last executing test programs:

13.93189173s ago: executing program 4 (id=2214):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fremovexattr(0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x5421, &(0x7f0000000300)={&(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})

12.816048253s ago: executing program 4 (id=2221):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x1b8, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x199, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@broadcast, {}, @value}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x58, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602fb2299c382c07898a4d7dddbc046ef6a9"}, {0xdd, 0x92, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa4111"}, {0xdd, 0x5a, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce7194"}, {0xdd, 0x6, "83534cd40fda"}]}}]}, 0x1b8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @hyper}, 0x33)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)

12.094852252s ago: executing program 4 (id=2223):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@local, 0x20000}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=@framed={{}, [@printk={@llu}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x5c}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0)
r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000280)={0x0, 0x52424752, 0x0, @stepwise})
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_io_uring_setup(0x24fb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080))
socket$inet6_dccp(0xa, 0x6, 0x0)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x344, r8, 0x800, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6eba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8cf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64aa5b4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x0, 0x8000, @empty, 0xffffffff}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x7, 0x2, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

11.545343328s ago: executing program 4 (id=2230):
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x200000100000011, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0)

11.27986544s ago: executing program 4 (id=2232):
io_setup(0x2, &(0x7f0000000200)=<r0=>0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x8, 0x0, r1, 0x0}])
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000004000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="650f78c0f3f2460f356766400f1fc40fc73f66baf80cb87a840483ef66bafc0c66b8c90066ef650f01c2410f23b566c16d003736420f0d1d0e0001003e2665f30f1c45c3", 0x44}], 0x1, 0x0, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x4})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000140)={0x80003})
r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r8, &(0x7f0000002400)=[{&(0x7f0000000140)=""/225, 0xe1}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x0, 0x0, 0x2}, 0x20)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r9, @ANYBLOB="05"], 0x0)

8.59511235s ago: executing program 0 (id=2246):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440))
r1 = creat(0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x45c, 0x0, &(0x7f0000000140)="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"})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4)
tkill(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, 0x0, 0x8800)
sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getneightbl={0x14, 0x42, 0x51b, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0xc004)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}]}, 0x38}}, 0x0)
open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12)
sendto$inet6(r6, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c)
sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0xaa, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902980002010000000904000001020d0000052406000105240000000d240f5ea1000000000000000006241a4c9c001024078000000000feff000000000600052401000027241300d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d0905810300000000000904010000020d00000904010102020d0000090582020000000300090503020800000100"], 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

6.553041727s ago: executing program 3 (id=2256):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) (async)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) (async)
syz_usb_connect(0x2, 0x6f, &(0x7f00000042c0)=ANY=[@ANYBLOB="1201000005014b106e050540388901020301090224000100000000090408000246d5d80009050209"], 0x0)

5.481513144s ago: executing program 0 (id=2257):
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x200000100000011, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0)

5.138287528s ago: executing program 3 (id=2258):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x5000}, {0xffffffffffffffff, 0x3189}], 0x2, 0x9)

5.099720156s ago: executing program 1 (id=2259):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e48, 0x0, @empty}, 0x1c)

5.057136895s ago: executing program 3 (id=2261):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
userfaultfd(0x80801)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_io_uring_setup(0x3233, &(0x7f0000000100)={0x0, 0x0, 0x400}, 0x0, 0x0)
epoll_create1(0x0)
syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000003c0)="c5f9b1a25a6fd7d743fa8ee3e9732b767aef4cbe7c885513392e0aa2cb038a73746bfd1873e076bd69521ff39720a96c6744f60f1469a3f52d308d03a5d1eeb25ed601489c0952ea4d9c8e0cea582d3b66b7d8b7f2d11a51424fb0843c6949889b866f3a50823095b3e2d2ea88e8920bd77b6f162d147cef0cd7337949488637c0b1425802b87d06b61421bf985546815fbde7a7ade517f12c19efef518874f0d6825a173cecfdb793cf66248f4fbd491ebcdd85861e78e7d068d5f92b450591d37a7803ba281c8f17", 0xc9)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)

5.011847357s ago: executing program 1 (id=2262):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r3})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90)
r7 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0xfdbc, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="bf16010073000000000000001000000010000000030000000e0000000000000100"], &(0x7f00000002c0)=""/17, 0x2b, 0x11, 0x0, 0x100}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f0000000100)={0x0, 0x6})
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000300)=0x3)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e2e2c00000000000109023d2551a10000000704"], 0x0)

4.972631928s ago: executing program 0 (id=2263):
r0 = syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = syz_open_dev$ndb(&(0x7f0000001900), 0x0, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380), 0x2}}, 0x20)
r6 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@l)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480)}}, 0x18)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3)
ioctl$BLKPBSZGET(r4, 0x80081280, &(0x7f0000000000))
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}})
io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0)
shutdown(r3, 0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)

4.77500029s ago: executing program 3 (id=2264):
openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, 0x0, 0xe)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x0, 0xc1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36"], &(0x7f0000281ffc)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff1a)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a32000000000c000780080012400000000011000300686173683a6e65742c6e65742e3ac414c72e198a9f79f27a433700000008000066c857fbc44e05acc1245d2bdbe919ec23f63c6b9827f95b8a326539ad471aae2917186579d1d520fac9c09d77334e7c4910568dd197a0b8d0605a2987a28a3b33a5096a663aedab9aec712d73e64aade46ca5c5b4f6b08cb16297b8e58b02b8d4ae4e509322be"], 0x58}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000406010100000000ffffffffffffff040500010007"], 0x44}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
dup(0xffffffffffffffff)

3.389048369s ago: executing program 0 (id=2266):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$EVIOCGRAB(r0, 0x400445a0, &(0x7f0000000440))
r1 = creat(0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x45c, 0x0, &(0x7f0000000140)="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"})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0xc0a85322, &(0x7f0000000100)={{0x0, 0x80}})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000006c0)=0x1, 0x4)
tkill(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pimreg0\x00'})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, 0x0, 0x8800)
sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@getneightbl={0x14, 0x42, 0x51b, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0xc004)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}]}, 0x38}}, 0x0)
open(&(0x7f0000000740)='./file0\x00', 0x12000, 0x12)
sendto$inet6(r6, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c)
sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0xaa, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902980002010000000904000001020d0000052406000105240000000d240f5ea1000000000000000006241a4c9c001024078000000000feff000000000600052401000027241300d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d0905810300000000000904010000020d00000904010102020d0000090582020000000300090503020800000100"], 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.042473932s ago: executing program 1 (id=2268):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3373526a01e35"], 0x1c}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x0, 0x0)

2.53014486s ago: executing program 3 (id=2269):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x80111500, &(0x7f0000000300)={&(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})

2.427152417s ago: executing program 2 (id=2270):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x5000}, {r0}], 0x2, 0x9)

2.426883335s ago: executing program 3 (id=2271):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0), 0x45)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000040)=0x60)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0)

2.307559217s ago: executing program 2 (id=2272):
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x200000100000011, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0)

2.136527869s ago: executing program 2 (id=2273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x403, 0x500, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x38}}, 0x0)

2.071120454s ago: executing program 1 (id=2274):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x7, {0x5, 0x8000, 0x1, 0x5, 0xffff, 0x10000}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68281, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x56e6, 0x40}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000001040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x1000, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000000))
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000440))
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x0, 0x3}, {}, {0x0, 0xfff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x5f7], 0x100000})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
io_setup(0x202, &(0x7f0000000200)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000100)=[&(0x7f0000000440)={0x18, 0x7000000, 0x10, 0x0, 0x0, r8, 0x0, 0x2000}])
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x70001, 0x0)
preadv(r10, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)

2.017474035s ago: executing program 2 (id=2275):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x30000, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2a, 0x9, 0x0, 0x0, {0x0, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000}, 0x0)

1.877504139s ago: executing program 2 (id=2276):
r0 = syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = syz_open_dev$ndb(&(0x7f0000001900), 0x0, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20)
r7 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000040)=@l)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r6}}, 0x18)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)
ioctl$BLKPBSZGET(r4, 0x80081280, &(0x7f0000000000))
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}})
io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0)
shutdown(r3, 0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)

1.785316515s ago: executing program 0 (id=2277):
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 64)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910530000000000070000000000000095000000aa5ed505"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000080)="ec"})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000200)='./file0\x00', r0, 0x4000, r1}, 0x18)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (rerun: 64)
set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x56, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x5, 0x0, 0x0, 0x0, [<r7=>0x0], [], [0x7, 0x0, 0x0, 0x100]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, <r8=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r8}) (async)
r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r10 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x5, 0x0) (rerun: 32)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000280)={0x0, 0x80, 0xff, 0x3f, 0x9, 0x1f, 0x7fffffffffffffff, 0x6, 0xc000000, 0x2, 0x200, 0x3}) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r10, 0xb4bf3000) (async)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x6, &(0x7f0000000600)=@string={0x6, 0x3, "2edb92de"}}]})

1.428497713s ago: executing program 0 (id=2278):
openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, 0x0, 0xe)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x0, 0xc1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36"], &(0x7f0000281ffc)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff1a)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a32000000000c000780080012400000000011000300686173683a6e65742c6e65742e3ac414c72e198a9f79f27a433700000008000066c857fbc44e05acc1245d2bdbe919ec23f63c6b9827f95b8a326539ad471aae2917186579d1d520fac9c09d77334e7c4910568dd197a0b8d0605a2987a28a3b33a5096a663aedab9aec712d73e64aade46ca5c5b4f6b08cb16297b8e58b02b8d4ae4e509322be"], 0x58}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000406010100000000ffffffffffffff040500010007"], 0x44}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
dup(0xffffffffffffffff)

1.426217493s ago: executing program 1 (id=2279):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
write$binfmt_script(r1, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
socket$tipc(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clock_settime(0x0, &(0x7f00000014c0)={0x77359400})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

387.912834ms ago: executing program 1 (id=2280):
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0480943ba226aecc3559dd020f010000040000000403e9a105880400000000"], 0x12)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="62000000000000007b0a00ff000000001d0a000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000002500000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149}, 0x90)
memfd_create(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0xffff, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
syz_emit_ethernet(0x69, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c20000000000000000008848000003000000000000000f00000000000000030000000000000000007e423c7bb6570b6a66b028c6e96d648317312df112a280c40b82bf54f6ba458849486e21558bee3f95cde5ec2d5403a53caf8ec81261e7d88006a6109d6364"], 0x0)
pipe2(&(0x7f0000000000), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @tid=r4}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9a02, 0x0, 0x90, [0x0, 0x20001130], 0x10d, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000551dbdf50d7dd80500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000b000000000000000000"]}, 0x108)

174.679545ms ago: executing program 2 (id=2281):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x9)

0s ago: executing program 4 (id=2233):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x9c)
r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf})
epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000140))
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2d}, @rand_addr=' \x01\x00', [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x5, 0x3, 0x5, 0x1, 'pptp\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
r6 = socket$inet6(0xa, 0x80000, 0x1ff)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200583c00fe8002000000000000000000000000bbfe8000000000000000000000000000aa0000", @ANYRES8], 0x0)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r7 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYBLOB="080006"], 0x48}}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @broadcast}, "90e2a72a"}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})

kernel console output (not intermixed with test programs):

icast mode
[  669.900100][   T29] audit: type=1326 audit(1720510668.535:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16297 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3cad75bd9 code=0x7ffc0000
[  669.960501][   T29] audit: type=1326 audit(1720510668.535:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16297 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cad75bd9 code=0x7ffc0000
[  669.985789][   T29] audit: type=1326 audit(1720510668.535:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16297 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3cad74610 code=0x7ffc0000
[  670.009091][   T29] audit: type=1326 audit(1720510668.535:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16297 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cad75bd9 code=0x7ffc0000
[  670.037463][   T29] audit: type=1326 audit(1720510668.545:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16297 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cad75bd9 code=0x7ffc0000
[  670.083156][   T29] audit: type=1326 audit(1720510668.545:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16297 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cad75bd9 code=0x7ffc0000
[  670.089682][T16092] veth0_vlan: entered promiscuous mode
[  670.111821][   T29] audit: type=1326 audit(1720510668.545:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16297 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cad75bd9 code=0x7ffc0000
[  670.152813][   T29] audit: type=1326 audit(1720510668.545:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16297 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3cad75bd9 code=0x7ffc0000
[  670.247055][T16092] veth1_vlan: entered promiscuous mode
[  670.318076][T16166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.404201][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.414671][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.478346][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.492160][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.510572][T16092] veth0_macvtap: entered promiscuous mode
[  670.535462][T16092] veth1_macvtap: entered promiscuous mode
[  670.636665][T16166] veth0_vlan: entered promiscuous mode
[  670.648106][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  670.664973][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.683582][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  670.701382][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.714505][T16092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  670.738099][ T5168] IPVS: starting estimator thread 0...
[  670.753412][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  670.783971][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.793973][T16092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  670.793991][T16092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  670.796790][T16092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  670.829381][T16192] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.857222][T16092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.866804][T16092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.877250][T16092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.886634][T16092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.892628][T16318] IPVS: using max 19 ests per chain, 45600 per kthread
[  670.903844][T16320] netlink: 'syz.2.2068': attribute type 10 has an invalid length.
[  670.919786][T16320] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2068'.
[  670.939078][T16320] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  670.950672][T16320] bridge0: port 3(netdevsim1) entered blocking state
[  670.958908][T16320] bridge0: port 3(netdevsim1) entered disabled state
[  670.970716][T16320] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  670.980122][T16320] bridge0: port 3(netdevsim1) entered blocking state
[  670.987077][T16320] bridge0: port 3(netdevsim1) entered forwarding state
[  671.040530][T16166] veth1_vlan: entered promiscuous mode
[  671.129127][T16192] 8021q: adding VLAN 0 to HW filter on device team0
[  671.185416][T14205] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.192531][T14205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.262179][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.269282][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.304908][T16166] veth0_macvtap: entered promiscuous mode
[  671.328179][T16166] veth1_macvtap: entered promiscuous mode
[  671.399974][T16326] netlink: 'syz.2.2070': attribute type 29 has an invalid length.
[  671.430884][T16166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.443453][T16166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.458677][T16166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.470390][T16166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.481069][T16166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.491876][T16166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.506245][T16166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  671.520532][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.560459][T16330] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2071'.
[  671.561195][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.599803][T16166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.623474][T16166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.650704][T16166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.672076][T16166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.682334][T16166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.693349][T16166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.705659][T16166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  671.786489][T16166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.808822][T16166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.818361][T16166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.829295][T16166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  671.886196][ T5295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.902895][ T5295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.039371][ T5295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.064737][ T5295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.075128][T16192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  672.170118][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.182052][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.214024][ T5168] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  672.279018][T16192] veth0_vlan: entered promiscuous mode
[  672.331705][T16192] veth1_vlan: entered promiscuous mode
[  672.413738][ T5096] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  672.414711][ T5168] usb 3-1: Using ep0 maxpacket: 32
[  672.450240][ T5168] usb 3-1: config index 0 descriptor too short (expected 63762, got 18)
[  672.467606][ T5168] usb 3-1: config 106 has too many interfaces: 194, using maximum allowed: 32
[  672.502034][T16192] veth0_macvtap: entered promiscuous mode
[  672.508179][ T5168] usb 3-1: config 106 has an invalid descriptor of length 28, skipping remainder of the config
[  672.529547][ T5168] usb 3-1: config 106 has 0 interfaces, different from the descriptor's value: 194
[  672.545425][ T5168] usb 3-1: New USB device found, idVendor=0a9c, idProduct=0000, bcdDevice=7c.4b
[  672.557525][T16192] veth1_macvtap: entered promiscuous mode
[  672.571531][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.599827][ T5168] usb 3-1: Product: syz
[  672.609528][ T5168] usb 3-1: Manufacturer: syz
[  672.614961][ T5168] usb 3-1: SerialNumber: syz
[  672.627543][ T5096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64
[  672.634003][ T5137] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  672.661296][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.676017][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.682310][ T5096] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  672.689247][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.708960][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.719526][ T5096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.719703][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.742015][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.761268][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  672.782722][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.784382][ T5096] usb 2-1: config 0 descriptor??
[  672.801227][T16192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  672.830628][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  672.872056][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.882046][ T5137] usb 5-1: Using ep0 maxpacket: 8
[  672.896015][ T5137] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  672.913168][ T5137] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  672.932454][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  672.953526][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.963815][ T5096] hub 2-1:0.0: USB hub found
[  672.965350][ T5168] usb 3-1: USB disconnect, device number 72
[  672.991217][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.031931][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  673.052592][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.068947][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  673.091857][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.115735][T16192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  673.167536][ T5096] hub 2-1:0.0: 1 port detected
[  673.197385][T16192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  673.209120][T16192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  673.223336][T16192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  673.241356][T16192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  673.260213][T16354] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2061'.
[  673.377636][ T5137] usb 5-1: string descriptor 0 read error: -71
[  673.401250][ T5137] hub 5-1:32.0: USB hub found
[  673.425439][ T5137] hub 5-1:32.0: config failed, can't read hub descriptor (err -22)
[  673.543286][ T5137] usb 5-1: USB disconnect, device number 83
[  673.610807][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.721982][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.756915][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.762511][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.858604][T12458] udevd[12458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  673.900065][T14688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.937836][T14688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.983668][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.024092][T16359] vti0: entered promiscuous mode
[  674.113506][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.246378][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'.
[  674.342537][ T5338] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  674.390647][ T1149] usb 2-1: USB disconnect, device number 84
[  674.396903][ T5096] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  674.409000][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  674.419610][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  674.427807][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  674.443456][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  674.451340][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  674.459343][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  674.550189][ T1102] bridge_slave_1: left allmulticast mode
[  674.562773][ T5338] usb 3-1: Using ep0 maxpacket: 32
[  674.573448][ T1102] bridge_slave_1: left promiscuous mode
[  674.579873][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2081'.
[  674.617542][ T5338] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  674.629964][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.660504][ T5338] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  674.674334][ T1102] bridge_slave_0: left allmulticast mode
[  674.686111][ T1102] bridge_slave_0: left promiscuous mode
[  674.693550][ T5338] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  674.713159][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.721132][ T5338] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  674.749589][ T5338] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  674.808562][ T5338] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  674.836919][ T5338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.855184][ T5338] usb 3-1: Product: syz
[  674.865306][ T5338] usb 3-1: Manufacturer: syz
[  674.879796][ T5338] usb 3-1: SerialNumber: syz
[  675.092545][ T1149] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  675.324554][ T1149] usb 1-1: config index 0 descriptor too short (expected 9533, got 36)
[  675.351488][ T1149] usb 1-1: config 161 has too many interfaces: 81, using maximum allowed: 32
[  675.370054][ T1149] usb 1-1: config 161 has an invalid interface descriptor of length 7, skipping
[  675.387070][ T1149] usb 1-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config
[  675.432470][ T1149] usb 1-1: config 161 has 0 interfaces, different from the descriptor's value: 81
[  675.465289][ T1149] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  675.493434][ T1149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.855504][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  675.888837][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  675.909648][ T1102] bond0 (unregistering): Released all slaves
[  675.970659][ T5096] usb 1-1: USB disconnect, device number 89
[  675.990546][ T5338] cdc_ncm 3-1:1.0: bind() failure
[  676.058177][ T5338] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  676.085432][ T5338] cdc_ncm 3-1:1.1: bind() failure
[  676.142988][ T5338] usb 3-1: USB disconnect, device number 73
[  676.422532][ T5137] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  676.512699][ T5095] Bluetooth: hci3: command tx timeout
[  676.667180][ T5137] usb 5-1: Using ep0 maxpacket: 16
[  676.689459][ T5137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  676.702731][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  676.722378][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  676.754411][T16410] FAULT_INJECTION: forcing a failure.
[  676.754411][T16410] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  676.788039][ T5137] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  676.811569][ T1102] hsr_slave_0: left promiscuous mode
[  676.819754][T16410] CPU: 1 PID: 16410 Comm: syz.0.2086 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0
[  676.829919][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  676.839969][T16410] Call Trace:
[  676.843245][T16410]  <TASK>
[  676.846163][T16410]  dump_stack_lvl+0x241/0x360
[  676.850831][T16410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  676.856015][T16410]  ? __pfx__printk+0x10/0x10
[  676.860592][T16410]  ? __pfx_lock_release+0x10/0x10
[  676.865614][T16410]  should_fail_ex+0x3b0/0x4e0
[  676.870288][T16410]  _copy_from_user+0x2f/0xe0
[  676.874860][T16410]  copy_msghdr_from_user+0xae/0x680
[  676.880048][T16410]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  676.885846][T16410]  __sys_sendmsg+0x23d/0x3a0
[  676.890422][T16410]  ? __pfx___sys_sendmsg+0x10/0x10
[  676.895515][T16410]  ? vfs_write+0x7c4/0xc90
[  676.899935][T16410]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  676.906243][T16410]  ? do_syscall_64+0x100/0x230
[  676.910992][T16410]  ? do_syscall_64+0xb6/0x230
[  676.915657][T16410]  do_syscall_64+0xf3/0x230
[  676.920154][T16410]  ? clear_bhb_loop+0x35/0x90
[  676.924811][T16410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.930690][T16410] RIP: 0033:0x7f4523975bd9
[  676.935104][T16410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  676.954699][T16410] RSP: 002b:00007f4524739048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  676.963109][T16410] RAX: ffffffffffffffda RBX: 00007f4523b04038 RCX: 00007f4523975bd9
[  676.971079][T16410] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  676.979035][T16410] RBP: 00007f45247390a0 R08: 0000000000000000 R09: 0000000000000000
[  676.986987][T16410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  676.994941][T16410] R13: 000000000000006e R14: 00007f4523b04038 R15: 00007f4523c2fa78
[  677.002912][T16410]  </TASK>
[  677.009184][ T5137] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  677.043303][ T5137] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  677.054489][ T5137] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  677.063791][ T5137] usb 5-1: Manufacturer: syz
[  677.068550][ T1102] hsr_slave_1: left promiscuous mode
[  677.115602][ T5137] usb 5-1: config 0 descriptor??
[  677.130264][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  677.156431][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  677.183319][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  677.190836][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  677.241711][ T1102] veth1_macvtap: left promiscuous mode
[  677.258253][ T1102] veth0_macvtap: left promiscuous mode
[  677.278030][ T1102] veth1_vlan: left promiscuous mode
[  677.298230][ T1102] veth0_vlan: left promiscuous mode
[  677.484970][ T5137] rc_core: IR keymap rc-hauppauge not found
[  677.502141][ T5137] Registered IR keymap rc-empty
[  677.531542][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  677.573158][T16395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2084'.
[  677.610918][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  677.653973][ T5137] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  677.687086][ T5137] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37
[  677.791989][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  677.842458][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  677.898942][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  677.932552][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  677.982410][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  678.017651][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  678.062670][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  678.102442][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  678.132838][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  678.142794][    T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  678.182432][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  678.222717][ T5137] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  678.231028][ T5137] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  678.260092][ T5137] usb 5-1: USB disconnect, device number 84
[  678.294051][    T9] usb 2-1: device descriptor read/64, error -71
[  678.457717][ T1102] team0 (unregistering): Port device team_slave_1 removed
[  678.519473][ T1102] team0 (unregistering): Port device team_slave_0 removed
[  678.576565][    T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  678.592514][ T5095] Bluetooth: hci3: command tx timeout
[  678.658452][T16436] fuse: Bad value for 'rootmode'
[  678.772390][    T9] usb 2-1: device descriptor read/64, error -71
[  678.897577][    T9] usb usb2-port1: attempt power cycle
[  679.072141][T16431] netlink: 'syz.0.2088': attribute type 10 has an invalid length.
[  679.103541][T16431] batman_adv: batadv0: Adding interface: team0
[  679.115922][T16431] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  679.146097][T16431] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  679.157028][T16433] netlink: 'syz.0.2088': attribute type 10 has an invalid length.
[  679.166116][T16433] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2088'.
[  679.175656][T16433] team0: entered promiscuous mode
[  679.180702][T16433] team_slave_0: entered promiscuous mode
[  679.189198][T16433] team_slave_1: entered promiscuous mode
[  679.197596][T16433] 8021q: adding VLAN 0 to HW filter on device team0
[  679.207653][T16433] batman_adv: batadv0: Interface activated: team0
[  679.214582][T16433] batman_adv: batadv0: Interface deactivated: team0
[  679.221269][T16433] batman_adv: batadv0: Removing interface: team0
[  679.229151][T16433] bridge0: port 3(team0) entered blocking state
[  679.235976][T16433] bridge0: port 3(team0) entered disabled state
[  679.243062][T16433] team0: entered allmulticast mode
[  679.248182][T16433] team_slave_0: entered allmulticast mode
[  679.255426][T16433] team_slave_1: entered allmulticast mode
[  679.265995][T16433] bridge0: port 3(team0) entered blocking state
[  679.272364][T16433] bridge0: port 3(team0) entered forwarding state
[  679.292436][T16370] chnl_net:caif_netlink_parms(): no params data found
[  679.312683][    T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  679.368038][    T9] usb 2-1: device descriptor read/8, error -71
[  679.504875][T16370] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.518070][T16370] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.527605][T16370] bridge_slave_0: entered allmulticast mode
[  679.551111][T16370] bridge_slave_0: entered promiscuous mode
[  679.605258][T16370] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.634884][T16370] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.643032][    T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  679.652478][T16370] bridge_slave_1: entered allmulticast mode
[  679.659741][T16370] bridge_slave_1: entered promiscuous mode
[  679.723583][    T9] usb 2-1: device descriptor read/8, error -71
[  679.785989][T16370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  679.825629][T16370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  679.843009][    T9] usb usb2-port1: unable to enumerate USB device
[  679.956246][T16370] team0: Port device team_slave_0 added
[  679.999454][T16459] vti0: entered promiscuous mode
[  680.019677][T16370] team0: Port device team_slave_1 added
[  680.041095][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  680.052638][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  680.060981][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  680.090117][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  680.098142][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  680.109351][T16370] batman_adv: batadv0: Adding interface: batadv_slave_0
[  680.117904][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  680.125867][T16370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  680.172209][T16370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  680.185189][T16370] batman_adv: batadv0: Adding interface: batadv_slave_1
[  680.192137][T16370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  680.236313][T16370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  680.310910][ T5168] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  680.349566][T16467] program syz.4.2096 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  680.375495][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.455045][T16370] hsr_slave_0: entered promiscuous mode
[  680.461331][T16370] hsr_slave_1: entered promiscuous mode
[  680.469793][T16370] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  680.479792][T16370] Cannot create hsr debugfs directory
[  680.502345][ T5168] usb 1-1: Using ep0 maxpacket: 32
[  680.523660][ T5168] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  680.547441][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.553180][ T5168] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  680.595211][ T5168] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  680.612911][ T5168] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  680.642335][ T5168] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  680.656880][ T5168] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  680.672907][ T5095] Bluetooth: hci3: command tx timeout
[  680.676296][ T5168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.695741][ T1102] bridge0: port 3(netdevsim1) entered disabled state
[  680.710286][ T5168] usb 1-1: Product: syz
[  680.715248][ T5168] usb 1-1: Manufacturer: syz
[  680.719938][ T5168] usb 1-1: SerialNumber: syz
[  680.798610][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode
[  680.822653][ T1102] bridge0: port 3(netdevsim1) entered disabled state
[  680.838754][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.856801][ T5338] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  680.985257][ T5168] cdc_ncm 1-1:1.0: bind() failure
[  681.018383][ T5168] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  681.029478][ T5168] cdc_ncm 1-1:1.1: bind() failure
[  681.042131][ T5168] usb 1-1: USB disconnect, device number 90
[  681.076260][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.104434][ T5338] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 209
[  681.121586][ T5338] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  681.158277][ T5338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.182801][ T5338] usb 5-1: config 0 descriptor??
[  681.188837][T16471] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  681.379998][T16465] chnl_net:caif_netlink_parms(): no params data found
[  681.498269][T16471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2097'.
[  681.539663][ T5338] ath6kl: Failed to submit usb control message: -71
[  681.557857][ T5338] ath6kl: unable to send the bmi data to the device: -71
[  681.573550][ T5338] ath6kl: Unable to send get target info: -71
[  681.596557][ T5338] ath6kl: Failed to init ath6kl core: -71
[  681.613902][ T5338] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  681.630667][ T5338] usb 5-1: USB disconnect, device number 85
[  681.847224][ T1102] bridge_slave_1: left allmulticast mode
[  681.853856][ T1102] bridge_slave_1: left promiscuous mode
[  681.860088][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.870362][ T1102] bridge_slave_0: left allmulticast mode
[  681.876465][ T1102] bridge_slave_0: left promiscuous mode
[  681.882151][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.195368][ T5095] Bluetooth: hci4: command tx timeout
[  682.377124][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  682.393514][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  682.408376][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  682.427503][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  682.440436][ T5093] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  682.448648][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  682.449081][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  682.483930][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  682.509494][ T1102] bond0 (unregistering): Released all slaves
[  682.701702][T16465] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.717004][T16465] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.724869][T16465] bridge_slave_0: entered allmulticast mode
[  682.726820][T16510] program syz.4.2105 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  682.732134][T16465] bridge_slave_0: entered promiscuous mode
[  682.754192][T16465] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.761301][ T5095] Bluetooth: hci3: command tx timeout
[  682.761420][T16465] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.774662][T16465] bridge_slave_1: entered allmulticast mode
[  682.789255][T16465] bridge_slave_1: entered promiscuous mode
[  682.944851][T16465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  683.011645][T16465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  683.041780][T16513] program syz.4.2106 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  683.104881][ T1102] hsr_slave_0: left promiscuous mode
[  683.110706][ T1102] hsr_slave_1: left promiscuous mode
[  683.118171][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  683.126282][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  683.136071][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  683.143669][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  683.165239][ T1102] veth1_macvtap: left promiscuous mode
[  683.170740][ T1102] veth0_macvtap: left promiscuous mode
[  683.183369][ T1102] veth1_vlan: left promiscuous mode
[  683.191192][ T1102] veth0_vlan: left promiscuous mode
[  683.332595][ T5137] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  683.546699][ T5137] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  683.559806][ T5137] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  683.570311][ T5137] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  683.603819][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  683.611946][ T5137] usb 5-1: SerialNumber: syz
[  683.868639][ T5137] usb 5-1: skipping empty audio interface (v1)
[  683.912493][ T5137] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  683.927516][ T5137] usb 5-1: USB disconnect, device number 86
[  684.024364][ T1102] team0 (unregistering): Port device team_slave_1 removed
[  684.078161][ T1102] team0 (unregistering): Port device team_slave_0 removed
[  684.163322][T15843] udevd[15843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  684.282566][ T5095] Bluetooth: hci4: command tx timeout
[  684.515400][ T5095] Bluetooth: hci0: command tx timeout
[  684.575362][ T1102] vcan0 (unregistering): left allmulticast mode
[  684.616397][T16465] team0: Port device team_slave_0 added
[  684.630907][T16465] team0: Port device team_slave_1 added
[  684.786086][T16465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  684.799510][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  684.825908][T16465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.862562][ T5137] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  684.874688][T16370] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  684.886198][T16370] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  684.899966][T16465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.909711][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  684.935626][    C0] vkms_vblank_simulate: vblank timer overrun
[  684.942496][T16465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  685.044128][T16465] hsr_slave_0: entered promiscuous mode
[  685.050354][T16465] hsr_slave_1: entered promiscuous mode
[  685.062368][ T5137] usb 5-1: Using ep0 maxpacket: 16
[  685.070968][T16370] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  685.086460][ T5137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  685.098692][T16370] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  685.107607][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  685.136490][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  685.171267][ T5137] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  685.188305][ T5137] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  685.205006][ T5137] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  685.208181][T16507] chnl_net:caif_netlink_parms(): no params data found
[  685.221350][ T5137] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  685.252291][ T5137] usb 5-1: Manufacturer: syz
[  685.280382][ T5137] usb 5-1: config 0 descriptor??
[  685.407154][ T5093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  685.427541][ T5093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  685.443836][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  685.455811][ T5093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  685.469605][ T5093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  685.478370][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  685.568224][T16507] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.576115][T16507] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.583469][T16507] bridge_slave_0: entered allmulticast mode
[  685.590654][T16507] bridge_slave_0: entered promiscuous mode
[  685.613210][ T5137] rc_core: IR keymap rc-hauppauge not found
[  685.619112][ T5137] Registered IR keymap rc-empty
[  685.633882][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  685.664863][T16507] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.671958][T16507] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.680314][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  685.688336][T16507] bridge_slave_1: entered allmulticast mode
[  685.696784][T16507] bridge_slave_1: entered promiscuous mode
[  685.710137][T16523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2110'.
[  685.713314][ T5137] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  685.735348][ T5137] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input38
[  685.766180][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  685.801958][T16507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  685.812063][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  685.852967][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  685.867639][T16507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  685.882610][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  685.918669][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  685.951318][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.952792][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  686.011599][T16507] team0: Port device team_slave_0 added
[  686.018611][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  686.030098][T16507] team0: Port device team_slave_1 added
[  686.040774][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  686.047967][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  686.072639][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  686.120267][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  686.161094][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.179141][ T5137] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  686.193213][T16507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  686.207502][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  686.246998][ T5137] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  686.268133][ T5137] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  686.281498][T16507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  686.303100][ T5137] usb 5-1: USB disconnect, device number 87
[  686.353085][ T5093] Bluetooth: hci4: command tx timeout
[  686.402141][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.424115][T16507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  686.431071][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  686.470709][T16507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  686.594038][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.602293][ T5093] Bluetooth: hci0: command tx timeout
[  686.658430][T16539] program syz.4.2113 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  686.705033][T16507] hsr_slave_0: entered promiscuous mode
[  686.711362][T16507] hsr_slave_1: entered promiscuous mode
[  686.717588][T16507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  686.729207][T16507] Cannot create hsr debugfs directory
[  686.811697][T16370] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.891929][T16465] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  686.984818][T16465] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  687.022385][T16465] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  687.041837][T16465] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  687.126332][T16370] 8021q: adding VLAN 0 to HW filter on device team0
[  687.160223][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.199291][T16535] chnl_net:caif_netlink_parms(): no params data found
[  687.222851][ T5096] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  687.240764][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.247909][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  687.280888][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.333889][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.341064][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  687.406287][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.423106][ T5096] usb 5-1: Using ep0 maxpacket: 8
[  687.439268][ T5096] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  687.452552][ T5096] usb 5-1: config 1 interface 0 has no altsetting 0
[  687.462083][ T5096] usb 5-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.40
[  687.478075][ T5096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.510350][ T5096] usb 5-1: Product: syz
[  687.515444][ T5096] usb 5-1: Manufacturer: syz
[  687.520060][ T5096] usb 5-1: SerialNumber: syz
[  687.554078][ T5093] Bluetooth: hci2: command tx timeout
[  687.574888][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.651521][T16535] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.665135][T16535] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.672949][T16535] bridge_slave_0: entered allmulticast mode
[  687.681307][T16535] bridge_slave_0: entered promiscuous mode
[  687.690568][T16535] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.699905][T16535] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.710797][T16535] bridge_slave_1: entered allmulticast mode
[  687.719028][T16535] bridge_slave_1: entered promiscuous mode
[  687.735338][T16370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  687.800398][T16535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.834160][T16535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  687.923718][T16535] team0: Port device team_slave_0 added
[  687.957198][T16535] team0: Port device team_slave_1 added
[  688.091470][T16535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  688.099775][T16535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.135395][T16535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.165357][T16535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  688.172510][T16535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.202614][T16535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  688.236828][T16370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.379050][T16535] hsr_slave_0: entered promiscuous mode
[  688.394899][T16535] hsr_slave_1: entered promiscuous mode
[  688.401345][T16535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  688.409754][T16535] Cannot create hsr debugfs directory
[  688.433764][ T5093] Bluetooth: hci4: command tx timeout
[  688.542068][ T1102] team0: left allmulticast mode
[  688.547226][ T1102] team_slave_0: left allmulticast mode
[  688.562470][ T1102] team_slave_1: left allmulticast mode
[  688.568151][ T1102] bridge0: port 3(team0) entered disabled state
[  688.584641][ T1102] bridge_slave_1: left allmulticast mode
[  688.590300][ T1102] bridge_slave_1: left promiscuous mode
[  688.612630][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.626616][ T1102] bridge_slave_0: left allmulticast mode
[  688.632898][ T1102] bridge_slave_0: left promiscuous mode
[  688.638741][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.654226][ T1102] bridge_slave_1: left allmulticast mode
[  688.660067][ T1102] bridge_slave_1: left promiscuous mode
[  688.668482][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.676296][ T5093] Bluetooth: hci0: command tx timeout
[  688.690614][ T1102] bridge_slave_0: left allmulticast mode
[  688.696611][ T1102] bridge_slave_0: left promiscuous mode
[  688.709475][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.632456][ T5093] Bluetooth: hci2: command tx timeout
[  689.674366][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  689.697963][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  689.724061][ T1102] bond0 (unregistering): Released all slaves
[  689.885563][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  689.912679][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  689.938918][ T1102] bond0 (unregistering): Released all slaves
[  689.966298][ T5096] usbhid 5-1:1.0: can't add hid device: -71
[  689.975667][ T5096] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  689.989857][T16465] 8021q: adding VLAN 0 to HW filter on device bond0
[  690.011083][ T5096] usb 5-1: USB disconnect, device number 88
[  690.265931][T16465] 8021q: adding VLAN 0 to HW filter on device team0
[  690.280822][T16370] veth0_vlan: entered promiscuous mode
[  690.287985][T16569] netlink: 'syz.4.2115': attribute type 10 has an invalid length.
[  690.310626][T16569] bridge0: port 3(netdevsim0) entered blocking state
[  690.317911][T16569] bridge0: port 3(netdevsim0) entered disabled state
[  690.325236][T16569] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  690.334488][T16569] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  690.449575][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.456769][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  690.467653][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.474811][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  690.521657][T16370] veth1_vlan: entered promiscuous mode
[  690.752604][ T5093] Bluetooth: hci0: command tx timeout
[  690.831795][T16370] veth0_macvtap: entered promiscuous mode
[  690.957883][T16370] veth1_macvtap: entered promiscuous mode
[  691.014894][ T1102] hsr_slave_0: left promiscuous mode
[  691.020941][ T1102] hsr_slave_1: left promiscuous mode
[  691.038843][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  691.057936][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  691.083108][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  691.090528][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  691.119804][ T1102] hsr_slave_0: left promiscuous mode
[  691.151224][ T1102] hsr_slave_1: left promiscuous mode
[  691.162202][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  691.177774][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  691.187333][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  691.195658][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  691.239579][ T1102] veth1_macvtap: left promiscuous mode
[  691.245334][ T1102] veth0_macvtap: left promiscuous mode
[  691.250970][ T1102] veth1_vlan: left promiscuous mode
[  691.256963][ T1102] veth0_vlan: left promiscuous mode
[  691.265601][ T1102] veth1_macvtap: left promiscuous mode
[  691.271150][ T1102] veth0_macvtap: left promiscuous mode
[  691.277522][ T1102] veth1_vlan: left promiscuous mode
[  691.283378][ T1102] veth0_vlan: left promiscuous mode
[  691.712708][ T5093] Bluetooth: hci2: command tx timeout
[  691.950344][ T1102] team_slave_1 (unregistering): left promiscuous mode
[  691.960681][ T1102] team0 (unregistering): Port device team_slave_1 removed
[  691.962714][ T1149] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  691.998731][ T1102] team_slave_0 (unregistering): left promiscuous mode
[  692.008710][ T1102] team0 (unregistering): Port device team_slave_0 removed
[  692.192524][ T1149] usb 5-1: Using ep0 maxpacket: 32
[  692.204030][ T1149] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.223207][ T1149] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.233476][ T1149] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  692.251144][ T1149] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  692.260924][ T1149] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  692.290419][ T1149] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  692.299656][ T1149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.308092][ T1149] usb 5-1: Product: syz
[  692.312512][ T1149] usb 5-1: Manufacturer: syz
[  692.317123][ T1149] usb 5-1: SerialNumber: syz
[  692.832671][ T1102] team0 (unregistering): Port device team_slave_1 removed
[  692.881315][ T1102] team0 (unregistering): Port device team_slave_0 removed
[  693.398255][T16598] vti0: entered promiscuous mode
[  693.420470][ T1149] cdc_ncm 5-1:1.0: bind() failure
[  693.445322][T16465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  693.448383][ T1149] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  693.469003][ T1149] cdc_ncm 5-1:1.1: bind() failure
[  693.485249][T16370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  693.537189][ T1149] usb 5-1: USB disconnect, device number 89
[  693.550130][T16370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  693.581919][T16370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  693.614878][T16370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  693.629071][T16370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  693.641693][T16370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  693.734214][T16370] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  693.750501][T16370] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  693.761883][T16370] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  693.778912][T16370] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  693.801938][T16465] veth0_vlan: entered promiscuous mode
[  693.802322][ T5093] Bluetooth: hci2: command tx timeout
[  693.849377][T16465] veth1_vlan: entered promiscuous mode
[  693.945912][T16507] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  693.993456][T16507] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  694.104544][T16615] program syz.4.2120 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  694.118125][T16507] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  694.132623][T16507] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  694.228703][T14688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  694.237981][T14688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  694.295748][T16465] veth0_macvtap: entered promiscuous mode
[  694.367872][T16465] veth1_macvtap: entered promiscuous mode
[  694.395245][T16535] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  694.409759][T16535] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  694.466038][T16535] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  694.475111][ T5298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  694.493378][ T5298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  694.494179][T16535] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  694.559744][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  694.592048][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.614618][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  694.625618][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.651515][T16465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  694.711439][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  694.737305][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.760843][T16465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  694.782566][T16465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.813481][T16465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  694.830543][T16465] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  694.842203][T16465] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  694.852051][T16465] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  694.859606][T16643] binder: BINDER_SET_CONTEXT_MGR already set
[  694.867948][T16465] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  694.870426][T16643] binder: 16640:16643 ioctl 4018620d 20000040 returned -16
[  694.935917][T16643] binder: 16640:16643 ioctl c0306201 200003c0 returned -22
[  695.030719][ T1102] IPVS: stop unused estimator thread 0...
[  695.107700][T16650] bridge0: port 3(vlan2) entered blocking state
[  695.124179][T16650] bridge0: port 3(vlan2) entered disabled state
[  695.130706][T16650] vlan2: entered allmulticast mode
[  695.138222][T16650] vlan2: left allmulticast mode
[  695.352417][T14688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.360273][T14688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  695.368247][T16507] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.500378][ T5295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.510161][T16507] 8021q: adding VLAN 0 to HW filter on device team0
[  695.527032][ T5295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  695.580399][T16535] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.606852][T16666] program syz.3.2127 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  695.617861][T14205] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.625022][T14205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.706684][T16535] 8021q: adding VLAN 0 to HW filter on device team0
[  695.737840][T14205] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.745040][T14205] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.775219][T14205] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.782410][T14205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.838443][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.845673][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.949643][T16507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  696.053343][ T5137] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  696.147582][T16507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  696.225210][T16535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  696.252764][ T5137] usb 3-1: Using ep0 maxpacket: 16
[  696.269695][ T5137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  696.312423][ T5137] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  696.327435][T16507] veth0_vlan: entered promiscuous mode
[  696.339067][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.367554][ T5137] usb 3-1: config 0 descriptor??
[  696.431904][T16507] veth1_vlan: entered promiscuous mode
[  696.470411][T16535] veth0_vlan: entered promiscuous mode
[  696.525752][T16535] veth1_vlan: entered promiscuous mode
[  696.566493][T16507] veth0_macvtap: entered promiscuous mode
[  696.606251][T16507] veth1_macvtap: entered promiscuous mode
[  696.703331][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  696.730434][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.740786][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  696.751784][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.772201][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  696.786561][T16708] xt_CT: You must specify a L4 protocol and not use inversions on it
[  696.802433][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.827407][T16507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  696.848892][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.867291][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.918428][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.953939][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.973430][T16507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.989605][T16507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.006656][T16507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  697.018285][T16712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.027646][T16712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.041882][T16712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.050785][T16712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.063188][ T5137] hid (null): invalid report_size 1074798868
[  697.087439][ T5137] hid-generic 0003:0158:0100.0027: unknown main item tag 0x1
[  697.095297][ T5137] hid-generic 0003:0158:0100.0027: unexpected long global item
[  697.097659][T16507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  697.104588][ T5137] hid-generic 0003:0158:0100.0027: probe with driver hid-generic failed with error -22
[  697.123852][T16507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  697.137809][T16507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  697.167208][T16507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  697.203727][T16535] veth0_macvtap: entered promiscuous mode
[  697.266772][T16535] veth1_macvtap: entered promiscuous mode
[  697.323084][ T5142] usb 3-1: USB disconnect, device number 74
[  697.432201][T16535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.450046][T16535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.460579][T16535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.477018][T16535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.487946][ T1150] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  697.504053][T16535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.520417][T16535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.540341][T16535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.551190][T16535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.564740][T16535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  697.623669][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.649169][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  697.663395][ T1149] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  697.669424][T16535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.688341][T16535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.699233][T16535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.702449][ T1150] usb 5-1: Using ep0 maxpacket: 8
[  697.719527][T16535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.727349][ T1150] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  697.731638][T16535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.749194][ T1150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.766495][ T1150] usb 5-1: config 0 descriptor??
[  697.771540][T16535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.787215][T16535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.798792][T16535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.814080][T16535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  697.863955][T16535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  697.867001][ T1149] usb 4-1: Using ep0 maxpacket: 32
[  697.881754][T16535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  697.903264][T16535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  697.908733][ T1149] usb 4-1: config 0 has an invalid interface number: 206 but max is 1
[  697.912065][T16535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  697.957602][ T1149] usb 4-1: config 0 has no interface number 1
[  697.982370][ T1149] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  697.998319][ T5295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  698.025538][ T5295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  698.032290][ T1149] usb 4-1: config 0 interface 206 has no altsetting 0
[  698.075151][ T1149] usb 4-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed
[  698.088054][ T1149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.108724][T16743] program syz.2.2136 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  698.123965][ T1149] usb 4-1: Product: syz
[  698.128178][ T1149] usb 4-1: Manufacturer: syz
[  698.161406][ T1149] usb 4-1: SerialNumber: syz
[  698.185771][ T1149] usb 4-1: config 0 descriptor??
[  698.195840][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  698.252093][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  698.334772][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2103'.
[  698.372120][T16749] team_slave_0: entered promiscuous mode
[  698.392351][T16749] team_slave_0: entered allmulticast mode
[  698.421432][T16753] fuse: Unknown parameter 'g'
[  698.448980][T16749] team0: Port device team_slave_0 removed
[  698.475056][ T5298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  698.488662][ T5298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  698.640516][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'.
[  698.692556][ T5168] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  698.891058][ T5168] usb 3-1: New USB device found, idVendor=0a21, idProduct=8001, bcdDevice=f0.bb
[  698.915970][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.945366][ T5168] usb 3-1: Product: syz
[  698.959892][ T5168] usb 3-1: Manufacturer: syz
[  698.969788][ T5168] usb 3-1: SerialNumber: syz
[  698.984943][ T5168] usb 3-1: config 0 descriptor??
[  699.000280][ T5168] usb_serial_simple 3-1:0.0: carelink converter detected
[  699.019745][ T5168] usb 3-1: carelink converter now attached to ttyUSB0
[  699.312962][ T5093] Bluetooth: hci3: command tx timeout
[  699.388659][ T5168] usb 3-1: USB disconnect, device number 75
[  699.431345][ T5168] carelink ttyUSB0: carelink converter now disconnected from ttyUSB0
[  699.462050][ T5168] usb_serial_simple 3-1:0.0: device disconnected
[  700.092717][ T1149] usb 4-1: USB disconnect, device number 90
[  700.269950][T16800] program syz.2.2146 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  700.375114][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'.
[  700.383461][T16800] team0: Port device macvlan2 added
[  700.925379][ T1150] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  700.982748][ T1150] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  701.029678][ T1150] asix 5-1:0.0: probe with driver asix failed with error -71
[  701.073248][ T1150] usb 5-1: USB disconnect, device number 90
[  701.650474][T16838] netlink: 'syz.0.2157': attribute type 10 has an invalid length.
[  701.702164][T16838] batman_adv: batadv0: Adding interface: team0
[  701.756764][T16838] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  701.787834][T16838] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  701.820077][T16842] netlink: 'syz.0.2157': attribute type 10 has an invalid length.
[  701.867824][T16842] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2157'.
[  701.917772][T16842] team0: entered promiscuous mode
[  701.937147][T16842] team_slave_0: entered promiscuous mode
[  701.944164][T16842] team_slave_1: entered promiscuous mode
[  701.978631][T16842] 8021q: adding VLAN 0 to HW filter on device team0
[  701.985935][T16842] batman_adv: batadv0: Interface activated: team0
[  701.992952][T16842] batman_adv: batadv0: Interface deactivated: team0
[  701.999610][T16842] batman_adv: batadv0: Removing interface: team0
[  702.039385][T16842] bridge0: port 3(team0) entered blocking state
[  702.061524][T16842] bridge0: port 3(team0) entered disabled state
[  702.069426][T16842] team0: entered allmulticast mode
[  702.077406][T16842] team_slave_0: entered allmulticast mode
[  702.083872][T16842] team_slave_1: entered allmulticast mode
[  702.097614][T16842] bridge0: port 3(team0) entered blocking state
[  702.104088][T16842] bridge0: port 3(team0) entered forwarding state
[  702.162010][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2159'.
[  702.173009][ T5168] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  702.197931][T16848] team_slave_0: entered promiscuous mode
[  702.221201][T16848] team_slave_0: entered allmulticast mode
[  702.275827][T16851] program syz.4.2160 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  702.297352][T16848] team0: Port device team_slave_0 removed
[  702.366468][T16851] team0: Port device macvlan2 added
[  702.392339][ T5168] usb 4-1: Using ep0 maxpacket: 32
[  702.435672][ T5168] usb 4-1: config 0 has an invalid interface number: 206 but max is 1
[  702.468983][ T5168] usb 4-1: config 0 has no interface number 1
[  702.493049][ T5168] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  702.524217][ T5168] usb 4-1: config 0 interface 206 has no altsetting 0
[  702.553011][ T5168] usb 4-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed
[  702.598361][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.635832][ T5168] usb 4-1: Product: syz
[  702.657563][ T5168] usb 4-1: Manufacturer: syz
[  702.689577][ T5168] usb 4-1: SerialNumber: syz
[  702.701905][ T5168] usb 4-1: config 0 descriptor??
[  703.070035][T16873] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2163'.
[  703.121309][T16882] input: syz0 as /devices/virtual/input/input44
[  703.272486][ T5096] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  703.293357][T16885] program syz.1.2168 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  703.472879][ T5096] usb 3-1: Using ep0 maxpacket: 16
[  703.488195][ T5096] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  703.498662][ T5096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.516682][ T5096] usb 3-1: config 0 descriptor??
[  703.554464][ T5096] usb 3-1: interface 1 not found
[  703.602692][ T5338] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  703.695301][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2170'.
[  703.792483][ T5093] Bluetooth: hci3: command tx timeout
[  703.805210][ T5168] usb 3-1: USB disconnect, device number 76
[  703.824702][ T5338] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  703.835135][ T5338] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  703.847244][ T5338] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  703.857373][ T5338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  703.866902][ T5338] usb 2-1: SerialNumber: syz
[  704.101737][ T5338] usb 2-1: skipping empty audio interface (v1)
[  704.150316][ T5338] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  704.188963][ T5338] usb 2-1: USB disconnect, device number 89
[  704.248116][T16892] xt_CT: You must specify a L4 protocol and not use inversions on it
[  704.450525][T12458] udevd[12458]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  704.533520][ T5168] usb 4-1: USB disconnect, device number 91
[  704.748477][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'.
[  704.820153][T16896] team_slave_0: entered promiscuous mode
[  704.849002][T16896] team_slave_0: entered allmulticast mode
[  704.917080][T16896] team0: Port device team_slave_0 removed
[  704.924057][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'.
[  705.220201][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'.
[  705.284621][ T5096] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  705.504063][ T5096] usb 2-1: Using ep0 maxpacket: 8
[  705.558863][ T5096] usb 2-1: New USB device found, idVendor=337d, idProduct=503c, bcdDevice=22.8c
[  705.582780][ T5096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.620645][ T5096] usb 2-1: Product: syz
[  705.642472][ T5096] usb 2-1: Manufacturer: syz
[  705.652882][ T5096] usb 2-1: SerialNumber: syz
[  705.660090][T16916] input: syz0 as /devices/virtual/input/input45
[  705.672169][ T5096] usb 2-1: config 0 descriptor??
[  705.845379][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2181'.
[  705.870833][T16920] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  705.931645][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  705.931662][   T29] audit: type=1326 audit(1720510704.635:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.4.2181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fde175bd9 code=0x0
[  706.207471][T16926] program syz.3.2184 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  706.379119][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'.
[  706.457721][ T5168] usb 2-1: USB disconnect, device number 90
[  706.535240][T14205] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  706.554981][T16936] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  706.573117][   T45] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  706.727256][T14205] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  706.767007][T14205] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  706.800659][T14205] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  706.811214][T14205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  706.820208][   T45] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  706.833041][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.841396][T14205] usb 4-1: SerialNumber: syz
[  706.856254][   T45] usb 1-1: Product: syz
[  706.860489][   T45] usb 1-1: Manufacturer: syz
[  706.870044][   T45] usb 1-1: SerialNumber: syz
[  706.886626][   T45] usb 1-1: config 0 descriptor??
[  706.897278][   T45] ch341 1-1:0.0: ch341-uart converter detected
[  707.061554][T14205] usb 4-1: skipping empty audio interface (v1)
[  707.104426][   T45] usb 1-1: failed to receive control message: -71
[  707.121046][T14205] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  707.130719][   T45] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  707.161162][   T45] usb 1-1: USB disconnect, device number 91
[  707.167278][T14205] usb 4-1: USB disconnect, device number 92
[  707.184836][   T45] ch341 1-1:0.0: device disconnected
[  707.415114][T12458] udevd[12458]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  707.472424][ T5095] Bluetooth: hci0: command 0x0406 tx timeout
[  707.712907][ T5093] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  707.723946][ T5093] Bluetooth: hci1: Injecting HCI hardware error event
[  707.734522][ T5095] Bluetooth: hci1: hardware error 0x00
[  708.312489][T14205] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  708.320251][   T45] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  708.353895][T16990] xt_hashlimit: invalid interval
[  708.445535][   T29] audit: type=1326 audit(1720510707.115:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16987 comm="syz.4.2204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fde175bd9 code=0x0
[  708.533381][T14205] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  708.542851][T14205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  708.553600][T14205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  708.564783][   T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  708.575481][T14205] usb 3-1: config 0 interface 0 has no altsetting 0
[  708.589140][   T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  708.599172][T14205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  708.609839][T14205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  708.621474][T14205] usb 3-1: config 0 interface 0 has no altsetting 0
[  708.631565][T14205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  708.641457][T14205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  708.653021][T14205] usb 3-1: config 0 interface 0 has no altsetting 0
[  708.661738][T14205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  708.671574][   T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  708.681412][T14205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  708.697922][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.706402][   T45] usb 4-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s
[  708.729977][T14205] usb 3-1: config 0 interface 0 has no altsetting 0
[  708.747437][T14205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  708.758138][T14205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  708.769212][   T45] usb 4-1: SerialNumber: syz
[  708.773920][T14205] usb 3-1: config 0 interface 0 has no altsetting 0
[  708.787549][T14205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  708.813910][T14205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  708.824973][T14205] usb 3-1: config 0 interface 0 has no altsetting 0
[  708.833469][T14205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  708.842824][T14205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  708.853859][T14205] usb 3-1: config 0 interface 0 has no altsetting 0
[  708.863541][T14205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  708.874931][T14205] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  708.885919][T14205] usb 3-1: config 0 interface 0 has no altsetting 0
[  708.901210][T14205] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  708.910441][T14205] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  708.920576][T14205] usb 3-1: Product: syz
[  708.929039][T14205] usb 3-1: Manufacturer: syz
[  708.936810][T14205] usb 3-1: SerialNumber: syz
[  708.948898][T14205] usb 3-1: config 0 descriptor??
[  708.959657][T14205] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  709.069239][   T45] usb 4-1: 0:2 : does not exist
[  709.131310][   T45] usb 4-1: USB disconnect, device number 93
[  709.180653][ T1149] usb 3-1: USB disconnect, device number 77
[  709.225987][ T1149] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  709.329187][T17003] FAULT_INJECTION: forcing a failure.
[  709.329187][T17003] name failslab, interval 1, probability 0, space 0, times 0
[  709.352376][T17003] CPU: 0 PID: 17003 Comm: syz.1.2207 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0
[  709.362551][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  709.372616][T17003] Call Trace:
[  709.375898][T17003]  <TASK>
[  709.378831][T17003]  dump_stack_lvl+0x241/0x360
[  709.383531][T17003]  ? __pfx_dump_stack_lvl+0x10/0x10
[  709.388745][T17003]  ? __pfx__printk+0x10/0x10
[  709.393349][T17003]  ? __pfx___might_resched+0x10/0x10
[  709.393492][T12458] udevd[12458]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  709.398636][T17003]  should_fail_ex+0x3b0/0x4e0
[  709.419079][T17003]  ? skb_clone+0x20c/0x390
[  709.423518][T17003]  should_failslab+0x9/0x20
[  709.428034][T17003]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  709.433399][T17003]  skb_clone+0x20c/0x390
[  709.437643][T17003]  nfnetlink_rcv+0x575/0x2a80
[  709.442322][T17003]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  709.448651][T17003]  ? __local_bh_enable_ip+0x168/0x200
[  709.454005][T17003]  ? __local_bh_enable_ip+0x168/0x200
[  709.459368][T17003]  ? __dev_queue_xmit+0x2d2/0x3d30
[  709.464470][T17003]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  709.470179][T17003]  ? __dev_queue_xmit+0x2d2/0x3d30
[  709.475279][T17003]  ? __dev_queue_xmit+0x16c9/0x3d30
[  709.480463][T17003]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  709.485587][T17003]  ? __dev_queue_xmit+0x2d2/0x3d30
[  709.490697][T17003]  ? ref_tracker_free+0x643/0x7e0
[  709.495711][T17003]  ? __asan_memcpy+0x40/0x70
[  709.500288][T17003]  ? __pfx_ref_tracker_free+0x10/0x10
[  709.505672][T17003]  ? netlink_deliver_tap+0x2e/0x1b0
[  709.510878][T17003]  ? skb_clone+0x240/0x390
[  709.515282][T17003]  ? __pfx_lock_release+0x10/0x10
[  709.520296][T17003]  ? __netlink_deliver_tap+0x77e/0x7c0
[  709.526035][T17003]  ? netlink_deliver_tap+0x2e/0x1b0
[  709.531221][T17003]  netlink_unicast+0x7ea/0x980
[  709.535980][T17003]  ? __pfx_netlink_unicast+0x10/0x10
[  709.541249][T17003]  ? __virt_addr_valid+0x183/0x520
[  709.546346][T17003]  ? __check_object_size+0x49c/0x900
[  709.551618][T17003]  ? bpf_lsm_netlink_send+0x9/0x10
[  709.556722][T17003]  netlink_sendmsg+0x8db/0xcb0
[  709.561486][T17003]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.562370][T14205] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  709.566758][T17003]  ? __import_iovec+0x536/0x820
[  709.579115][T17003]  ? aa_sock_msg_perm+0x91/0x160
[  709.584041][T17003]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  709.589307][T17003]  ? security_socket_sendmsg+0x87/0xb0
[  709.594770][T17003]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.600042][T17003]  __sock_sendmsg+0x221/0x270
[  709.604713][T17003]  ____sys_sendmsg+0x525/0x7d0
[  709.609475][T17003]  ? __pfx_____sys_sendmsg+0x10/0x10
[  709.614763][T17003]  __sys_sendmsg+0x2b0/0x3a0
[  709.619357][T17003]  ? __pfx___sys_sendmsg+0x10/0x10
[  709.624468][T17003]  ? vfs_write+0x7c4/0xc90
[  709.628906][T17003]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  709.635249][T17003]  ? do_syscall_64+0x100/0x230
[  709.640026][T17003]  ? do_syscall_64+0xb6/0x230
[  709.644705][T17003]  do_syscall_64+0xf3/0x230
[  709.649202][T17003]  ? clear_bhb_loop+0x35/0x90
[  709.653865][T17003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.659749][T17003] RIP: 0033:0x7f2310375bd9
[  709.664149][T17003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  709.683759][T17003] RSP: 002b:00007f231118d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  709.692165][T17003] RAX: ffffffffffffffda RBX: 00007f2310503f60 RCX: 00007f2310375bd9
[  709.700153][T17003] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000c
[  709.708142][T17003] RBP: 00007f231118d0a0 R08: 0000000000000000 R09: 0000000000000000
[  709.716144][T17003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.724375][T17003] R13: 000000000000000b R14: 00007f2310503f60 R15: 00007f231062fa78
[  709.732359][T17003]  </TASK>
[  709.765021][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'.
[  709.798462][ T5095] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  709.934118][T14205] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  709.944601][T14205] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  709.965593][T14205] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  709.974902][T14205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  709.995420][T14205] usb 5-1: SerialNumber: syz
[  710.043368][T16980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'.
[  710.067465][T16980] caif0: Master is either lo or non-ether device
[  710.216266][T14205] usb 5-1: 0:2 : does not exist
[  710.232503][ T5338] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  710.262649][T14205] usb 5-1: USB disconnect, device number 91
[  710.392385][ T5338] usb 2-1: device descriptor read/64, error -71
[  710.506913][T17012] program syz.3.2210 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  710.533915][T12458] udevd[12458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  710.716294][ T5338] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  710.853532][ T5096] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  710.884858][ T5338] usb 2-1: device descriptor read/64, error -71
[  711.020122][ T5338] usb usb2-port1: attempt power cycle
[  711.056220][ T5096] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  711.073301][ T5096] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  711.092608][ T5096] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  711.125796][ T5096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  711.135754][ T5096] usb 4-1: SerialNumber: syz
[  711.208259][T17032] syz_tun: entered promiscuous mode
[  711.265913][T17032] syz_tun: left promiscuous mode
[  711.360069][ T5096] usb 4-1: skipping empty audio interface (v1)
[  711.403349][ T5096] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  711.432491][ T5338] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  711.470957][ T5096] usb 4-1: USB disconnect, device number 94
[  711.499831][ T5338] usb 2-1: device descriptor read/8, error -71
[  711.714345][T12458] udevd[12458]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  711.782580][ T5338] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  711.823786][ T5338] usb 2-1: device descriptor read/8, error -71
[  711.983503][ T5338] usb usb2-port1: unable to enumerate USB device
[  711.997955][T17045] vlan2: entered promiscuous mode
[  712.007583][T17045] dummy0: entered promiscuous mode
[  712.019810][T17045] vlan2: entered allmulticast mode
[  712.025498][T17045] dummy0: entered allmulticast mode
[  712.035816][T17045] team0: Port device vlan2 added
[  712.056097][T17048] netlink: 'syz.4.2221': attribute type 72 has an invalid length.
[  712.074662][T17048] netlink: 'syz.4.2221': attribute type 8 has an invalid length.
[  712.129664][T17048] team_slave_0: entered promiscuous mode
[  712.137467][T17048] team_slave_0: entered allmulticast mode
[  712.185928][T17048] team0: Port device team_slave_0 removed
[  712.240403][T17052] FAULT_INJECTION: forcing a failure.
[  712.240403][T17052] name failslab, interval 1, probability 0, space 0, times 0
[  712.253092][T17052] CPU: 0 PID: 17052 Comm: syz.3.2222 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0
[  712.263261][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  712.273318][T17052] Call Trace:
[  712.276592][T17052]  <TASK>
[  712.279514][T17052]  dump_stack_lvl+0x241/0x360
[  712.284193][T17052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  712.289386][T17052]  ? __pfx__printk+0x10/0x10
[  712.293977][T17052]  should_fail_ex+0x3b0/0x4e0
[  712.298649][T17052]  ? skb_clone+0x20c/0x390
[  712.303061][T17052]  should_failslab+0x9/0x20
[  712.307558][T17052]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  712.312941][T17052]  skb_clone+0x20c/0x390
[  712.317192][T17052]  ? dev_queue_xmit_nit+0x220/0xc10
[  712.322392][T17052]  dev_queue_xmit_nit+0x419/0xc10
[  712.327418][T17052]  ? dev_queue_xmit_nit+0x2b/0xc10
[  712.332522][T17052]  ? validate_xmit_skb+0xa04/0x1120
[  712.337711][T17052]  dev_hard_start_xmit+0x15f/0x7e0
[  712.342815][T17052]  ? __pfx_validate_xmit_skb+0x10/0x10
[  712.348271][T17052]  __dev_queue_xmit+0x1b0e/0x3d30
[  712.353300][T17052]  ? __dev_queue_xmit+0x2d2/0x3d30
[  712.358404][T17052]  ? __pfx___dev_queue_xmit+0x10/0x10
[  712.363772][T17052]  ? __copy_skb_header+0x437/0x5b0
[  712.368878][T17052]  ? __asan_memcpy+0x40/0x70
[  712.373467][T17052]  ? __copy_skb_header+0x437/0x5b0
[  712.378581][T17052]  ? __skb_clone+0x454/0x6c0
[  712.383182][T17052]  ? skb_clone+0x240/0x390
[  712.387606][T17052]  __netlink_deliver_tap+0x54d/0x7c0
[  712.392894][T17052]  ? netlink_deliver_tap+0x2e/0x1b0
[  712.398083][T17052]  netlink_deliver_tap+0x19d/0x1b0
[  712.403186][T17052]  netlink_unicast+0x7b8/0x980
[  712.407950][T17052]  ? __pfx_netlink_unicast+0x10/0x10
[  712.413230][T17052]  ? __virt_addr_valid+0x183/0x520
[  712.418339][T17052]  ? __check_object_size+0x49c/0x900
[  712.423618][T17052]  ? bpf_lsm_netlink_send+0x9/0x10
[  712.428723][T17052]  netlink_sendmsg+0x8db/0xcb0
[  712.433492][T17052]  ? __pfx_netlink_sendmsg+0x10/0x10
[  712.438772][T17052]  ? __import_iovec+0x536/0x820
[  712.443613][T17052]  ? aa_sock_msg_perm+0x91/0x160
[  712.448548][T17052]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  712.453824][T17052]  ? security_socket_sendmsg+0x87/0xb0
[  712.459272][T17052]  ? __pfx_netlink_sendmsg+0x10/0x10
[  712.464547][T17052]  __sock_sendmsg+0x221/0x270
[  712.469223][T17052]  ____sys_sendmsg+0x525/0x7d0
[  712.473987][T17052]  ? __pfx_____sys_sendmsg+0x10/0x10
[  712.479281][T17052]  __sys_sendmsg+0x2b0/0x3a0
[  712.483868][T17052]  ? __pfx___sys_sendmsg+0x10/0x10
[  712.488971][T17052]  ? vfs_write+0x7c4/0xc90
[  712.493410][T17052]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  712.499731][T17052]  ? do_syscall_64+0x100/0x230
[  712.504492][T17052]  ? do_syscall_64+0xb6/0x230
[  712.509163][T17052]  do_syscall_64+0xf3/0x230
[  712.513666][T17052]  ? clear_bhb_loop+0x35/0x90
[  712.518334][T17052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.524232][T17052] RIP: 0033:0x7f7697775bd9
[  712.528642][T17052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  712.548236][T17052] RSP: 002b:00007f7698624048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  712.556641][T17052] RAX: ffffffffffffffda RBX: 00007f7697903f60 RCX: 00007f7697775bd9
[  712.564601][T17052] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[  712.572561][T17052] RBP: 00007f76986240a0 R08: 0000000000000000 R09: 0000000000000000
[  712.580538][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  712.588512][T17052] R13: 000000000000000b R14: 00007f7697903f60 R15: 00007f7697a2fa78
[  712.596495][T17052]  </TASK>
[  712.979384][T17054] tipc: Started in network mode
[  713.000072][T17054] tipc: Node identity 7f000001, cluster identity 4711
[  713.037486][T17054] tipc: Enabled bearer <udp:syz1>, priority 10
[  713.333989][ T5338] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  713.364933][T17084] netlink: 'syz.1.2229': attribute type 10 has an invalid length.
[  713.436913][T17084] batman_adv: batadv0: Adding interface: team0
[  713.443560][T17084] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.469307][T17084] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  713.536939][ T5338] usb 4-1: Using ep0 maxpacket: 32
[  713.549101][T17088] netlink: 'syz.1.2229': attribute type 10 has an invalid length.
[  713.549750][ T5338] usb 4-1: config 0 has an invalid interface number: 206 but max is 1
[  713.566116][T17088] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2229'.
[  713.575430][T17088] team0: entered promiscuous mode
[  713.580562][ T5338] usb 4-1: config 0 has no interface number 1
[  713.589633][T17088] team_slave_1: entered promiscuous mode
[  713.614445][T17088] 8021q: adding VLAN 0 to HW filter on device team0
[  713.621331][T17088] batman_adv: batadv0: Interface activated: team0
[  713.631822][T17088] batman_adv: batadv0: Interface deactivated: team0
[  713.642132][ T5338] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  713.654306][T17088] batman_adv: batadv0: Removing interface: team0
[  713.672364][ T5338] usb 4-1: config 0 interface 206 has no altsetting 0
[  713.683323][T17088] bridge0: port 3(team0) entered blocking state
[  713.702229][ T5338] usb 4-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed
[  713.712007][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.722566][T17088] bridge0: port 3(team0) entered disabled state
[  713.746208][ T5338] usb 4-1: Product: syz
[  713.750489][T17088] team0: entered allmulticast mode
[  713.755870][ T5338] usb 4-1: Manufacturer: syz
[  713.760747][T17088] team_slave_1: entered allmulticast mode
[  713.773870][ T5338] usb 4-1: SerialNumber: syz
[  713.780724][ T5338] usb 4-1: config 0 descriptor??
[  713.800295][T17088] bridge0: port 3(team0) entered blocking state
[  713.806684][T17088] bridge0: port 3(team0) entered forwarding state
[  714.016603][ T1102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.037224][   T45] tipc: Node number set to 2130706433
[  714.171283][T17093] netlink: 'syz.2.2235': attribute type 1 has an invalid length.
[  714.246053][ T1102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.400170][ T1102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.534750][ T1102] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[  714.551476][ T1102] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  714.574669][ T1102] bridge0: port 3(netdevsim0) entered disabled state
[  714.607638][ T1102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.689386][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  714.701607][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  714.709685][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  714.718248][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  714.733298][T17105] netlink: 'syz.2.2238': attribute type 10 has an invalid length.
[  714.743762][ T5093] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  714.751820][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  714.841979][T17105] batman_adv: batadv0: Adding interface: team0
[  714.866441][T17105] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  714.931096][T17105] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  714.967464][T17107] netlink: 'syz.2.2238': attribute type 10 has an invalid length.
[  714.996565][T17107] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2238'.
[  715.006098][T17107] team0: entered promiscuous mode
[  715.011192][T17107] team_slave_1: entered promiscuous mode
[  715.012450][ T5095] Bluetooth: hci3: command tx timeout
[  715.050269][T17107] macvlan2: entered promiscuous mode
[  715.094238][T17107] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  715.143450][T17107] 8021q: adding VLAN 0 to HW filter on device team0
[  715.158705][T17107] batman_adv: batadv0: Interface activated: team0
[  715.166117][T17107] batman_adv: batadv0: Interface deactivated: team0
[  715.176299][T17107] batman_adv: batadv0: Removing interface: team0
[  715.186916][T17107] bridge0: port 3(team0) entered blocking state
[  715.205943][T17107] bridge0: port 3(team0) entered disabled state
[  715.213818][T17107] team0: entered allmulticast mode
[  715.219780][T17107] team_slave_1: entered allmulticast mode
[  715.230552][T17107] macvlan2: entered allmulticast mode
[  715.254257][T17107] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  715.282315][T17107] bridge0: port 3(team0) entered blocking state
[  715.288683][T17107] bridge0: port 3(team0) entered forwarding state
[  715.396494][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'.
[  715.483515][ T1102] bridge_slave_1: left allmulticast mode
[  715.494492][ T1102] bridge_slave_1: left promiscuous mode
[  715.513347][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.530129][ T1102] bridge_slave_0: left allmulticast mode
[  715.536941][ T1102] bridge_slave_0: left promiscuous mode
[  715.545713][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.770604][ T5096] usb 4-1: USB disconnect, device number 95
[  716.029585][T15292] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  716.121843][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  716.137800][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.160342][ T1102] bond0 (unregistering): Released all slaves
[  716.203925][T17122] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2242'.
[  716.218135][T15292] usb 2-1: Using ep0 maxpacket: 16
[  716.225074][T15292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  716.243725][T15292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  716.290444][T15292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  716.300072][T17132] vti0: entered promiscuous mode
[  716.324230][ T1102] tipc: Disabling bearer <udp:syz1>
[  716.334139][T15292] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  716.343963][ T1102] tipc: Left network mode
[  716.426718][T15292] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  716.475264][T15292] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  716.514238][T15292] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  716.532197][T15292] usb 2-1: Manufacturer: syz
[  716.556779][T17147] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  716.570179][T15292] usb 2-1: config 0 descriptor??
[  716.594335][ T5096] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  716.719499][   T45] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  716.782387][ T5096] usb 1-1: Using ep0 maxpacket: 32
[  716.802691][ T5096] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  716.831662][ T5096] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  716.841850][ T5095] Bluetooth: hci1: command tx timeout
[  716.866194][ T5096] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  716.876661][ T5096] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  716.882172][T17108] chnl_net:caif_netlink_parms(): no params data found
[  716.887516][ T5096] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  716.905055][T15292] rc_core: IR keymap rc-hauppauge not found
[  716.906877][ T5096] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  716.915127][T15292] Registered IR keymap rc-empty
[  716.925741][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  716.936995][ T5096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.953826][ T5096] usb 1-1: Product: syz
[  716.956361][   T45] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  716.958012][ T5096] usb 1-1: Manufacturer: syz
[  716.958032][ T5096] usb 1-1: SerialNumber: syz
[  716.977265][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  716.997657][T17124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2243'.
[  717.019379][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.031031][   T45] usb 4-1: Product: syz
[  717.035385][   T45] usb 4-1: Manufacturer: syz
[  717.040132][   T45] usb 4-1: SerialNumber: syz
[  717.048387][T15292] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  717.066950][ T1102] hsr_slave_0: left promiscuous mode
[  717.075315][T15292] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input46
[  717.091688][   T45] usb 4-1: config 0 descriptor??
[  717.100812][   T45] ch341 4-1:0.0: ch341-uart converter detected
[  717.108166][ T1102] hsr_slave_1: left promiscuous mode
[  717.115620][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.124219][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  717.131735][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  717.143141][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  717.150780][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  717.164223][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.200932][ T1102] veth1_macvtap: left promiscuous mode
[  717.206986][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.214470][ T1102] veth0_macvtap: left promiscuous mode
[  717.220266][ T1102] veth1_vlan: left promiscuous mode
[  717.225863][ T1102] veth0_vlan: left promiscuous mode
[  717.252743][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.299470][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.311320][   T45] usb 4-1: failed to receive control message: -71
[  717.324805][   T45] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  717.352767][   T45] usb 4-1: USB disconnect, device number 96
[  717.360131][   T45] ch341 4-1:0.0: device disconnected
[  717.372461][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.402687][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.440649][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.484902][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.533023][T15292] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  717.537148][ T1102] team0 (unregistering): Port device macvlan2 removed
[  717.554825][T17166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2251'.
[  717.565888][T15292] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  717.582484][T15292] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  717.631901][T15292] usb 2-1: USB disconnect, device number 95
[  718.512222][ T1102] team0 (unregistering): Port device team_slave_1 removed
[  718.558336][ T1149] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[  718.749529][ T1149] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  718.760666][ T1149] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  718.778635][ T1149] usb 4-1: config 0 has no interface number 0
[  718.785350][ T1149] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4
[  718.796646][ T1149] usb 4-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  718.816479][ T1149] usb 4-1: New USB device found, idVendor=056e, idProduct=4005, bcdDevice=89.38
[  718.835680][ T1149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.844811][ T1149] usb 4-1: Product: syz
[  718.849059][ T1149] usb 4-1: Manufacturer: syz
[  718.854372][ T1149] usb 4-1: SerialNumber: syz
[  718.867719][ T1149] usb 4-1: config 0 descriptor??
[  718.912396][ T5095] Bluetooth: hci1: command tx timeout
[  719.081689][ T1149] pegasus 4-1:0.8: probe with driver pegasus failed with error -71
[  719.104596][ T1149] usb 4-1: USB disconnect, device number 97
[  719.277577][ T5096] cdc_ncm 1-1:1.0: bind() failure
[  719.286664][T17169] netlink: 'syz.2.2252': attribute type 10 has an invalid length.
[  719.296056][ T5096] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  719.341929][T17169] bridge0: port 3(team0) entered disabled state
[  719.348715][ T5096] cdc_ncm 1-1:1.1: bind() failure
[  719.375166][ T5096] usb 1-1: USB disconnect, device number 92
[  719.381993][T17169] team0: left allmulticast mode
[  719.397702][T17169] team_slave_1: left allmulticast mode
[  719.408257][T17169] macvlan2: left allmulticast mode
[  719.415663][T17169] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  719.425984][T17169] team0: left promiscuous mode
[  719.431547][T17169] team_slave_1: left promiscuous mode
[  719.440825][T17169] macvlan2: left promiscuous mode
[  719.446188][T17169] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  719.457320][T17169] bridge0: port 3(team0) entered disabled state
[  719.466318][T17169] batman_adv: batadv0: Adding interface: team0
[  719.472868][T17169] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  719.498992][T17169] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  719.511351][T17170] netlink: 'syz.2.2252': attribute type 10 has an invalid length.
[  719.519672][T17170] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2252'.
[  719.528916][T17170] team0: entered promiscuous mode
[  719.534243][T17170] team_slave_1: entered promiscuous mode
[  719.544241][T17170] macvlan2: entered promiscuous mode
[  719.549530][T17170] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  719.558402][T17170] 8021q: adding VLAN 0 to HW filter on device team0
[  719.566506][T17170] batman_adv: batadv0: Interface activated: team0
[  719.573278][T17170] batman_adv: batadv0: Interface deactivated: team0
[  719.579923][T17170] batman_adv: batadv0: Removing interface: team0
[  719.587468][T17170] bridge0: port 3(team0) entered blocking state
[  719.594748][T17170] bridge0: port 3(team0) entered disabled state
[  719.613379][T17170] team0: entered allmulticast mode
[  719.619541][T17170] team_slave_1: entered allmulticast mode
[  719.628617][T17170] macvlan2: entered allmulticast mode
[  719.637158][T17170] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  719.646953][T17170] bridge0: port 3(team0) entered blocking state
[  719.653368][T17170] bridge0: port 3(team0) entered forwarding state
[  719.685504][T17184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2257'.
[  719.860250][T17108] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.889197][T17108] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.907581][T17108] bridge_slave_0: entered allmulticast mode
[  719.915305][T17108] bridge_slave_0: entered promiscuous mode
[  719.940131][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'.
[  719.952025][T17108] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.970027][T17108] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.977775][T17108] bridge_slave_1: entered allmulticast mode
[  719.995596][T17108] bridge_slave_1: entered promiscuous mode
[  720.087424][T17108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  720.137553][T17108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  720.196450][ T1149] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  720.243909][T17108] team0: Port device team_slave_0 added
[  720.265451][T17108] team0: Port device team_slave_1 added
[  720.342580][ T5096] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  720.371542][T17108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  720.398148][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.428317][ T1150] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  720.448360][ T1149] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  720.469275][ T1149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.480372][T17108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  720.492883][ T1149] usb 1-1: Product: syz
[  720.497065][ T1149] usb 1-1: Manufacturer: syz
[  720.511429][T17108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  720.520906][ T1149] usb 1-1: SerialNumber: syz
[  720.535753][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  720.571422][ T1149] usb 1-1: config 0 descriptor??
[  720.579274][ T5096] usb 4-1: Using ep0 maxpacket: 16
[  720.587803][ T1149] ch341 1-1:0.0: ch341-uart converter detected
[  720.606121][T17108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  720.617535][ T5096] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  720.630670][T17213] netlink: 'syz.2.2265': attribute type 10 has an invalid length.
[  720.632803][ T5096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  720.652773][ T5096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  720.679764][ T1150] usb 2-1: config index 0 descriptor too short (expected 9533, got 36)
[  720.688450][T17213] bridge0: port 3(team0) entered disabled state
[  720.695153][ T1150] usb 2-1: config 161 has too many interfaces: 81, using maximum allowed: 32
[  720.704172][ T5096] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  720.715677][ T1150] usb 2-1: config 161 has an invalid interface descriptor of length 7, skipping
[  720.724831][ T5096] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  720.737818][ T1150] usb 2-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config
[  720.755423][T17213] team0: left allmulticast mode
[  720.762412][T17213] team_slave_1: left allmulticast mode
[  720.768390][ T1150] usb 2-1: config 161 has 0 interfaces, different from the descriptor's value: 81
[  720.781434][T17213] macvlan2: left allmulticast mode
[  720.786880][ T1150] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  720.800092][ T5096] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  720.809711][T17213] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  720.819588][ T1149] usb 1-1: failed to receive control message: -71
[  720.828064][ T5096] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  720.838685][T17213] team0: left promiscuous mode
[  720.843622][ T1150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.851646][ T1149] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  720.862869][T17213] team_slave_1: left promiscuous mode
[  720.869719][ T5096] usb 4-1: Manufacturer: syz
[  720.883300][ T1149] usb 1-1: USB disconnect, device number 93
[  720.889897][T17213] macvlan2: left promiscuous mode
[  720.899206][ T5096] usb 4-1: config 0 descriptor??
[  720.906091][T17213] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  720.919524][ T1149] ch341 1-1:0.0: device disconnected
[  720.923641][T17213] bridge0: port 3(team0) entered disabled state
[  720.979877][T17213] batman_adv: batadv0: Adding interface: team0
[  720.992151][T17213] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  721.018670][T17213] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  721.023549][ T5095] Bluetooth: hci1: command tx timeout
[  721.092319][T17217] netlink: 'syz.2.2265': attribute type 10 has an invalid length.
[  721.116062][ T1150] usb 2-1: USB disconnect, device number 96
[  721.122126][T17217] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2265'.
[  721.149270][T17217] team0: entered promiscuous mode
[  721.163911][T17217] team_slave_1: entered promiscuous mode
[  721.180807][T17217] macvlan2: entered promiscuous mode
[  721.187548][T17217] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  721.198486][T17217] 8021q: adding VLAN 0 to HW filter on device team0
[  721.205677][T17217] batman_adv: batadv0: Interface activated: team0
[  721.212604][T17217] batman_adv: batadv0: Interface deactivated: team0
[  721.219569][T17217] batman_adv: batadv0: Removing interface: team0
[  721.233417][ T5096] rc_core: IR keymap rc-hauppauge not found
[  721.241652][ T5096] Registered IR keymap rc-empty
[  721.246889][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.273193][T17217] bridge0: port 3(team0) entered blocking state
[  721.289927][T17217] bridge0: port 3(team0) entered disabled state
[  721.296725][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.305799][T17217] team0: entered allmulticast mode
[  721.310907][T17217] team_slave_1: entered allmulticast mode
[  721.321090][T17217] macvlan2: entered allmulticast mode
[  721.326555][T17217] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  721.336855][T17201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2264'.
[  721.340081][T17217] bridge0: port 3(team0) entered blocking state
[  721.346846][ T5096] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  721.352168][T17217] bridge0: port 3(team0) entered forwarding state
[  721.416868][ T5096] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47
[  721.468720][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.520036][T17108] hsr_slave_0: entered promiscuous mode
[  721.523714][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.534068][T17108] hsr_slave_1: entered promiscuous mode
[  721.540586][T17108] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  721.548666][T17108] Cannot create hsr debugfs directory
[  721.585961][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.622464][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.662765][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.693795][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.757267][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.792898][T15233] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  721.813425][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.853049][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.903021][ T5096] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  721.934207][ T5096] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  721.969028][ T5096] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  722.008491][ T5096] usb 4-1: USB disconnect, device number 98
[  722.014685][T15233] usb 1-1: Using ep0 maxpacket: 32
[  722.037338][T15233] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  722.059885][T15233] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  722.079544][T15233] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  722.103739][T15233] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  722.130376][T15233] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  722.149533][T15233] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  722.159309][T15233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.170468][T15233] usb 1-1: Product: syz
[  722.175164][T15233] usb 1-1: Manufacturer: syz
[  722.180176][T15233] usb 1-1: SerialNumber: syz
[  722.428187][T15233] cdc_ncm 1-1:1.0: bind() failure
[  722.452149][T15233] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  722.471178][T15233] cdc_ncm 1-1:1.1: bind() failure
[  722.499484][T15233] usb 1-1: USB disconnect, device number 94
[  722.574156][T17108] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  722.591330][T17108] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  722.610363][T17253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2272'.
[  722.629352][T17108] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  722.649544][T17108] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  722.713551][ T1150] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  722.895703][T17108] 8021q: adding VLAN 0 to HW filter on device bond0
[  722.902688][ T1150] usb 4-1: device descriptor read/64, error -71
[  722.986347][T17108] 8021q: adding VLAN 0 to HW filter on device team0
[  723.018146][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.025374][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  723.073702][ T5095] Bluetooth: hci1: command tx timeout
[  723.105932][T14205] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.113155][T14205] bridge0: port 2(bridge_slave_1) entered forwarding state
[  723.173932][ T1150] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  723.326422][T17108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  723.362781][ T1150] usb 4-1: device descriptor read/64, error -71
[  723.382403][T15233] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  723.448176][T17108] veth0_vlan: entered promiscuous mode
[  723.476481][T17108] veth1_vlan: entered promiscuous mode
[  723.513576][ T1150] usb usb4-port1: attempt power cycle
[  723.550815][T17108] veth0_macvtap: entered promiscuous mode
[  723.585437][T17108] veth1_macvtap: entered promiscuous mode
[  723.599248][T15233] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  723.645428][T15233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.680815][T15233] usb 3-1: Product: syz
[  723.697531][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.712425][T14205] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  723.720613][T15233] usb 3-1: Manufacturer: syz
[  723.728498][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.731069][T15233] usb 3-1: SerialNumber: syz
[  723.768030][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.773251][T15233] usb 3-1: config 0 descriptor??
[  723.797348][T15233] ch341 3-1:0.0: ch341-uart converter detected
[  723.810669][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.828590][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.839524][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.865765][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.882379][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.895531][T14205] usb 1-1: Using ep0 maxpacket: 16
[  723.904962][T14205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  723.921777][T17108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  723.933210][T14205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  723.943498][ T1150] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  723.965076][T14205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  723.974432][ T1150] usb 4-1: device descriptor read/8, error -71
[  723.976627][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.994420][T14205] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  724.004522][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.014649][T14205] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  724.029069][T15233] usb 3-1: failed to receive control message: -71
[  724.032541][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  724.060899][T15233] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  724.071909][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.089417][T15233] usb 3-1: USB disconnect, device number 78
[  724.091221][T14205] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  724.108530][T15233] ch341 3-1:0.0: device disconnected
[  724.128334][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  724.142602][T14205] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  724.154091][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.167699][T14205] usb 1-1: Manufacturer: syz
[  724.185507][T14205] usb 1-1: config 0 descriptor??
[  724.190939][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  724.203169][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.220782][T17108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  724.258359][T17108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  724.301961][T17108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  724.314920][T17108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  724.325676][T17108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  724.326351][ T1150] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  724.393662][ T1150] usb 4-1: device descriptor read/8, error -71
[  724.524294][ T1150] usb usb4-port1: unable to enumerate USB device
[  724.557517][ T5295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.568674][ T5295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.593603][T14205] rc_core: IR keymap rc-hauppauge not found
[  724.611997][T14205] Registered IR keymap rc-empty
[  724.640489][T17286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2278'.
[  724.651640][T14205] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  724.670996][ T5293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.698849][ T5293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.707291][T14205] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  724.757343][T14205] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  724.804921][T14205] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input48
[  724.857524][T14205] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  724.872087][    C1] ------------[ cut here ]------------
[  724.878315][    C1] WARNING: CPU: 1 PID: 17309 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0
[  724.887395][    C1] Modules linked in:
[  724.891322][    C1] CPU: 1 PID: 17309 Comm: syz.1.2280 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0
[  724.901506][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  724.911619][    C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0
[  724.917396][    C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0
[  724.937063][    C1] RSP: 0018:ffffc90000a17cf0 EFLAGS: 00010002
[  724.943146][    C1] RAX: 0000000000010302 RBX: ffff88807e779e00 RCX: 0000000000000002
[  724.951138][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980
[  724.959110][    C1] RBP: 0100000000000001 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe
[  724.967081][    C1] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e
[  724.975058][    C1] R13: ffff8880243aa600 R14: 0000000000000006 R15: ffff8880b952d4c8
[  724.983047][    C1] FS:  00007f231116c6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  724.992019][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  724.998612][    C1] CR2: 00007fd3a0704030 CR3: 000000006a1d6000 CR4: 00000000003506f0
[  725.006589][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  725.014563][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  725.022537][    C1] Call Trace:
[  725.025825][    C1]  <IRQ>
[  725.028709][    C1]  ? __warn+0x163/0x4e0
[  725.032935][    C1]  ? kcov_remote_start+0x5a2/0x7e0
[  725.038071][    C1]  ? report_bug+0x2b3/0x500
[  725.042598][    C1]  ? kcov_remote_start+0x5a2/0x7e0
[  725.047766][    C1]  ? handle_bug+0x3e/0x70
[  725.052105][    C1]  ? exc_invalid_op+0x1a/0x50
[  725.056827][    C1]  ? asm_exc_invalid_op+0x1a/0x20
[  725.061903][    C1]  ? kcov_remote_start+0x9e/0x7e0
[  725.066954][    C1]  ? kcov_remote_start+0x5a2/0x7e0
[  725.072098][    C1]  ? usb_unanchor_urb+0xa3/0xc0
[  725.076954][    C1]  ? usb_anchor_suspend_wakeups+0x3a/0x40
[  725.082685][    C1]  __usb_hcd_giveback_urb+0x405/0x6e0
[  725.088079][    C1]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  725.094001][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  725.099215][    C1]  dummy_timer+0x830/0x45d0
[  725.103749][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  725.108700][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  725.113643][    C1]  __hrtimer_run_queues+0x59b/0xd50
[  725.118852][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  725.124572][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  725.130656][    C1]  hrtimer_interrupt+0x396/0x990
[  725.135608][    C1]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  725.141610][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  725.147258][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  725.153256][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x1f/0x90
[  725.160130][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 c0 d4 03 00 65 8b 05 60 a9 6d 7e a9 00 01 ff 00 74 10 <a9> 00 01 00 00 74 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00
[  725.179733][    C1] RSP: 0018:ffffc90000a18498 EFLAGS: 00000206
[  725.185813][    C1] RAX: 0000000000000302 RBX: 0000000000000000 RCX: ffff88807e779e00
[  725.193793][    C1] RDX: ffff88807e779e00 RSI: 0000000000000000 RDI: 0000000000000000
[  725.201754][    C1] RBP: ffffc90000a187f0 R08: ffffffff8afbba6a R09: 1ffff11005d431cf
[  725.209715][    C1] R10: dffffc0000000000 R11: ffffed1005d431d0 R12: ffff88806b526060
[  725.217676][    C1] R13: 1ffff1100d6a4c0c R14: ffffc90000a18b18 R15: 0000000000000088
[  725.225641][    C1]  ? ieee80211_rx_handlers+0x143a/0xb820
[  725.231275][    C1]  ieee80211_rx_handlers+0x143a/0xb820
[  725.236752][    C1]  ? __pfx_ieee80211_rx_handlers+0x10/0x10
[  725.242577][    C1]  ieee80211_prepare_and_rx_handle+0x31ab/0x6360
[  725.248937][    C1]  ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10
[  725.255613][    C1]  ? sta_info_hash_lookup+0x4e/0x60
[  725.260807][    C1]  ieee80211_rx_list+0x2968/0x3780
[  725.265911][    C1]  ? __lock_acquire+0x1346/0x1fd0
[  725.270956][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  725.276421][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  725.281441][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  725.287411][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  725.293733][    C1]  ? ieee80211_rx_napi+0xd6/0x3c0
[  725.298743][    C1]  ieee80211_rx_napi+0x18a/0x3c0
[  725.303673][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  725.309984][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  725.315440][    C1]  ? skb_dequeue+0x113/0x150
[  725.320030][    C1]  ieee80211_handle_queued_frames+0xe7/0x1e0
[  725.326007][    C1]  tasklet_action_common+0x321/0x4d0
[  725.331298][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  725.337102][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  725.343427][    C1]  ? workqueue_softirq_action+0xca/0x140
[  725.349059][    C1]  handle_softirqs+0x2c4/0x970
[  725.353816][    C1]  ? do_softirq+0x11b/0x1e0
[  725.358304][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  725.363578][    C1]  do_softirq+0x11b/0x1e0
[  725.367893][    C1]  </IRQ>
[  725.370811][    C1]  <TASK>
[  725.373740][    C1]  ? __pfx_do_softirq+0x10/0x10
[  725.378581][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  725.384224][    C1]  ? rcu_is_watching+0x15/0xb0
[  725.389002][    C1]  __local_bh_enable_ip+0x1bb/0x200
[  725.394209][    C1]  ? dev_hard_start_xmit+0x773/0x7e0
[  725.399482][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  725.404583][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  725.410285][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  725.415499][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  725.420600][    C1]  __dev_queue_xmit+0x16c9/0x3d30
[  725.425624][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  725.430724][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  725.436090][    C1]  ? mark_lock+0x9a/0x350
[  725.440410][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  725.446381][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  725.452702][    C1]  ? ip_finish_output2+0xa14/0x1380
[  725.457896][    C1]  ? ip_finish_output2+0x45f/0x1380
[  725.463087][    C1]  ip_finish_output2+0xd41/0x1380
[  725.468115][    C1]  ? ip_finish_output2+0x45f/0x1380
[  725.473310][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  725.478780][    C1]  ? ip_skb_dst_mtu+0x6ba/0x9b0
[  725.483624][    C1]  ? __ip_finish_output+0x347/0x400
[  725.488845][    C1]  __ip_queue_xmit+0x118c/0x1b70
[  725.493775][    C1]  ? __ip_queue_xmit+0x5f/0x1b70
[  725.498706][    C1]  l2tp_ip_sendmsg+0x63b/0x1670
[  725.503557][    C1]  ? tomoyo_socket_sendmsg_permission+0x12e/0x420
[  725.509969][    C1]  ? l2tp_ip_sendmsg+0x3fe/0x1670
[  725.515016][    C1]  ? inet_sendmsg+0x330/0x390
[  725.519700][    C1]  ? security_socket_sendmsg+0x87/0xb0
[  725.525155][    C1]  __sock_sendmsg+0x1a6/0x270
[  725.529831][    C1]  ____sys_sendmsg+0x525/0x7d0
[  725.534597][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  725.539884][    C1]  ? __might_fault+0xaa/0x120
[  725.544562][    C1]  __sys_sendmmsg+0x3b2/0x740
[  725.549241][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[  725.554478][    C1]  ? futex_hash+0x1e/0x1f0
[  725.558910][    C1]  ? futex_wait+0x285/0x360
[  725.563423][    C1]  ? __pfx_futex_wait+0x10/0x10
[  725.568284][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  725.573650][    C1]  ? l2tp_ip_connect+0x29f/0x310
[  725.578584][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  725.584304][    C1]  ? do_futex+0x33b/0x560
[  725.588651][    C1]  ? __sys_connect+0x16b/0x310
[  725.593428][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  725.599417][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  725.605748][    C1]  ? do_syscall_64+0x100/0x230
[  725.610515][    C1]  __x64_sys_sendmmsg+0xa0/0xb0
[  725.615371][    C1]  do_syscall_64+0xf3/0x230
[  725.619897][    C1]  ? clear_bhb_loop+0x35/0x90
[  725.624572][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.630484][    C1] RIP: 0033:0x7f2310375bd9
[  725.634925][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  725.654577][    C1] RSP: 002b:00007f231116c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  725.662993][    C1] RAX: ffffffffffffffda RBX: 00007f2310504038 RCX: 00007f2310375bd9
[  725.670988][    C1] RDX: 00000000040000cf RSI: 0000000020000900 RDI: 0000000000000007
[  725.679040][    C1] RBP: 00007f23103e4e60 R08: 0000000000000000 R09: 0000000000000000
[  725.687010][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.694979][    C1] R13: 000000000000006e R14: 00007f2310504038 R15: 00007f231062fa78
[  725.702973][    C1]  </TASK>
[  725.705986][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  725.713269][    C1] CPU: 1 PID: 17309 Comm: syz.1.2280 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0
[  725.723439][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  725.733495][    C1] Call Trace:
[  725.736769][    C1]  <IRQ>
[  725.739600][    C1]  dump_stack_lvl+0x241/0x360
[  725.744278][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  725.749472][    C1]  ? __pfx__printk+0x10/0x10
[  725.754050][    C1]  ? _printk+0xd5/0x120
[  725.758221][    C1]  ? vscnprintf+0x5d/0x90
[  725.762534][    C1]  panic+0x349/0x860
[  725.766431][    C1]  ? __warn+0x172/0x4e0
[  725.770577][    C1]  ? __pfx_panic+0x10/0x10
[  725.775001][    C1]  ? show_trace_log_lvl+0x4e6/0x520
[  725.780198][    C1]  __warn+0x346/0x4e0
[  725.784167][    C1]  ? kcov_remote_start+0x5a2/0x7e0
[  725.789271][    C1]  report_bug+0x2b3/0x500
[  725.793595][    C1]  ? kcov_remote_start+0x5a2/0x7e0
[  725.798693][    C1]  handle_bug+0x3e/0x70
[  725.802837][    C1]  exc_invalid_op+0x1a/0x50
[  725.807332][    C1]  asm_exc_invalid_op+0x1a/0x20
[  725.812166][    C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0
[  725.817873][    C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0
[  725.837468][    C1] RSP: 0018:ffffc90000a17cf0 EFLAGS: 00010002
[  725.843524][    C1] RAX: 0000000000010302 RBX: ffff88807e779e00 RCX: 0000000000000002
[  725.851476][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980
[  725.859432][    C1] RBP: 0100000000000001 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe
[  725.867388][    C1] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e
[  725.875343][    C1] R13: ffff8880243aa600 R14: 0000000000000006 R15: ffff8880b952d4c8
[  725.883304][    C1]  ? kcov_remote_start+0x9e/0x7e0
[  725.888410][    C1]  ? usb_unanchor_urb+0xa3/0xc0
[  725.893253][    C1]  ? usb_anchor_suspend_wakeups+0x3a/0x40
[  725.898962][    C1]  __usb_hcd_giveback_urb+0x405/0x6e0
[  725.904320][    C1]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  725.910194][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  725.915383][    C1]  dummy_timer+0x830/0x45d0
[  725.919923][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  725.924850][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  725.929767][    C1]  __hrtimer_run_queues+0x59b/0xd50
[  725.934964][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  725.940673][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  725.946730][    C1]  hrtimer_interrupt+0x396/0x990
[  725.951671][    C1]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  725.957656][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  725.963285][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  725.969253][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x1f/0x90
[  725.976092][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 c0 d4 03 00 65 8b 05 60 a9 6d 7e a9 00 01 ff 00 74 10 <a9> 00 01 00 00 74 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00
[  725.995700][    C1] RSP: 0018:ffffc90000a18498 EFLAGS: 00000206
[  726.001772][    C1] RAX: 0000000000000302 RBX: 0000000000000000 RCX: ffff88807e779e00
[  726.009750][    C1] RDX: ffff88807e779e00 RSI: 0000000000000000 RDI: 0000000000000000
[  726.017725][    C1] RBP: ffffc90000a187f0 R08: ffffffff8afbba6a R09: 1ffff11005d431cf
[  726.025689][    C1] R10: dffffc0000000000 R11: ffffed1005d431d0 R12: ffff88806b526060
[  726.033670][    C1] R13: 1ffff1100d6a4c0c R14: ffffc90000a18b18 R15: 0000000000000088
[  726.041649][    C1]  ? ieee80211_rx_handlers+0x143a/0xb820
[  726.047301][    C1]  ieee80211_rx_handlers+0x143a/0xb820
[  726.052774][    C1]  ? __pfx_ieee80211_rx_handlers+0x10/0x10
[  726.058607][    C1]  ieee80211_prepare_and_rx_handle+0x31ab/0x6360
[  726.064962][    C1]  ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10
[  726.071646][    C1]  ? sta_info_hash_lookup+0x4e/0x60
[  726.076864][    C1]  ieee80211_rx_list+0x2968/0x3780
[  726.081983][    C1]  ? __lock_acquire+0x1346/0x1fd0
[  726.087019][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  726.092483][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  726.097502][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  726.103476][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  726.109791][    C1]  ? ieee80211_rx_napi+0xd6/0x3c0
[  726.114803][    C1]  ieee80211_rx_napi+0x18a/0x3c0
[  726.119737][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  726.126051][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  726.131501][    C1]  ? skb_dequeue+0x113/0x150
[  726.136105][    C1]  ieee80211_handle_queued_frames+0xe7/0x1e0
[  726.142078][    C1]  tasklet_action_common+0x321/0x4d0
[  726.147351][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  726.153143][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  726.159458][    C1]  ? workqueue_softirq_action+0xca/0x140
[  726.165097][    C1]  handle_softirqs+0x2c4/0x970
[  726.169862][    C1]  ? do_softirq+0x11b/0x1e0
[  726.174363][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  726.179640][    C1]  do_softirq+0x11b/0x1e0
[  726.183964][    C1]  </IRQ>
[  726.186879][    C1]  <TASK>
[  726.189789][    C1]  ? __pfx_do_softirq+0x10/0x10
[  726.194645][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  726.200271][    C1]  ? rcu_is_watching+0x15/0xb0
[  726.205036][    C1]  __local_bh_enable_ip+0x1bb/0x200
[  726.210226][    C1]  ? dev_hard_start_xmit+0x773/0x7e0
[  726.215526][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  726.220631][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  726.226338][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  726.231550][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  726.236658][    C1]  __dev_queue_xmit+0x16c9/0x3d30
[  726.241690][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  726.246832][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  726.252190][    C1]  ? mark_lock+0x9a/0x350
[  726.256526][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  726.262521][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  726.268853][    C1]  ? ip_finish_output2+0xa14/0x1380
[  726.274053][    C1]  ? ip_finish_output2+0x45f/0x1380
[  726.279242][    C1]  ip_finish_output2+0xd41/0x1380
[  726.284275][    C1]  ? ip_finish_output2+0x45f/0x1380
[  726.289467][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  726.294912][    C1]  ? ip_skb_dst_mtu+0x6ba/0x9b0
[  726.299758][    C1]  ? __ip_finish_output+0x347/0x400
[  726.304951][    C1]  __ip_queue_xmit+0x118c/0x1b70
[  726.309876][    C1]  ? __ip_queue_xmit+0x5f/0x1b70
[  726.314799][    C1]  l2tp_ip_sendmsg+0x63b/0x1670
[  726.319640][    C1]  ? tomoyo_socket_sendmsg_permission+0x12e/0x420
[  726.326065][    C1]  ? l2tp_ip_sendmsg+0x3fe/0x1670
[  726.331073][    C1]  ? inet_sendmsg+0x330/0x390
[  726.335732][    C1]  ? security_socket_sendmsg+0x87/0xb0
[  726.341178][    C1]  __sock_sendmsg+0x1a6/0x270
[  726.345845][    C1]  ____sys_sendmsg+0x525/0x7d0
[  726.350599][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  726.355890][    C1]  ? __might_fault+0xaa/0x120
[  726.360566][    C1]  __sys_sendmmsg+0x3b2/0x740
[  726.365239][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[  726.370444][    C1]  ? futex_hash+0x1e/0x1f0
[  726.374855][    C1]  ? futex_wait+0x285/0x360
[  726.379346][    C1]  ? __pfx_futex_wait+0x10/0x10
[  726.384185][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  726.389558][    C1]  ? l2tp_ip_connect+0x29f/0x310
[  726.394493][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  726.400199][    C1]  ? do_futex+0x33b/0x560
[  726.404519][    C1]  ? __sys_connect+0x16b/0x310
[  726.409276][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  726.415248][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  726.421562][    C1]  ? do_syscall_64+0x100/0x230
[  726.426317][    C1]  __x64_sys_sendmmsg+0xa0/0xb0
[  726.431155][    C1]  do_syscall_64+0xf3/0x230
[  726.435648][    C1]  ? clear_bhb_loop+0x35/0x90
[  726.440314][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.446192][    C1] RIP: 0033:0x7f2310375bd9
[  726.450591][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  726.470183][    C1] RSP: 002b:00007f231116c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  726.478587][    C1] RAX: ffffffffffffffda RBX: 00007f2310504038 RCX: 00007f2310375bd9
[  726.486545][    C1] RDX: 00000000040000cf RSI: 0000000020000900 RDI: 0000000000000007
[  726.494501][    C1] RBP: 00007f23103e4e60 R08: 0000000000000000 R09: 0000000000000000
[  726.502458][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  726.510438][    C1] R13: 000000000000006e R14: 00007f2310504038 R15: 00007f231062fa78
[  726.518413][    C1]  </TASK>
[  726.521656][    C1] Kernel Offset: disabled
[  726.526053][    C1] Rebooting in 86400 seconds..