last executing test programs:

40.343863736s ago: executing program 1 (id=10342):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x20000044)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020301070000000000000000030000000800034000000008080004400000000208000340000000090800044000000020080001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

39.903762243s ago: executing program 1 (id=10345):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r2) (async)
r3 = epoll_create1(0x0)
epoll_create1(0x0) (async)
close(r3)
r4 = getpid()
syz_pidfd_open(r4, 0x0) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x5}) (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x10000, 0xae}, 0x48) (async)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB=','], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r5, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)='./file0\x00', r5}) (async, rerun: 64)
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc0405519, &(0x7f0000000080)={{0x3, 0x4}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0xcb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31413bb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
io_uring_setup(0x105c0f, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0xffffffff, 0x4, 0x0, r8}) (async)
io_setup(0x9, &(0x7f0000000580))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1\x00', <r9=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x0, r6, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

22.906206263s ago: executing program 1 (id=10346):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1000}, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x2}, {0x3}, {0x36, 0x1}, {0x6c}, {0x6, 0x1}, {0x48, 0x1}, {0x3}, {0x5}, {0x9}, {0x6, 0x1}, {0x6c}, {0x2}, {0x16, 0x1}, {0x3}, {0x6c}, {0x48, 0x1}, {0x9, 0x1}, {0x12}, {0x18, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000894}, 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r3, 0x1000000, 0x100010, r4, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf, 0x61}}}}, [@NL80211_ATTR_IE={0x93, 0x2a, [@chsw_timing={0x68, 0x4, {0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x6, 0x5d, 0x14, 0x5}}, @tim={0x5, 0x31, {0x1, 0x7c, 0x1, "a44bbc175fc78b188b905cf73c8dc603433cd919ba3bd44a6b8880addbfb8115bd9027a6463e93e54b9bc290ed1d"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xb0, 0xf, @broadcast, 0x7, @value=@broadcast, 0x7, 0x8001, @broadcast, 0x9f2}}, @mesh_chsw={0x76, 0x6, {0x0, 0x2, 0x6, 0x4}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x2a08, 0x5}}]}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="f563c8bcf1db63ad132ee5b0dccf9ff2846247a6086fcbfe"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="6bbe7a9cc5cf0a5a5f"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000}, 0x4008000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x54}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffe00, 0x4f}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40)
ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000500))
open$dir(&(0x7f0000000540)='./file0\x00', 0x3b1680, 0x130)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000580)={0x6, 0x0, [{0x987, 0x0, 0xff}, {0xfe, 0x0, 0x2}, {0x79, 0x0, 0x9e}, {0xb0b, 0x0, 0x6}, {0xae6, 0x0, 0x1}, {0x9a7, 0x0, 0x8}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40001)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/zoneinfo\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r8)
write$P9_RSETATTR(r8, &(0x7f00000007c0)={0x7, 0x1b, 0x1}, 0x7)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
close(r8)
syz_open_dev$tty1(0xc, 0x4, 0x4)
rt_sigprocmask(0x2, &(0x7f0000000800)={[0x3]}, &(0x7f0000000840), 0x8)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r4)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4fe3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x759f}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x782f37a9bcd17bf2}, 0x20008005)
ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000a00)={0x1, 0x1, 0x6, 0xa, 0x9, 0x8000})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000a40)={0x73622a85, 0x100b, 0x3})
r11 = eventfd(0x7)
io_submit(0x0, 0x3, &(0x7f0000001c80)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x2, 0x3, r9, &(0x7f0000000a80)="e46f0ed24cdfcc8a329c29b51fc4625338a068019def29b3cc74261265886d0f1a2aad168a03431a039b01ef6c8e8d7d75306ce2a1b27c6ab42767afac01d019ea08662f66642166a357586f935653ae2566f3dd5e35105d120da3df9a99a586a86cae9059747150c34f526ac9055ce41c0401dca0796d6915a14d864703aed1390426a419a081d5db4f9b3e174f", 0x8e, 0x81, 0x0, 0x2, r11}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x2, 0x14, r4, &(0x7f0000000b80)="07f9076d1fcda7e844ec1eeb8d0c11dbba270532aec5cc9237fedbc8649ff706c553dd40dc4045c071f115ed0f0914781e90a466203f9031124141240acd795e828f0b1c3d44d1f203aa126e75508576473a65d95648d30d891d5af1457591d8a80ad04067080bf91861eae98fc98152579d90348fa562f72587622c29a449b7bbeba41bde59118d2ccce08bb5140bc9bbe9f0982a56b2345fd31369a6cc6007616dada30fd13d6d0c3ef7af6129793ec725ad48b46e086bf6ce56bc2e03243a2c1fd7030f45a78c0f8ab9c5d164c264e017db3b95c81544faa2682c310298b59759787b8cb8fa4b492a55ee2e20dcda5f046e572f6ea45f627a1a5abf0495666bb4c68cae68eb154097311abbf5c6ba9c75dcd3fe6fbe43dd5c373795999c87785a626d614a7175b481e7a308e57a6bb946126cee00e2c15e54def81c645547a0eddf502556434470e9ce82a5f84220f6cd4699d179cbc01b86c758f9d6f38f8e4cf5e47f3c36ea0218a20dd63b5ac417a6db5192c47bdff55eadde728d04be19a886009fd88cbca522b435c4cea4933a86d21bb86068f4665e845bba7801d11c19827e7d9a6584813f9f9d9b42f5152626d001dbb03a3e0afb67aa7bd64f8ca34f92bd62de1b1ff6f91270bfca0414a6bbac55793fb1892ec206247af8cb7111e1e7f4269e2e44aa5fc4cfcf885a0849eeac27a1f2abd7a97f3ab3013cc3bc75f9aaf5009b1c35b8d7ec6a1e0f5700307110aba8b36ac7b6ba059b305c424d02a024ad0c0295625c7ddd0d13e535db9fc7a1f9b6190f2cb16dce73780f29174deba8c7172f83fe49887f72e262ffa598bfbba7fa8584202b532616ce48824a19fd3a656778620fad3a7155650ab2aeb7947ea4a94bcf6ee9dde007acce421f18f4e6b792d884ecd00a4bbde78605224fbd0ea63f2f0a9ffee746bf023d2d272346a3105f89536b9e79cdf9ab40ee480c82f2d8c750a8eea2db30e4132c1a9e20f6663709e7a952a0f5e4f773fd28a72933832262c5d641a758263c150981bfff4ad68bae8acdde550e4ebb3886c1875b017a124bd8d38e17bec86a9b3090bc75f692bbf9de60b815a02e9cdc7b7a8ae123415e63090713030e931a6d4349841f077520f050407a517080d600f2c12265dedbba7521469004c4aa0e0fac9acc3418432db2b0645957065cfd9354ea881cbb42d735bb8ee57963e33f7778c86a595f4b6a10e59bc5b75c6ee10b95031ebff5d138d525bc3f6be47207ee02922a081902e0ee1ac183f0d181e9ec263afb662b60d5b87599e241af0267223dcea50f2e0e34fd83747b88cc6aebb8455e23f46adf748a2a4a6ef166d2c6d09fcf7d9501667215fd3baa0744e8071f6df13144fc48f9fb85c69eb14dd4578478bc424faf3322faee817c635b8dea0bb99cbc46d2658fec167f343cd96909333a58dea0dd80f7adb05d55cdb75c64ad9045b6e245f76d6c331d6bb37d4ba9722c081dda74e0a43d7f28fe0d167f53e47257ef3fcc5cee5fa2da6e3c5894facecc64d2044dd20158a366f1efc9937a976ab4e3bbe13fe4205e880dd891b95d3956116082c6b0427352f047bd65ce024ece79f8db6a0af41e7bad517fbcf89e3e4de306bee4a3dd3b6a8718bd49f285ec23dd32f2aa13b8f9fe4772f1be44f9f9153d87e70ef278043b73e36bc121e5ca21e26664cbd608b981a39fceafe238343a9078202ed047edec3af7a963bc37d1824e861214a60fbde46c2588e74c95d5628d0a262bb3dbd1807297a9fc0bbbde8a9b0b005d567352058e8063a91b902838e0c002eae2c4193f821dae09d315492282646093b64748559fff31fe9c6f90c82f66ad487d01541586be619874bea79bd331515d96426a14c0cf563352945c6632573915580a782d802f7c8b13cd819053c0d47e601dda2c317eafb7332eaa272629da4d9d38c380169ead072d96d9b3e1f283c425144b7b65f45650803c4597529900508afb445ef5ffc10092f890007048e4999e18ff81fa8cdd6757023186f0124a35d7c6695e589e794dbbd74ee39e5a4329e628349321ec474f00985e938b3cc6b036e7ee55475bfc3c91eece3858506ef167a56da92ba6dc1b6aaa3a63ad56a014f4942a7e685cf609d138bb0f5ef43687006c506b63b446ac642df9ac30aa3a0e9253f6c780164cce94d3d6875bd42ae25e6def63ae748480cfa3b4199f1765c606cb458400a6441905bcdd82fa7362f64179861bb4370c35eff93763de23e184809131ec90232be31e5d4df92279299fa54421f762bc09e6944707d96ef49d54760dce3781ff360c1be1bff0dd096fd1bb096be0ecca1bf8b0a0c3e1d1bc66636862937479730bd5a465af9d8692655d3eea9d1ecd325756fa61c4f5d37496b79bf7bc6672e95571e1ee6de56aacf4891af825f26b313032abf52e5f432021f46c597b25dbde5115514e67d78c67a6d1a455629ba6c717f5dbcf3cb13e173411cfa20ff4c2e8efcfa057ce1896a001b4ccee9371f1591b3a03ca4ef9974502290005a8c34ecf7567922e4edc13947611164bd59a664ec62f06c90d66ff7c03fa294c59295b57d840b8a02502a0b12c0cd6c4afb1a9888e90afdb1e6a8c219f16d113f9f9b25e3317f1cd83d26fde8038f8d296bf6cf4cc467446962dba25630c63be84a41510c5ddfbde69893dce87549bbe636d37b2fdd27baca9ee568b51edd3101ff29e4d6290b7583c97132219fca6d3775343cfa65e6901cbe1f4c0a8bd68b7171d4e4abd6a237bf117b5a7f3f6d47624eee422a1899f8c15930f44fa91c2dd783b9019385ec984a81051c7e44608b8d4e11a322fd25297e5ba708cb831cce9b3589a68c7aaed6cd0acfa23b0d32acf230a819f5046d1d2ddbf2be0d6d97b364deb106aa6d61251aeec53da6fe8513499c9b0961e7500f0c2da19d945adf804a11df5638b571ed50166b66d6e6aa096f685d0377343ebf204d35941c520a00043180d9f925fc96aea7c5ec2a89f82217e5dadf80a9844ea79b37da9ed128cef9916d6b9c2611a4acdf102e507c279532232199a909480b0f708a1a3958d1fe14263147ccc038e592fa462b98193665a2bd329aa825289efbb1abaf5a7998dd7bf07766fb3c5bcb7fbee5a1e5f4d028aaf7ad9583051b22a555f0c53fb6904a2ada6ed1a2ebd6b5f7cf39d7f16b59b2ebe6406ab12e9ff8d6679ccb82a4da99b2d4e542508d43701356b4cd6eaf71b6a08818af1bfc20cb261a32190da4ccae63596f4d71032353eb8486b1f6af0d1a028b91c409d52cc40b0f10d75cedb42cc5a74a802ab70c367c84e41c0abea025ba048e40d5867275a87407dea7f3d0cb08bb96dbf07149aba0b9a735bf6920f3472347128da952a176482c161eca9a52ae5cd2c22609dc793c78d48f4bb045e628900659ce8c92a27b0cd6d05e0300ed27d7d8af1db4834a6b298baceaf6b52cf92ececa20d7bdeacc3bcc501d052a76053dd315dc2731f0dc12af93b2e9f6c23962cfc43b6270c52e5b513bd2ac30b862ec58a9f352c2f1bb4922e93a797286810e558ebedaa6a154ed37eef6ceac5ba205db2683cca413b247a9ce6b4d02020ef711dfb8471d502e22a2cf49452ae338756cb475ce23dfdca174a1587afc2efd41ab99660b0be4bd2c78c65b12dce4adcb9d2559f66d7755102b8f1bbd79417ad74a7d7d4fd07a92139dbf9f177d3b6b33bb0abb846d3f70781632ebda90c30ba0d58be06d8e67879367a493471c95c1f829e18ffece7d804b75c304a3ddd3ef496634a97618d896de0668ea1b409007f7e64f1f3069e2c8d673bdb7080c705574db5fd35c63b38790cd980ef506c95e7a08b7e02d6e6c928227f6ea1537425bd00d63cf5065d99c13ed4e74eba8e053a6de5bfa4d071da44e89a1b80a4162eb948601a34b5dc27245635c321c6786bcb246225ef7b0399b9b18c0082d344f18e490834bbc5b9fc56de70437f42a7e02865e0d1c04029d0f13d488b4196dc5ead61affc990e0d935dd66a467e8b527095c235e854cc103b3f6f47a31b4c5b8dafe264e53e9ef33eef1dbae33f6472c165029aafac0bfe3d156e0fc5f00ce2db373d2d706dc4f9359a29123e7a889042c7afe469f03b179ec0e555e53a0511f2153cc33b6bcb2d97ca122d2b0c8d0a38b39c980fbb5bc856d7aea01278a40fa948648cbd581b61256c0a51ba197d3052bec50cbc11cf8046d3ed67cf13fe84dec959c865142cee4a4bea846b17467e5af3ea2337d9bc99242609328febad1c18069f0acd88cff722a7b1ee7b4c8e7794ab43393b63685c8fbfde25e52f73950b57b8c66fa1cd28c7567eb25d52293397cfbfa7caa7dad37a2650199ee2ec663e0c24a896f8cc920e8605fb734e4d1d0b243701e428c92ac2258b6a12dea7f36255edae2292bee15e0ebe5eb48de1067bea614ba0af80da18b88b036fb45f85623283fd1e21820ee1674162a3179f406a3202858952abc1c44ce43e99ed3d77655c8045451aaf87e9664d4a07120850edabe89263a242417e9a8303e802a1a4b8ac5a746c0dc204ea8fb2a891894c5ac3e4f90f44042b1268a7d0380f6426adeb5f17841395f747f97c4d379c40dc5ba4616872c852fb04f302a81bcea9f58572f05735bb98674507058d98d443f5ad9c976a90fed427fc8589e28d5efb1394cfe161406e019fa1d69c985f14359b087dabe337c946879751ead5ed54b0c74ff198a5fc9cd1057494b9fa37685871f1a0abf1e34d666aa6d7f721207b18657bd6538452359a04f04e195b4f8cd85712bf87b8139d9e96589a0f9bbee187d1d294c5f2950666697c30f629ce83b15b40adc71355bd5e4a52001eb0cca43af4fdeecbe1ff1f98603e1f9ab72bbd253fad0c27916999112aeac759aef066536d95ffcf10cdd0019680309c5466434d75620aba460920780c0019589f78989e6c27920111697d08fd61ac92b90eb398f468759a4481744fac9608dfd23372a152cf71e125a4dd947f93cf052fd3275bb32d380f8866f01661be1db5a59f1078539ff5002328e819354d6990db9da7db2c665295ee1e513e82e574c303687213ba7ad2d674484cf534d2e23b6e40049b2e2143dcbcddd6596b2a9a9eeb8a2315758af83fb6bf6c1d5e8d4e88e59c6c0a8ff927198cbfb59ef693b02d3e407e006e626a774e27b46bc65dae19c2f8110bbb69a1546cbd3de03ae4a38110c7b06f189a4cd270a94e8af159d8051a241bf257ff2125cdc627e8c32264aa05c9096418a203fad6b4fc58f289f985b7627d475ae980601bb17d50dbae39bba0c41aa3d2d7958db8652aa286ee675bbb428f37ded65a95869bbc29cac1ae91d053fcf01059c4f6e0899b24d696fd5529d9457af2407a597388471fd5fd2e520917d6c8006cda9383f574b31b4c4dd05d36295cd31784ef10672c142b9ef439c9eb01cd8917c66a1901b349867c62c2fba0a94f6e5edb3a483c9b47fa27d48b563de9fa20a0119a1177753e9f722f2836bfce19c2122163d0b4939319e31630164397809e5edb8959fbc0543fcd30498c52761a09ec0e4daf176d3c021747840617a8d85aad024751098e4254ce9d9eb978202261b8463db6be10b830c850f926953c806d2d52a57802612bd9113bbff991a26077d829bb0e735292b18d99954399ea4f19eeaf73f62118e7cd0ca56289247676e3809fa9e375c475f5860d1827607d8435cca23c94a6341c68e95c65bc8d783c9e1d81565f7a9bc60e9defab458f2db310f1108b274489dd9f059a83b94c65", 0x1000, 0xffffffffffffff7b, 0x0, 0x2, r8}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1d98, r0, &(0x7f0000001bc0)="fb1edf3f01df26d01adbc92c035e7e989d2759af9a00028dd7fcbc27d4c7463822b8b812448bb9cdc9e08274f1cdbe1fc3e6f1f4c9a7ab3a423ab49033b1ff653094", 0x42, 0x0, 0x0, 0x1, r4}])

22.61874383s ago: executing program 1 (id=10401):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(r0, r1)
sendmmsg$inet(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)="316f82faff29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000180)="0036d551863e1902129da79fb0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee500"/190, 0xbe}, {&(0x7f0000000c40)="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", 0x190}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbd474a418997ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3f453f5ed67232e172945ae", 0x5a}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4afc887d8a4c55ae9e6d3bae49259a935b480ee61", 0x25}], 0x5}}], 0x1, 0x4084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0)

22.318045127s ago: executing program 1 (id=10402):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x1ec, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1ac, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x190, 0x6, [@m_connmark={0xc0, 0x0, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0xcc, 0x0, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xe9}}}, @TCA_VLAN_PARMS={0x1c}]}, {0x15, 0x6, "83bbbc78bf132de93c8b8a54d084fdc1e4"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x68}]}}]}, 0x1ec}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

22.075705457s ago: executing program 1 (id=10404):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000011c0)={'hsr0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x892f, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/schedstat\x00', 0x0, 0x0)
r3 = socket$kcm(0x15, 0x5, 0x0)
setpriority(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000a4b000/0x2000)=nil, 0x2000)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000004c0))
poll(&(0x7f0000000380)=[{r5}], 0x1, 0x0)
r6 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200))
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
sendfile(r7, r2, &(0x7f00000000c0)=0xa6, 0x100000500)

20.535432472s ago: executing program 0 (id=10413):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="e3b1ed39ac10d6da4ca5a755ba202149cfb4a5b960acabc0be0c70ff72bfb0e96439578147e0817949ba825461316a0e39c40cc4d3ac1c2eff7d5430c5426730fe5d12f970e22a61019b5097986ee426b7d56215e8f8123be26be053d654c3c5de4e7a870886e1de74b71eb5eb8500325841c9ecec1f1144e6d3693fc5ef2e3e0e", 0x81}], 0x1, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r5, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000400d000"], 0x2c}}, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0xc4c85512, &(0x7f0000000040)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2631d9d1, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x6]})

19.33833297s ago: executing program 0 (id=10417):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x3f0, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x354, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xfc, 0x6, [@m_nat={0xcc, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x79, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e1ae1bcb85f22df4cc4cb4f849aee90332523256a7f1b96a6c6d060ee09f14645fc28bd05cca953cb4705ee5fdd6950f43ec843b0e8335d3f2f1e0027"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x224, 0x6, [@m_ctinfo={0x7c, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}]}, {0x2d, 0x6, "2d63b5d0c5a0cc700cb2a420cf2d6b309ddaa66d88125b544981c36d05218ab0efc68d90e355fdf9c3"}, {0xc}, {0xc}}}, @m_mpls={0x64, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x2d, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52ef4dae165fc3df9c739d"}, {0xc}, {0xc}}}, @m_connmark={0x48, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x15, 0x6, "25e3c0c965c7f29e5a6b228b0c122d0a76"}, {0xc}, {0xc}}}, @m_simple={0xa8, 0x0, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x12, 0x3, 'lb_hash_stats\x00'}, @TCA_DEF_DATA={0x7, 0x3, ']$\x00'}, @TCA_DEF_DATA={0x17, 0x3, 'mcast_rejoin_count\x00'}]}, {0x35, 0x6, "5f803a8ed8cb953f03abc7c9ec28765aef4191fd6d47d5d97293ea014347cd89864bf3dc120d9c3c2a235d4cbd40919501"}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8}]}]}}]}, 0x3f0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

19.119295716s ago: executing program 0 (id=10418):
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0xffffc025}]})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4e479b03c28c7298, 0x0)
recvmmsg(r5, &(0x7f0000008440)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/208, 0xd0}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000001700)=""/29, 0x1d}, {&(0x7f0000001740)=""/60, 0x3c}], 0x6, &(0x7f0000001800)=""/151, 0x97}, 0x8001}, {{&(0x7f00000018c0)=@xdp, 0x80, &(0x7f0000001a00)=[{&(0x7f0000003440)=""/27, 0x1b}, {&(0x7f0000001980)=""/34, 0x22}, {&(0x7f00000019c0)=""/6, 0x6}], 0x3, &(0x7f0000001a40)=""/43, 0x2b}, 0x2e5}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b00)=""/228, 0xe4}, {&(0x7f0000001c00)=""/65, 0x41}, {&(0x7f0000001c80)=""/121, 0x79}], 0x3, &(0x7f0000001d40)=""/161, 0xa1}, 0x4}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/159, 0x9f}], 0x1, &(0x7f0000003480)=""/16, 0x10}, 0xffff}, {{&(0x7f0000001f40)=@hci, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000006d80)=""/143, 0x8f}, {&(0x7f0000002100)=""/229, 0xe5}, {&(0x7f0000002200)=""/130, 0x82}], 0x3, &(0x7f00000022c0)=""/193, 0xc1}, 0x5}, {{&(0x7f00000023c0)=@caif=@rfm, 0x80, &(0x7f0000003580)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)}, {&(0x7f0000004740)=""/133, 0x85}, {&(0x7f0000003540)=""/44, 0x2c}], 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f00000035c0)=""/217, 0xd9}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/4096, 0x1000}, {0x0}, {&(0x7f0000004800)=""/119, 0x77}], 0x5, &(0x7f0000004900)=""/173, 0xad}}, {{&(0x7f00000049c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/154, 0x9a}, {&(0x7f0000006b00)=""/202, 0xca}], 0x4, &(0x7f0000006c40)=""/172, 0xac}, 0x80000000}, {{&(0x7f0000006d00)=@sco={0x1f, @none}, 0x80, &(0x7f0000008280)=[{&(0x7f0000002040)=""/168, 0xa8}, {&(0x7f0000006e40)=""/169, 0xa9}, {&(0x7f0000006f00)=""/133, 0x85}, {&(0x7f00000087c0)=""/244, 0xf4}, {&(0x7f00000070c0)=""/75, 0x4b}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/137, 0x89}, {&(0x7f0000008200)=""/1, 0x1}, {&(0x7f0000001940)=""/27, 0x1b}], 0x9, &(0x7f0000008340)=""/225, 0xe1}, 0xd7}], 0xa, 0x23, &(0x7f00000086c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600), 0x3b, 0x0, &(0x7f0000001800)})
recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000780)="3f030e00031b12000000000089e9aaa911d7c2ff0700810000008100642c4a1b786100008d6b", 0x26, 0x0, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="0300"}, 0x14)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x74000000)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r10=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x48)
write$dsp(r4, &(0x7f0000002000)='`', 0x88020)

17.821973289s ago: executing program 3 (id=10424):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="52090205", @ANYRES16=r1, @ANYRES32=r0], 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
accept(0xffffffffffffffff, &(0x7f0000001200)=@l2, &(0x7f0000001280)=0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@loopback}, &(0x7f00000003c0)=0x14)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2c67726f7570cc9b643ddc16b5ebf44bb40b0898a212ba3bd1eb9bf41f530d9e4eda6d1291e4afafe9c936adfce90fba8efcee4b7f48d561733aa204eb08b225fbada54c18fbad0bfff3da", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x15}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x54}}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0)

15.817336437s ago: executing program 0 (id=10429):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x7bd, 0x1}}, './file0\x00'})
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x7ff, @local, 0x3}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x315}, @in6={0xa, 0x4e24, 0x2, @local, 0x5}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x6, @empty, 0x6}, @in6={0xa, 0x4e23, 0x600000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0xf}], 0x9c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r5, &(0x7f0000004440)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000a0a01"], 0x14}}, 0x0)
syz_fuse_handle_req(r5, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f0000000200)='./file0\x00', 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x551a03, 0x0)
r7 = openat$fb0(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$fb(r7, 0x0, 0x21)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x6c00}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0)

15.199846043s ago: executing program 0 (id=10431):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0)
syz_usb_connect(0x6, 0x8d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x21, 0x5e, 0x4f, 0x20, 0x19d2, 0x1279, 0x14f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x5, 0x1, 0xff, 0xff, 0xff, 0x52, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "cb4862"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xbcc8, 0x101, 0x7}, [@country_functional={0xc, 0x24, 0x7, 0x3, 0x8, [0x5, 0xfffb, 0x805]}, @ncm={0x6, 0x24, 0x1a, 0xc2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x6, 0x2, 0xd}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7, 0x8, 0x7}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "95005d56"}, {0x5, 0x24, 0x0, 0x25}, {0xd, 0x24, 0xf, 0x1, 0x40000000, 0x1ff, 0xf0c, 0xf9}, {0x6, 0x24, 0x1a, 0x800, 0x68}, [@obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x0, 0xc2, 0x3}}]}}]}}]}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='-', 0x1}], 0x9)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r4 = dup(r3)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, &(0x7f0000000200))
r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x6, 0x4, 0x1, 0x0, "000000ff00070000000900", '\x00', "05030400", "e859ad33", ['\x00', "00000008000906000000da00", "0c000004dd372a9000"]})
sendfile(r5, 0xffffffffffffffff, 0x0, 0x89ffc)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080))
r7 = socket$netlink(0x10, 0x3, 0xf)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x8, 0x8, 0x42}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000003dd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ee0000000000001800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)

14.791894595s ago: executing program 0 (id=10432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x0)

12.779620689s ago: executing program 3 (id=10436):
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x2})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000640)={{@hyper}, @local, 0x0, 0x2925, 0x0, 0x6, 0x3c4, 0x0, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r4, 0x0)
copy_file_range(r4, &(0x7f0000000080), r3, &(0x7f0000000100), 0xfffffffffffffff8, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30}, 0x30)
ppoll(&(0x7f0000000380)=[{r0, 0xc0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2fe)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000600)=0x1, 0x4)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000200)={0x1})

10.780649774s ago: executing program 3 (id=10439):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket(0x11, 0xa, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000c80)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2={0xff, 0x5}, 0x2500}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x4000, 0x2000, &(0x7f000000e000/0x2000)=nil})
ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000003c0)={0x10000, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x200000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}, @TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x50}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="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", 0x2f4}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409dee9b73d8", 0x45}, {&(0x7f0000001e80)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca84d360a7a793cdcadfecfd6cc1b312460a54c1e4a6782ec9ce0e299ff2ed8296555289fb6af4b576408a34f8a2779d3dc1a749536a4ecb64522ec725c57dfd9fbc2159c1dfbb40086b331b3830", 0x8e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r9)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r10, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote={0x6}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)

8.572250625s ago: executing program 2 (id=10444):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x3}, {0x20, 0x4}]}, 0x10)
fcntl$dupfd(r0, 0x0, r1)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
bpf$ITER_CREATE(0x21, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r3)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r4})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xb4}}, 0x0)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timerfd_create(0x2, 0x80800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r8, 0x5b23, 0x0)
socket$alg(0x26, 0x5, 0x0)

6.203164186s ago: executing program 3 (id=10448):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x8}}]}, 0x24}}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641)
ioctl$USBDEVFS_IOCTL(r1, 0x80085504, &(0x7f0000000040)=@usbdevfs_connect={0x9})

5.947530014s ago: executing program 3 (id=10449):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5})

5.61306061s ago: executing program 2 (id=10450):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xdc}}, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="001000010000000000144400000000000a2c000000060e000000000000"], 0x54}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000001380), &(0x7f0000000000)=0xfcce)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r3, @ANYBLOB="00000a00100000801c001a"], 0x44}, 0x1, 0x10000000}, 0x0)
sendto$inet6(r1, &(0x7f00000003c0)="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", 0xfa, 0x40, 0x0, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x657203eb)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
socket(0x10, 0x6, 0x40)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xf9)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8000000000000, 0x204000)
mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0xf000)
mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000002, 0x2010, r4, 0x83000000)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x3)
socket$nl_route(0x10, 0x3, 0x0)

5.31432522s ago: executing program 2 (id=10451):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCMBIC(r0, 0x5417, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000))
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)=r2)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x29}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {<r5=>r2}}, './file0\x00'})
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0xfffd, 0x6}, 0x4)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0xd}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x1000000000000041)

4.56387013s ago: executing program 2 (id=10453):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0)
syz_usb_connect(0x6, 0x8d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x21, 0x5e, 0x4f, 0x20, 0x19d2, 0x1279, 0x14f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x5, 0x1, 0xff, 0xff, 0xff, 0x52, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "cb4862"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xbcc8, 0x101, 0x7}, [@country_functional={0xc, 0x24, 0x7, 0x3, 0x8, [0x5, 0xfffb, 0x805]}, @ncm={0x6, 0x24, 0x1a, 0xc2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x6, 0x2, 0xd}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x7, 0x8, 0x7}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "95005d56"}, {0x5, 0x24, 0x0, 0x25}, {0xd, 0x24, 0xf, 0x1, 0x40000000, 0x1ff, 0xf0c, 0xf9}, {0x6, 0x24, 0x1a, 0x800, 0x68}, [@obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x0, 0xc2, 0x3}}]}}]}}]}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='-', 0x1}], 0x9)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r4 = dup(r3)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, &(0x7f0000000200))
r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x6, 0x4, 0x1, 0x0, "000000ff00070000000900", '\x00', "05030400", "e859ad33", ['\x00', "00000008000906000000da00", "0c000004dd372a9000"]})
sendfile(r5, 0xffffffffffffffff, 0x0, 0x89ffc)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080))
r7 = socket$netlink(0x10, 0x3, 0xf)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x8, 0x8, 0x42}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000003dd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ee0000000000001800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)

3.325116596s ago: executing program 4 (id=10456):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x410, 0x130, 0x240, 0x130, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "739099bb7a71934a50e4c624293f7933d7f910dff92760eba300ad659579b1a29cfdbada64b32cfb15a7d6f1a648903f7df6922e5758889ac20afa74edb874c6"}}}, {{@arp={@empty, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'ip6_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local, @multicast2, @multicast1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

3.324312448s ago: executing program 2 (id=10457):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000140)=""/148)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, 0x0, &(0x7f0000000040))
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x4, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(0x0, 0x0, 0x3, 0x0, 0x0, 0x1)
select(0x810, 0x0, 0x0, 0x0, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
futex(0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x200000000003, 0x87)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000002100)={0x0, 0x1ff, 0x1, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}})
syz_emit_ethernet(0xba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb00842b00fc020000000000000000000000000000038000000000000000000000000000aa87000000000000000002070100000000fe800000000000000000000000000000000000000064907802000000000000000000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402fa83b1d661c18462075368a1860929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665cc18492b"], 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)

3.067863838s ago: executing program 4 (id=10458):
socket$inet6(0xa, 0x0, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0), 0x4)
getpeername(0xffffffffffffffff, &(0x7f0000002d40)=@qipcrtr, &(0x7f0000002dc0)=0x80)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000580)="94118a6b0462bf144728d0f13a909915", 0x10}, {&(0x7f00000005c0)="7c1aa34174f366b6fb3d6e44fcfafd926de83ee0256237e4f581925e5b94e5752ccd04c9da557de851ecec0f5c9d16295315d0201e49ef5e655393f8e14cb7d92c6a83d99369785e452fe1fab59f7c360605c4f5a57e23af4f838c6cbde4ae854278ff813e853baebf3b21e48bd3acfbdeb90f87f1bac506ea5e2f7d2b78e62b5a326ff00b16f24db79c09b25288351ef76ba3c4bc34a23f02abbfe82e91bd0523435c80b776aab797c029b34726f893a5bccb0c59b6f776e6cc16fd0e5c", 0xbe}, {&(0x7f00000006c0)="31cceaed92c4c25db7e9c8da3ae86b6b8475c2d05a4ee5fad1254f97b17af7371b0771e17112dffeaf0763a656fcb50e497aca05c474be37de0949f47ae357276c76f24013be10e2b1639ac9d3a21062ec2c275b869d8c7c89d225f6668601522f0e6b4d3860eb285005d41b3e60e3032a7d58efaf733a513700a0a566521712482c87a20c04ca2c07e3979d80a55fc598dff31404e53f1b3d56bb0dab71245a0d164f136d3e3ea4b412c0ddd7ff744b8c664de08f02738f9028ec8e0f2397ac02f5b4226f0dd9111973c24d4eb9b6085e0c", 0xd2}, {0x0}, {&(0x7f0000000940)="0b8da7d60a214edc66ed15b694af1d49e49751dbf053be793b98e2eeb7aa4fc21fdc8562d29149e77bfd3c9755b4674da56b942107d4340ef2b3", 0x3a}], 0x6}}], 0x1, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x108, 0x140, 0x0, {}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3})
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSIG(r3, 0x40045436, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000018d000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
lseek(0xffffffffffffffff, 0x8, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x7)
syz_open_pts(r3, 0x14080)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90018001400050217fd10000000000000000000"], 0x1d)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x8)
syz_emit_vhci(0x0, 0x4)
socket(0x10, 0x3, 0xfffffffe)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

2.245201s ago: executing program 3 (id=10459):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x3d, 0xa3, 0x77, 0x20, 0x572, 0xcafe, 0x5501, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x96, 0xdb, 0xa8, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = socket(0x0, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x100}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xc}, @TCA_PIE_TARGET={0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0xfffffffb}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x60}}, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
shutdown(r6, 0x1)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1414bbac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc20000907809b0895531c23ba116af7aac2ba925a9694f00378dc4df669d72fbedb758093d65495b8e88839fc418b62e6e05"], 0x0)
write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/557, @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=0x0], 0x239)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000d0a0000000000000002"], 0x0, 0x4a}, 0x20)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r8], 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL]}, 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x48401)

2.000567577s ago: executing program 4 (id=10460):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/102386, 0x18ff2}, {&(0x7f0000000240)=""/54, 0x36}], 0x2, 0x0, 0xea5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b0000000000000098000040"])
r4 = socket(0x2, 0x80805, 0x0)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x440000a0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0)
r6 = dup(0xffffffffffffffff)
r7 = open(&(0x7f0000000200)='./bus\x00', 0x40542, 0x0)
r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r8, 0x0, 0x0, 0x1001f0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
r9 = dup3(r6, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x1b)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x4b)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0)
sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020000000800000049cf4425f1", @ANYRES16=r0, @ANYBLOB="0000001c00078008000200038000000800020002000000080002007909000018000780080002000a0000000c0004000000000000000090fc73138c842a4dfd396b7538799f107906c9af1aad14d1944a46ed7310c820cd71692aef452c33f0c90f1234377de0618da7f493345b7f6a7e5a4af5c9af933a4ecb7f39fd540b09fdb6f32d6db8643253b7580a70a00c46fa6ef0b9c4f07d88eceba5bf108a61abaa32b4150705de5d1b617f732892511d1f4cef007367fbfacbd000c9da9e0ca18693a33aac07cbc2c44bafb2eaa56de482615a2c83d6cbf2c3dfa185974d7864826c6f6920f89c6eff00"/243], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x44004)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB='f\x00\x00\x00\x00'], 0x8)
socket(0x40000000015, 0x0, 0x0)

1.327769754s ago: executing program 4 (id=10461):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000000200), 0x0)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003280)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001740)=[{0x0}], 0x1}}, {{&(0x7f0000001800)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, 0x0}}], 0x2, 0x24040840)
shutdown(r3, 0x1)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000440)={0x0, 0x7f})

206.473318ms ago: executing program 4 (id=10462):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

46.582551ms ago: executing program 2 (id=10463):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x2004, 0x1}, 0x48)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x45c)
ioctl$UI_SET_PROPBIT(r2, 0x5501, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
chmod(&(0x7f00000006c0)='./file0\x00', 0xbc)
write$input_event(r2, &(0x7f00000005c0), 0x200005d8)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast1, <r4=>0x0}, &(0x7f0000000540)=0x14)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16c, 0x16c, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0x5, 0x1}, {0xc, 0x4}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0x5, 0x2}, {0x6}, {0x3, 0x3}]}, @enum={0xd, 0x4, 0x0, 0x6, 0x4, [{0x5, 0x40}, {0x3, 0x7}, {0x9, 0x8000}, {0x2, 0x7ff}]}, @union={0x0, 0x7, 0x0, 0x5, 0x1, 0xfffffffd, [{0xa, 0x1, 0x814}, {0x3, 0x2, 0x7}, {0xc, 0x2, 0x800}, {0x8, 0x5, 0x8}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0xb}, {0xe, 0x1, 0xff}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x7, 0x4}, {0xd, 0x4}, {0x4, 0x4}, {0xd, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x10, 0x3}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x78}, @const={0x10, 0x0, 0x0, 0xa, 0x3}, @struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x2, [{0x1, 0x5, 0x4577}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000580)=""/38, 0x188, 0x26, 0x0, 0x10}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4ed7e3df, '\x00', r4, r5, 0x0, 0x2}, 0x48)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
futex(0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x4}})
syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902720003010000000904000000010300000a24"], 0x0)

0s ago: executing program 4 (id=10464):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
syz_io_uring_setup(0x7a0e, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000300)={{0x4, @name="55d8e9c9b46efb8b981ee48b3a76616483968d736afcd9fabaf3a6cfa26e922a"}, "48803535031b4a4767fbc58909d6d54554410e1e0417d17102573c9af90515f5"})
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000640)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000050603060000000000000000000000000900030073797a310000000005"], 0x34}}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d000100000000090400000002"], 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r7 = dup(r6)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040))
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff)

kernel console output (not intermixed with test programs):

c032x: reg_r err -32
[ 3060.442937][T13304] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[ 3060.448525][T13298] em28xx 4-1:0.0: Freeing device
[ 3060.474939][ T9632] usb 5-1: new low-speed USB device number 34 using dummy_hcd
[ 3060.529649][T22820] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3060.536870][T22820] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3060.573553][ T9632] usb 5-1: device descriptor read/8, error -71
[ 3060.644282][T22820] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3060.651611][T22820] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3060.724623][ T9632] usb usb5-port1: unable to enumerate USB device
[ 3060.744183][T13300] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 3060.819556][T13300] usb 2-1: Using ep0 maxpacket: 8
[ 3060.843078][T13300] usb 2-1: no configurations
[ 3060.852822][T13300] usb 2-1: can't read configurations, error -22
[ 3060.974296][T13298] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 3060.984353][T18677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3061.014465][T13300] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 3061.054623][T13300] usb 2-1: Using ep0 maxpacket: 8
[ 3061.067605][T13300] usb 2-1: no configurations
[ 3061.084646][T13300] usb 2-1: can't read configurations, error -22
[ 3061.104664][T13300] usb usb2-port1: unable to enumerate USB device
[ 3061.186835][T13298] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3061.204085][T13298] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3061.207758][T18677] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3061.237658][T13298] usb 4-1: config 1 has no interface number 0
[ 3061.266658][T13298] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3061.298565][T13298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3061.313622][T13298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3061.324613][T13298] usb 4-1: Product: syz
[ 3061.329619][T13298] usb 4-1: Manufacturer: syz
[ 3061.365866][T13298] usb 4-1: SerialNumber: syz
[ 3061.397605][T13298] usb 4-1: selecting invalid altsetting 1
[ 3061.498295][T18677] veth0_vlan: entered promiscuous mode
[ 3061.552844][T18677] veth1_vlan: entered promiscuous mode
[ 3061.708276][T18677] veth0_macvtap: entered promiscuous mode
[ 3061.755032][T18677] veth1_macvtap: entered promiscuous mode
[ 3061.833612][T18891] fuse: Bad value for 'fd'
[ 3061.846443][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3061.887574][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3061.939493][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3061.981332][T13298] cdc_ncm 4-1:1.1: bind() failure
[ 3061.981468][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.012477][T13298] usb 4-1: USB disconnect, device number 107
[ 3062.039968][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3062.081291][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.109959][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3062.145893][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.169160][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3062.239157][T18920] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 3062.243816][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.299921][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3062.340485][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.375526][T13304] usb 1-1: USB disconnect, device number 21
[ 3062.380937][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3062.428355][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.467174][T18677] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3062.615457][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3062.663951][ T9632] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 3062.673972][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.707127][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3062.741409][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.772232][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3062.807454][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.846539][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3062.883852][ T9632] usb 2-1: Using ep0 maxpacket: 8
[ 3062.895314][ T9632] usb 2-1: no configurations
[ 3062.915808][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3062.915941][ T9632] usb 2-1: can't read configurations, error -22
[ 3062.966801][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3062.994237][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3063.024180][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3063.064590][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3063.096516][T18677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3063.103927][ T9632] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 3063.125061][T18677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3063.171127][T18677] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3063.236316][T18677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3063.283063][T18677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3063.307889][T18677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3063.339905][ T9632] usb 2-1: Using ep0 maxpacket: 8
[ 3063.346790][T18677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3063.366285][ T9632] usb 2-1: no configurations
[ 3063.386182][ T9632] usb 2-1: can't read configurations, error -22
[ 3063.438657][ T9632] usb usb2-port1: attempt power cycle
[ 3063.779606][T15811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3063.794008][T22820] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 3063.843148][T15811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3063.874242][ T9632] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 3063.916718][ T9632] usb 2-1: Using ep0 maxpacket: 8
[ 3063.935298][ T9632] usb 2-1: no configurations
[ 3063.948121][ T9632] usb 2-1: can't read configurations, error -22
[ 3063.955359][T15806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3063.988171][T15806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3064.024297][T22820] usb 1-1: Using ep0 maxpacket: 32
[ 3064.044610][T22820] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[ 3064.077396][T22820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3064.125418][T18955] input: syz0 as /devices/virtual/input/input223
[ 3064.141322][T22820] usb 1-1: Product: syz
[ 3064.146548][ T9632] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 3064.171292][T22820] usb 1-1: Manufacturer: syz
[ 3064.183232][T22820] usb 1-1: SerialNumber: syz
[ 3064.211082][T22820] usb 1-1: config 0 descriptor??
[ 3064.219240][ T9632] usb 2-1: Using ep0 maxpacket: 8
[ 3064.238651][ T9632] usb 2-1: no configurations
[ 3064.251987][ T9632] usb 2-1: can't read configurations, error -22
[ 3064.269329][ T9632] usb usb2-port1: unable to enumerate USB device
[ 3064.569652][T22820] rtl8150 1-1:0.0: couldn't reset the device
[ 3064.590370][T22820] rtl8150 1-1:0.0: probe with driver rtl8150 failed with error -5
[ 3064.682484][T22820] usb 1-1: USB disconnect, device number 22
[ 3064.714596][   T29] audit: type=1326 audit(1723162932.652:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18950 comm="syz.4.10173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78edf779f9 code=0x7fc00000
[ 3065.144583][T18977] xt_bpf: check failed: parse error
[ 3065.393959][T13298] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 3065.405323][T18992] netlink: 558 bytes leftover after parsing attributes in process `syz.1.10182'.
[ 3065.594680][T19000] FAULT_INJECTION: forcing a failure.
[ 3065.594680][T19000] name failslab, interval 1, probability 0, space 0, times 0
[ 3065.617229][T13298] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3065.642228][T13298] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3065.644106][T19000] CPU: 1 UID: 0 PID: 19000 Comm: syz.0.10183 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[ 3065.662011][T19000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 3065.670737][T13298] usb 3-1: config 1 has no interface number 0
[ 3065.672080][T19000] Call Trace:
[ 3065.672096][T19000]  <TASK>
[ 3065.672108][T19000]  dump_stack_lvl+0x241/0x360
[ 3065.672153][T19000]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3065.686622][T13298] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3065.689133][T19000]  ? __pfx__printk+0x10/0x10
[ 3065.689190][T19000]  should_fail_ex+0x3b0/0x4e0
[ 3065.689223][T19000]  should_failslab+0xac/0x100
[ 3065.721393][T19000]  ? sctp_add_bind_addr+0x89/0x3a0
[ 3065.722288][T13298] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3065.726533][T19000]  __kmalloc_cache_noprof+0x6c/0x2c0
[ 3065.726574][T19000]  sctp_add_bind_addr+0x89/0x3a0
[ 3065.726606][T19000]  sctp_copy_local_addr_list+0x311/0x500
[ 3065.726638][T19000]  ? sctp_copy_local_addr_list+0xab/0x500
[ 3065.748362][T13298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3065.751529][T19000]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 3065.771487][T19000]  ? sctp_v6_is_any+0x60/0x70
[ 3065.776318][T19000]  sctp_bind_addr_copy+0xad/0x3b0
[ 3065.776465][T13298] usb 3-1: Product: syz
[ 3065.781367][T19000]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[ 3065.781414][T19000]  sctp_connect_new_asoc+0x2f3/0x6c0
[ 3065.781451][T19000]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 3065.803341][T19000]  ? sctp_sendmsg+0xbb9/0x3520
[ 3065.806290][T13298] usb 3-1: Manufacturer: syz
[ 3065.808139][T19000]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[ 3065.818334][T19000]  ? security_sctp_bind_connect+0x90/0xb0
[ 3065.818426][T13298] usb 3-1: SerialNumber: syz
[ 3065.824084][T19000]  sctp_sendmsg+0x219a/0x3520
[ 3065.824144][T19000]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 3065.838479][T19000]  ? __pfx_aa_sk_perm+0x10/0x10
[ 3065.843390][T19000]  ? inet_sendmsg+0x330/0x390
[ 3065.848125][T19000]  __sock_sendmsg+0x1a6/0x270
[ 3065.852861][T19000]  __sys_sendto+0x3a4/0x4f0
[ 3065.857413][T19000]  ? __pfx___sys_sendto+0x10/0x10
[ 3065.862505][T19000]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 3065.868538][T19000]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 3065.874932][T19000]  __x64_sys_sendto+0xde/0x100
[ 3065.879749][T19000]  do_syscall_64+0xf3/0x230
[ 3065.884296][T19000]  ? clear_bhb_loop+0x35/0x90
[ 3065.889004][T19000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3065.894922][T19000] RIP: 0033:0x7f6be0d779f9
[ 3065.899370][T19000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3065.919571][T19000] RSP: 002b:00007f6be1bea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 3065.928034][T19000] RAX: ffffffffffffffda RBX: 00007f6be0f06058 RCX: 00007f6be0d779f9
[ 3065.928492][T13298] usb 3-1: selecting invalid altsetting 1
[ 3065.936024][T19000] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000005
[ 3065.936047][T19000] RBP: 00007f6be1bea090 R08: 000000002005ffe4 R09: 000000000000001c
[ 3065.936063][T19000] R10: 00000000000080fe R11: 0000000000000246 R12: 0000000000000002
[ 3065.936079][T19000] R13: 0000000000000000 R14: 00007f6be0f06058 R15: 00007f6be102fa38
[ 3065.936114][T19000]  </TASK>
[ 3066.284105][T25229] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260
[ 3066.286204][T18980] fuse: Bad value for 'fd'
[ 3066.468631][T13298] cdc_ncm 3-1:1.1: bind() failure
[ 3066.538250][T13298] usb 3-1: USB disconnect, device number 56
[ 3066.998004][   T29] audit: type=1326 audit(1723162934.932:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19009 comm="syz.3.10187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c47779f9 code=0x7fc00000
[ 3067.554786][T19042] xt_bpf: check failed: parse error
[ 3067.855653][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10196'.
[ 3067.887542][T19025] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10190'.
[ 3067.894568][T19052] vlan2: entered promiscuous mode
[ 3067.903175][T19052] team0: entered promiscuous mode
[ 3067.922310][T19052] team_slave_0: entered promiscuous mode
[ 3067.937724][T19052] team_slave_1: entered promiscuous mode
[ 3067.985922][T19052] team0: left promiscuous mode
[ 3067.990773][T19052] team_slave_0: left promiscuous mode
[ 3067.998048][T19052] team_slave_1: left promiscuous mode
[ 3068.196460][T22820] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[ 3068.397802][T22820] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 3068.428334][T22820] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[ 3068.475110][T22820] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3068.503217][T22820] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 3068.543949][T22820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3068.590221][T19054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 3068.616428][T22820] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 3068.645621][T22820] usb 5-1: invalid MIDI out EP 0
[ 3068.714910][T13298] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 3068.880101][T22820] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 3068.923961][T13298] usb 3-1: Using ep0 maxpacket: 8
[ 3069.098473][T13298] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3069.113102][T16992] udevd[16992]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3069.133168][T13298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3069.172313][T13298] usb 3-1: Product: syz
[ 3069.180975][T13298] usb 3-1: Manufacturer: syz
[ 3069.199566][T13298] usb 3-1: SerialNumber: syz
[ 3069.381260][T19077] FAULT_INJECTION: forcing a failure.
[ 3069.381260][T19077] name failslab, interval 1, probability 0, space 0, times 0
[ 3069.395650][T19077] CPU: 1 UID: 0 PID: 19077 Comm: syz.1.10203 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[ 3069.406653][T19077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 3069.416754][T19077] Call Trace:
[ 3069.420079][T19077]  <TASK>
[ 3069.423052][T19077]  dump_stack_lvl+0x241/0x360
[ 3069.427792][T19077]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3069.433045][T19077]  ? __pfx__printk+0x10/0x10
[ 3069.435879][T13298] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 3069.437665][T19077]  ? kmem_cache_alloc_lru_noprof+0x49/0x2b0
[ 3069.454409][T19077]  ? __pfx___might_resched+0x10/0x10
[ 3069.454895][T13300] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 3069.459739][T19077]  should_fail_ex+0x3b0/0x4e0
[ 3069.459778][T19077]  ? new_inode_pseudo+0x8b/0x1a0
[ 3069.459815][T19077]  should_failslab+0xac/0x100
[ 3069.481756][T19077]  ? new_inode_pseudo+0x8b/0x1a0
[ 3069.486729][T19077]  kmem_cache_alloc_lru_noprof+0x71/0x2b0
[ 3069.492482][T19077]  new_inode_pseudo+0x8b/0x1a0
[ 3069.497301][T19077]  alloc_anon_inode+0x1f/0x340
[ 3069.502284][T19077]  aio_setup_ring+0x11f/0xcf0
[ 3069.507026][T19077]  ? ioctx_alloc+0x30a/0x7b0
[ 3069.511665][T19077]  ? pcpu_alloc_noprof+0xf15/0x16e0
[ 3069.516918][T19077]  ? __pfx_aio_setup_ring+0x10/0x10
[ 3069.522179][T19077]  ioctx_alloc+0x343/0x7b0
[ 3069.526672][T19077]  __se_sys_io_setup+0x7b/0x1a0
[ 3069.531575][T19077]  do_syscall_64+0xf3/0x230
[ 3069.536142][T19077]  ? clear_bhb_loop+0x35/0x90
[ 3069.540870][T19077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3069.546806][T19077] RIP: 0033:0x7f377af779f9
[ 3069.551262][T19077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3069.570997][T19077] RSP: 002b:00007f377bc93038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[ 3069.579467][T19077] RAX: ffffffffffffffda RBX: 00007f377b106058 RCX: 00007f377af779f9
[ 3069.587482][T19077] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000001
[ 3069.595492][T19077] RBP: 00007f377bc93090 R08: 0000000000000000 R09: 0000000000000000
[ 3069.603515][T19077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3069.611532][T19077] R13: 0000000000000000 R14: 00007f377b106058 R15: 00007f377b22fa38
[ 3069.619592][T19077]  </TASK>
[ 3069.656465][T13300] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3069.696120][T13300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3069.727159][T13300] usb 4-1: config 1 has no interface number 0
[ 3069.753952][T13300] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3069.797197][T13300] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3069.816942][T13300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3069.862562][T13300] usb 4-1: Product: syz
[ 3069.885314][T13300] usb 4-1: Manufacturer: syz
[ 3069.936211][T13300] usb 4-1: SerialNumber: syz
[ 3069.975959][T13300] usb 4-1: selecting invalid altsetting 1
[ 3070.299481][T19088] xt_bpf: check failed: parse error
[ 3070.405230][T23011] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 3070.438113][T19074] fuse: Bad value for 'fd'
[ 3070.497569][T13300] cdc_ncm 4-1:1.1: bind() failure
[ 3070.524495][T13300] usb 4-1: USB disconnect, device number 108
[ 3070.617777][T23011] usb 1-1: Using ep0 maxpacket: 8
[ 3070.638086][T23011] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 3070.659749][T23011] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 3070.685562][T23011] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3070.706024][T23011] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3070.743008][T23011] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3070.761599][T23011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3071.046923][T13298] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 3071.173188][T19095] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10205'.
[ 3071.217166][T19095] 0·: renamed from hsr0 (while UP)
[ 3071.256675][T19095] 0·: entered promiscuous mode
[ 3071.268180][T19095] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[ 3071.293847][T13298] usb 2-1: device descriptor read/64, error -71
[ 3071.390052][T22820] usb 3-1: USB disconnect, device number 57
[ 3071.449131][T22820] usblp0: removed
[ 3071.584301][T13298] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 3071.690294][T19105] trusted_key: encrypted_key: insufficient parameters specified
[ 3071.754096][T13298] usb 2-1: device descriptor read/64, error -71
[ 3071.905278][T13298] usb usb2-port1: attempt power cycle
[ 3072.209457][T22820] usb 5-1: USB disconnect, device number 35
[ 3072.374268][T13298] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 3072.416203][T13298] usb 2-1: device descriptor read/8, error -71
[ 3072.447010][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10214'.
[ 3072.704143][T13298] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 3072.756585][T13298] usb 2-1: device descriptor read/8, error -71
[ 3072.896315][T13298] usb usb2-port1: unable to enumerate USB device
[ 3072.961737][T19124] netlink: 'syz.4.10220': attribute type 6 has an invalid length.
[ 3073.150891][T23011] usb 1-1: usb_control_msg returned -71
[ 3073.172490][T23011] usbtmc 1-1:16.0: can't read capabilities
[ 3073.194751][T23011] usb 1-1: USB disconnect, device number 23
[ 3073.284045][T13298] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 3073.303894][ T5281] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 3073.373886][ T3081] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 3073.443939][T13298] usb 5-1: device descriptor read/64, error -71
[ 3073.516287][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3073.534226][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3073.543559][   T29] audit: type=1326 audit(1723162941.472:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.10223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6be0d779f9 code=0x0
[ 3073.553882][ T3081] usb 4-1: Using ep0 maxpacket: 16
[ 3073.571497][ T5281] usb 3-1: config 1 has no interface number 0
[ 3073.587212][ T5281] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3073.592750][ T3081] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a70, bcdDevice=fa.c3
[ 3073.604977][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3073.620928][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3073.631083][ T5281] usb 3-1: Product: syz
[ 3073.649838][ T3081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3073.655369][ T5281] usb 3-1: Manufacturer: syz
[ 3073.658341][ T3081] usb 4-1: Product: syz
[ 3073.667279][ T3081] usb 4-1: Manufacturer: syz
[ 3073.672239][ T5281] usb 3-1: SerialNumber: syz
[ 3073.672265][ T3081] usb 4-1: SerialNumber: syz
[ 3073.699237][ T5281] usb 3-1: selecting invalid altsetting 1
[ 3073.702834][ T3081] usb 4-1: config 0 descriptor??
[ 3073.753874][T13298] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 3073.936386][T13298] usb 5-1: device descriptor read/64, error -71
[ 3073.966599][T13304] usb 4-1: USB disconnect, device number 109
[ 3074.084994][T13298] usb usb5-port1: attempt power cycle
[ 3074.116551][T25229] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260
[ 3074.117423][T19125] fuse: Bad value for 'fd'
[ 3074.281812][ T5281] cdc_ncm 3-1:1.1: bind() failure
[ 3074.334744][ T5281] usb 3-1: USB disconnect, device number 58
[ 3074.524138][T13298] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 3074.646696][T13298] usb 5-1: device descriptor read/8, error -71
[ 3074.984008][T13298] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 3075.024593][T13298] usb 5-1: device descriptor read/8, error -71
[ 3075.154265][T13298] usb usb5-port1: unable to enumerate USB device
[ 3075.277807][T19162] input: syz0 as /devices/virtual/input/input224
[ 3075.285554][T19158] netlink: 'syz.0.10228': attribute type 1 has an invalid length.
[ 3075.302068][T19159] netlink: 'syz.0.10228': attribute type 1 has an invalid length.
[ 3075.330824][T19159] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.10228'.
[ 3075.331017][T19158] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.10228'.
[ 3075.743844][T13298] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 3075.934138][T13298] usb 2-1: Using ep0 maxpacket: 32
[ 3075.949254][T13298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 3075.977987][T13298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 3075.994164][ T3081] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 3076.015263][T13298] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 3076.027192][T13298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3076.050547][T13298] usb 2-1: config 0 descriptor??
[ 3076.074438][T19167] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 3076.085952][T13298] hub 2-1:0.0: USB hub found
[ 3076.187222][ T3081] usb 1-1: Using ep0 maxpacket: 32
[ 3076.198390][ T3081] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 3076.233359][ T3081] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[ 3076.257532][ T3081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3076.297651][ T3081] usb 1-1: Product: syz
[ 3076.302632][ T3081] usb 1-1: Manufacturer: syz
[ 3076.307441][ T3081] usb 1-1: SerialNumber: syz
[ 3076.318118][ T3081] usb 1-1: config 0 descriptor??
[ 3076.337457][ T3081] usb 1-1: no audio or video endpoints found
[ 3076.349133][T13298] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3076.365830][T19167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3076.407159][T19167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3076.953823][T13304] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 3077.035796][T22820] usb 1-1: USB disconnect, device number 24
[ 3077.145899][T13304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3077.166339][T13304] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3077.183685][T13304] usb 3-1: config 1 has no interface number 0
[ 3077.190025][T13304] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3077.237130][T13304] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3077.250598][T13304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3077.279896][T13304] usb 3-1: Product: syz
[ 3077.292091][T13304] usb 3-1: Manufacturer: syz
[ 3077.302158][T13304] usb 3-1: SerialNumber: syz
[ 3077.314921][T13304] usb 3-1: selecting invalid altsetting 1
[ 3077.600241][T25229] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260
[ 3077.600841][T19184] fuse: Bad value for 'fd'
[ 3077.635289][T22820] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 3077.689659][T13304] cdc_ncm 3-1:1.1: bind() failure
[ 3077.715683][T13304] usb 3-1: USB disconnect, device number 59
[ 3077.856070][T22820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3077.881117][T22820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3077.917334][T22820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3077.940522][T22820] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3077.963845][T22820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3077.990106][T22820] usb 1-1: config 0 descriptor??
[ 3078.235079][T22820] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0
[ 3078.263615][T22820] plantronics 0003:047F:FFFF.005B: No inputs registered, leaving
[ 3078.372759][T22820] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 3078.584403][ T5050] usb 1-1: USB disconnect, device number 25
[ 3078.862851][T15811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3079.122535][T15811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3079.400260][T15811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3079.597768][T19212] autofs4:pid:19212:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e)
[ 3079.647734][T15811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3079.713976][T19212] autofs4:pid:19212:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[ 3080.053324][T13298] usbhid 2-1:0.0: can't add hid device: -71
[ 3080.085357][T13298] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 3080.195038][T13298] usb 2-1: USB disconnect, device number 58
[ 3080.221822][ T3863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 3080.240113][ T3863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 3080.249789][ T3863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 3080.258139][T15811] gretap0: left allmulticast mode
[ 3080.263245][T15811] gretap0: left promiscuous mode
[ 3080.273840][T13304] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 3080.280963][T15811] bridge0: port 3(gretap0) entered disabled state
[ 3080.288435][ T3863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 3080.306732][ T3863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 3080.315622][ T3863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 3080.385280][T15811] bridge_slave_1: left allmulticast mode
[ 3080.391023][T15811] bridge_slave_1: left promiscuous mode
[ 3080.424963][T15811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3080.469196][T15811] bridge_slave_0: left allmulticast mode
[ 3080.475452][T15811] bridge_slave_0: left promiscuous mode
[ 3080.481399][T15811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3080.514095][T13304] usb 3-1: Using ep0 maxpacket: 8
[ 3080.522634][T13304] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 3080.548590][T13304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3080.587259][T13304] usb 3-1: config 0 descriptor??
[ 3080.686650][T13298] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 3080.702580][T25229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 3080.736694][T25229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 3080.746776][T25229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 3080.759351][T25229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 3080.768786][T25229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 3080.778285][T25229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 3080.803900][ T5281] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 3080.949265][T13298] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3080.981293][T13298] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3080.991440][T13298] usb 2-1: config 1 has no interface number 0
[ 3080.999365][T13298] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3081.014014][ T5281] usb 5-1: Using ep0 maxpacket: 8
[ 3081.024382][T13298] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3081.033541][T13298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3081.042978][T13298] usb 2-1: Product: syz
[ 3081.043290][ T5281] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 3081.081481][T13298] usb 2-1: Manufacturer: syz
[ 3081.086278][T13298] usb 2-1: SerialNumber: syz
[ 3081.093187][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3081.108784][T13298] usb 2-1: selecting invalid altsetting 1
[ 3081.126167][ T5281] usb 5-1: config 0 descriptor??
[ 3081.481197][T19219] fuse: Bad value for 'fd'
[ 3081.550350][T13298] cdc_ncm 2-1:1.1: bind() failure
[ 3081.567875][T13298] usb 2-1: USB disconnect, device number 59
[ 3081.835050][T15811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3081.849813][T15811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3081.863304][T15811] bond0 (unregistering): Released all slaves
[ 3081.928580][T13304] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 3081.970008][T13304] asix 3-1:0.0: probe with driver asix failed with error -71
[ 3082.008306][T13304] usb 3-1: USB disconnect, device number 60
[ 3082.065456][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[ 3082.073742][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[ 3082.384069][T25229] Bluetooth: hci0: command tx timeout
[ 3082.544660][T19240] netlink: 'syz.1.10257': attribute type 12 has an invalid length.
[ 3082.559730][T19240] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.10257'.
[ 3082.853922][T25229] Bluetooth: hci1: command tx timeout
[ 3083.041579][T15811] hsr_slave_0: left promiscuous mode
[ 3083.074148][T15811] hsr_slave_1: left promiscuous mode
[ 3083.093169][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3083.116707][T15811] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3083.142290][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3083.152776][T15811] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3083.188991][T15811] veth1_macvtap: left promiscuous mode
[ 3083.197425][T15811] veth0_macvtap: left promiscuous mode
[ 3083.203176][T15811] veth1_vlan: left promiscuous mode
[ 3083.209264][T15811] veth0_vlan: left promiscuous mode
[ 3083.553488][ T3081] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 3083.770561][ T3081] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 3083.801453][ T3081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3083.813392][ T3081] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 3083.826096][ T3081] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3083.892524][ T3081] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 3083.923800][ T3081] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 3083.931965][ T3081] usb 2-1: Product: syz
[ 3083.937820][ T3081] usb 2-1: Manufacturer: syz
[ 3083.990185][ T3081] cdc_wdm 2-1:1.0: skipping garbage
[ 3084.015814][ T3081] cdc_wdm 2-1:1.0: skipping garbage
[ 3084.036208][ T3081] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 3084.043089][ T3081] cdc_wdm 2-1:1.0: Unknown control protocol
[ 3084.292843][    C1] wdm_int_callback: 56 callbacks suppressed
[ 3084.292871][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 3084.293659][T13298] usb 2-1: USB disconnect, device number 60
[ 3084.298846][    C1] wdm_int_callback: 56 callbacks suppressed
[ 3084.298864][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 3084.298883][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 3084.428748][T15811] team0 (unregistering): Port device team_slave_1 removed
[ 3084.456614][T25229] Bluetooth: hci0: command tx timeout
[ 3084.549860][T15811] team0 (unregistering): Port device team_slave_0 removed
[ 3084.946728][T25229] Bluetooth: hci1: command tx timeout
[ 3085.694535][ T5281] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71
[ 3085.724206][ T5281] asix 5-1:0.0: probe with driver asix failed with error -71
[ 3085.744864][ T5281] usb 5-1: USB disconnect, device number 40
[ 3085.764687][T19220] chnl_net:caif_netlink_parms(): no params data found
[ 3085.937404][T19225] chnl_net:caif_netlink_parms(): no params data found
[ 3086.070291][T19220] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3086.080098][T19220] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3086.092200][T19220] bridge_slave_0: entered allmulticast mode
[ 3086.106405][T19220] bridge_slave_0: entered promiscuous mode
[ 3086.115404][T19220] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3086.122590][T19220] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3086.130045][T19220] bridge_slave_1: entered allmulticast mode
[ 3086.137710][T19220] bridge_slave_1: entered promiscuous mode
[ 3086.284988][T19220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3086.350691][T19225] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3086.357063][T19255] ALSA: mixer_oss: invalid OSS volume ''
[ 3086.375615][T19225] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3086.383479][T19225] bridge_slave_0: entered allmulticast mode
[ 3086.399515][T19225] bridge_slave_0: entered promiscuous mode
[ 3086.416215][T19225] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3086.423398][T19225] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3086.442134][T19225] bridge_slave_1: entered allmulticast mode
[ 3086.457135][T19225] bridge_slave_1: entered promiscuous mode
[ 3086.478501][T19220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3086.534326][T25229] Bluetooth: hci0: command tx timeout
[ 3086.775828][T19225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3086.808123][T19225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3086.871975][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10264'.
[ 3086.894773][T19220] team0: Port device team_slave_0 added
[ 3086.915669][T19220] team0: Port device team_slave_1 added
[ 3087.013954][T25229] Bluetooth: hci1: command tx timeout
[ 3087.113990][T13304] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 3087.258176][T19225] team0: Port device team_slave_0 added
[ 3087.317991][T13304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3087.349301][T13304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3087.378211][T15811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3087.392014][T13304] usb 5-1: config 1 has no interface number 0
[ 3087.418169][T13304] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3087.470662][T13304] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3087.484474][T19220] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3087.508616][T13304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3087.514491][T19220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3087.535097][T13304] usb 5-1: Product: syz
[ 3087.555664][T19220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3087.564215][T13304] usb 5-1: Manufacturer: syz
[ 3087.569917][T19220] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3087.571370][T13304] usb 5-1: SerialNumber: syz
[ 3087.581072][T19220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3087.613810][T19220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3087.652234][T19225] team0: Port device team_slave_1 added
[ 3087.657561][T13304] usb 5-1: selecting invalid altsetting 1
[ 3087.726843][T19225] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3087.737579][T19225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3087.767372][T19225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3087.782655][T19310] tipc: Started in network mode
[ 3087.788216][T19310] tipc: Node identity ac1414aa, cluster identity 4711
[ 3087.808397][T19310] tipc: Enabled bearer <udp:s>, priority 10
[ 3087.855997][T15811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3087.905876][T19225] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3087.913674][T19225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3087.955670][T19295] fuse: Bad value for 'fd'
[ 3087.983819][T13304] cdc_ncm 5-1:1.1: bind() failure
[ 3088.001806][T13304] usb 5-1: USB disconnect, device number 41
[ 3088.011812][T19225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3088.154733][T15811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3088.447488][T15811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3088.493433][T19220] hsr_slave_0: entered promiscuous mode
[ 3088.504705][T19220] hsr_slave_1: entered promiscuous mode
[ 3088.521103][T19220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3088.556379][T19220] Cannot create hsr debugfs directory
[ 3088.614173][T25229] Bluetooth: hci0: command tx timeout
[ 3088.769990][T19225] hsr_slave_0: entered promiscuous mode
[ 3088.789819][T19225] hsr_slave_1: entered promiscuous mode
[ 3088.843780][T19225] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3088.866035][T19225] Cannot create hsr debugfs directory
[ 3088.944642][T10845] tipc: Node number set to 2886997162
[ 3089.094254][T25229] Bluetooth: hci1: command tx timeout
[ 3089.892692][T15811] bridge_slave_1: left allmulticast mode
[ 3089.911136][T15811] bridge_slave_1: left promiscuous mode
[ 3089.940375][T15811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3089.991740][T15811] bridge_slave_0: left allmulticast mode
[ 3090.011442][T15811] bridge_slave_0: left promiscuous mode
[ 3090.027591][T15811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3090.456879][T10845] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 3090.654115][ T3081] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 3090.686489][T10845] usb 2-1: config 3 has an invalid interface number: 70 but max is 0
[ 3090.694893][T10845] usb 2-1: config 3 has no interface number 0
[ 3090.721681][T10845] usb 2-1: config 3 interface 70 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64
[ 3090.735637][T10845] usb 2-1: config 3 interface 70 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3090.769764][T10845] usb 2-1: New USB device found, idVendor=1199, idProduct=0029, bcdDevice=8d.2e
[ 3090.779690][T10845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3090.810747][T10845] usb 2-1: Product: syz
[ 3090.815129][T10845] usb 2-1: Manufacturer: syz
[ 3090.820342][T10845] usb 2-1: SerialNumber: syz
[ 3090.833494][T19365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 3090.844216][ T3081] usb 5-1: Using ep0 maxpacket: 16
[ 3090.846249][T10845] sierra 2-1:3.70: Sierra USB modem converter detected
[ 3090.876898][ T3081] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 3090.893889][ T3081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3090.927079][ T3081] usb 5-1: config 0 descriptor??
[ 3090.936047][ T3081] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 3091.063585][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3091.073304][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3091.099302][T10845] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[ 3091.368022][T15811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3091.382280][T15811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3091.408416][T15811] bond0 (unregistering): Released all slaves
[ 3091.456088][T19376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10278'.
[ 3091.474371][T19376] netlink: 'syz.2.10278': attribute type 15 has an invalid length.
[ 3091.980160][T10845] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 3092.117443][T19386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3092.134584][T19386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3092.168798][T15811] hsr_slave_0: left promiscuous mode
[ 3092.179459][T10845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3092.195233][T15811] hsr_slave_1: left promiscuous mode
[ 3092.203955][T10845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3092.224447][T10845] usb 3-1: config 1 has no interface number 0
[ 3092.230832][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3092.243124][T15811] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3092.254037][T10845] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3092.276115][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3092.289408][T15811] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3092.316159][T10845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3092.336186][T10845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3092.357490][T10845] usb 3-1: Product: syz
[ 3092.371475][T10845] usb 3-1: Manufacturer: syz
[ 3092.390219][T10845] usb 3-1: SerialNumber: syz
[ 3092.395509][ T3081] gspca_sonixj: reg_w1 err -110
[ 3092.417044][T10845] usb 3-1: selecting invalid altsetting 1
[ 3092.425732][ T3081] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[ 3092.436185][T15811] veth1_macvtap: left promiscuous mode
[ 3092.448700][T15811] veth0_macvtap: left promiscuous mode
[ 3092.473305][T15811] veth1_vlan: left promiscuous mode
[ 3092.492654][T15811] veth0_vlan: left promiscuous mode
[ 3092.729618][T25229] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260
[ 3092.731409][T19388] fuse: Bad value for 'fd'
[ 3092.804266][T10845] cdc_ncm 3-1:1.1: bind() failure
[ 3092.861141][T10845] usb 3-1: USB disconnect, device number 61
[ 3093.173610][T13304] usb 2-1: USB disconnect, device number 61
[ 3093.205294][T13304] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 3093.243542][T13304] sierra 2-1:3.70: device disconnected
[ 3093.456200][ T3081] usb 5-1: USB disconnect, device number 42
[ 3094.197698][T15811] team0 (unregistering): Port device team_slave_1 removed
[ 3094.289330][T15811] team0 (unregistering): Port device team_slave_0 removed
[ 3095.383899][T19416] tipc: Started in network mode
[ 3095.394086][T19416] tipc: Node identity ffffffff, cluster identity 4711
[ 3095.400928][T19416] tipc: Node number set to 4294967295
[ 3095.713987][ T9632] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 3095.811822][T19220] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3095.858358][T19220] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3095.914583][ T9632] usb 3-1: Using ep0 maxpacket: 16
[ 3095.927366][ T9632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3095.929820][T19220] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3095.947146][ T9632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3095.978677][T19220] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3095.981954][ T9632] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 3096.048778][ T9632] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 3096.072752][ T9632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3096.110516][ T9632] usb 3-1: config 0 descriptor??
[ 3096.531734][T15811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3096.578499][ T9632] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0
[ 3096.586086][ T9632] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0
[ 3096.593451][ T9632] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0
[ 3096.614519][ T9632] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0
[ 3096.630734][ T9632] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0
[ 3096.675738][ T9632] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0
[ 3096.696311][ T9632] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0
[ 3096.750393][ T9632] microsoft 0003:045E:07DA.005C: No inputs registered, leaving
[ 3096.812747][ T9632] microsoft 0003:045E:07DA.005C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 3096.819398][T15811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3096.835412][ T9632] microsoft 0003:045E:07DA.005C: no inputs found
[ 3096.843051][ T9632] microsoft 0003:045E:07DA.005C: could not initialize ff, continuing anyway
[ 3096.873941][ T9632] usb 3-1: USB disconnect, device number 62
[ 3097.199225][T15811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3097.202526][ T3863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 3097.226852][ T3863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 3097.236558][ T3863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 3097.265095][ T3863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 3097.273010][ T3863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 3097.280753][ T3863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 3097.435096][T15811] team0: Port device netdevsim0 removed
[ 3097.457666][T15811] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3097.491391][T19220] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3097.943161][T19220] 8021q: adding VLAN 0 to HW filter on device team0
[ 3097.961842][T19225] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 3098.058774][T19225] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 3098.078708][T19442] ALSA: mixer_oss: invalid OSS volume ''
[ 3098.221490][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3098.228839][ T9632] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3098.351183][T19225] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 3098.496459][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3098.503770][ T9632] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3098.570559][T19225] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 3098.675990][T19434] chnl_net:caif_netlink_parms(): no params data found
[ 3098.738984][T15811] bridge_slave_1: left allmulticast mode
[ 3098.765014][T15811] bridge_slave_1: left promiscuous mode
[ 3098.778696][T15811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3098.827561][T15811] bridge_slave_0: left allmulticast mode
[ 3098.833280][T15811] bridge_slave_0: left promiscuous mode
[ 3098.848252][T15811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3099.335879][T25229] Bluetooth: hci4: command tx timeout
[ 3100.447897][T15811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3100.479056][T15811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3100.511942][T15811] bond0 (unregistering): Released all slaves
[ 3100.557972][T15811] bond1 (unregistering): (slave batadv2): Releasing backup interface
[ 3100.585821][T15811] bond1 (unregistering): Released all slaves
[ 3100.619909][T15811] bond2 (unregistering): Released all slaves
[ 3100.805622][T15811] tipc: Left network mode
[ 3101.158421][T19483] netlink: 'syz.1.10294': attribute type 1 has an invalid length.
[ 3101.238696][T19484] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 3101.250873][T19484] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[ 3101.414044][T25229] Bluetooth: hci4: command tx timeout
[ 3101.548066][T19504] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[ 3101.604802][T15811] hsr_slave_0: left promiscuous mode
[ 3101.624238][T15811] hsr_slave_1: left promiscuous mode
[ 3101.662180][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3101.681281][T15811] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3101.699998][T15811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3101.723599][T15811] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3101.785961][T15811] veth1_macvtap: left promiscuous mode
[ 3101.799650][T15811] veth0_macvtap: left promiscuous mode
[ 3101.816468][T15811] veth1_vlan: left promiscuous mode
[ 3101.833881][T15811] veth0_vlan: left promiscuous mode
[ 3103.494308][T25229] Bluetooth: hci4: command tx timeout
[ 3103.961166][T15811] team0 (unregistering): Port device team_slave_1 removed
[ 3104.100829][T15811] team0 (unregistering): Port device team_slave_0 removed
[ 3105.593469][T25229] Bluetooth: hci4: command tx timeout
[ 3105.750777][T19434] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3105.759417][T19434] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3105.778529][T19434] bridge_slave_0: entered allmulticast mode
[ 3105.815264][T19434] bridge_slave_0: entered promiscuous mode
[ 3105.893115][T19434] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3105.912787][T19434] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3105.955367][T19434] bridge_slave_1: entered allmulticast mode
[ 3105.977538][T19434] bridge_slave_1: entered promiscuous mode
[ 3106.155026][T19434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3106.177960][T19220] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3106.198823][T19434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3106.542626][T19434] team0: Port device team_slave_0 added
[ 3106.608051][T19434] team0: Port device team_slave_1 added
[ 3106.755872][T19434] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3106.786565][T19434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3106.812607][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3106.846499][T19434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3106.944114][T19434] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3106.968198][T19434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3106.994244][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3107.006614][T19434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3107.042276][T15811] IPVS: stop unused estimator thread 0...
[ 3107.260040][T19225] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3107.455619][T19434] hsr_slave_0: entered promiscuous mode
[ 3107.480426][T19434] hsr_slave_1: entered promiscuous mode
[ 3107.498415][T19593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3107.527644][T19434] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3107.546493][T19434] Cannot create hsr debugfs directory
[ 3107.578742][T19220] veth0_vlan: entered promiscuous mode
[ 3107.606431][T19225] 8021q: adding VLAN 0 to HW filter on device team0
[ 3107.772335][T10845] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3107.779577][T10845] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3107.900113][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3107.907405][ T9632] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3107.949380][T19220] veth1_vlan: entered promiscuous mode
[ 3108.359342][T19225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 3108.372724][T19225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3108.409362][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10304'.
[ 3108.570629][T19220] veth0_macvtap: entered promiscuous mode
[ 3108.607736][T19220] veth1_macvtap: entered promiscuous mode
[ 3108.729078][T19225] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3109.056737][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3109.078681][T19638] FAULT_INJECTION: forcing a failure.
[ 3109.078681][T19638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3109.091966][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.117408][T19638] CPU: 1 UID: 0 PID: 19638 Comm: syz.2.10308 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[ 3109.128314][T19638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 3109.138388][T19638] Call Trace:
[ 3109.141679][T19638]  <TASK>
[ 3109.144617][T19638]  dump_stack_lvl+0x241/0x360
[ 3109.149319][T19638]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3109.154549][T19638]  ? __pfx__printk+0x10/0x10
[ 3109.159178][T19638]  ? __pfx_lock_release+0x10/0x10
[ 3109.164235][T19638]  should_fail_ex+0x3b0/0x4e0
[ 3109.168940][T19638]  _copy_from_user+0x2f/0xe0
[ 3109.173548][T19638]  copy_msghdr_from_user+0xae/0x680
[ 3109.178771][T19638]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 3109.184784][T19638]  __sys_sendmsg+0x23d/0x3a0
[ 3109.189420][T19638]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3109.194551][T19638]  ? vfs_write+0x7c4/0xc90
[ 3109.199103][T19638]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 3109.205469][T19638]  ? do_syscall_64+0x100/0x230
[ 3109.210271][T19638]  ? do_syscall_64+0xb6/0x230
[ 3109.214970][T19638]  do_syscall_64+0xf3/0x230
[ 3109.219495][T19638]  ? clear_bhb_loop+0x35/0x90
[ 3109.224275][T19638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3109.230181][T19638] RIP: 0033:0x7f11fef779f9
[ 3109.234608][T19638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3109.254240][T19638] RSP: 002b:00007f11ffc7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3109.262689][T19638] RAX: ffffffffffffffda RBX: 00007f11ff105f80 RCX: 00007f11fef779f9
[ 3109.270679][T19638] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[ 3109.278664][T19638] RBP: 00007f11ffc7a090 R08: 0000000000000000 R09: 0000000000000000
[ 3109.286657][T19638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3109.294646][T19638] R13: 0000000000000000 R14: 00007f11ff105f80 R15: 00007f11ff22fa38
[ 3109.302642][T19638]  </TASK>
[ 3109.305722][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3109.313248][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3109.324316][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.334248][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3109.345282][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.375289][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3109.385860][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.395910][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3109.410668][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.422950][T19220] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3109.467784][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3109.485049][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.506901][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3109.535669][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.553927][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3109.564619][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.587075][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3109.597785][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.623798][T19220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3109.644318][T19220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3109.668925][T19220] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3109.708947][T19643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10309'.
[ 3109.769695][T19220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3109.782170][T19220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3109.791823][T19220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3109.801399][T19220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3110.082446][T19225] veth0_vlan: entered promiscuous mode
[ 3110.180484][T19225] veth1_vlan: entered promiscuous mode
[ 3110.198654][T19434] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 3110.226781][T19434] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 3110.260317][T11143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3110.276964][T19434] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 3110.292650][T11143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3110.296535][T19661] trusted_key: encrypted_key: insufficient parameters specified
[ 3110.312333][T19434] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 3110.382665][T32501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3110.403567][T32501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3110.513368][T19225] veth0_macvtap: entered promiscuous mode
[ 3110.562604][T19225] veth1_macvtap: entered promiscuous mode
[ 3110.694656][ T5050] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 3110.716052][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3110.742183][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3110.756675][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3110.780306][T19670] xt_NFQUEUE: number of total queues is 0
[ 3110.780343][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3110.798009][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3110.829965][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3110.862387][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3110.886402][ T5050] usb 3-1: device descriptor read/64, error -71
[ 3110.913168][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3110.937460][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3110.971029][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3111.005306][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3111.020028][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3111.056899][T19225] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3111.154791][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3111.186445][ T5050] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 3111.251994][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3111.284699][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3111.323931][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3111.347237][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3111.378761][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3111.394382][ T5050] usb 3-1: device descriptor read/64, error -71
[ 3111.406627][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3111.444230][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3111.482192][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3111.524326][ T5050] usb usb3-port1: attempt power cycle
[ 3111.533925][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3111.558315][T19225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3111.584184][T19225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3111.600273][T19225] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3111.664504][T19225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3111.686677][T19225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3111.697438][T19225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3111.706386][T19225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3111.756452][T19434] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3111.907576][T19434] 8021q: adding VLAN 0 to HW filter on device team0
[ 3111.953128][T22820] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3111.960454][T22820] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3111.964343][ T5050] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 3112.039755][T22820] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3112.047089][T22820] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3112.055395][ T5050] usb 3-1: device descriptor read/8, error -71
[ 3112.144160][ T5281] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 3112.239410][T15804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3112.276235][T15804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3112.330809][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10318'.
[ 3112.344001][ T5281] usb 2-1: Using ep0 maxpacket: 16
[ 3112.349371][ T5050] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 3112.382155][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 3112.384232][T11143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3112.403439][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10318'.
[ 3112.429707][ T5281] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 3112.433582][T11143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3112.440801][ T5050] usb 3-1: device descriptor read/8, error -71
[ 3112.468717][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3112.479070][ T5281] usb 2-1: Product: syz
[ 3112.485613][ T5281] usb 2-1: Manufacturer: syz
[ 3112.491873][ T5281] usb 2-1: SerialNumber: syz
[ 3112.517076][ T5281] usb 2-1: config 0 descriptor??
[ 3112.528118][ T5281] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 3112.531540][T19434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3112.558048][ T5281] em28xx 2-1:0.0: DVB interface 0 found: isoc
[ 3112.604550][ T5050] usb usb3-port1: unable to enumerate USB device
[ 3112.801743][T19434] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3112.818992][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10316'.
[ 3113.115888][T19434] veth0_vlan: entered promiscuous mode
[ 3113.124307][ T5281] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 3113.200540][T19434] veth1_vlan: entered promiscuous mode
[ 3113.229714][ T5281] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 3113.254697][ T5281] em28xx 2-1:0.0: board has no eeprom
[ 3113.288166][T19434] veth0_macvtap: entered promiscuous mode
[ 3113.332708][T19434] veth1_macvtap: entered promiscuous mode
[ 3113.364258][ T5281] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 3113.388388][ T5281] em28xx 2-1:0.0: dvb set to isoc mode.
[ 3113.408869][T23011] em28xx 2-1:0.0: Binding DVB extension
[ 3113.411913][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3113.450838][ T5281] usb 2-1: USB disconnect, device number 62
[ 3113.457179][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3113.457209][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3113.515882][ T5281] em28xx 2-1:0.0: Disconnecting em28xx
[ 3113.569493][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3113.615499][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3113.631690][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3113.633904][T23011] em28xx 2-1:0.0: Registering input extension
[ 3113.655014][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3113.680917][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3113.682788][ T5281] em28xx 2-1:0.0: Closing input extension
[ 3113.701581][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3113.730073][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3113.763865][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3113.795128][ T5281] em28xx 2-1:0.0: Freeing device
[ 3113.800177][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3113.828583][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3113.844267][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3113.857477][T19434] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3114.209213][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3114.265150][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3114.295541][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3114.334391][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3114.350681][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3114.371223][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3114.412697][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3114.431675][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3114.462548][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3114.478291][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3114.489028][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3114.524934][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3114.536866][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3114.558514][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3114.630088][T19434] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3114.673282][T19434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3114.683647][T19434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3114.710856][T19434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3114.735260][T19434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3115.082114][T15806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3115.113270][T15806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3115.147938][T19749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10329'.
[ 3115.183655][T19749] vlan2: entered promiscuous mode
[ 3115.197359][T19749] macvlan1: entered promiscuous mode
[ 3115.206863][T13304] usb 3-1: new full-speed USB device number 67 using dummy_hcd
[ 3115.223002][T19749] macvlan1: left promiscuous mode
[ 3115.358268][T15804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3115.391853][T15804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3115.397117][T13304] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 3115.474098][T13304] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[ 3115.511755][T13304] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3115.567453][T13304] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 3115.609454][T13304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3115.613847][T13300] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 3115.856200][T13300] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 3115.882647][T13300] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3115.931050][T13300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 3115.958239][T13300] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3115.984150][T18879] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 3116.016348][T13300] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 3116.026695][T13300] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 3116.035026][T13300] usb 4-1: Product: syz
[ 3116.039852][T13300] usb 4-1: Manufacturer: syz
[ 3116.069744][T13300] cdc_wdm 4-1:1.0: skipping garbage
[ 3116.076261][T13300] cdc_wdm 4-1:1.0: skipping garbage
[ 3116.083383][T13300] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 3116.090447][T13300] cdc_wdm 4-1:1.0: Unknown control protocol
[ 3116.267195][T18879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3116.291151][T18879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3116.307549][T18879] usb 5-1: config 1 has no interface number 0
[ 3116.319978][T18879] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3116.346088][T18879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3116.362362][T18879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3116.371795][T18879] usb 5-1: Product: syz
[ 3116.392536][T18879] usb 5-1: Manufacturer: syz
[ 3116.413184][T18879] usb 5-1: SerialNumber: syz
[ 3116.434036][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.440707][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.447001][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.453641][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.459994][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.466681][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.473016][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.479641][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.486042][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.489513][T18879] usb 5-1: selecting invalid altsetting 1
[ 3116.492655][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.492906][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.511140][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.517476][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.524107][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.530442][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.537175][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.543532][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.550157][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.556519][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[ 3116.563160][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[ 3116.619537][ T5281] usb 4-1: USB disconnect, device number 110
[ 3116.625605][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 3116.905922][T25229] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[ 3116.908218][T19763] fuse: Bad value for 'fd'
[ 3116.989103][T18879] cdc_ncm 5-1:1.1: bind() failure
[ 3116.991077][T19775] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10337'.
[ 3117.003128][T19779] bridge1: the hash_elasticity option has been deprecated and is always 16
[ 3117.031865][T18879] usb 5-1: USB disconnect, device number 43
[ 3117.041143][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10337'.
[ 3117.065019][T19775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10337'.
[ 3117.106292][T19777] netlink: 25 bytes leftover after parsing attributes in process `syz.1.10337'.
[ 3117.443849][T19786] bridge0: entered allmulticast mode
[ 3117.463920][T19786] pimreg: entered allmulticast mode
[ 3118.052358][T19794] netlink: 'syz.4.10343': attribute type 3 has an invalid length.
[ 3118.535101][T11143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3118.551152][T13304] usb 3-1: can't set config #27, error -71
[ 3118.644751][T13304] usb 3-1: USB disconnect, device number 67
[ 3118.663815][T18879] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 3118.817197][T11143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3118.907490][T18879] usb 4-1: Using ep0 maxpacket: 16
[ 3118.981367][T18879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3119.021656][T18879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3119.078808][T18879] usb 4-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00
[ 3119.125526][T18879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3119.163159][T11143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3119.185193][T18879] usb 4-1: config 0 descriptor??
[ 3119.470125][T11143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3119.704429][T18879] apple 0003:05AC:027B.005D: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.3-1/input0
[ 3120.108572][ T3863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 3120.121658][T11143] bridge_slave_1: left allmulticast mode
[ 3120.128094][ T3863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 3120.141824][T11143] bridge_slave_1: left promiscuous mode
[ 3120.152192][T11143] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3120.163335][ T3863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 3120.174509][T11143] bridge_slave_0: left allmulticast mode
[ 3120.183001][T11143] bridge_slave_0: left promiscuous mode
[ 3120.188792][ T3863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 3120.199430][T11143] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3120.215022][ T3863] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 3120.222559][ T3863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 3120.825454][T13298] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 3120.883950][ T5050] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 3121.052384][T13298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3121.087109][T13298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3121.126137][T13298] usb 5-1: config 1 has no interface number 0
[ 3121.194084][ T5050] usb 3-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[ 3121.205057][T13298] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3121.244076][ T5050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3121.252144][ T5050] usb 3-1: Product: syz
[ 3121.263397][ T5050] usb 3-1: Manufacturer: syz
[ 3121.271596][T13298] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3121.287362][T13298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3121.298266][ T5050] usb 3-1: SerialNumber: syz
[ 3121.304263][T10879] usb 4-1: USB disconnect, device number 111
[ 3121.319161][T13298] usb 5-1: Product: syz
[ 3121.324937][ T5050] usb 3-1: config 0 descriptor??
[ 3121.331394][T13298] usb 5-1: Manufacturer: syz
[ 3121.345636][T13298] usb 5-1: SerialNumber: syz
[ 3121.379873][T13298] usb 5-1: selecting invalid altsetting 1
[ 3121.788131][T19825] fuse: Bad value for 'fd'
[ 3121.792745][ T3863] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[ 3121.830737][T13298] cdc_ncm 5-1:1.1: bind() failure
[ 3121.880392][T13298] usb 5-1: USB disconnect, device number 44
[ 3122.349918][T11143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3122.373569][T11143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3122.386994][ T3863] Bluetooth: hci5: command tx timeout
[ 3122.429746][T11143] bond0 (unregistering): Released all slaves
[ 3122.488468][T11143] bond1 (unregistering): (slave batadv1): Releasing backup interface
[ 3122.531305][T11143] bond1 (unregistering): Released all slaves
[ 3122.706576][ T5281] usb 3-1: USB disconnect, device number 68
[ 3122.760738][T11143] tipc: Disabling bearer <udp:s>
[ 3122.784134][T11143] tipc: Left network mode
[ 3122.814002][ T5050] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 3122.954463][T19851] xt_CONNSECMARK: invalid mode: 0
[ 3123.064742][ T5050] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 3123.076891][ T5050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3123.085172][ T5050] usb 5-1: Product: syz
[ 3123.089579][ T5050] usb 5-1: Manufacturer: syz
[ 3123.096981][ T5050] usb 5-1: SerialNumber: syz
[ 3123.109107][ T5050] usb 5-1: config 0 descriptor??
[ 3123.142587][ T5050] ch341 5-1:0.0: ch341-uart converter detected
[ 3123.408952][T19860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10358'.
[ 3123.470239][T19860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 3123.562073][T11143] hsr_slave_0: left promiscuous mode
[ 3123.578356][T11143] hsr_slave_1: left promiscuous mode
[ 3123.620175][T11143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3123.628308][T11143] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3123.650407][T11143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3123.677644][T11143] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3123.790436][T11143] veth1_macvtap: left promiscuous mode
[ 3123.810753][T11143] veth0_macvtap: left promiscuous mode
[ 3123.822450][T11143] veth1_vlan: left promiscuous mode
[ 3123.841356][T11143] veth0_vlan: left promiscuous mode
[ 3124.410823][ T5050] ch341-uart ttyUSB0: break control not supported, using simulated break
[ 3124.422300][T19848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3124.451171][ T5050] usb 5-1: ch341-uart converter now attached to ttyUSB0
[ 3124.458579][ T3863] Bluetooth: hci5: command tx timeout
[ 3124.481922][T19848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3125.061649][T11143] team0 (unregistering): Port device team_slave_1 removed
[ 3125.150729][T11143] team0 (unregistering): Port device team_slave_0 removed
[ 3126.226377][ T5281] usb 5-1: USB disconnect, device number 45
[ 3126.246129][ T5281] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[ 3126.276604][ T5281] ch341 5-1:0.0: device disconnected
[ 3126.431305][T19818] chnl_net:caif_netlink_parms(): no params data found
[ 3126.536830][ T3863] Bluetooth: hci5: command tx timeout
[ 3126.655933][   T29] audit: type=1326 audit(1723162994.592:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4051779f9 code=0x7ffc0000
[ 3126.742187][   T29] audit: type=1326 audit(1723162994.592:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4051779f9 code=0x7ffc0000
[ 3126.783890][T13300] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 3126.805590][   T29] audit: type=1326 audit(1723162994.612:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb405176390 code=0x7ffc0000
[ 3126.863890][   T29] audit: type=1326 audit(1723162994.612:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4051775fb code=0x7ffc0000
[ 3126.886896][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3126.973923][T18879] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 3126.988347][   T29] audit: type=1326 audit(1723162994.612:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4051775fb code=0x7ffc0000
[ 3127.012276][   T29] audit: type=1326 audit(1723162994.622:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4051775fb code=0x7ffc0000
[ 3127.016049][T13300] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3127.037196][   T29] audit: type=1326 audit(1723162994.622:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4051775fb code=0x7ffc0000
[ 3127.098493][   T29] audit: type=1326 audit(1723162994.742:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4051775fb code=0x7ffc0000
[ 3127.121119][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3127.147954][T19905] ptm ptm9: ldisc open failed (-12), clearing slot 9
[ 3127.175904][T19909] ptm ptm10: ldisc open failed (-12), clearing slot 10
[ 3127.178496][T13300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3127.201559][T18879] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[ 3127.223742][T13300] usb 1-1: config 1 has no interface number 0
[ 3127.234744][T19818] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3127.242001][T19818] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3127.259000][T13300] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3127.274326][T18879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3127.283594][T19818] bridge_slave_0: entered allmulticast mode
[ 3127.305137][T19818] bridge_slave_0: entered promiscuous mode
[ 3127.326911][T13300] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3127.354259][   T29] audit: type=1326 audit(1723162994.842:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4051775fb code=0x7ffc0000
[ 3127.361962][T13300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3127.404467][T18879] usb 4-1: config 0 descriptor??
[ 3127.414980][T19818] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3127.425197][T18879] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[ 3127.453883][T19818] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3127.483501][T13300] usb 1-1: Product: syz
[ 3127.491618][T19818] bridge_slave_1: entered allmulticast mode
[ 3127.509517][T13300] usb 1-1: Manufacturer: syz
[ 3127.529762][T13300] usb 1-1: SerialNumber: syz
[ 3127.536572][T19818] bridge_slave_1: entered promiscuous mode
[ 3127.578716][T13300] usb 1-1: selecting invalid altsetting 1
[ 3127.613840][   T29] audit: type=1326 audit(1723162994.922:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.3.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4051775fb code=0x7ffc0000
[ 3127.855026][T19818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3127.915733][T19899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3127.940778][T19818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3128.016116][T19899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3128.018214][ T3863] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260
[ 3128.034528][T19923] fuse: Bad value for 'fd'
[ 3128.174032][T18879] gspca_sn9c2028: read1 error -110
[ 3128.193426][T18879] gspca_sn9c2028: read1 error -32
[ 3128.213319][T18879] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32
[ 3128.244776][T19927] FAULT_INJECTION: forcing a failure.
[ 3128.244776][T19927] name failslab, interval 1, probability 0, space 0, times 0
[ 3128.289848][T19927] CPU: 1 UID: 0 PID: 19927 Comm: syz.4.10368 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[ 3128.289938][T13300] cdc_ncm 1-1:1.1: bind() failure
[ 3128.300737][T19927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 3128.300762][T19927] Call Trace:
[ 3128.300774][T19927]  <TASK>
[ 3128.300786][T19927]  dump_stack_lvl+0x241/0x360
[ 3128.300830][T19927]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3128.300865][T19927]  ? __pfx__printk+0x10/0x10
[ 3128.336940][T19927]  should_fail_ex+0x3b0/0x4e0
[ 3128.341630][T19927]  should_failslab+0xac/0x100
[ 3128.346319][T19927]  ? sctp_add_bind_addr+0x89/0x3a0
[ 3128.351437][T19927]  __kmalloc_cache_noprof+0x6c/0x2c0
[ 3128.356769][T19927]  sctp_add_bind_addr+0x89/0x3a0
[ 3128.361714][T19927]  sctp_copy_local_addr_list+0x311/0x500
[ 3128.367352][T19927]  ? sctp_copy_local_addr_list+0xab/0x500
[ 3128.373350][T19927]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 3128.379514][T19927]  ? sctp_v6_is_any+0x60/0x70
[ 3128.384209][T19927]  sctp_bind_addr_copy+0xad/0x3b0
[ 3128.389239][T19927]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[ 3128.395579][T19927]  sctp_connect_new_asoc+0x2f3/0x6c0
[ 3128.400872][T19927]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 3128.406690][T19927]  ? sctp_inet6_send_verify+0xbe/0x310
[ 3128.412233][T19927]  ? sctp_endpoint_lookup_assoc+0xc9/0x250
[ 3128.418175][T19927]  __sctp_connect+0x66d/0xe30
[ 3128.422866][T19927]  ? __local_bh_enable_ip+0x168/0x200
[ 3128.428243][T19927]  ? __pfx___sctp_connect+0x10/0x10
[ 3128.433465][T19927]  ? sctp_inet_connect+0xa7/0x1f0
[ 3128.438494][T19927]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 3128.444220][T19927]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 3128.449428][T19927]  sctp_inet_connect+0x149/0x1f0
[ 3128.454377][T19927]  __sys_connect+0x2df/0x310
[ 3128.458995][T19927]  ? __pfx___sys_connect+0x10/0x10
[ 3128.464138][T19927]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 3128.470510][T19927]  ? do_syscall_64+0x100/0x230
[ 3128.475299][T19927]  __x64_sys_connect+0x7a/0x90
[ 3128.480085][T19927]  do_syscall_64+0xf3/0x230
[ 3128.484623][T19927]  ? clear_bhb_loop+0x35/0x90
[ 3128.489325][T19927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3128.495288][T19927] RIP: 0033:0x7fad99b779f9
[ 3128.499821][T19927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3128.519432][T19927] RSP: 002b:00007fad9aa2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 3128.528034][T19927] RAX: ffffffffffffffda RBX: 00007fad99d05f80 RCX: 00007fad99b779f9
[ 3128.536011][T19927] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003
[ 3128.543996][T19927] RBP: 00007fad9aa2f090 R08: 0000000000000000 R09: 0000000000000000
[ 3128.552147][T19927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3128.560148][T19927] R13: 0000000000000000 R14: 00007fad99d05f80 R15: 00007fad99e2fa38
[ 3128.568148][T19927]  </TASK>
[ 3128.629929][ T3863] Bluetooth: hci5: command tx timeout
[ 3128.654316][T13300] usb 1-1: USB disconnect, device number 26
[ 3128.662252][T19818] team0: Port device team_slave_0 added
[ 3128.786111][T19818] team0: Port device team_slave_1 added
[ 3128.886564][T19818] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3128.894315][T19818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3128.927856][T19818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3128.953587][T19818] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3128.961653][T19818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3128.988191][T19818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3129.122698][T19818] hsr_slave_0: entered promiscuous mode
[ 3129.147567][T19818] hsr_slave_1: entered promiscuous mode
[ 3129.178993][T19818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3129.223136][T19818] Cannot create hsr debugfs directory
[ 3129.358037][T19929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3129.406287][T19929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3130.570272][ T5281] usb 4-1: USB disconnect, device number 112
[ 3131.101419][T19818] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 3131.174395][T18879] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 3131.176334][T19818] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 3131.226156][T19818] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 3131.296256][T19818] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 3131.376107][T18879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3131.420230][T18879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3131.465225][T18879] usb 4-1: config 1 has no interface number 0
[ 3131.488470][T18879] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3131.530679][T18879] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3131.549551][T18879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3131.583555][T18879] usb 4-1: Product: syz
[ 3131.610468][T18879] usb 4-1: Manufacturer: syz
[ 3131.631251][T18879] usb 4-1: SerialNumber: syz
[ 3131.664654][T18879] usb 4-1: selecting invalid altsetting 1
[ 3131.953568][T19818] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3132.029526][ T3863] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260
[ 3132.032938][T19995] fuse: Bad value for 'fd'
[ 3132.061022][T19818] 8021q: adding VLAN 0 to HW filter on device team0
[ 3132.126569][T13300] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3132.132579][T20022] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 3132.133829][T13300] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3132.154742][T20022] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10387'.
[ 3132.166166][T13300] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3132.173385][T13300] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3132.194044][T18879] cdc_ncm 4-1:1.1: bind() failure
[ 3132.282189][T18879] usb 4-1: USB disconnect, device number 113
[ 3132.457882][T19818] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3132.464061][T13304] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 3132.632414][T19818] veth0_vlan: entered promiscuous mode
[ 3132.666665][T13304] usb 1-1: Using ep0 maxpacket: 8
[ 3132.667845][T19818] veth1_vlan: entered promiscuous mode
[ 3132.699188][T13304] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[ 3132.719172][T13304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3132.746008][T13304] usb 1-1: Product: syz
[ 3132.770829][T13304] usb 1-1: Manufacturer: syz
[ 3132.796239][T13304] usb 1-1: SerialNumber: syz
[ 3132.810201][T19818] veth0_macvtap: entered promiscuous mode
[ 3132.841726][T19818] veth1_macvtap: entered promiscuous mode
[ 3132.842055][T13304] usb 1-1: config 0 descriptor??
[ 3132.966122][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3133.016636][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.051172][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3133.089184][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.098433][T13304] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 3133.126318][T13304] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[ 3133.145891][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3133.151678][T13304] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 3133.197123][T13304] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[ 3133.203266][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.236449][T13304] usb 1-1: USB disconnect, device number 27
[ 3133.267448][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3133.283074][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.296899][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3133.315615][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.344211][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3133.375789][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.418732][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3133.434057][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.484096][T19818] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3133.650163][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3133.691565][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.733872][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3133.758316][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.791011][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3133.828840][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.862992][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3133.879963][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.901132][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3133.930607][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3133.948854][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3133.993924][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3134.016927][T19818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3134.028488][T19818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3134.042163][T19818] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3134.120399][T19818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3134.160468][T19818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3134.187807][T19818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3134.229089][T19818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3134.781568][T15811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3134.833165][T15811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3134.952719][T32501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3135.010175][T32501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3135.224408][T18879] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 3135.465669][T18879] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 3135.492014][T18879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3135.536473][T18879] usb 4-1: Product: syz
[ 3135.546549][T18879] usb 4-1: Manufacturer: syz
[ 3135.558207][T18879] usb 4-1: SerialNumber: syz
[ 3135.567940][T18879] usb 4-1: config 0 descriptor??
[ 3135.583483][T18879] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 114
[ 3135.656039][T13304] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 3135.861409][T13304] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3135.896870][T13304] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3135.919058][T13304] usb 1-1: config 1 has no interface number 0
[ 3135.925592][T13304] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3135.952407][T13304] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3136.003902][T13304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3136.014458][T13304] usb 1-1: Product: syz
[ 3136.019276][T13304] usb 1-1: Manufacturer: syz
[ 3136.025041][T13304] usb 1-1: SerialNumber: syz
[ 3136.061933][T13304] usb 1-1: selecting invalid altsetting 1
[ 3136.392473][ T3863] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260
[ 3136.396209][T20088] fuse: Bad value for 'fd'
[ 3136.594849][T13304] cdc_ncm 1-1:1.1: bind() failure
[ 3136.631741][T13304] usb 1-1: USB disconnect, device number 28
[ 3136.691935][T20115] netlink: 'syz.4.10406': attribute type 1 has an invalid length.
[ 3136.734344][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10406'.
[ 3137.125236][   T29] kauditd_printk_skb: 80 callbacks suppressed
[ 3137.125287][   T29] audit: type=1326 audit(1723163005.062:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20123 comm="syz.4.10408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad99b779f9 code=0x0
[ 3137.917873][T18879] i2c i2c-1: failure reading functionality
[ 3137.958632][T18879] i2c i2c-1: connected i2c-tiny-usb device
[ 3138.011316][T18879] usb 4-1: USB disconnect, device number 114
[ 3138.629009][ T3863] Bluetooth: hci3: link tx timeout
[ 3138.635377][ T3863] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 3139.295246][T20177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 3139.674938][ T5281] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 3140.036956][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3140.072845][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3140.110682][ T5281] usb 3-1: config 1 has no interface number 0
[ 3140.135706][ T5281] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3140.174472][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3140.196096][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3140.224366][ T5281] usb 3-1: Product: syz
[ 3140.245625][ T5281] usb 3-1: Manufacturer: syz
[ 3140.260504][ T5281] usb 3-1: SerialNumber: syz
[ 3140.347108][ T5281] usb 3-1: selecting invalid altsetting 1
[ 3140.694564][T25229] Bluetooth: hci3: command 0x0406 tx timeout
[ 3140.701439][T25229] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260
[ 3140.706343][T20180] fuse: Bad value for 'fd'
[ 3140.864583][ T5281] cdc_ncm 3-1:1.1: bind() failure
[ 3140.918018][ T5281] usb 3-1: USB disconnect, device number 69
[ 3142.541047][T20220] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[ 3142.792337][T20225] fuse: Bad value for 'fd'
[ 3143.146146][T20225] tipc: Started in network mode
[ 3143.151166][T20225] tipc: Node identity 7f000001, cluster identity 4711
[ 3143.210021][T20225] tipc: Enabled bearer <udp:syz1>, priority 10
[ 3143.393898][ T4198] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 3143.470501][   T29] audit: type=1326 audit(1723163011.402:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20230 comm="syz.4.10433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad99b779f9 code=0x0
[ 3143.503121][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[ 3143.513767][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[ 3143.553025][ T3041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3143.615236][ T4198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 241, changing to 11
[ 3143.653861][ T4198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3143.688834][ T4198] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[ 3143.723906][ T4198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3143.755038][ T4198] usb 3-1: config 0 descriptor??
[ 3143.817258][ T3041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3144.018676][ T3041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3144.204587][ T5281] tipc: Node number set to 2130706433
[ 3144.300722][ T4198] logitech 0003:046D:CA04.005E: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0
[ 3144.330124][ T3041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3144.351655][ T4198] logitech 0003:046D:CA04.005E: no inputs found
[ 3144.832265][ T3041] bridge_slave_1: left allmulticast mode
[ 3144.846850][ T3041] bridge_slave_1: left promiscuous mode
[ 3144.875034][ T3863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 3144.875496][ T3041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3144.893176][ T3863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 3144.904708][ T3863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 3144.912814][ T3863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 3144.920846][ T3863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 3144.928452][ T3863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 3145.099082][ T3041] bridge_slave_0: left allmulticast mode
[ 3145.124295][ T3041] bridge_slave_0: left promiscuous mode
[ 3145.130130][ T3041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3145.678557][ T4198] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 3145.825006][T20228] fuse: Unknown parameter '0xffffffffffffffff'
[ 3145.891954][ T4198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3145.930860][ T4198] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3145.980410][ T4198] usb 4-1: config 1 has no interface number 0
[ 3146.003798][ T4198] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3146.078962][ T4198] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3146.093901][ T4198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3146.103201][ T4198] usb 4-1: Product: syz
[ 3146.143923][ T4198] usb 4-1: Manufacturer: syz
[ 3146.148601][ T4198] usb 4-1: SerialNumber: syz
[ 3146.199982][ T4198] usb 4-1: selecting invalid altsetting 1
[ 3146.439173][ T3041] bridge0 (unregistering): left allmulticast mode
[ 3146.609506][T25229] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260
[ 3146.611783][T20249] fuse: Bad value for 'fd'
[ 3146.756626][ T4198] cdc_ncm 4-1:1.1: bind() failure
[ 3146.778736][ T4198] usb 4-1: USB disconnect, device number 115
[ 3147.024337][T25229] Bluetooth: hci1: command tx timeout
[ 3147.165628][ T3863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 3147.178862][ T3863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 3147.189291][ T3863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 3147.197964][ T3863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 3147.216613][ T3863] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 3147.226353][ T3863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 3147.454469][ T3041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3147.494604][ T3041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3147.528628][ T3041] bond0 (unregistering): Released all slaves
[ 3147.623944][T13298] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 3147.833985][T13298] usb 4-1: Using ep0 maxpacket: 8
[ 3147.867126][T13298] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[ 3147.883913][T13298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3147.904209][T18879] usb 3-1: USB disconnect, device number 70
[ 3147.913867][T13298] usb 4-1: Product: syz
[ 3147.918101][T13298] usb 4-1: Manufacturer: syz
[ 3147.930979][T13298] usb 4-1: SerialNumber: syz
[ 3147.954995][T13298] usb 4-1: config 0 descriptor??
[ 3148.233252][T13298] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 3148.665553][ T3041] hsr_slave_0: left promiscuous mode
[ 3148.666511][   T29] audit: type=1326 audit(1723163016.602:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3148.717069][ T3041] hsr_slave_1: left promiscuous mode
[ 3148.752455][ T3041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3148.769570][   T29] audit: type=1326 audit(1723163016.632:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3148.807387][ T3041] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3148.845244][ T3041] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3148.865881][ T3041] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3148.884483][   T29] audit: type=1326 audit(1723163016.632:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3149.007233][   T29] audit: type=1326 audit(1723163016.632:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3149.073892][ T3041] veth1_macvtap: left promiscuous mode
[ 3149.078070][   T29] audit: type=1326 audit(1723163016.632:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3149.079511][ T3041] veth0_macvtap: left promiscuous mode
[ 3149.104445][T25229] Bluetooth: hci1: command tx timeout
[ 3149.117322][ T3041] veth1_vlan: left promiscuous mode
[ 3149.122928][ T3041] veth0_vlan: left promiscuous mode
[ 3149.149952][   T29] audit: type=1326 audit(1723163016.632:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3149.207362][   T29] audit: type=1326 audit(1723163016.632:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3149.245588][   T29] audit: type=1326 audit(1723163016.642:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3149.280884][   T29] audit: type=1326 audit(1723163016.642:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3149.337849][T25229] Bluetooth: hci6: command tx timeout
[ 3149.346988][   T29] audit: type=1326 audit(1723163016.642:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20288 comm="syz.2.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fef779f9 code=0x7ffc0000
[ 3149.565480][ T3041] pimreg (unregistering): left allmulticast mode
[ 3149.825133][T13298] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 3149.994201][T18879] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 3150.196589][T18879] usb 3-1: Using ep0 maxpacket: 8
[ 3150.232918][T18879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3150.242923][T18879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3150.252847][T10879] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 3150.279939][T18879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3150.290843][T18879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3150.322429][T18879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3150.331728][T18879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3150.477551][T10879] usb 5-1: Using ep0 maxpacket: 8
[ 3150.515938][ T3041] team0 (unregistering): Port device team_slave_1 removed
[ 3150.525255][T20305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10446'.
[ 3150.565243][T10879] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 3150.583238][T10879] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 3150.591745][T18879] usb 3-1: GET_CAPABILITIES returned 0
[ 3150.598672][T10879] usb 5-1: can't read configurations, error -71
[ 3150.606399][T18879] usbtmc 3-1:16.0: can't read capabilities
[ 3150.645313][ T3041] team0 (unregistering): Port device team_slave_0 removed
[ 3151.183900][ T3863] Bluetooth: hci1: command tx timeout
[ 3151.427871][T25229] Bluetooth: hci6: command tx timeout
[ 3151.521338][T10879] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 3151.707594][T10879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3151.752083][ T3081] usb 3-1: USB disconnect, device number 71
[ 3151.758499][T10879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3151.785334][T10879] usb 5-1: config 1 has no interface number 0
[ 3151.791549][T10879] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3151.823118][T10879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3151.825330][ T4198] usb 4-1: USB disconnect, device number 116
[ 3151.835240][T10879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3151.850153][T10879] usb 5-1: Product: syz
[ 3151.854674][T10879] usb 5-1: Manufacturer: syz
[ 3151.859362][T10879] usb 5-1: SerialNumber: syz
[ 3151.920172][T10879] usb 5-1: selecting invalid altsetting 1
[ 3152.005268][T20310] usb usb9: usbfs: process 20310 (syz.3.10448) did not claim interface 9 before use
[ 3152.199071][T20243] chnl_net:caif_netlink_parms(): no params data found
[ 3152.357951][T20266] chnl_net:caif_netlink_parms(): no params data found
[ 3152.366966][T25229] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260
[ 3152.370180][T20307] fuse: Bad value for 'fd'
[ 3152.493283][T10879] cdc_ncm 5-1:1.1: bind() failure
[ 3152.543889][T10879] usb 5-1: USB disconnect, device number 47
[ 3153.003306][T20266] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3153.038148][T20266] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3153.080392][T20266] bridge_slave_0: entered allmulticast mode
[ 3153.108155][T20266] bridge_slave_0: entered promiscuous mode
[ 3153.220691][T20266] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3153.243976][T20266] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3153.253971][T25229] Bluetooth: hci1: command tx timeout
[ 3153.261907][T20266] bridge_slave_1: entered allmulticast mode
[ 3153.276067][T20266] bridge_slave_1: entered promiscuous mode
[ 3153.426469][T20348] xt_NFQUEUE: number of total queues is 0
[ 3153.469453][T20266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3153.494052][T25229] Bluetooth: hci6: command tx timeout
[ 3153.533155][T20243] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3153.581167][T20243] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3153.611772][T20243] bridge_slave_0: entered allmulticast mode
[ 3153.640147][T20243] bridge_slave_0: entered promiscuous mode
[ 3153.799753][ T3041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3153.876243][T20266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3153.914596][T20243] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3153.945328][T20243] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3153.952991][T20243] bridge_slave_1: entered allmulticast mode
[ 3153.964566][T20243] bridge_slave_1: entered promiscuous mode
[ 3154.040492][ T3041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3154.408193][ T3041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3154.520000][T20266] team0: Port device team_slave_0 added
[ 3154.581024][T20243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3154.656498][T20243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3154.809490][ T3041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3154.881858][T20266] team0: Port device team_slave_1 added
[ 3155.575131][T25229] Bluetooth: hci6: command tx timeout
[ 3155.688684][T20243] team0: Port device team_slave_0 added
[ 3155.736218][T20243] team0: Port device team_slave_1 added
[ 3155.812974][T20266] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3155.864533][T20266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3155.944742][T20266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3155.974746][T20266] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3155.994082][T20266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3156.074532][T20266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3156.176340][T20243] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3156.199036][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3156.254861][T20243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3156.268616][T13298] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 3156.362336][T20243] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3156.408564][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3156.450116][T20243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3156.474240][T13298] usb 4-1: Using ep0 maxpacket: 32
[ 3156.490320][T13298] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3156.521899][T13298] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 3156.559259][T13298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 3156.572264][T13298] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 3156.590304][T13298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 3156.600338][T13298] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[ 3156.654060][T13298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3156.674249][T13298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3156.740708][T13298] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 3156.759643][T13298] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[ 3156.769773][T13298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3156.780464][T13298] usb 4-1: Product: syz
[ 3156.785969][T13298] usb 4-1: Manufacturer: syz
[ 3156.790630][T13298] usb 4-1: SerialNumber: syz
[ 3156.809424][T13298] usb 4-1: config 0 descriptor??
[ 3156.815920][T20393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3156.897546][T20266] hsr_slave_0: entered promiscuous mode
[ 3156.920941][T20266] hsr_slave_1: entered promiscuous mode
[ 3156.945514][T20266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3156.984556][T20266] Cannot create hsr debugfs directory
[ 3157.125677][T20243] hsr_slave_0: entered promiscuous mode
[ 3157.261138][T20243] hsr_slave_1: entered promiscuous mode
[ 3157.307798][T20410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3157.341601][T20410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3157.382053][T20243] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3157.484322][T20243] Cannot create hsr debugfs directory
[ 3157.679959][T13298] cxacru_cm: 41 callbacks suppressed
[ 3157.679991][T13298] cxacru 4-1:0.0: submit of read urb for cm 0x90 failed (-8)
[ 3157.735588][T13298] cxacru 4-1:0.0: usbatm_usb_probe: invalid endpoint 02!
[ 3157.805506][T13298] cxacru 4-1:0.0: probe with driver cxacru failed with error -22
[ 3157.862776][T13298] usb 4-1: USB disconnect, device number 117
[ 3157.939763][ T3041] bridge_slave_1: left allmulticast mode
[ 3157.950675][ T3041] bridge_slave_1: left promiscuous mode
[ 3157.964069][ T3041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3158.002030][ T3041] bridge_slave_0: left allmulticast mode
[ 3158.015170][ T3041] bridge_slave_0: left promiscuous mode
[ 3158.038038][ T3041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3158.170922][T20419] input: syz0 as /devices/virtual/input/input227
[ 3158.223952][   T30] INFO: task syz.1.10003:18033 blocked for more than 143 seconds.
[ 3158.231879][   T30]       Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[ 3158.263776][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3158.272535][   T30] task:syz.1.10003     state:D stack:25744 pid:18033 tgid:18033 ppid:14177  flags:0x00004004
[ 3158.299462][   T30] Call Trace:
[ 3158.302859][   T30]  <TASK>
[ 3158.314398][   T30]  __schedule+0x1800/0x4a60
[ 3158.319021][   T30]  ? __pfx___schedule+0x10/0x10
[ 3158.334255][   T30]  ? __pfx_lock_release+0x10/0x10
[ 3158.339386][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[ 3158.354742][   T30]  ? schedule+0x90/0x320
[ 3158.373835][   T30]  schedule+0x14b/0x320
[ 3158.378140][   T30]  schedule_preempt_disabled+0x13/0x30
[ 3158.403780][   T30]  __mutex_lock+0x6a4/0xd70
[ 3158.408426][   T30]  ? __mutex_lock+0x527/0xd70
[ 3158.413149][   T30]  ? hugetlb_wp+0x104d/0x3a90
[ 3158.433952][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 3158.456578][   T30]  ? __pfx_up_write+0x10/0x10
[ 3158.461388][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 3158.474199][   T30]  ? vma_interval_tree_iter_next+0x193/0x340
[ 3158.484093][   T30]  hugetlb_wp+0x104d/0x3a90
[ 3158.489807][   T30]  ? mark_lock+0x9a/0x350
[ 3158.504206][   T30]  ? __pfx_hugetlb_wp+0x10/0x10
[ 3158.513887][   T30]  ? __pfx___might_resched+0x10/0x10
[ 3158.519244][   T30]  ? __pfx_lock_acquire+0x10/0x10
[ 3158.534499][   T30]  ? do_raw_spin_lock+0x14f/0x370
[ 3158.539725][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3158.553889][   T30]  ? __filemap_get_folio+0x769/0xc10
[ 3158.559319][   T30]  hugetlb_fault+0x26de/0x3780
[ 3158.574526][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[ 3158.579771][   T30]  ? reacquire_held_locks+0x3eb/0x690
[ 3158.593865][   T30]  ? __pfx_reacquire_held_locks+0x10/0x10
[ 3158.599692][   T30]  handle_mm_fault+0x173f/0x1980
[ 3158.605044][   T30]  ? __pfx_lock_release+0x10/0x10
[ 3158.610184][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[ 3158.615742][   T30]  ? lock_vma_under_rcu+0x592/0x6e0
[ 3158.620997][   T30]  ? lock_vma_under_rcu+0x18a/0x6e0
[ 3158.626825][   T30]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 3158.632454][   T30]  ? exc_page_fault+0x113/0x8c0
[ 3158.636263][T13300] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 3158.637815][   T30]  exc_page_fault+0x459/0x8c0
[ 3158.650539][   T30]  asm_exc_page_fault+0x26/0x30
[ 3158.655907][   T30] RIP: 0033:0x7f3213b3f498
[ 3158.660552][   T30] RSP: 002b:00007f3213e2fb98 EFLAGS: 00010246
[ 3158.667577][   T30] RAX: 00000000200005c0 RBX: 0000000000000004 RCX: 0030656c69662f2e
[ 3158.679405][   T30] RDX: 0000000000000008 RSI: 0030656c69662f2e RDI: 00000000200005c0
[ 3158.688222][   T30] RBP: 00007f3213e2fc70 R08: 00007f3213a00000 R09: 0000000000000001
[ 3158.697989][   T30] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000000032
[ 3158.706703][   T30] R13: 00007f3213e2fc90 R14: 00007f3213e2fcb0 R15: fffffffffffffffe
[ 3158.715370][   T30]  </TASK>
[ 3158.718629][   T30] INFO: task syz.1.10003:18034 blocked for more than 143 seconds.
[ 3158.723918][T13298] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 3158.727598][   T30]       Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[ 3158.742612][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3158.751780][   T30] task:syz.1.10003     state:D stack:24240 pid:18034 tgid:18033 ppid:14177  flags:0x00004006
[ 3158.762654][   T30] Call Trace:
[ 3158.766662][   T30]  <TASK>
[ 3158.769909][   T30]  __schedule+0x1800/0x4a60
[ 3158.775462][   T30]  ? __pfx___schedule+0x10/0x10
[ 3158.780475][   T30]  ? __pfx_lock_release+0x10/0x10
[ 3158.788444][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 3158.794976][   T30]  ? schedule+0x90/0x320
[ 3158.801358][   T30]  schedule+0x14b/0x320
[ 3158.808908][   T30]  io_schedule+0x8d/0x110
[ 3158.813533][   T30]  folio_wait_bit_common+0x882/0x12b0
[ 3158.824991][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[ 3158.830972][   T30]  ? __pfx_wake_page_function+0x10/0x10
[ 3158.837534][   T30]  ? _raw_spin_unlock+0x28/0x50
[ 3158.842557][   T30]  ? __vma_reservation_common+0x498/0x7d0
[ 3158.849137][   T30]  __filemap_get_folio+0xb7/0xc10
[ 3158.855479][   T30]  hugetlb_fault+0x1b10/0x3780
[ 3158.860637][   T30]  ? __pfx_validate_chain+0x10/0x10
[ 3158.867366][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[ 3158.872764][   T30]  ? mt_find+0x226/0x850
[ 3158.874216][T13300] usb 3-1: Using ep0 maxpacket: 32
[ 3158.877916][   T30]  ? __pfx_lock_release+0x10/0x10
[ 3158.888238][   T30]  handle_mm_fault+0x173f/0x1980
[ 3158.893390][   T30]  ? mt_find+0x62d/0x850
[ 3158.902488][T13300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 3158.902958][   T30]  ? mt_find+0x226/0x850
[ 3158.919823][   T30]  ? __pfx_mt_find+0x10/0x10
[ 3158.924914][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[ 3158.930514][   T30]  ? find_vma+0xf9/0x170
[ 3158.933814][T13300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 3158.935863][   T30]  ? __pfx_find_vma+0x10/0x10
[ 3158.962978][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 3158.964066][T13300] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 3158.969929][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 3158.980948][T13298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3158.989852][   T30]  ? lock_mm_and_find_vma+0x9c/0x2f0
[ 3158.995632][T13298] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[ 3159.016079][   T30]  exc_page_fault+0x2b9/0x8c0
[ 3159.024283][T13300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3159.027773][   T30]  asm_exc_page_fault+0x26/0x30
[ 3159.033892][T13298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3159.047304][   T30] RIP: 0010:__put_user_8+0x11/0x20
[ 3159.055163][T13300] usb 3-1: config 0 descriptor??
[ 3159.059525][   T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90
[ 3159.080589][T20423] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 3159.089036][T13298] usb 5-1: config 0 descriptor??
[ 3159.102176][   T30] RSP: 0018:ffffc9000ade7778 EFLAGS: 00050202
[ 3159.117256][   T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020
[ 3159.128001][T13300] hub 3-1:0.0: USB hub found
[ 3159.153761][   T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c605f40
[ 3159.161871][   T30] RBP: ffffc9000ade7ec8 R08: ffffffff9017c5ef R09: 1ffffffff202f8bd
[ 3159.183965][   T30] R10: dffffc0000000000 R11: fffffbfff202f8be R12: 1ffff920015bcf7d
[ 3159.192239][   T30] R13: 1ffff920015bcf08 R14: 0000000020800000 R15: 0000000000800000
[ 3159.201141][   T30]  userfaultfd_ioctl+0x28e7/0x70a0
[ 3159.211943][   T30]  ? stack_trace_save+0x118/0x1d0
[ 3159.217759][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 3159.223572][   T30]  ? stack_depot_save_flags+0x29/0x830
[ 3159.230219][   T30]  ? kasan_save_track+0x51/0x80
[ 3159.235859][   T30]  ? kasan_save_track+0x3f/0x80
[ 3159.240873][   T30]  ? kasan_save_free_info+0x40/0x50
[ 3159.246755][   T30]  ? poison_slab_object+0xe0/0x150
[ 3159.252039][   T30]  ? __kasan_slab_free+0x37/0x60
[ 3159.257997][   T30]  ? kfree+0x149/0x360
[ 3159.262227][   T30]  ? tomoyo_path_number_perm+0x68d/0x880
[ 3159.268534][   T30]  ? security_file_ioctl+0x75/0xb0
[ 3159.274338][   T30]  ? __se_sys_ioctl+0x47/0x170
[ 3159.279428][   T30]  ? do_syscall_64+0xf3/0x230
[ 3159.284662][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3159.291078][   T30]  ? do_vfs_ioctl+0xf0e/0x2e50
[ 3159.296693][   T30]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 3159.302103][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 3159.328964][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[ 3159.335745][   T30]  ? __pfx_lock_release+0x10/0x10
[ 3159.341981][   T30]  ? kfree+0x149/0x360
[ 3159.347642][T13300] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3159.355973][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[ 3159.365073][   T30]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3159.371646][   T30]  ? __fget_files+0x29/0x470
[ 3159.377106][   T30]  ? __fget_files+0x3f6/0x470
[ 3159.382109][   T30]  ? __fget_files+0x29/0x470
[ 3159.387422][   T30]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 3159.392732][   T30]  ? security_file_ioctl+0x87/0xb0
[ 3159.399126][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 3159.405317][   T30]  __se_sys_ioctl+0xfc/0x170
[ 3159.412504][   T30]  do_syscall_64+0xf3/0x230
[ 3159.418398][   T30]  ? clear_bhb_loop+0x35/0x90
[ 3159.423414][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3159.430134][   T30] RIP: 0033:0x7f3213b779f9
[ 3159.438453][   T30] RSP: 002b:00007f3214933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3159.447544][   T30] RAX: ffffffffffffffda RBX: 00007f3213d05f80 RCX: 00007f3213b779f9
[ 3159.458092][T20425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3159.471276][   T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000005
[ 3159.480251][   T30] RBP: 00007f3213be58ee R08: 0000000000000000 R09: 0000000000000000
[ 3159.489228][T20425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3159.499682][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3159.508367][   T30] R13: 0000000000000000 R14: 00007f3213d05f80 R15: 00007f3213e2fa38
[ 3159.518965][   T30]  </TASK>
[ 3159.533739][   T30] 
[ 3159.533739][   T30] Showing all locks held in the system:
[ 3159.541992][   T30] 1 lock held by khungtaskd/30:
[ 3159.575473][ T4198] usb 5-1: USB disconnect, device number 48
[ 3159.601396][   T30]  #0: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[ 3159.634000][   T30] 5 locks held by kworker/u8:8/3041:
[ 3159.639364][   T30]  #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 3159.663751][   T30]  #1: ffffc9000a0e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 3159.675346][   T30]  #2: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 3159.685019][   T30]  #3: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0
[ 3159.694997][   T30]  #4: ffffffff8e93d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[ 3159.706912][   T30] 1 lock held by acpid/4664:
[ 3159.711719][   T30]  #0: ffffffff8e93d678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[ 3159.725172][   T30] 2 locks held by dhcpcd/4894:
[ 3159.730155][   T30]  #0: ffff88804526a678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80
[ 3159.740749][   T30]  #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200
[ 3159.750565][   T30] 2 locks held by getty/4982:
[ 3159.756172][   T30]  #0: ffff88802b27c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 3159.769594][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[ 3159.780607][   T30] 5 locks held by kworker/0:14/13300:
[ 3159.786605][   T30]  #0: ffff88801bece548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 3159.798734][   T30]  #1: ffffc9000346fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 3159.812418][   T30]  #2: ffff888023e72190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[ 3159.825005][   T30]  #3: ffff888064207190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520
[ 3159.835090][   T30]  #4: ffff88806bf73160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520
[ 3159.846539][   T30] 3 locks held by kworker/1:2/22820:
[ 3159.852036][   T30]  #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 3159.864174][   T30]  #1: ffffc9000ae5fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 3159.887076][   T30]  #2: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[ 3159.907757][   T30] 3 locks held by kworker/1:4/10879:
[ 3159.913167][   T30]  #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 3159.933911][   T30]  #1: ffffc900045c7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 3159.945408][   T30]  #2: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[ 3159.956001][   T30] 3 locks held by kworker/u8:12/15811:
[ 3159.961744][   T30]  #0: ffff88802a84b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 3159.973650][   T30]  #1: ffffc90003747d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 3159.987572][   T30]  #2: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[ 3159.999591][   T30] 2 locks held by syz.1.10003/18033:
[ 3160.005047][   T30]  #0: ffff888069825220 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0
[ 3160.015843][   T30]  #1: ffff88801beb0608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90
[ 3160.028783][   T30] 3 locks held by syz.1.10003/18034:
[ 3160.034440][   T30]  #0: ffff8880680d5718 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[ 3160.044681][   T30]  #1: ffff88801beb0608 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x575/0x3780
[ 3160.056238][   T30]  #2: ffff888056537ce8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x67b/0x3780
[ 3160.066371][   T30] 4 locks held by udevd/19620:
[ 3160.071801][   T30]  #0: ffff88807a3981c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60
[ 3160.080879][   T30]  #1: ffff88807db05488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0
[ 3160.090769][   T30]  #2: ffff888071b91f08 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0
[ 3160.100753][   T30]  #3: ffff888064207190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340
[ 3160.123189][   T30] 1 lock held by syz-executor/20243:
[ 3160.131590][   T30]  #0: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[ 3160.158282][   T30] 1 lock held by syz-executor/20266:
[ 3160.170048][   T30]  #0: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[ 3160.183215][   T30] 1 lock held by syz.4.10464/20416:
[ 3160.195488][   T30]  #0: ffffffff8e93d540 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530
[ 3160.218076][   T30] 1 lock held by syz.2.10463/20419:
[ 3160.231251][   T30] 1 lock held by syz.2.10463/20422:
[ 3160.236968][   T30]  #0: ffff8880203cb070 (&newdev->mutex){+.+.}-{3:3}, at: uinput_ioctl_handler+0xeb/0x1770
[ 3160.247850][   T30] 1 lock held by syz.2.10463/20423:
[ 3160.253287][   T30]  #0: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340
[ 3160.287773][   T30] 
[ 3160.290280][   T30] =============================================
[ 3160.290280][   T30] 
[ 3160.299910][   T30] NMI backtrace for cpu 1
[ 3160.304335][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[ 3160.314880][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 3160.324978][   T30] Call Trace:
[ 3160.328328][   T30]  <TASK>
[ 3160.331268][   T30]  dump_stack_lvl+0x241/0x360
[ 3160.335989][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3160.341215][   T30]  ? __pfx__printk+0x10/0x10
[ 3160.345836][   T30]  ? vprintk_emit+0x631/0x770
[ 3160.350529][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[ 3160.355573][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[ 3160.360526][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 3160.365993][   T30]  ? _printk+0xd5/0x120
[ 3160.370166][   T30]  ? __pfx__printk+0x10/0x10
[ 3160.374780][   T30]  ? __wake_up_klogd+0xcc/0x110
[ 3160.379647][   T30]  ? __pfx__printk+0x10/0x10
[ 3160.384303][   T30]  ? __rcu_read_unlock+0xa1/0x110
[ 3160.389366][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3160.395365][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[ 3160.401359][   T30]  watchdog+0xfee/0x1030
[ 3160.405624][   T30]  ? watchdog+0x1ea/0x1030
[ 3160.410066][   T30]  ? __pfx_watchdog+0x10/0x10
[ 3160.414846][   T30]  kthread+0x2f0/0x390
[ 3160.418934][   T30]  ? __pfx_watchdog+0x10/0x10
[ 3160.423622][   T30]  ? __pfx_kthread+0x10/0x10
[ 3160.428231][   T30]  ret_from_fork+0x4b/0x80
[ 3160.432667][   T30]  ? __pfx_kthread+0x10/0x10
[ 3160.437281][   T30]  ret_from_fork_asm+0x1a/0x30
[ 3160.442075][   T30]  </TASK>
[ 3160.445244][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3160.452415][   T30] Sending NMI from CPU 1 to CPUs 0:
[ 3160.458383][    C0] NMI backtrace for cpu 0
[ 3160.458406][    C0] CPU: 0 UID: 0 PID: 32501 Comm: kworker/u8:1 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[ 3160.458428][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 3160.458440][    C0] Workqueue: bat_events batadv_nc_worker
[ 3160.458470][    C0] RIP: 0010:lock_acquire+0x27f/0x550
[ 3160.458498][    C0] Code: 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 4b c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 11 00 00 00 00 <66> 43 c7 44 25 15 00 00 43 c6 44 25 17 00 65 48 8b 04 25 28 00 00
[ 3160.458514][    C0] RSP: 0018:ffffc9000408f9e0 EFLAGS: 00000206
[ 3160.458529][    C0] RAX: 0000000000000001 RBX: 1ffff92000811f48 RCX: 2b622d343e79f200
[ 3160.458543][    C0] RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c605f40
[ 3160.458557][    C0] RBP: ffffc9000408fb40 R08: ffffffff9372c807 R09: 1ffffffff26e5900
[ 3160.458571][    C0] R10: dffffc0000000000 R11: fffffbfff26e5901 R12: 1ffff92000811f44
[ 3160.458585][    C0] R13: dffffc0000000000 R14: ffffc9000408fa40 R15: 0000000000000246
[ 3160.458598][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[ 3160.458614][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3160.458627][    C0] CR2: 0000000020701000 CR3: 000000000e734000 CR4: 00000000003526f0
[ 3160.458643][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3160.458654][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3160.458666][    C0] Call Trace:
[ 3160.458674][    C0]  <NMI>
[ 3160.458682][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[ 3160.458702][    C0]  ? __pfx_lock_acquire+0x10/0x10
[ 3160.458728][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 3160.458747][    C0]  ? nmi_handle+0x2a/0x5a0
[ 3160.458774][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 3160.458796][    C0]  ? nmi_handle+0x14f/0x5a0
[ 3160.458813][    C0]  ? nmi_handle+0x2a/0x5a0
[ 3160.458831][    C0]  ? lock_acquire+0x27f/0x550
[ 3160.458854][    C0]  ? default_do_nmi+0x63/0x160
[ 3160.458874][    C0]  ? exc_nmi+0x123/0x1f0
[ 3160.458893][    C0]  ? end_repeat_nmi+0xf/0x53
[ 3160.458919][    C0]  ? lock_acquire+0x27f/0x550
[ 3160.458943][    C0]  ? lock_acquire+0x27f/0x550
[ 3160.458968][    C0]  ? lock_acquire+0x27f/0x550
[ 3160.458992][    C0]  </NMI>
[ 3160.458998][    C0]  <TASK>
[ 3160.459009][    C0]  ? __pfx_lock_acquire+0x10/0x10
[ 3160.459034][    C0]  ? batadv_nc_worker+0xcb/0x610
[ 3160.459055][    C0]  ? __pfx_lock_release+0x10/0x10
[ 3160.459082][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 3160.459111][    C0]  batadv_nc_worker+0xec/0x610
[ 3160.459133][    C0]  ? batadv_nc_worker+0xcb/0x610
[ 3160.459156][    C0]  ? batadv_nc_worker+0xcb/0x610
[ 3160.459179][    C0]  ? process_scheduled_works+0x945/0x1830
[ 3160.459220][    C0]  process_scheduled_works+0xa2c/0x1830
[ 3160.459261][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3160.459290][    C0]  ? assign_work+0x364/0x3d0
[ 3160.459316][    C0]  worker_thread+0x86d/0xd40
[ 3160.459346][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 3160.459373][    C0]  ? __kthread_parkme+0x169/0x1d0
[ 3160.459407][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 3160.459432][    C0]  kthread+0x2f0/0x390
[ 3160.459458][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 3160.459483][    C0]  ? __pfx_kthread+0x10/0x10
[ 3160.459510][    C0]  ret_from_fork+0x4b/0x80
[ 3160.459535][    C0]  ? __pfx_kthread+0x10/0x10
[ 3160.459563][    C0]  ret_from_fork_asm+0x1a/0x30
[ 3160.459597][    C0]  </TASK>
[ 3160.486590][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 3160.486613][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0
[ 3160.486642][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 3160.486658][   T30] Call Trace:
[ 3160.486668][   T30]  <TASK>
[ 3160.486679][   T30]  dump_stack_lvl+0x241/0x360
[ 3160.486724][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3160.486759][   T30]  ? __pfx__printk+0x10/0x10
[ 3160.486788][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 3160.486830][   T30]  ? vscnprintf+0x5d/0x90
[ 3160.486857][   T30]  panic+0x349/0x860
[ 3160.486891][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 3160.486920][   T30]  ? __pfx_panic+0x10/0x10
[ 3160.486949][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[ 3160.486977][   T30]  ? __irq_work_queue_local+0x137/0x410
[ 3160.487012][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 3160.487039][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 3160.487064][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[ 3160.487093][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[ 3160.487124][   T30]  watchdog+0x102d/0x1030
[ 3160.487167][   T30]  ? watchdog+0x1ea/0x1030
[ 3160.487206][   T30]  ? __pfx_watchdog+0x10/0x10
[ 3160.487239][   T30]  kthread+0x2f0/0x390
[ 3160.487275][   T30]  ? __pfx_watchdog+0x10/0x10
[ 3160.487307][   T30]  ? __pfx_kthread+0x10/0x10
[ 3160.487354][   T30]  ret_from_fork+0x4b/0x80
[ 3160.487385][   T30]  ? __pfx_kthread+0x10/0x10
[ 3160.487419][   T30]  ret_from_fork_asm+0x1a/0x30
[ 3160.487465][   T30]  </TASK>
[ 3160.489408][   T30] Kernel Offset: disabled
[ 3160.948215][   T30] Rebooting in 86400 seconds..