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf739d579 code=0x7ffc0000
[  463.951649][T12397] bridge_slave_0: entered allmulticast mode
[  464.003928][T12397] bridge_slave_0: entered promiscuous mode
[  464.022208][T12449] chnl_net:caif_netlink_parms(): no params data found
[  464.039153][T12460] syz.3.1401 (12460): drop_caches: 2
[  464.045516][T12460] syz.3.1401 (12460): drop_caches: 2
[  464.054789][T12397] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.071799][T12397] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.083248][T12397] bridge_slave_1: entered allmulticast mode
[  464.092326][ T5240] r8152-cfgselector 4-1: Unknown version 0x0000
[  464.099236][ T5240] r8152-cfgselector 4-1: bad CDC descriptors
[  464.108976][T12397] bridge_slave_1: entered promiscuous mode
[  464.120288][ T5240] r8152-cfgselector 4-1: USB disconnect, device number 64
[  464.136247][ T5283] usb 2-1: GET_CAPABILITIES returned 0
[  464.138507][ T5288] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  464.148219][ T5283] usbtmc 2-1:16.0: can't read capabilities
[  464.230335][ T1125] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.299141][T12397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.322893][T12397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.354721][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  464.372978][ T5288] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  464.396893][ T5288] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  464.406455][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  464.408761][ T1125] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.421257][ T5231] Bluetooth: hci1: command tx timeout
[  464.432221][ T5288] usb 1-1: SerialNumber: syz
[  464.496738][T12397] team0: Port device team_slave_0 added
[  464.546115][ T1125] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.568514][T12397] team0: Port device team_slave_1 added
[  464.634158][T12397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.651008][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.680581][T12397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.780073][ T1125] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.799930][T12449] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.807331][T12449] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.815181][T12449] bridge_slave_0: entered allmulticast mode
[  464.824868][T12449] bridge_slave_0: entered promiscuous mode
[  464.841118][ T5288] usb 1-1: 0:2 : does not exist
[  464.849483][T12449] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.857112][T12449] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.868325][ T5288] usb 1-1: unit 5 not found!
[  464.869579][T12449] bridge_slave_1: entered allmulticast mode
[  464.888863][    T8] usb 2-1: USB disconnect, device number 66
[  464.894871][T12449] bridge_slave_1: entered promiscuous mode
[  464.925633][T12397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.950516][ T5288] usb 1-1: USB disconnect, device number 68
[  464.956992][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.993413][T12397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.019397][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'.
[  465.050647][ T5463] udevd[5463]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  465.182883][T12505] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  465.221751][T12449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.261399][T12449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.459584][ T5231] Bluetooth: hci4: command tx timeout
[  465.523669][T12397] hsr_slave_0: entered promiscuous mode
[  465.531008][T12397] hsr_slave_1: entered promiscuous mode
[  465.554239][T12397] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  465.564331][T12397] Cannot create hsr debugfs directory
[  465.643649][T12449] team0: Port device team_slave_0 added
[  465.770395][T12449] team0: Port device team_slave_1 added
[  465.908412][ T5283] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  465.970864][T12449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.984483][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  466.024900][T12449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  466.046985][T12449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  466.056137][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  466.115418][T12449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.134397][ T5283] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  466.154953][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.180686][ T5283] usb 1-1: config 0 descriptor??
[  466.184122][ T5288] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  466.224215][T12536] vlan2: entered promiscuous mode
[  466.252803][ T1125] bridge_slave_1: left allmulticast mode
[  466.278252][ T1125] bridge_slave_1: left promiscuous mode
[  466.294083][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.317874][ T1125] bridge_slave_0: left allmulticast mode
[  466.323767][ T1125] bridge_slave_0: left promiscuous mode
[  466.329719][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.368561][ T5288] usb 2-1: Using ep0 maxpacket: 8
[  466.378588][ T5288] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  466.408675][ T5288] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  466.443417][ T5288] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  466.468235][ T5288] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  466.488935][ T5288] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  466.505856][ T5231] Bluetooth: hci1: command tx timeout
[  466.514030][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.754766][ T5288] usb 2-1: GET_CAPABILITIES returned 0
[  466.756538][    T8] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  466.764210][ T5288] usbtmc 2-1:16.0: can't read capabilities
[  466.816187][ T5283] ------------[ cut here ]------------
[  466.822337][ T5283] WARNING: CPU: 0 PID: 5283 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x44a/0x590
[  466.835860][ T5283] Modules linked in:
[  466.841084][ T5283] CPU: 0 UID: 0 PID: 5283 Comm: kworker/0:3 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0
[  466.851998][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  466.862119][ T5283] Workqueue: usb_hub_wq hub_event
[  466.867144][ T5283] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590
[  466.873779][ T5283] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 a0 5d a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 a7 6f ca fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 94 6f ca fa 31 db e9 e5
[  466.894591][ T5283] RSP: 0018:ffffc90003fd6b60 EFLAGS: 00010287
[  466.900813][ T5283] RAX: ffffffff86c91d09 RBX: 0000000005d4d2fd RCX: 0000000000100000
[  466.908877][ T5283] RDX: ffffc90014044000 RSI: 000000000002f220 RDI: 000000000002f221
[  466.916876][ T5283] RBP: ffffc90003fd6c30 R08: ffffffff86c91c60 R09: 1ffffffff283c916
[  466.924992][ T5283] R10: dffffc0000000000 R11: fffffbfff283c917 R12: ffffc90003fd6ce4
[  466.934496][ T5283] R13: ffff888034ef0e40 R14: dffffc0000000000 R15: 1ffff920007fad74
[  466.943736][ T5283] FS:  0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
[  466.953414][ T5283] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  466.960079][ T5283] CR2: 00000000f5745520 CR3: 0000000027d06000 CR4: 00000000003506f0
[  466.968089][ T5283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  466.976194][ T5283] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  466.984725][ T5283] Call Trace:
[  466.988040][ T5283]  <TASK>
[  466.991064][ T5283]  ? __warn+0x163/0x4e0
[  466.995260][ T5283]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  467.001294][ T5283]  ? report_bug+0x2b3/0x500
[  467.005836][ T5283]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  467.011930][ T5283]  ? handle_bug+0x3e/0x70
[  467.016303][ T5283]  ? exc_invalid_op+0x1a/0x50
[  467.021110][ T5283]  ? asm_exc_invalid_op+0x1a/0x20
[  467.026182][ T5283]  ? ath6kl_bmi_get_target_info+0x3a0/0x590
[  467.033659][ T5283]  ? ath6kl_bmi_get_target_info+0x449/0x590
[  467.040857][ T5283]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  467.046822][ T5283]  ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10
[  467.053232][ T5283]  ? ath6kl_bmi_init+0x6d/0xf0
[  467.058049][ T5283]  ? __kmalloc_noprof+0x21a/0x400
[  467.063355][ T5283]  ath6kl_core_init+0x1eb/0x1140
[  467.068405][ T5283]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  467.074266][ T5283]  ? __kasan_kmalloc+0x98/0xb0
[  467.079114][ T5283]  ? __pfx_ath6kl_core_init+0x10/0x10
[  467.084528][ T5283]  ? ath6kl_core_create+0x7d8/0x950
[  467.089854][ T5283]  ath6kl_usb_probe+0x129b/0x1390
[  467.094915][ T5283]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  467.101004][ T5283]  ? usb_disable_lpm+0x77/0x380
[  467.105915][ T5283]  usb_probe_interface+0x645/0xbb0
[  467.111152][ T5283]  ? __pfx_usb_probe_interface+0x10/0x10
[  467.116820][ T5283]  really_probe+0x2b8/0xad0
[  467.121443][ T5283]  __driver_probe_device+0x1a2/0x390
[  467.126776][ T5283]  driver_probe_device+0x50/0x430
[  467.133254][ T5283]  __device_attach_driver+0x2d6/0x530
[  467.140514][ T5283]  bus_for_each_drv+0x24e/0x2e0
[  467.145433][ T5283]  ? __pfx___device_attach_driver+0x10/0x10
[  467.151462][ T5283]  ? __pfx_bus_for_each_drv+0x10/0x10
[  467.156902][ T5283]  __device_attach+0x333/0x520
[  467.161786][ T5283]  ? __pfx_lock_release+0x10/0x10
[  467.166856][ T5283]  ? __pfx___device_attach+0x10/0x10
[  467.172293][ T5283]  ? do_raw_spin_unlock+0x13c/0x8b0
[  467.177559][ T5283]  bus_probe_device+0x189/0x260
[  467.182557][ T5283]  device_add+0x856/0xbf0
[  467.186961][ T5283]  usb_set_configuration+0x1976/0x1fb0
[  467.192572][ T5283]  usb_generic_driver_probe+0x88/0x140
[  467.198076][ T5283]  usb_probe_device+0x1b8/0x380
[  467.203043][ T5283]  ? __pfx_usb_probe_device+0x10/0x10
[  467.208520][ T5283]  really_probe+0x2b8/0xad0
[  467.213064][ T5283]  __driver_probe_device+0x1a2/0x390
[  467.218564][ T5283]  driver_probe_device+0x50/0x430
[  467.223645][ T5283]  __device_attach_driver+0x2d6/0x530
[  467.229173][ T5283]  bus_for_each_drv+0x24e/0x2e0
[  467.235444][ T5283]  ? __pfx___device_attach_driver+0x10/0x10
[  467.242524][ T5283]  ? __pfx_bus_for_each_drv+0x10/0x10
[  467.247937][ T5283]  __device_attach+0x333/0x520
[  467.252805][ T5283]  ? __pfx___device_attach+0x10/0x10
[  467.258111][ T5283]  bus_probe_device+0x189/0x260
[  467.263039][ T5283]  device_add+0x856/0xbf0
[  467.267373][ T5283]  usb_new_device+0x104a/0x19a0
[  467.272336][ T5283]  ? __pfx_usb_new_device+0x10/0x10
[  467.277558][ T5283]  ? _raw_spin_unlock_irq+0x23/0x50
[  467.282867][ T5283]  ? lockdep_hardirqs_on+0x99/0x150
[  467.288091][ T5283]  hub_event+0x2d6d/0x5150
[  467.292667][ T5283]  ? __pfx_hub_event+0x10/0x10
[  467.297458][ T5283]  ? __pfx_lock_acquire+0x10/0x10
[  467.302667][ T5283]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  467.308752][ T5283]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  467.315126][ T5283]  ? process_scheduled_works+0x945/0x1830
[  467.320925][ T5283]  process_scheduled_works+0xa2c/0x1830
[  467.326533][ T5283]  ? __pfx_process_scheduled_works+0x10/0x10
[  467.332647][ T5283]  ? assign_work+0x364/0x3d0
[  467.338688][ T5283]  worker_thread+0x86d/0xd10
[  467.343322][ T5283]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  467.350502][ T5283]  ? __kthread_parkme+0x169/0x1d0
[  467.355564][ T5283]  ? __pfx_worker_thread+0x10/0x10
[  467.360737][ T5283]  kthread+0x2f0/0x390
[  467.364818][ T5283]  ? __pfx_worker_thread+0x10/0x10
[  467.370031][ T5283]  ? __pfx_kthread+0x10/0x10
[  467.374724][ T5283]  ret_from_fork+0x4b/0x80
[  467.381073][ T5283]  ? __pfx_kthread+0x10/0x10
[  467.385697][ T5283]  ret_from_fork_asm+0x1a/0x30
[  467.391343][ T5283]  </TASK>
[  467.394381][ T5283] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  467.401677][ T5283] CPU: 0 UID: 0 PID: 5283 Comm: kworker/0:3 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0
[  467.412438][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  467.422501][ T5283] Workqueue: usb_hub_wq hub_event
[  467.427522][ T5283] Call Trace:
[  467.430796][ T5283]  <TASK>
[  467.433723][ T5283]  dump_stack_lvl+0x241/0x360
[  467.438411][ T5283]  ? __pfx_dump_stack_lvl+0x10/0x10
[  467.443614][ T5283]  ? __pfx__printk+0x10/0x10
[  467.448211][ T5283]  ? vscnprintf+0x5d/0x90
[  467.452559][ T5283]  panic+0x349/0x860
[  467.456450][ T5283]  ? __warn+0x172/0x4e0
[  467.460603][ T5283]  ? __pfx_panic+0x10/0x10
[  467.465024][ T5283]  ? ret_from_fork_asm+0x1a/0x30
[  467.470155][ T5283]  __warn+0x346/0x4e0
[  467.474150][ T5283]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  467.480044][ T5283]  report_bug+0x2b3/0x500
[  467.484370][ T5283]  ? ath6kl_bmi_get_target_info+0x44a/0x590
[  467.490265][ T5283]  handle_bug+0x3e/0x70
[  467.494416][ T5283]  exc_invalid_op+0x1a/0x50
[  467.498914][ T5283]  asm_exc_invalid_op+0x1a/0x20
[  467.503760][ T5283] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590
[  467.510257][ T5283] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 a0 5d a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 a7 6f ca fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 94 6f ca fa 31 db e9 e5
[  467.529855][ T5283] RSP: 0018:ffffc90003fd6b60 EFLAGS: 00010287
[  467.535915][ T5283] RAX: ffffffff86c91d09 RBX: 0000000005d4d2fd RCX: 0000000000100000
[  467.543882][ T5283] RDX: ffffc90014044000 RSI: 000000000002f220 RDI: 000000000002f221
[  467.551850][ T5283] RBP: ffffc90003fd6c30 R08: ffffffff86c91c60 R09: 1ffffffff283c916
[  467.559815][ T5283] R10: dffffc0000000000 R11: fffffbfff283c917 R12: ffffc90003fd6ce4
[  467.567777][ T5283] R13: ffff888034ef0e40 R14: dffffc0000000000 R15: 1ffff920007fad74
[  467.575747][ T5283]  ? ath6kl_bmi_get_target_info+0x3a0/0x590
[  467.581639][ T5283]  ? ath6kl_bmi_get_target_info+0x449/0x590
[  467.587540][ T5283]  ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10
[  467.593775][ T5283]  ? ath6kl_bmi_init+0x6d/0xf0
[  467.598536][ T5283]  ? __kmalloc_noprof+0x21a/0x400
[  467.603557][ T5283]  ath6kl_core_init+0x1eb/0x1140
[  467.608494][ T5283]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  467.614300][ T5283]  ? __kasan_kmalloc+0x98/0xb0
[  467.619064][ T5283]  ? __pfx_ath6kl_core_init+0x10/0x10
[  467.624428][ T5283]  ? ath6kl_core_create+0x7d8/0x950
[  467.629630][ T5283]  ath6kl_usb_probe+0x129b/0x1390
[  467.634652][ T5283]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  467.640547][ T5283]  ? usb_disable_lpm+0x77/0x380
[  467.645397][ T5283]  usb_probe_interface+0x645/0xbb0
[  467.650522][ T5283]  ? __pfx_usb_probe_interface+0x10/0x10
[  467.656161][ T5283]  really_probe+0x2b8/0xad0
[  467.660665][ T5283]  __driver_probe_device+0x1a2/0x390
[  467.665948][ T5283]  driver_probe_device+0x50/0x430
[  467.670971][ T5283]  __device_attach_driver+0x2d6/0x530
[  467.676337][ T5283]  bus_for_each_drv+0x24e/0x2e0
[  467.681183][ T5283]  ? __pfx___device_attach_driver+0x10/0x10
[  467.687073][ T5283]  ? __pfx_bus_for_each_drv+0x10/0x10
[  467.692446][ T5283]  __device_attach+0x333/0x520
[  467.697206][ T5283]  ? __pfx_lock_release+0x10/0x10
[  467.702234][ T5283]  ? __pfx___device_attach+0x10/0x10
[  467.707511][ T5283]  ? do_raw_spin_unlock+0x13c/0x8b0
[  467.712710][ T5283]  bus_probe_device+0x189/0x260
[  467.717562][ T5283]  device_add+0x856/0xbf0
[  467.721894][ T5283]  usb_set_configuration+0x1976/0x1fb0
[  467.727366][ T5283]  usb_generic_driver_probe+0x88/0x140
[  467.732821][ T5283]  usb_probe_device+0x1b8/0x380
[  467.737669][ T5283]  ? __pfx_usb_probe_device+0x10/0x10
[  467.743033][ T5283]  really_probe+0x2b8/0xad0
[  467.747538][ T5283]  __driver_probe_device+0x1a2/0x390
[  467.752828][ T5283]  driver_probe_device+0x50/0x430
[  467.757859][ T5283]  __device_attach_driver+0x2d6/0x530
[  467.763922][ T5283]  bus_for_each_drv+0x24e/0x2e0
[  467.768771][ T5283]  ? __pfx___device_attach_driver+0x10/0x10
[  467.774657][ T5283]  ? __pfx_bus_for_each_drv+0x10/0x10
[  467.780034][ T5283]  __device_attach+0x333/0x520
[  467.784796][ T5283]  ? __pfx___device_attach+0x10/0x10
[  467.790081][ T5283]  bus_probe_device+0x189/0x260
[  467.794932][ T5283]  device_add+0x856/0xbf0
[  467.799267][ T5283]  usb_new_device+0x104a/0x19a0
[  467.804125][ T5283]  ? __pfx_usb_new_device+0x10/0x10
[  467.809317][ T5283]  ? _raw_spin_unlock_irq+0x23/0x50
[  467.814513][ T5283]  ? lockdep_hardirqs_on+0x99/0x150
[  467.819706][ T5283]  hub_event+0x2d6d/0x5150
[  467.824159][ T5283]  ? __pfx_hub_event+0x10/0x10
[  467.828920][ T5283]  ? __pfx_lock_acquire+0x10/0x10
[  467.833941][ T5283]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  467.839923][ T5283]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  467.846254][ T5283]  ? process_scheduled_works+0x945/0x1830
[  467.851972][ T5283]  process_scheduled_works+0xa2c/0x1830
[  467.857539][ T5283]  ? __pfx_process_scheduled_works+0x10/0x10
[  467.863524][ T5283]  ? assign_work+0x364/0x3d0
[  467.868116][ T5283]  worker_thread+0x86d/0xd10
[  467.872715][ T5283]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  467.878613][ T5283]  ? __kthread_parkme+0x169/0x1d0
[  467.883633][ T5283]  ? __pfx_worker_thread+0x10/0x10
[  467.888738][ T5283]  kthread+0x2f0/0x390
[  467.892795][ T5283]  ? __pfx_worker_thread+0x10/0x10
[  467.897899][ T5283]  ? __pfx_kthread+0x10/0x10
[  467.902480][ T5283]  ret_from_fork+0x4b/0x80
[  467.906898][ T5283]  ? __pfx_kthread+0x10/0x10
[  467.911481][ T5283]  ret_from_fork_asm+0x1a/0x30
[  467.916252][ T5283]  </TASK>
[  467.919371][ T5283] Kernel Offset: disabled
[  467.923752][ T5283] Rebooting in 86400 seconds..