last executing test programs:

30.367997928s ago: executing program 3 (id=1272):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x110)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}, 0x48)
bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

26.860392609s ago: executing program 3 (id=1283):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000200)={'gre0\x00', {0x2, 0x4e23, @empty}})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006007d", @ANYRESDEC=r1, @ANYRES16=0x0], 0x48}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bond\x00', 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7}, 0xfffffffffffffc87)
preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x3, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020f0000100000000000000000000000080012000000020000000000000000000600000000000000000000000000002000000000000000000000000000000000e0000002000000000000000000000000030005000000000002004e22ac1414aa0000000000000000030006000000000002000000000000000000000000000000be839323e55b4a0c2620a61a096b5ae5af5a0c87b6d2868eb3c192a2ebbc1e70acb82a0cbdc4f330b64250e2d0e3e69f7bd404b5e4b08dbb05038aeae8830689b9cc17496f9255517893c6f69cc4ee90063f81de39e152845cc6964a23fe0eeb7ec4a60bec89f424b2"], 0x80}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x36f1c0, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
listen(r10, 0xff)
ioctl$IOMMU_VFIO_SET_IOMMU(r9, 0x3b65, 0x3)

25.258989744s ago: executing program 3 (id=1287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)

24.834110774s ago: executing program 3 (id=1289):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x80000, 0xfffffbe1)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002240)={0x2020}, 0x404af39d9af94a30)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000008180)={0x2020, 0x0, <r3=>0x0}, 0x205a)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0})
rmdir(&(0x7f0000000200)='./file0/../file0/file0\x00')
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000010000000000000002000"/36], 0x24, 0x0)

23.630749161s ago: executing program 3 (id=1293):
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000000580), 0x4)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
close(r1)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r3, &(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0xf58367058d4f6897, r3, 0x4bb86000)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="000000000018c13013379033a13982d9400000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x1c}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0)
r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
syz_emit_vhci(0x0, 0x7)
close_range(r14, 0xffffffffffffffff, 0x0)
readv(r5, &(0x7f0000000380)=[{&(0x7f0000000500)=""/4082, 0xff2}], 0x1)
socket$netlink(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

23.037990447s ago: executing program 3 (id=1298):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280))
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x8, @loopback}, @in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x4e20, @multicast1}], 0x3c)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r1, 0x560c, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x200005e0], 0x0, 0x0, 0x0}, 0x210)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000000)={0x1, 0x3, 0x40000000, 0x0, 0x40})
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@private, 0x0, 0x4}}, 0xe8)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000001c0)=0x8)
io_uring_setup(0x69a0, &(0x7f00000002c0)={0x0, 0x883, 0x20, 0x0, 0x72})

9.336515104s ago: executing program 4 (id=1337):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) (async)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x1400017f) (async)
removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', '/dev/snd/seq\x00'})
syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00')
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001380)}}, {{&(0x7f0000000180)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000200)}}, {{&(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f00000003c0)="9d3133e76236c05f7398360b7a526b04b0b1954e3d96d59b29a220228b68ee53ce7ab8eb1d1aa5fac939bd60b03b3ae8c97107bfdead2a40b115ae8940eb345247a9e9948becfda42872f30414a665bd57a28cf9361ccbebf54c95f9d8993abbffbda70f2b211d8e277e87c27c50e741fb7774ba6a8e648f58095fccd8fecef405793db8933ce728158e5b9ed0ba7a7b55bc6a56a0c05c6b7a8449944e9097c3698dc45e5333ac519ca43c6a86", 0xad}, {&(0x7f00000002c0)="ef13588e65e0caa9d3857f20eaadc31204b1d9", 0x13}, {&(0x7f0000000500)="195b6661419baed9fd61fed9b7f9c020c6fd800706c90266cf9bce8e264aebec8fa905892f69252b7e68fc9f099a0615ab1dfb2125034788baeb6f22e95d4bdd1b3235d4546f", 0x46}, {&(0x7f0000000580)="7f8d9dbd5e5cafa63013737617a6fe5e8954ed84a1b9cd8fd3732c51debf45041c99600c1ff02ceaa7137817b125a73f432490ad40fb5e05c4e0e5e568e68b678a80d6c104df0466bc46d95100172bfe46ef73e5", 0x54}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000000600)="4d2723a09922a479569bff06b003e8780852fbb4d591c255c9d851fb20c4df49e56ad03b4283c86d2b8862e905959c91d520c69ab97dc1d0e0f0d64e1004264246d0d7114dbc032c7cd009e61ce2b702a3895225f76ed6c157bab53667ca8b28b0801f792ab821ef", 0x68}], 0x6}}, {{&(0x7f0000000480)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000700)="fa9cd3b205ba122f0e8735be27553524003a2b24b70b9408cf2bd53aaebb23365a5b7fa91c8af80bf7663243240392d749cc8bb9d7c20d690408c10a92b28ae4d874b639e82ae74929e19c0f925128023ceab7920ae7071bd2dec3d0ce9dae9196b1cf57d4f47be3da5bbe03c9ac146509624153a30f36611b81cdb50ca0c5f520644f10781c4f77c13355971d1186a5069f1fd279952279dfdc6dee5b1da3c02c29b5e4ac6408032bc034b9c50395ebed1ff37de0edb1a280adfdc4f7508b5395da23f4adb78fe3eefed8ba677fa4156bb200d2", 0xd4}, {&(0x7f0000000800)="4db8a3a0d6f36a50fc2f0f7b97dc588e7da12524fc53dd39a5d3216dc777e374d8843eebaad9f1e66885182fd552ae85917bbcd1d43664d139afb4b1fc567791", 0x40}], 0x2, &(0x7f0000000a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3d1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x98000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xc0}}, {{&(0x7f0000000b40)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000b80)="131163bae8cfdfaf56ec7b52846aa75010cde5ec8a58530312a5c008932b9ccce1936881a00e7dd01d57d4b921135644c586e4fc9a1759ee5333cd3fb80e28f6d00c6293d6a16cce0bbaa454a3a787f653c805820a306d6d1ae4477976201c18bd828b3df1a909faabe1040da0d5af6f8e783da6deca8ed06f56726c9220e43b8b137f808cc24a127abe98f3a6d7a5d6ffb94dda456b0816c87878b3c8e0d77ff43d", 0xa2}, {&(0x7f0000000c40)="f9dea5aa2a554751720cc9abc142308db16af9bf123e572e9828220295ba0ca328a8af077a71afe0f47cecc90013ae3eadc57e9966dde4ed0899737e000b18173d109b454a007344c91792ee16237976ed962b8c9c10623f075f3417931e59cf67fd961c2ecf8b6d14836ea550", 0x6d}, {&(0x7f0000000cc0)="f2b7e6ca29cb3f23530856e1a77eb5445f4ccfe7ed007f0b5dd7b032eaf5aad5431eb43239d8a26e2db41c39e5ea330d1234a866146622d6d520ae9cd6ac82654f368e47ea971243ffc52ab6", 0x4c}, {&(0x7f0000000d40)="67b794767046a57b333c23b203aaa27fbbd196bb9d2b8e02d198263bc22452619a8b821db45e544a26faa08951f7c6805238288a60336139c99941f6d22ec9c97122c49794699e9caf1cbe1125c75fbcdee5dd527e2e6841f22a64f23230d97105df60f08b3bce102c65fdf95cb24a6b09f99f39cb2a176238d33b339619f358bfe79f7c9e93798854a271ae12154f8ccc05c64bc955a79b0a3abc63af6b91d50be2db24b9bc1e8b1d3d35fa51508340466c3e697f96509cb224", 0xba}, {&(0x7f0000000e00)="296bf3d535844d98d9db251d729baf067b16a03be7999f6828eea6930b74a4071fa70b7df266b6bcd26d4d4f18606ec5db7b6907bce539965572e8531c7834c0ff91945245ff8d", 0x47}, {&(0x7f0000000e80)="1c7cea4fd6f79c6c7d12babba71b314e39a6cf0904456c2b428d39a2b41272e4b01528dcebc1a620ed79f37ad551819d0c584ef07096b48a9c21be0633", 0x3d}, {&(0x7f0000000ec0)="05e0509095bfd7b1d4f9df8fde7bdce314bdcc357c94b1055066e7df8834833b0917a199f26b70d7b83b93b0d047fda7603010a0880ddb32d62d530c1af8641ebd3adda93aede4f339c4c7fe67f5164642682b2266ec602cbd85aaab70751e9df80e16046724f19b1e8775dc9a36f7144d244560388f0c5c2668ee1c45e4f14630902e1183835ad7", 0x88}], 0x7, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x1, 0xf, "4f7b06bea56691bbca1873ba45"}, {0x1, 0xb, "5a8b8109ba8d72d265"}, {0x5, 0x3, 'C'}, {0x7, 0x5, "5e46a4"}, {0x6, 0xb, "2d15fd51caecc6e10b"}, {0x0, 0x4, "44e6"}, {0x7, 0x4, "f966"}]}, @timestamp_addr={0x44, 0xc, 0x21, 0x1, 0x3, [{@private=0xa010100, 0xfffffffa}]}, @lsrr={0x83, 0x7, 0x65, [@private=0xa010101]}, @lsrr={0x83, 0xb, 0xc9, [@rand_addr=0x64010102, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010101}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0xe2, [@multicast1, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast, @multicast2, @remote]}, @rr={0x7, 0x1b, 0xfb, [@multicast2, @multicast1, @private=0xa010100, @private=0xa010101, @empty, @remote]}]}}}], 0x178}}], 0x5, 0x8084)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r4, 0x9, 0x0)
ioctl$TCSETS(r3, 0x541a, &(0x7f0000000880)={0x7, 0x0, 0x0, 0x0, 0x0, "4f55d5bcb999961ef3351fd59df8a8c3a77e9e"}) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4600000006000000000000000000000000000000fd"], 0x78) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) (async)
setitimer(0x0, &(0x7f0000000000), 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000), 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$tipc(r6, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

9.311000034s ago: executing program 0 (id=1338):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040bd28031900000000000109022400010000000009044000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0xff})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20ffa000})
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040), 0x4)
r9 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x1)
fchdir(r10)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x4a, {0x4a, 0xa, "85b45de9f2d960f2fb4359f3a08584c6d3e17bc8205797b7fa9b5d4e8ba37007b4df81e73c9d63182fd9befa19285146428e88d7558717dc253d6cfbdf6c2c30eb1f77468fde331b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}, &(0x7f0000000100)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x5, 0x0, 0xf, [0x30, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "7dab1f256a0d7455add6a653bcaafe5a"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x40, 0x0, 0xd}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbf, 0x1, 0x0, 0x1, "76ade1d4", "e4cc68cd"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x2, 0x5, 0x1, 0x0, 0xb5}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x20, 0x30, 0xd3, "da37c92b7946d768ad91f2a965d18c00d65c087170d248786b068640fc6a43117eeed8839c7c3d5d6f01bdcd8a7ccefc02fd5e6e7e5af340bed0b6b76da352cdc0981ac85bd86f96aed7d6ddbc76d9a1bd72b8339ae30acf94dc8aea3ad5810bfd4cc73e541b57269987838e561708f095f8c429106498d7e8de15cb3a91651c6129ed53bdaa8976bfb481f0df81bdae06d2870253c1e51ec9d47fe2f755245a2e6450ece157e16127eceb32b2b0c1640e772456f774da4fe7c05be5d4994f42b75d804863ba46e10a6690a8a7dc40b77b1e4c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x80}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x200, 0x8, [0xf0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, 'N@'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "ec9a"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xe}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x49}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3}})

8.556069227s ago: executing program 1 (id=1342):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x0, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3})

8.169403285s ago: executing program 1 (id=1343):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
pipe2(0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x2, "8144"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder-control\x00', 0x800, 0x0)
r5 = eventfd(0x1)
r6 = eventfd2(0x10, 0x1)
io_submit(0x0, 0x4, &(0x7f00000005c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0xd, r3, &(0x7f00000002c0)="469dfc3eaf7799fa4560430340f6ee1f0e9ff2d6b74fd1ead942f3c7325b89fb7f8971ff6993f9db45f142af53d428d002ceba5e6891b8b100dbffc8a9d001324b7b1dcf3957e0a00aa15d0a1f545dd139bece3b4a53f860e93a5de1fcea52", 0x5f, 0x7fffffffffffffff, 0x0, 0x3, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000000380)="5fc0e74c09d12cd103dd40adf4cfcc70b0f7310933b4f264ed1a4980e816d77a4cf8e518717818ee5f41193d55bd3a935f39d385f5999ab697090e98e40cc32ecaedfa66d28e9d730bcc3695b280", 0x4e, 0x9, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x300, r0, &(0x7f0000000b00)="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", 0x1000, 0x9, 0x0, 0x2, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xfff8, r2, &(0x7f0000000580)="993e31ee2bfbc4cd6037d42c83fcefe39b965291fbd6e7977d35e0396cdd", 0x1e, 0xffffffffffffffff}])
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f0000000000))
syz_usb_control_io(r4, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x2, "cd74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
uname(0x0)

7.890022421s ago: executing program 4 (id=1344):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x20008020)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x30000008})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005200998533400000000000001c"], 0x18}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffcdb)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004081}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async)
accept4(r3, 0x0, 0x0, 0x80800) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x20008020) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x30000008}) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005200998533400000000000001c"], 0x18}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffcdb) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async)

6.933332802s ago: executing program 0 (id=1345):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="7a0a00ff0000000071107b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1)

6.846550822s ago: executing program 0 (id=1346):
r0 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file2\x00'})
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @empty}}}}}}, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000340)={{0x0, 0xd9920a92dff04890, 0x0, 0x3, 0x5}})
setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200))
syz_io_uring_setup(0x0, &(0x7f0000000200), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

5.9246505s ago: executing program 1 (id=1347):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000a000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfb", 0x28}], 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x202102)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x22140, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0xffff, 0x0)
io_setup(0x7, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x9)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00')
preadv(r3, &(0x7f0000000180), 0x0, 0x12e, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587"], 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)="b5", 0x1}], 0x1}}], 0x2, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000b9a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffd2}, &(0x7f0000000180)=0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)

5.551483253s ago: executing program 4 (id=1349):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x70, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b7adca9a54497c13865d2270985a8c3f34cf47ad3f39f247"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d1c5eaa037a468789adbd4b988509490312da79d9cd6f9e7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r5=>0x0})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@empty}, {@multicast1}, {@private=0xffffffff, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2, 0x3}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @timestamp={0x44, 0x2c, 0x39, 0x0, 0x6, [0x4, 0xfffffffa, 0x1, 0x0, 0x6, 0x1, 0xffffffff, 0x6, 0xfff, 0x2]}]}}}}})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r9, 0x0)
r10 = dup(r8)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r11, 0xae9a)
r12 = getpid()
process_vm_readv(r12, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

5.352591252s ago: executing program 0 (id=1350):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040700c0ef0000000000001090224000100000000090400000203000000092100000001220500090581030000000000f340a4cf93c1e173a8901d13b77f1c77199db65f9988724dc80cae5aa1b60fb309837298dc4014984f57a8ebdc74f624d6850e94f5c6eda64a8d9b27a54e2ea3454e7754f36d6866dcc7b5cd076ee15c4952ea70eea0b98966c94a00"/155], 0x0)
syz_usb_control_io(r3, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000a7"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xa00}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r7, 0x300, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}}, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x2855, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94c, 0x0, 0x0, 0x0, 0x6]})

5.177488947s ago: executing program 2 (id=1351):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x84, r0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "217b058c3e4bca84880bf37527"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3eb9fdb28b"}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x40)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x200, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x2, 0x0, 0x9}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0xc, [{@multicast2}, {@remote}, {@dev, 0x400a}, {@broadcast}, {@multicast2, 0xffd200}, {@multicast1}, {@broadcast, 0xf}, {@multicast2, 0x2}]}, @timestamp_prespec={0x44, 0x4}, @noop, @timestamp={0x44, 0x24, 0x77, 0x0, 0x4, [0x6, 0x2433d58b, 0x6, 0x7aa, 0x4, 0x1, 0x9, 0x3]}, @noop, @rr={0x7, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x14}, @empty, @private=0xa010102, @remote]}, @generic={0x83, 0x12, "78eb7a9d2a20b03820e166c2acdab8c4"}]}}}}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000000010000000000000028712703971400"], 0x14}}, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3]}}], 0xffc8)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0)
dup(r5)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)

4.565409275s ago: executing program 4 (id=1352):
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0})
r6 = dup3(0xffffffffffffffff, r5, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r7 = io_uring_setup(0x5300, &(0x7f0000000080)={0x0, 0x155c, 0x1})
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r8, 0x4610, &(0x7f0000000000)={0x0, 0x2})
r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x1)
ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x600d}, {r9, 0x20b0}, {r6}, {r4, 0x100}, {r6, 0x724}, {0xffffffffffffffff, 0x80a3}, {r4, 0x8413}, {r3, 0x5809f7e70a61ff0a}], 0x8, &(0x7f0000000280), &(0x7f0000000380)={[0x20000000]}, 0x8)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100))

3.812442953s ago: executing program 2 (id=1353):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x40008881}, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x8e9ce1d67ab2de81, @sdr={0x4f424752, 0xd}})
syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2)
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4d)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x800000}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000100), &(0x7f0000000000))
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$netlink(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000be0000/0xd000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xd000, 0x3})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, 0x0, 0x48815)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x8]}, 0x8, 0x800)
semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x800}, {0x0, 0x8}], 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

3.383598902s ago: executing program 4 (id=1354):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040bd28031900000000000109022400010000000009044000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0xff})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20ffa000})
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040), 0x4)
r9 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r9, 0x0, 0x1)
fchdir(r10)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x4a, {0x4a, 0xa, "85b45de9f2d960f2fb4359f3a08584c6d3e17bc8205797b7fa9b5d4e8ba37007b4df81e73c9d63182fd9befa19285146428e88d7558717dc253d6cfbdf6c2c30eb1f77468fde331b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}, &(0x7f0000000100)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x5, 0x0, 0xf, [0x30, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "7dab1f256a0d7455add6a653bcaafe5a"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x40, 0x0, 0xd}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbf, 0x1, 0x0, 0x1, "76ade1d4", "e4cc68cd"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x2, 0x5, 0x1, 0x0, 0xb5}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x20, 0x30, 0xd3, "da37c92b7946d768ad91f2a965d18c00d65c087170d248786b068640fc6a43117eeed8839c7c3d5d6f01bdcd8a7ccefc02fd5e6e7e5af340bed0b6b76da352cdc0981ac85bd86f96aed7d6ddbc76d9a1bd72b8339ae30acf94dc8aea3ad5810bfd4cc73e541b57269987838e561708f095f8c429106498d7e8de15cb3a91651c6129ed53bdaa8976bfb481f0df81bdae06d2870253c1e51ec9d47fe2f755245a2e6450ece157e16127eceb32b2b0c1640e772456f774da4fe7c05be5d4994f42b75d804863ba46e10a6690a8a7dc40b77b1e4c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x80}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x200, 0x8, [0xf0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, 'N@'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "ec9a"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xe}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x49}, &(0x7f0000000700)={0x40, 0x1e, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3}})

2.876342493s ago: executing program 2 (id=1355):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x1ff)

2.70463142s ago: executing program 1 (id=1356):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2}})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'veth1_vlan\x00'})
r5 = socket$kcm(0x10, 0xf, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/150, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xfc, r7, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_IE={0xc1, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x4}, 0x30, 0xc, @device_a, 0x2, 0x1, 0x5a18}}, @fast_bss_trans={0x37, 0xa4, {0x6, 0x3, "b5a24f968711849de896401e1d6a37b7", "fb2d8786579e1e0b95bb487087b6397a5b85c67bc4a7aa5c67a212d36d02cfa8", "5466d5c405ce02ddf38d5fa3191994352510915fb66943b2edcb0f9faa8089b3", [{0x1, 0x25, "b1cd1db6ccb927e1754d062513bfbe3ccc0ed29c761398c69205c58f76ca5fb4e09209a1b4"}, {0x3, 0xc, "46ee5a0296fcca895fd709dd"}, {0x4, 0x1b, "bea698652debf0a5c45cb231d7fbbb45d1bd7646daf411fff24046"}]}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040041}, 0x40)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af04, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x200000000000000})
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc1013a1f848100000", 0x17}], 0x1}, 0x0)

2.427494921s ago: executing program 2 (id=1357):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000380)={0x0, 0x1, 0x0, &(0x7f0000000300)=[{}], 0x3, 0x0, &(0x7f00000005c0)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
listen(0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r3, 0xc058560f, &(0x7f0000000040)={0x0, 0x4})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB], 0x40}}, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x16)
sendto$inet(r2, 0x0, 0x0, 0x2000077d, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
epoll_create1(0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0xd8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'ipvlan0\x00', 'veth0\x00', {}, {}, 0x6f}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x88141, 0x0)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0)
fchdir(r6)
r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x105)
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)
timerfd_create(0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x3, 0x3a)

1.491164889s ago: executing program 0 (id=1358):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x26100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000d00)={0xc})
ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0)
mkdir(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="0800266ec81600000a00180000000000000000011c005a8018000180140003"], 0x4c}}, 0x0)
open(0x0, 0x4e142, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6})
sendmmsg$inet(r7, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2f5, 0x5, 0x2, 0x780, 0xfffffffffffffffe, 0x190008})

1.271777241s ago: executing program 1 (id=1359):
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x4400)
r1 = getgid()
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x81, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c626c6b73697a653d30783030303030303b71d15024fc55d630302c626c6b73697a653d3078303030303030303030303030303230302c6d61785f726561643d3078303030303030303030303030303030302c00"], 0x0, 0x0, &(0x7f0000000280)="cb230cf27eedb8bf2933c3c098a7e6823088c12b4a0f98d915583128b2461dc258654761e9a40d0d15945f93ddd81ec406e66fc6709d44695dce6c43b4037433defde302dfbe5532a8e321fb1d7555d0360ceae38c7482fa6e23d5536cf1a3dda7314eaf67d4f1939d73c15c59c2da3fc19914f75d6e675723851d635f551543e0a50c0c9d430a338c260061457fa301c01cf5fcec88f32e2dd8ab52a95545f61988cdad2157a66c9e43b5e0e6f83b6405e3eb33808727716e1232cb37d5e4784bd4424dbdc235ca3fb8910128fe73db15bbede7b485a6f92b932d9503ce")
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0800bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1e, &(0x7f0000000040)={0xdfe, 0x85}, 0x14)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000006fe10010203010902120001000000000904df0000ea6ce60000000000000000442a763a7a7ab56a975f405009631bf70b9095224afd60ed47c879f79a1ba4c5ae39d4a3cd56e678b2fb77db4d61cc54ede660adc548c814fb778dd28ed264eb81b8c0357fca20318080c701ba4f7b24f977147aabca535899be6d577ca8b507bdba1d7f47650b96"], 0x0)

1.153669171s ago: executing program 2 (id=1360):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x8680, &(0x7f00000008c0)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35)

423.161069ms ago: executing program 4 (id=1361):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x100})
io_uring_setup(0x497c, &(0x7f00000001c0))
openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1de)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x1, 0x3}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
syz_io_uring_setup(0x5bca, &(0x7f0000000380)={0x0, 0x4464, 0x10, 0x0, 0x2fa, 0x0, r1}, &(0x7f0000000080), 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
r5 = getpid()
socket$netlink(0x10, 0x3, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000280)=0x8)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
sched_setscheduler(r5, 0x0, &(0x7f0000000300)=0x1a6)
ptrace(0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x4142, 0x0)

182.009103ms ago: executing program 0 (id=1362):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (fail_nth: 4)
write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x301)

132.932513ms ago: executing program 1 (id=1363):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x1fa)

0s ago: executing program 2 (id=1364):
r0 = socket$inet(0x2, 0x2000080001, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, r0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180), 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000000c0)={0x10})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0)
read$dsp(0xffffffffffffffff, &(0x7f0000000400)=""/108, 0x6c)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000380)=0x50000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00'}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xa}, {0x0, 0x0, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x6c}, 0x0, @in=@local}}, 0xe8)
r6 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x1}})
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x8011}, 0x40810)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000001d0001000000004000e0"], 0x10}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000480000000000019078ac1e0001ac1414aa0b009078030000004b00000000000000002f0000e0000002ac1414008606000000004410000000000000000000000000000000001be43c917def3dfdf4f4f2c4fef5e37520798fdb3f0ca79a7cd43dfc74e085619d0981e3ed360338f524c3267447aaa35cd8ea9e11631cf37191dac8de5f522983ef323031a8"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

kernel console output (not intermixed with test programs):

 netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.973716][T10561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.993035][T10561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.040659][T10773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  497.103064][T10773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  497.131320][ T5287] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  497.246148][T10773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  497.278140][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.306288][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.369410][ T5287] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  497.402654][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.402985][ T5287] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  497.421693][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.509771][ T5287] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  497.547674][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.585941][ T5287] usb 4-1: config 0 descriptor??
[  497.632662][ T5287] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  498.045745][   T29] audit: type=1326 audit(1724112872.545:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  498.091034][T10792] trusted_key: encrypted_key: insufficient parameters specified
[  498.165541][   T29] audit: type=1326 audit(1724112872.585:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  498.170728][ T1189] usb 4-1: USB disconnect, device number 58
[  498.311267][   T29] audit: type=1326 audit(1724112872.585:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  498.399151][   T29] audit: type=1326 audit(1724112872.585:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  498.482925][   T29] audit: type=1326 audit(1724112872.585:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  498.525581][   T29] audit: type=1326 audit(1724112872.585:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  498.576960][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'.
[  498.596547][   T29] audit: type=1326 audit(1724112872.585:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  498.597097][T10803] FAULT_INJECTION: forcing a failure.
[  498.597097][T10803] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  498.640343][   T29] audit: type=1326 audit(1724112872.585:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  498.669911][T10803] CPU: 1 UID: 0 PID: 10803 Comm: syz.0.1082 Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  498.680739][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  498.690816][T10803] Call Trace:
[  498.694125][T10803]  <TASK>
[  498.697149][T10803]  dump_stack_lvl+0x241/0x360
[  498.701938][T10803]  ? __pfx_dump_stack_lvl+0x10/0x10
[  498.707144][T10803]  ? __pfx__printk+0x10/0x10
[  498.711751][T10803]  should_fail_ex+0x3b0/0x4e0
[  498.716456][T10803]  prepare_alloc_pages+0x1da/0x5d0
[  498.721617][T10803]  __alloc_pages_noprof+0x166/0x6c0
[  498.726843][T10803]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  498.732603][T10803]  ? __lock_acquire+0x137a/0x2040
[  498.737661][T10803]  alloc_pages_mpol_noprof+0x3e8/0x680
[  498.743153][T10803]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  498.749259][T10803]  ? filemap_get_entry+0x123/0x3b0
[  498.754405][T10803]  ? __pfx_lock_release+0x10/0x10
[  498.759452][T10803]  folio_alloc_mpol_noprof+0x36/0x50
[  498.764790][T10803]  shmem_alloc_and_add_folio+0x2cf/0x14f0
[  498.770542][T10803]  ? filemap_get_entry+0x328/0x3b0
[  498.775673][T10803]  ? __pfx_filemap_get_entry+0x10/0x10
[  498.781146][T10803]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  498.787321][T10803]  shmem_get_folio_gfp+0x8dc/0x2370
[  498.792553][T10803]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  498.798209][T10803]  ? ktime_get_coarse_real_ts64+0x3a/0x120
[  498.804139][T10803]  shmem_write_begin+0x170/0x4d0
[  498.809088][T10803]  ? __pfx_shmem_write_begin+0x10/0x10
[  498.814570][T10803]  ? fault_in_iov_iter_readable+0x236/0x280
[  498.820481][T10803]  generic_perform_write+0x399/0x840
[  498.825799][T10803]  ? __pfx_generic_perform_write+0x10/0x10
[  498.831614][T10803]  ? __pfx_generic_write_checks+0x10/0x10
[  498.837343][T10803]  ? file_update_time+0x2a6/0x430
[  498.842393][T10803]  shmem_file_write_iter+0xfc/0x120
[  498.847605][T10803]  iter_file_splice_write+0xbd7/0x14e0
[  498.853102][T10803]  ? __pfx_iter_file_splice_write+0x10/0x10
[  498.859031][T10803]  ? rcu_read_lock_any_held+0xb7/0x160
[  498.864536][T10803]  ? __pfx_iter_file_splice_write+0x10/0x10
[  498.870453][T10803]  direct_splice_actor+0x11e/0x220
[  498.875587][T10803]  splice_direct_to_actor+0x58e/0xc90
[  498.880993][T10803]  ? __pfx_direct_splice_actor+0x10/0x10
[  498.886636][T10803]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  498.892542][T10803]  ? __fget_files+0x29/0x470
[  498.897150][T10803]  ? __pfx_lock_release+0x10/0x10
[  498.902194][T10803]  do_splice_direct+0x28c/0x3e0
[  498.907068][T10803]  ? __pfx_do_splice_direct+0x10/0x10
[  498.912454][T10803]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  498.918371][T10803]  ? rw_verify_area+0x1d2/0x6b0
[  498.923241][T10803]  do_sendfile+0x56d/0xe20
[  498.927675][T10803]  ? __pfx_do_sendfile+0x10/0x10
[  498.932629][T10803]  __se_sys_sendfile64+0x17c/0x1e0
[  498.937759][T10803]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  498.943411][T10803]  ? do_syscall_64+0x100/0x230
[  498.948188][T10803]  ? do_syscall_64+0xb6/0x230
[  498.952878][T10803]  do_syscall_64+0xf3/0x230
[  498.957489][T10803]  ? clear_bhb_loop+0x35/0x90
[  498.962183][T10803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.968099][T10803] RIP: 0033:0x7f592b179e79
[  498.972526][T10803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.992148][T10803] RSP: 002b:00007f592bfdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  499.000585][T10803] RAX: ffffffffffffffda RBX: 00007f592b315f80 RCX: 00007f592b179e79
[  499.008651][T10803] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  499.016712][T10803] RBP: 00007f592bfdd090 R08: 0000000000000000 R09: 0000000000000000
[  499.024694][T10803] R10: 000000000000d344 R11: 0000000000000246 R12: 0000000000000002
[  499.032676][T10803] R13: 0000000000000000 R14: 00007f592b315f80 R15: 00007f592b43fa38
[  499.040670][T10803]  </TASK>
[  499.054042][   T29] audit: type=1326 audit(1724112872.585:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  499.163470][   T29] audit: type=1326 audit(1724112872.585:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  499.234422][T10812] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1085'.
[  499.382358][T10812] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  499.388943][T10812] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  499.563928][T10812] vhci_hcd vhci_hcd.0: Device attached
[  499.888943][ T1189] usb 10-1: SetAddress Request (6) to port 0
[  499.895070][ T1189] usb 10-1: new SuperSpeed USB device number 6 using vhci_hcd
[  500.007243][ T8802] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  500.148802][T10816] vhci_hcd: connection reset by peer
[  500.207413][ T8802] usb 2-1: Using ep0 maxpacket: 8
[  500.214199][ T2991] vhci_hcd: stop threads
[  500.242598][ T2991] vhci_hcd: release socket
[  500.248303][ T8802] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  500.271430][ T2991] vhci_hcd: disconnect device
[  500.276318][ T8802] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  500.312902][ T8802] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  500.326718][ T8802] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  500.343083][ T8802] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  500.383242][ T8802] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  500.427430][ T8802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.679539][ T8802] usb 2-1: usb_control_msg returned -32
[  500.731436][ T8802] usbtmc 2-1:16.0: can't read capabilities
[  500.997258][ T8803] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  501.230414][ T8803] usb 5-1: Using ep0 maxpacket: 16
[  501.250936][ T8803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  501.298179][ T8803] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4
[  501.315578][T10858] trusted_key: encrypted_key: insufficient parameters specified
[  501.330087][ T8803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.377252][ T8803] usb 5-1: Product: syz
[  501.381493][ T8803] usb 5-1: Manufacturer: syz
[  501.401829][ T8803] usb 5-1: SerialNumber: syz
[  501.426231][ T8803] usb 5-1: config 0 descriptor??
[  501.503281][T10865] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0
[  502.467950][ T5286] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  502.690384][ T5286] usb 4-1: Using ep0 maxpacket: 16
[  502.718264][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  502.807864][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  502.858482][ T5286] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  502.882154][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.936200][ T5286] usb 4-1: config 0 descriptor??
[  503.241432][ T5288] usb 2-1: USB disconnect, device number 70
[  503.413410][ T5286] usbhid 4-1:0.0: can't add hid device: -71
[  503.439720][ T5286] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  503.500836][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'.
[  503.533589][ T5286] usb 4-1: USB disconnect, device number 59
[  503.736044][ T8803] usb 5-1: Found UVC 0.00 device syz (045e:0721)
[  503.751906][ T8803] usb 5-1: No valid video chain found.
[  503.761770][ T8803] usb 5-1: USB disconnect, device number 66
[  503.906639][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'.
[  504.599281][ T8803] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  504.845878][ T8803] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  504.874916][ T8803] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  504.885781][ T8803] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  504.895903][ T8803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.931409][T10912] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  504.984321][ T8803] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  505.020809][ T8800] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  505.088508][ T1189] usb 10-1: device descriptor read/8, error -110
[  505.108842][ T5287] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  505.131920][T10927] trusted_key: encrypted_key: insufficient parameters specified
[  505.251383][ T8800] usb 5-1: Using ep0 maxpacket: 8
[  505.272818][ T8800] usb 5-1: unable to get BOS descriptor set
[  505.318577][ T8800] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  505.338940][ T5287] usb 2-1: Using ep0 maxpacket: 8
[  505.355790][ T5287] usb 2-1: unable to get BOS descriptor set
[  505.377728][ T5287] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  505.393783][ T8800] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=80.40
[  505.428315][ T8800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.449389][ T8800] usb 5-1: Product: 鹸쎸力Ᵽ툂嫇瘖텪㎟沍ᮭ瀋啑Ỗꮿ
[  505.463649][ T5287] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=80.40
[  505.468167][ T8800] usb 5-1: Manufacturer: ࠒ
[  505.477826][ T8800] usb 5-1: SerialNumber: 滛곓䳃뻥立ᯚᓇ奤᾵ࡼ얅佖慖ᖪ焇씓몷羔퇫뿉░ꝛﮂ樔㘖⩱攕ⷘ忖瞎׸즪経૜굸搳亙寘曫쯛ᑥẤ쩷ꔽ炌悫䨖⋗悪ἠȊН틱ᔖ츙懵뎅ﲔ利쪳㲄澲㧔뼕秵桑瀐屧졓㕌澀ゅꮯ춛ꡠꭀ廼䆭땜揟髽ᾚ̉慽ᘜ䛙샛ዢꣲ戴큾鮣ꇲᴊ櫶坨쬇켍㓥▁쑜⯗氎罗叼甎虰
[  505.495748][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.589801][ T1189] usb usb10-port1: attempt power cycle
[  505.675076][ T5287] usb 2-1: Product: 鹸쎸力Ᵽ툂嫇瘖텪㎟沍ᮭ瀋啑Ỗꮿ
[  505.726357][ T5287] usb 2-1: Manufacturer: ࠒ
[  505.746783][ T5287] usb 2-1: SerialNumber: 滛곓䳃뻥立ᯚᓇ奤᾵ࡼ얅佖慖ᖪ焇씓몷羔퇫뿉░ꝛﮂ樔㘖⩱攕ⷘ忖瞎׸즪経૜굸搳亙寘曫쯛ᑥẤ쩷ꔽ炌悫䨖⋗悪ἠȊН틱ᔖ츙懵뎅ﲔ利쪳㲄澲㧔뼕秵桑瀐屧졓㕌澀ゅꮯ춛ꡠꭀ廼䆭땜揟髽ᾚ̉慽ᘜ䛙샛ዢꣲ戴큾鮣ꇲᴊ櫶坨쬇켍㓥▁쑜⯗氎罗叼甎虰
[  505.785871][T10920] trusted_key: encrypted_key: insufficient parameters specified
[  505.831535][T10920] trusted_key: encrypted_key: insufficient parameters specified
[  505.915658][T10920] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  505.972366][T10920] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  505.999288][T10920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.022063][T10920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.054618][T10923] trusted_key: encrypted_key: insufficient parameters specified
[  506.063861][ T8800] usb 5-1: USB disconnect, device number 67
[  506.123363][T10923] trusted_key: encrypted_key: insufficient parameters specified
[  506.163448][T10923] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  506.189057][T10923] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  506.236298][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.267555][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.292467][ T5287] usb 2-1: USB disconnect, device number 71
[  506.300667][ T1189] usb usb10-port1: unable to enumerate USB device
[  506.417154][   T29] kauditd_printk_skb: 23 callbacks suppressed
[  506.417175][   T29] audit: type=1326 audit(1724112880.915:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.0.1108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x0
[  506.849069][T10946] binder: 10945:10946 ioctl 4018620d 0 returned -22
[  506.924077][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1109'.
[  507.181724][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  507.188739][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  507.204501][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'.
[  507.207244][T10954] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  507.344894][ T8802] usb 4-1: USB disconnect, device number 60
[  507.764638][T10970] input: syz0 as /devices/virtual/input/input45
[  507.978075][ T8800] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  508.197183][ T8800] usb 2-1: Using ep0 maxpacket: 32
[  508.202421][ T5290] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  508.220687][ T8800] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  508.263119][ T8800] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  508.292871][ T8800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.330069][ T8800] usb 2-1: config 0 descriptor??
[  508.350363][ T8800] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  508.417390][ T5290] usb 4-1: Using ep0 maxpacket: 8
[  508.430595][ T5290] usb 4-1: unable to get BOS descriptor set
[  508.444356][ T5290] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  508.479617][ T5290] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=80.40
[  508.507519][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.534905][ T5290] usb 4-1: Product: 鹸쎸力Ᵽ툂嫇瘖텪㎟沍ᮭ瀋啑Ỗꮿ
[  508.552298][ T5290] usb 4-1: Manufacturer: ࠒ
[  508.565730][ T5290] usb 4-1: SerialNumber: 滛곓䳃뻥立ᯚᓇ奤᾵ࡼ얅佖慖ᖪ焇씓몷羔퇫뿉░ꝛﮂ樔㘖⩱攕ⷘ忖瞎׸즪経૜굸搳亙寘曫쯛ᑥẤ쩷ꔽ炌悫䨖⋗悪ἠȊН틱ᔖ츙懵뎅ﲔ利쪳㲄澲㧔뼕秵桑瀐屧졓㕌澀ゅꮯ춛ꡠꭀ廼䆭땜揟髽ᾚ̉慽ᘜ䛙샛ዢꣲ戴큾鮣ꇲᴊ櫶坨쬇켍㓥▁쑜⯗氎罗叼甎虰
[  508.757088][ T1189] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  508.845489][T10973] trusted_key: encrypted_key: insufficient parameters specified
[  508.901310][T10973] trusted_key: encrypted_key: insufficient parameters specified
[  508.921571][T10973] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  508.941469][T10973] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  508.979086][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.004301][T10973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.022237][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  509.064371][ T1189] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  509.076602][T10973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.084520][ T1189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.148602][ T1189] usb 5-1: config 0 descriptor??
[  509.225396][ T5290] usb 4-1: USB disconnect, device number 61
[  509.544632][ T2550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.797234][ T5290] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  509.997475][ T2550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.073638][ T5290] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  510.095335][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.152252][ T5290] usb 1-1: config 0 descriptor??
[  510.232704][ T5290] cp210x 1-1:0.0: cp210x converter detected
[  510.484672][ T5278] usb 2-1: USB disconnect, device number 72
[  510.555047][ T2550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.570041][ T1189] usbhid 5-1:0.0: can't add hid device: -71
[  510.607144][ T1189] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  510.627864][ T1189] usb 5-1: USB disconnect, device number 68
[  510.755361][ T5290] usb 1-1: cp210x converter now attached to ttyUSB0
[  510.952809][ T2550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.998746][T10987] Cannot find del_set index 0 as target
[  511.183066][ T2550] bridge_slave_1: left allmulticast mode
[  511.201117][ T2550] bridge_slave_1: left promiscuous mode
[  511.223082][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.253964][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  511.273884][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  511.288024][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  511.303671][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  511.312735][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  511.320497][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  511.395500][ T8803] usb 1-1: USB disconnect, device number 70
[  511.398094][ T2550] bridge_slave_0: left allmulticast mode
[  511.438348][ T8803] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  511.457346][ T2550] bridge_slave_0: left promiscuous mode
[  511.467741][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.491870][ T8803] cp210x 1-1:0.0: device disconnected
[  511.797735][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'.
[  512.004220][   T29] audit: type=1326 audit(1724112886.505:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.4.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b05979e79 code=0x0
[  512.533237][ T2550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  512.565467][ T2550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  512.636567][ T2550] bond0 (unregistering): Released all slaves
[  512.668146][T11009] netlink: 'syz.1.1133': attribute type 2 has an invalid length.
[  513.247516][ T8803] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  513.300437][ T5287] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  513.407361][ T5241] Bluetooth: hci1: command tx timeout
[  513.439717][ T8803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  513.469440][ T8803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  513.480351][ T8803] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  513.495256][ T8803] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  513.507281][ T8803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.507401][ T5287] usb 2-1: Using ep0 maxpacket: 8
[  513.526834][ T8803] usb 4-1: config 0 descriptor??
[  513.584626][ T5287] usb 2-1: unable to get BOS descriptor set
[  513.609157][ T2550] hsr_slave_0: left promiscuous mode
[  513.621138][ T5287] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  513.647883][ T2550] hsr_slave_1: left promiscuous mode
[  513.679768][ T5287] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=80.40
[  513.691732][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  513.711380][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.733602][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  513.742938][ T5287] usb 2-1: Product: 鹸쎸力Ᵽ툂嫇瘖텪㎟沍ᮭ瀋啑Ỗꮿ
[  513.768344][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  513.790617][ T5287] usb 2-1: Manufacturer: ࠒ
[  513.795468][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  513.814295][ T5287] usb 2-1: SerialNumber: 滛곓䳃뻥立ᯚᓇ奤᾵ࡼ얅佖慖ᖪ焇씓몷羔퇫뿉░ꝛﮂ樔㘖⩱攕ⷘ忖瞎׸즪経૜굸搳亙寘曫쯛ᑥẤ쩷ꔽ炌悫䨖⋗悪ἠȊН틱ᔖ츙懵뎅ﲔ利쪳㲄澲㧔뼕秵桑瀐屧졓㕌澀ゅꮯ춛ꡠꭀ廼䆭땜揟髽ᾚ̉慽ᘜ䛙샛ዢꣲ戴큾鮣ꇲᴊ櫶坨쬇켍㓥▁쑜⯗氎罗叼甎虰
[  513.850135][    C0] vkms_vblank_simulate: vblank timer overrun
[  513.976689][ T2550] veth1_macvtap: left promiscuous mode
[  513.989833][ T2550] veth0_macvtap: left promiscuous mode
[  514.006500][ T2550] veth1_vlan: left promiscuous mode
[  514.027665][ T2550] veth0_vlan: left promiscuous mode
[  514.148341][T11029] trusted_key: encrypted_key: insufficient parameters specified
[  514.158797][T11029] trusted_key: encrypted_key: insufficient parameters specified
[  514.212746][T11029] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  514.272090][T11029] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  514.377765][ T5241] Bluetooth: hci3: command 0x206a tx timeout
[  514.462077][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  514.530227][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.499120][ T5239] Bluetooth: hci1: command tx timeout
[  515.607584][ T5278] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  515.772586][ T2550] team0 (unregistering): Port device team_slave_1 removed
[  515.805673][ T5278] usb 1-1: Using ep0 maxpacket: 8
[  515.813461][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.825043][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  515.837768][ T5278] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  515.847196][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.882749][ T5278] usb 1-1: config 0 descriptor??
[  515.890566][ T2550] team0 (unregistering): Port device team_slave_0 removed
[  516.349657][ T5278] waltop 0003:172F:0034.0026: hidraw0: USB HID v0.00 Device [HID 172f:0034] on usb-dummy_hcd.0-1/input0
[  516.545602][ T5278] usb 1-1: USB disconnect, device number 71
[  516.883650][T11024] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1136'.
[  517.008991][ T5287] usb 2-1: USB disconnect, device number 73
[  517.155228][ T8803] usbhid 4-1:0.0: can't add hid device: -71
[  517.187188][ T8803] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  517.247723][ T8803] usb 4-1: USB disconnect, device number 62
[  517.266527][T10999] chnl_net:caif_netlink_parms(): no params data found
[  517.318896][T11069] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0
[  517.567570][ T5239] Bluetooth: hci1: command tx timeout
[  518.162600][T10999] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.188607][T10999] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.225787][T10999] bridge_slave_0: entered allmulticast mode
[  518.260360][T10999] bridge_slave_0: entered promiscuous mode
[  518.349060][T10999] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.394017][T10999] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.428799][T10999] bridge_slave_1: entered allmulticast mode
[  518.467303][T10999] bridge_slave_1: entered promiscuous mode
[  518.484646][T11100] netlink: zone id is out of range
[  518.525247][T11100] netlink: zone id is out of range
[  518.563581][T11100] netlink: zone id is out of range
[  518.613939][T11100] netlink: zone id is out of range
[  518.633049][T11100] netlink: zone id is out of range
[  518.657181][T11100] netlink: zone id is out of range
[  518.668738][T11100] netlink: zone id is out of range
[  518.694565][T10999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  518.717503][T11100] netlink: zone id is out of range
[  518.737245][T11100] netlink: zone id is out of range
[  518.749602][T10999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.762800][T11100] netlink: zone id is out of range
[  519.064726][T10999] team0: Port device team_slave_0 added
[  519.111705][T10999] team0: Port device team_slave_1 added
[  519.361139][T10999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.396636][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.495952][T10999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.572333][T10999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.598101][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.646910][ T8802] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  519.657337][ T5239] Bluetooth: hci1: command tx timeout
[  519.690509][T10999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.857187][ T8802] usb 1-1: Using ep0 maxpacket: 8
[  519.879718][ T8802] usb 1-1: unable to get BOS descriptor set
[  519.905003][ T8802] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  519.908633][T10999] hsr_slave_0: entered promiscuous mode
[  519.969417][T10999] hsr_slave_1: entered promiscuous mode
[  519.982885][ T8802] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=80.40
[  520.006787][T10999] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  520.026700][ T8802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.056174][T10999] Cannot create hsr debugfs directory
[  520.077185][ T8802] usb 1-1: Product: 鹸쎸力Ᵽ툂嫇瘖텪㎟沍ᮭ瀋啑Ỗꮿ
[  520.112632][ T8802] usb 1-1: Manufacturer: ࠒ
[  520.134821][ T8802] usb 1-1: SerialNumber: 滛곓䳃뻥立ᯚᓇ奤᾵ࡼ얅佖慖ᖪ焇씓몷羔퇫뿉░ꝛﮂ樔㘖⩱攕ⷘ忖瞎׸즪経૜굸搳亙寘曫쯛ᑥẤ쩷ꔽ炌悫䨖⋗悪ἠȊН틱ᔖ츙懵뎅ﲔ利쪳㲄澲㧔뼕秵桑瀐屧졓㕌澀ゅꮯ춛ꡠꭀ廼䆭땜揟髽ᾚ̉慽ᘜ䛙샛ዢꣲ戴큾鮣ꇲᴊ櫶坨쬇켍㓥▁쑜⯗氎罗叼甎虰
[  520.247306][ T5286] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  520.417138][ T5286] usb 5-1: device descriptor read/64, error -71
[  520.450633][T11118] trusted_key: encrypted_key: insufficient parameters specified
[  520.470892][T11118] trusted_key: encrypted_key: insufficient parameters specified
[  520.506365][T11118] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  520.556330][T11118] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  520.642048][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.704969][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.722545][ T5286] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  520.778242][ T8802] usb 1-1: USB disconnect, device number 72
[  520.927933][ T5286] usb 5-1: device descriptor read/64, error -71
[  521.060082][ T5286] usb usb5-port1: attempt power cycle
[  521.119450][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'.
[  521.480159][ T5286] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  521.527901][ T5286] usb 5-1: device descriptor read/8, error -71
[  521.839319][ T5286] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  521.899512][ T5286] usb 5-1: device descriptor read/8, error -71
[  522.059226][ T5286] usb usb5-port1: unable to enumerate USB device
[  522.153716][T10999] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  522.214539][T10999] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  522.255096][T10999] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  522.288117][T10999] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  522.724644][T10999] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.783871][T10999] 8021q: adding VLAN 0 to HW filter on device team0
[  522.831588][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.833873][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.838800][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.870730][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.877968][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.927202][ T5290] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  522.935478][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.978782][T11183] netlink: 'syz.4.1164': attribute type 8 has an invalid length.
[  523.050547][T11184] netlink: 'syz.4.1164': attribute type 8 has an invalid length.
[  523.097941][ T8803] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  523.131216][ T5290] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  523.177438][ T5290] usb 1-1: config 0 has no interface number 0
[  523.200163][ T5290] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.237195][ T5290] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.280829][ T5290] usb 1-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  523.329984][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  523.366588][ T5290] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  523.392891][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.430525][ T5290] usb 1-1: config 0 descriptor??
[  523.570990][T10999] veth0_vlan: entered promiscuous mode
[  523.630029][T10999] veth1_vlan: entered promiscuous mode
[  523.642236][T11197] binder: BINDER_SET_CONTEXT_MGR already set
[  523.652393][T11197] binder: 11192:11197 ioctl 4018620d 20000040 returned -16
[  523.754209][T10999] veth0_macvtap: entered promiscuous mode
[  523.822151][T10999] veth1_macvtap: entered promiscuous mode
[  523.895969][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.902706][ T8803] usb 5-1: device descriptor read/64, error -71
[  523.916371][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.930363][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.941504][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.954479][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.965786][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.976843][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.990082][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.001831][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.013529][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.028688][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.041897][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.057371][ T5286] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  524.068654][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.113179][ T5290] hid (null): global environment stack underflow
[  524.136952][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.148310][ T5290] uclogic 0003:28BD:1903.0027: interface is invalid, ignoring
[  524.182535][T10999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  524.200535][ T8803] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  524.257243][ T5286] usb 4-1: Using ep0 maxpacket: 32
[  524.276727][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.339484][ T5286] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  524.358215][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.383542][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  524.407131][ T8803] usb 5-1: Using ep0 maxpacket: 8
[  524.417382][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.430851][ T5286] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  524.467698][ T8803] usb 5-1: unable to get BOS descriptor set
[  524.471692][ T5286] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  524.475802][ T8803] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  524.502734][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.512897][ T5286] usb 4-1: Product: syz
[  524.523939][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.533341][ T5286] usb 4-1: Manufacturer: syz
[  524.545959][ T8803] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=80.40
[  524.553682][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.570307][ T8803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.571998][ T5286] usb 4-1: SerialNumber: syz
[  524.587271][ T8803] usb 5-1: Product: 鹸쎸力Ᵽ툂嫇瘖텪㎟沍ᮭ瀋啑Ỗꮿ
[  524.596783][ T5286] usb 4-1: config 0 descriptor??
[  524.613521][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.639150][ T8803] usb 5-1: Manufacturer: ࠒ
[  524.645363][ T5286] ldusb 4-1:0.0: Interrupt in endpoint not found
[  524.654243][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.666757][ T8803] usb 5-1: SerialNumber: 滛곓䳃뻥立ᯚᓇ奤᾵ࡼ얅佖慖ᖪ焇씓몷羔퇫뿉░ꝛﮂ樔㘖⩱攕ⷘ忖瞎׸즪経૜굸搳亙寘曫쯛ᑥẤ쩷ꔽ炌悫䨖⋗悪ἠȊН틱ᔖ츙懵뎅ﲔ利쪳㲄澲㧔뼕秵桑瀐屧졓㕌澀ゅꮯ춛ꡠꭀ廼䆭땜揟髽ᾚ̉慽ᘜ䛙샛ዢꣲ戴큾鮣ꇲᴊ櫶坨쬇켍㓥▁쑜⯗氎罗叼甎虰
[  524.681829][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.782260][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.803103][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.826304][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.855079][T10999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.879863][T10999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.934494][ T8798] usb 1-1: USB disconnect, device number 73
[  524.940875][T10999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.979551][T11195] trusted_key: encrypted_key: insufficient parameters specified
[  524.989026][T11195] trusted_key: encrypted_key: insufficient parameters specified
[  525.018748][T10999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  525.050850][T11195] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  525.065527][T10999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  525.098341][T11195] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  525.100649][T10999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  525.149502][T10999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  525.208758][T11195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.233186][T11195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.341198][ T8803] usb 5-1: USB disconnect, device number 74
[  525.544898][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.587449][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.685026][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.714246][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.381490][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'.
[  526.416526][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'.
[  526.434113][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'.
[  526.460726][ T5286] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  526.677333][ T5286] usb 1-1: Using ep0 maxpacket: 32
[  526.682069][ T5290] usb 4-1: USB disconnect, device number 63
[  526.698920][ T5286] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  526.740627][ T5286] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  526.807750][ T5286] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  526.868588][ T5286] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  526.943438][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0
[  527.032640][ T5286] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  527.073849][ T5286] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  527.108227][ T5286] usb 1-1: Product: syz
[  527.113743][T11263] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1177'.
[  527.126045][ T5286] usb 1-1: Manufacturer: syz
[  527.141009][ T5286] usb 1-1: SerialNumber: syz
[  527.198203][ T5286] usb 1-1: config 0 descriptor??
[  527.276015][ T5286] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  527.340895][ T5286] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  527.516189][ T5286] usb 1-1: USB disconnect, device number 74
[  527.548534][ T5286] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  527.767371][T11244] netlink: 'syz.0.1173': attribute type 10 has an invalid length.
[  527.905145][T11244] batman_adv: batadv0: Adding interface: team0
[  527.912264][T11244] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.937757][T11244] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  528.418223][T11299] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  528.424893][T11299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  528.478193][T11299] vhci_hcd vhci_hcd.0: Device attached
[  528.608362][ T5286] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  528.787373][ T5286] usb 5-1: device descriptor read/64, error -71
[  528.793740][ T5288] usb 11-1: new high-speed USB device number 3 using vhci_hcd
[  528.860257][T11301] vhci_hcd: connection reset by peer
[  528.880901][ T2991] vhci_hcd: stop threads
[  528.889478][ T2991] vhci_hcd: release socket
[  528.905044][ T2991] vhci_hcd: disconnect device
[  529.088389][ T5286] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  529.259143][ T5286] usb 5-1: device descriptor read/64, error -71
[  529.408105][ T5286] usb usb5-port1: attempt power cycle
[  529.625295][T11317] tipc: Started in network mode
[  529.637197][T11317] tipc: Node identity 4, cluster identity 4711
[  529.643681][T11317] tipc: Node number set to 4
[  529.877196][ T5286] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  529.917897][ T5286] usb 5-1: device descriptor read/8, error -71
[  529.946045][T11324] dvmrp0: entered allmulticast mode
[  530.218632][ T5286] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  530.259103][T11327] input: syz0 as /devices/virtual/input/input46
[  530.279613][ T5286] usb 5-1: device descriptor read/8, error -71
[  530.333494][T11327] fuse: Bad value for 'fd'
[  530.414384][ T5286] usb usb5-port1: unable to enumerate USB device
[  530.626890][ T8798] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  530.679893][T11320] dvmrp0: left allmulticast mode
[  530.847169][ T8798] usb 4-1: Using ep0 maxpacket: 16
[  530.860841][ T8798] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  530.888043][ T8798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  530.909397][ T8798] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1
[  530.923827][ T8798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.951756][ T8798] usb 4-1: Product: syz
[  530.967639][ T8798] usb 4-1: Manufacturer: syz
[  530.984569][ T8798] usb 4-1: SerialNumber: syz
[  530.997337][ T8798] usb 4-1: config 0 descriptor??
[  531.107126][ T8800] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  531.227681][ T8798] powermate: Expected payload of 3--6 bytes, found 512 bytes!
[  531.249367][ T8798] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47
[  531.301129][ T8800] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  531.338371][    C1] powermate: config urb returned -71
[  531.344401][    C1] powermate: config urb returned -71
[  531.350104][    C1] powermate: config urb returned -71
[  531.355841][    C1] powermate: config urb returned -71
[  531.361364][ T8800] usb 1-1: config 0 has no interface number 0
[  531.379702][ T8800] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.402863][T11342] vhci_hcd: invalid port number 0
[  531.418757][    C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  531.431157][ T8800] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.441686][ T8800] usb 1-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  531.455116][ T8798] usb 4-1: USB disconnect, device number 64
[  531.473366][ T8800] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  531.486206][ T8800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.513030][ T8800] usb 1-1: config 0 descriptor??
[  532.179461][ T5278] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  532.200716][ T8800] hid (null): global environment stack underflow
[  532.244402][ T8800] uclogic 0003:28BD:1903.0028: interface is invalid, ignoring
[  532.339139][T11360] tipc: Started in network mode
[  532.362486][T11360] tipc: Node identity 4, cluster identity 4711
[  532.372614][T11360] tipc: Node number set to 4
[  532.408762][ T5278] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4
[  532.444089][ T5278] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0
[  532.468115][ T5278] usb 4-1: Manufacturer: syz
[  532.475160][T11363] No such timeout policy "syz0"
[  532.497191][ T5278] usb 4-1: config 0 descriptor??
[  532.544317][ T8803] usb 1-1: USB disconnect, device number 75
[  532.941270][ T5278] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  533.528634][ T1113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.906680][ T1113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.967737][ T5288] vhci_hcd: vhci_device speed not set
[  534.015133][T11380] netlink: 'syz.1.1208': attribute type 21 has an invalid length.
[  534.043428][T11380] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1208'.
[  534.197127][ T1113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.377454][ T5278] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-ETIMEDOUT)
[  534.390282][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  534.403513][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  534.413152][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  534.427540][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  534.439313][ T1113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.461643][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  534.470925][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  534.485883][ T5278] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110
[  534.944162][ T5287] usb 4-1: USB disconnect, device number 65
[  535.007495][ T1189] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  535.223544][ T1189] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  535.234316][ T1113] bridge_slave_1: left allmulticast mode
[  535.251037][ T8803] usb 1-1: new low-speed USB device number 76 using dummy_hcd
[  535.260026][ T1189] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  535.271980][ T1113] bridge_slave_1: left promiscuous mode
[  535.286046][ T1189] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  535.286601][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.324434][ T1113] bridge_slave_0: left allmulticast mode
[  535.326021][ T1189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.342264][ T1113] bridge_slave_0: left promiscuous mode
[  535.363638][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.385503][ T1189] usb 5-1: config 0 descriptor??
[  535.448298][ T8803] usb 1-1: device descriptor read/64, error -71
[  535.617676][ T5287] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  535.737206][ T8803] usb 1-1: new low-speed USB device number 77 using dummy_hcd
[  535.859076][ T5287] usb 4-1: Using ep0 maxpacket: 16
[  535.871493][ T5287] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  535.887687][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.889462][ T8803] usb 1-1: device descriptor read/64, error -71
[  535.920260][ T5287] usb 4-1: config 0 descriptor??
[  535.942419][ T5287] gspca_main: sonixj-2.14.0 probing 0471:0327
[  536.068129][ T8803] usb usb1-port1: attempt power cycle
[  536.487884][ T5287] gspca_sonixj: reg_w1 err -110
[  536.492828][ T5287] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  536.500944][ T8803] usb 1-1: new low-speed USB device number 78 using dummy_hcd
[  536.534505][ T5239] Bluetooth: hci1: command tx timeout
[  536.588868][ T8803] usb 1-1: device descriptor read/8, error -71
[  536.623482][T11416] netlink: 'syz.4.1209': attribute type 3 has an invalid length.
[  536.631520][T11416] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1209'.
[  536.692326][T11420] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1209'.
[  536.802232][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  536.826694][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  536.841517][ T1113] bond0 (unregistering): Released all slaves
[  536.857209][ T8803] usb 1-1: new low-speed USB device number 79 using dummy_hcd
[  536.891649][ T8803] usb 1-1: device descriptor read/8, error -71
[  536.978995][ T1189] usb 4-1: USB disconnect, device number 66
[  537.028658][ T8803] usb usb1-port1: unable to enumerate USB device
[  537.251895][T11424] tipc: Started in network mode
[  537.257443][T11424] tipc: Node identity 4, cluster identity 4711
[  537.279165][T11424] tipc: Node number set to 4
[  537.444391][T11388] chnl_net:caif_netlink_parms(): no params data found
[  537.614196][ T1113] hsr_slave_0: left promiscuous mode
[  537.659153][ T1113] hsr_slave_1: left promiscuous mode
[  537.713808][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.759669][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0
[  537.794743][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  537.813985][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.925160][T11441] No such timeout policy "syz0"
[  538.000828][ T1113] veth1_macvtap: left promiscuous mode
[  538.037433][ T1113] veth0_macvtap: left promiscuous mode
[  538.058106][ T1113] veth1_vlan: left promiscuous mode
[  538.083068][ T1113] veth0_vlan: left promiscuous mode
[  538.295526][T11448] binder: 11444:11448 ioctl 4018620d 0 returned -22
[  538.436301][ T1189] usb 5-1: USB disconnect, device number 79
[  538.608330][ T5239] Bluetooth: hci1: command tx timeout
[  539.214145][T11461] FAULT_INJECTION: forcing a failure.
[  539.214145][T11461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  539.232408][T11461] CPU: 1 UID: 0 PID: 11461 Comm: syz.3.1221 Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  539.243327][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  539.253528][T11461] Call Trace:
[  539.256840][T11461]  <TASK>
[  539.259798][T11461]  dump_stack_lvl+0x241/0x360
[  539.264523][T11461]  ? __pfx_dump_stack_lvl+0x10/0x10
[  539.269763][T11461]  ? __pfx__printk+0x10/0x10
[  539.274403][T11461]  ? __mutex_unlock_slowpath+0x21d/0x750
[  539.280073][T11461]  ? __pfx_lock_release+0x10/0x10
[  539.285153][T11461]  should_fail_ex+0x3b0/0x4e0
[  539.289876][T11461]  _copy_from_user+0x2f/0xe0
[  539.294601][T11461]  __se_sys_io_pgetevents+0x117/0x4a0
[  539.300027][T11461]  ? __pfx___se_sys_io_pgetevents+0x10/0x10
[  539.305978][T11461]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  539.312452][T11461]  ? do_syscall_64+0x100/0x230
[  539.317295][T11461]  ? __x64_sys_io_pgetevents+0x21/0xf0
[  539.322811][T11461]  do_syscall_64+0xf3/0x230
[  539.327466][T11461]  ? clear_bhb_loop+0x35/0x90
[  539.332200][T11461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.338146][T11461] RIP: 0033:0x7f2632f79e79
[  539.342590][T11461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  539.362209][T11461] RSP: 002b:00007f2633d73038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d
[  539.370654][T11461] RAX: ffffffffffffffda RBX: 00007f2633116058 RCX: 00007f2632f79e79
[  539.378662][T11461] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000000000000000
[  539.386744][T11461] RBP: 00007f2633d73090 R08: 0000000000000000 R09: 0000000020000000
[  539.394727][T11461] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001
[  539.402729][T11461] R13: 0000000000000000 R14: 00007f2633116058 R15: 00007f263323fa38
[  539.410728][T11461]  </TASK>
[  539.837251][ T1189] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  540.092653][ T1189] usb 4-1: no configurations
[  540.098836][ T1189] usb 4-1: can't read configurations, error -22
[  540.277304][ T1189] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  540.513559][ T1189] usb 4-1: no configurations
[  540.518475][ T1189] usb 4-1: can't read configurations, error -22
[  540.525117][ T1189] usb usb4-port1: attempt power cycle
[  540.687450][ T5239] Bluetooth: hci1: command tx timeout
[  540.875963][ T1113] team0 (unregistering): Port device team_slave_1 removed
[  540.952673][ T1189] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  540.979939][ T1113] team0 (unregistering): Port device team_slave_0 removed
[  540.989297][ T1189] usb 4-1: no configurations
[  540.993939][ T1189] usb 4-1: can't read configurations, error -22
[  541.218294][ T1189] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  541.287718][ T1189] usb 4-1: no configurations
[  541.292341][ T1189] usb 4-1: can't read configurations, error -22
[  541.315289][ T1189] usb usb4-port1: unable to enumerate USB device
[  542.631416][T11388] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.648067][T11388] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.721149][T11388] bridge_slave_0: entered allmulticast mode
[  542.734063][T11388] bridge_slave_0: entered promiscuous mode
[  542.771636][ T5239] Bluetooth: hci1: command tx timeout
[  542.785870][T11388] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.803331][T11388] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.822430][T11388] bridge_slave_1: entered allmulticast mode
[  542.831807][T11388] bridge_slave_1: entered promiscuous mode
[  542.938262][ T1189] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  543.058666][T11388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  543.074907][ T2043] pvrusb2: request_firmware fatal error with code=-110
[  543.092649][ T2043] pvrusb2: Failure uploading firmware1
[  543.112516][ T2043] pvrusb2: Device initialization was not successful.
[  543.125072][ T2043] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  543.129195][T11388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.135872][ T2043] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  543.157333][ T2043] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  543.165707][    T8] pvrusb2: Device being rendered inoperable
[  543.173598][ T1189] usb 2-1: Using ep0 maxpacket: 8
[  543.185936][ T2043] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  543.204400][ T1189] usb 2-1: unable to get BOS descriptor set
[  543.240266][ T1189] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  543.328804][ T1189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=80.40
[  543.367618][ T1189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.399692][ T1189] usb 2-1: Product: 鹸쎸力Ᵽ툂嫇瘖텪㎟沍ᮭ瀋啑Ỗꮿ
[  543.423566][ T1189] usb 2-1: Manufacturer: ࠒ
[  543.438340][ T1189] usb 2-1: SerialNumber: 滛곓䳃뻥立ᯚᓇ奤᾵ࡼ얅佖慖ᖪ焇씓몷羔퇫뿉░ꝛﮂ樔㘖⩱攕ⷘ忖瞎׸즪経૜굸搳亙寘曫쯛ᑥẤ쩷ꔽ炌悫䨖⋗悪ἠȊН틱ᔖ츙懵뎅ﲔ利쪳㲄澲㧔뼕秵桑瀐屧졓㕌澀ゅꮯ춛ꡠꭀ廼䆭땜揟髽ᾚ̉慽ᘜ䛙샛ዢꣲ戴큾鮣ꇲᴊ櫶坨쬇켍㓥▁쑜⯗氎罗叼甎虰
[  543.580654][T11388] team0: Port device team_slave_0 added
[  543.637744][T11388] team0: Port device team_slave_1 added
[  543.671510][T11510] netlink: 'syz.0.1231': attribute type 2 has an invalid length.
[  543.733699][T11479] trusted_key: encrypted_key: insufficient parameters specified
[  543.764844][T11479] trusted_key: encrypted_key: insufficient parameters specified
[  543.781699][T11512] xt_limit: Overflow, try lower: 0/0
[  543.804035][T11388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.848103][T11515] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  543.877984][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  543.948930][T11479] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  544.052474][T11388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  544.065775][T11515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.153151][T11388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  544.164770][T11515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.188909][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  544.264575][T11388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  544.404516][ T1189] usb 2-1: USB disconnect, device number 74
[  544.559204][T11388] hsr_slave_0: entered promiscuous mode
[  544.592885][T11522] trusted_key: encrypted_key: insufficient parameters specified
[  544.601175][T11388] hsr_slave_1: entered promiscuous mode
[  544.624104][T11388] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  544.645818][T11388] Cannot create hsr debugfs directory
[  544.805345][T11524] netlink: 'syz.0.1234': attribute type 10 has an invalid length.
[  544.818565][T11525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1234'.
[  544.879707][T11524] team0: Failed to send options change via netlink (err -105)
[  544.913824][T11524] team0: Port device netdevsim0 added
[  545.114507][ T1113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.327360][ T5241] Bluetooth: hci4: command 0x206a tx timeout
[  545.327602][ T5239] Bluetooth: hci4: Opcode 0x206a failed: -110
[  545.406585][ T1113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.580225][ T1113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.749051][ T1113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.867534][ T5287] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  545.889390][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  545.908287][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  545.919754][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  545.957272][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  545.970529][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  545.979289][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  546.092018][ T5287] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.114833][ T5287] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  546.158116][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.196860][ T5287] usb 1-1: config 0 descriptor??
[  546.245127][ T5287] usb 1-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  546.287349][ T5287] usb 1-1: No valid video chain found.
[  546.707426][ T8803] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  546.888727][ T8803] usb 4-1: device descriptor read/64, error -71
[  547.050469][ T1113] bridge_slave_1: left allmulticast mode
[  547.101069][ T1113] bridge_slave_1: left promiscuous mode
[  547.124491][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.150573][ T1113] bridge_slave_0: left allmulticast mode
[  547.161949][ T8803] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  547.196525][ T1113] bridge_slave_0: left promiscuous mode
[  547.225075][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.347493][ T8803] usb 4-1: device descriptor read/64, error -71
[  547.506786][ T8803] usb usb4-port1: attempt power cycle
[  547.713170][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'.
[  547.944133][ T8803] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  547.987958][ T8803] usb 4-1: device descriptor read/8, error -71
[  548.050200][ T5239] Bluetooth: hci5: command tx timeout
[  548.283218][ T8803] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  548.350097][ T8803] usb 4-1: device descriptor read/8, error -71
[  548.428166][ T5278] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  548.477691][ T8803] usb usb4-port1: unable to enumerate USB device
[  548.580252][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.602814][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.652098][ T1113] bond0 (unregistering): Released all slaves
[  548.661517][ T5278] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  548.688691][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.721917][ T5278] usb 2-1: config 0 descriptor??
[  548.759703][ T5278] gspca_main: spca508-2.14.0 probing 8086:0110
[  548.784946][ T1113] tipc: Left network mode
[  549.038040][ T5278] gspca_spca508: reg_read err -32
[  549.439302][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'.
[  549.454070][T11577] netlink: 'syz.1.1247': attribute type 3 has an invalid length.
[  549.491771][T11587] x_tables: duplicate underflow at hook 3
[  549.540308][ T5278] gspca_spca508: reg_read err -71
[  549.554219][ T5278] gspca_spca508: reg_read err -71
[  549.574248][ T5278] gspca_spca508: reg write: error -71
[  549.587121][ T5278] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  549.612927][ T5278] usb 2-1: USB disconnect, device number 75
[  549.865896][T11540] chnl_net:caif_netlink_parms(): no params data found
[  549.906180][ T5278] usb 1-1: USB disconnect, device number 80
[  549.934112][T11388] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  549.974648][T11388] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  550.127891][ T5239] Bluetooth: hci5: command tx timeout
[  550.219413][ T1113] hsr_slave_0: left promiscuous mode
[  550.255191][ T1113] hsr_slave_1: left promiscuous mode
[  550.292866][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.320060][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.378830][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.399045][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.483102][ T1113] veth1_macvtap: left promiscuous mode
[  550.495392][ T1113] veth0_macvtap: left promiscuous mode
[  550.511819][ T1113] veth1_vlan: left promiscuous mode
[  550.524512][ T1113] veth0_vlan: left promiscuous mode
[  550.592420][ T8800] usb 1-1: new low-speed USB device number 81 using dummy_hcd
[  550.815055][ T8800] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  550.879862][ T8800] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  550.940469][ T8800] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  550.972234][ T8800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.003945][ T8800] usb 1-1: Product: 떛뛽蛀ﾷ俅鴦嗲ⳇｮ偍ெ黽ᚪ鯀鼙ᢥ胭癊ຸ䨧楈徱삏㣫堏鳬爱ų쒠伊دꀉ瞋캘䑇䎻祿㞕မ즬ꉖ徔㫵蘮镥⪸ﶗ陜㍅㖾稌瓿Ⅴ䧜隶䅆︛觱䎥蛅⃻羽㋾紀쀭퇣煏磊凷䫻鬔◟ꮛ棢鞺芷劙Ự핚⊚ᑡꇵⵛᝨ
[  551.097248][ T8800] usb 1-1: Manufacturer: 鉷폂息劆昼⻶츾爕뽉ರޡ鍽쨮೔吐쌚㆛⁹ﷂ㢏㨠న៬둛೜•瀬ꧻ碔弩䐳磧ꥭ筠屴铧雃盧ꝩ鱰噯䣉ࣼ૩鳋㳗⋖ᘒ퓢⺟胉鼙얍塶ܲ鸵뫇ؠ蛽糧堮ᤄ╷婼痕숃봑໙஭紈湖捷끮㵥똘阞哗溻⚳떷鐔켯฾鴶❏嫊珉餅횃쏲᝼똹㉑䐍֖픯鋠㽢
[  551.137424][ T1189] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  551.146160][ T8800] usb 1-1: SerialNumber: 㤨ꦡ쉯ៃ脗﬇쇵硊♼嬧瓋㾘蘙吉ኆ႒濹댌嬲ퟂ됺﬊鼷៑꧄봔桑㹓쪎㣆ᛱꬨ掖輮뀙墙ؕ퐿䓺ꭌ쑋드湖짇鿆﷠ഷᝦަ
[  551.330015][ T1189] usb 4-1: Using ep0 maxpacket: 32
[  551.364730][ T1189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 187, changing to 11
[  551.414128][ T1189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1044, setting to 1024
[  551.456572][ T1189] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  551.483153][ T1189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.537399][ T1189] usb 4-1: config 0 descriptor??
[  551.550064][T11602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  551.578924][ T1189] hub 4-1:0.0: USB hub found
[  551.652047][ T8800] cdc_ncm 1-1:1.0: bind() failure
[  551.685236][ T8800] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  551.695571][ T8800] cdc_ncm 1-1:1.1: bind() failure
[  551.724845][ T8800] usb 1-1: USB disconnect, device number 81
[  551.750927][ T5287] usb 2-1: new full-speed USB device number 76 using dummy_hcd
[  551.972860][ T5287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  551.997094][ T5287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  552.010466][ T1189] hub 4-1:0.0: config failed, can't read hub descriptor (err -90)
[  552.037187][ T5287] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  552.052515][T11595] net_ratelimit: 7 callbacks suppressed
[  552.052543][T11595] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  552.067083][ T5287] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  552.088948][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.167243][T11616] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  552.178319][ T5287] hub 2-1:1.0: bad descriptor, ignoring hub
[  552.184335][ T5287] hub 2-1:1.0: probe with driver hub failed with error -5
[  552.202772][ T5287] cdc_wdm 2-1:1.0: skipping garbage
[  552.208278][ T5239] Bluetooth: hci5: command tx timeout
[  552.215824][ T5287] cdc_wdm 2-1:1.0: skipping garbage
[  552.225025][T11598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.238096][ T5287] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  552.244223][ T5287] cdc_wdm 2-1:1.0: Unknown control protocol
[  552.271509][T11598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.360195][ T1189] usbhid 4-1:0.0: can't add hid device: -71
[  552.381665][ T1189] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  552.454705][ T1189] usb 4-1: USB disconnect, device number 75
[  552.517488][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.524347][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.530752][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.537415][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.543734][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.550343][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.556699][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.563318][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.569609][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.576226][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.582500][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.589097][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.595349][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.601938][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.608192][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.614802][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.621074][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.627671][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.634009][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  552.640620][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  552.651483][ T5278] usb 2-1: USB disconnect, device number 76
[  552.657445][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  552.882472][ T1113] team0 (unregistering): Port device team_slave_1 removed
[  552.992439][ T1113] team0 (unregistering): Port device team_slave_0 removed
[  553.249240][ T5278] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  553.333978][   T29] audit: type=1326 audit(1724112927.835:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  553.374568][T11622] netlink: 'syz.0.1254': attribute type 6 has an invalid length.
[  553.385424][T11622] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1254'.
[  553.393078][   T29] audit: type=1326 audit(1724112927.865:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  553.429141][   T29] audit: type=1326 audit(1724112927.865:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  553.464480][ T5278] usb 2-1: device descriptor read/64, error -71
[  553.476315][   T29] audit: type=1326 audit(1724112927.865:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  553.521725][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'.
[  553.530051][   T29] audit: type=1326 audit(1724112927.865:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  553.577384][   T29] audit: type=1326 audit(1724112927.865:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  553.603020][   T29] audit: type=1326 audit(1724112927.875:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  553.679384][   T29] audit: type=1326 audit(1724112927.875:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  553.718624][   T29] audit: type=1326 audit(1724112927.875:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  553.753086][   T29] audit: type=1326 audit(1724112927.875:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f592b178810 code=0x7ffc0000
[  553.777342][ T5278] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  553.957237][ T5278] usb 2-1: device descriptor read/64, error -71
[  554.087793][ T5278] usb usb2-port1: attempt power cycle
[  554.094142][T11388] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  554.181625][T11388] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  554.287416][ T5239] Bluetooth: hci5: command tx timeout
[  554.403595][T11540] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.464272][T11540] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.474555][T11540] bridge_slave_0: entered allmulticast mode
[  554.483349][T11540] bridge_slave_0: entered promiscuous mode
[  554.559288][T11540] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.582499][T11540] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.595375][T11540] bridge_slave_1: entered allmulticast mode
[  554.608888][T11540] bridge_slave_1: entered promiscuous mode
[  554.812898][T11540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.839575][T11540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.024724][T11540] team0: Port device team_slave_0 added
[  555.052632][T11540] team0: Port device team_slave_1 added
[  555.175889][T11540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.215384][T11540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.270582][T11540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.460762][T11540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.482543][T11540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.551483][T11540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  555.696877][T11388] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.806406][T11669] binder: BINDER_SET_CONTEXT_MGR already set
[  555.838430][T11669] binder: 11665:11669 ioctl 4018620d 20000040 returned -16
[  555.878107][T11540] hsr_slave_0: entered promiscuous mode
[  555.941450][T11540] hsr_slave_1: entered promiscuous mode
[  555.966403][T11540] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  555.981279][T11540] Cannot create hsr debugfs directory
[  556.003007][T11672] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  556.436681][T11388] 8021q: adding VLAN 0 to HW filter on device team0
[  556.487727][ T8800] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  556.622380][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.629650][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.707535][ T8800] usb 2-1: Using ep0 maxpacket: 8
[  556.719391][ T8800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.736061][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.743446][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.747349][ T5286] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  556.759628][ T8800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  556.785897][ T8800] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  556.814749][ T8800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.851579][ T8800] usb 2-1: config 0 descriptor??
[  556.960250][ T5286] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  556.974438][ T5286] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  556.986274][ T5286] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  556.999959][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  557.009807][ T5286] usb 4-1: SerialNumber: syz
[  557.187210][ T8802] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  557.235018][T11388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.257369][ T5286] usb 4-1: 0:2 : does not exist
[  557.266825][ T5286] usb 4-1: unit 5 not found!
[  557.280139][ T8800] logitech 0003:046D:C20E.0029: rdesc size test failed for formula gp
[  557.298740][ T8800] logitech 0003:046D:C20E.0029: unbalanced delimiter at end of report description
[  557.307447][ T5286] usb 4-1: USB disconnect, device number 76
[  557.319177][ T8800] logitech 0003:046D:C20E.0029: parse failed
[  557.325325][ T8800] logitech 0003:046D:C20E.0029: probe with driver logitech failed with error -22
[  557.396112][T10891] udevd[10891]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  557.397196][ T8802] usb 1-1: Using ep0 maxpacket: 16
[  557.461807][ T8802] usb 1-1: config 8 has an invalid interface number: 25 but max is 0
[  557.473492][T11540] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  557.498055][ T8802] usb 1-1: config 8 has no interface number 0
[  557.509397][ T8798] usb 2-1: USB disconnect, device number 80
[  557.526288][ T8802] usb 1-1: config 8 interface 25 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  557.546318][T11540] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  557.574286][ T8802] usb 1-1: config 8 interface 25 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  557.588207][ T8802] usb 1-1: config 8 interface 25 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  557.601768][ T8802] usb 1-1: config 8 interface 25 has no altsetting 0
[  557.610899][T11540] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  557.622245][ T8802] usb 1-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice=2d.ac
[  557.640666][T11540] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  557.648284][ T8802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.659704][ T8802] usb 1-1: Product: syz
[  557.678529][ T8802] usb 1-1: Manufacturer: 
[  557.687059][ T8802] usb 1-1: SerialNumber: syz
[  557.702233][T11388] veth0_vlan: entered promiscuous mode
[  557.777734][T11388] veth1_vlan: entered promiscuous mode
[  557.932363][T11388] veth0_macvtap: entered promiscuous mode
[  557.994947][T11687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.995550][T11388] veth1_macvtap: entered promiscuous mode
[  558.055177][T11687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.095656][T11540] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.152858][ T8798] IPVS: starting estimator thread 0...
[  558.159819][ T8802] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  558.186534][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.215197][ T8802] usb 1-1: USB disconnect, device number 82
[  558.245294][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.272220][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.287630][T11700] IPVS: using max 17 ests per chain, 40800 per kthread
[  558.297840][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.327078][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.348610][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.378996][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.389752][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.405573][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.416833][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.437249][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  558.467171][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.516351][T11388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.566872][T11540] 8021q: adding VLAN 0 to HW filter on device team0
[  558.611781][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.635372][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.656161][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.682254][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.709984][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.726441][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.744554][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.763130][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.797010][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.814188][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.832257][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.884890][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.942709][T11388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  559.022398][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.029650][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.051468][T11388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.091036][T11720] No such timeout policy "syz0"
[  559.104199][T11388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.132718][T11388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.190049][T11388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.243503][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.250765][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.481433][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'.
[  559.859450][T11540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  560.002211][T11739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1273'.
[  560.061621][T11739] netlink: 'syz.0.1273': attribute type 2 has an invalid length.
[  560.102066][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.130722][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.192522][T11540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  560.290248][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.343531][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.465818][T11540] veth0_vlan: entered promiscuous mode
[  560.539896][T11540] veth1_vlan: entered promiscuous mode
[  560.684271][T11540] veth0_macvtap: entered promiscuous mode
[  560.751011][T11540] veth1_macvtap: entered promiscuous mode
[  560.833331][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.897190][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.918969][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  560.953249][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.983674][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.064310][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.105251][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.137146][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.178475][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.206741][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.251439][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.288843][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.313728][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.357154][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.375144][T11763] SET target dimension over the limit!
[  561.419110][T11540] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.468664][T11767] FAULT_INJECTION: forcing a failure.
[  561.468664][T11767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  561.519009][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.567270][T11767] CPU: 0 UID: 0 PID: 11767 Comm: syz.0.1277 Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  561.577527][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.578176][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  561.598094][T11767] Call Trace:
[  561.601413][T11767]  <TASK>
[  561.604386][T11767]  dump_stack_lvl+0x241/0x360
[  561.609115][T11767]  ? __pfx_dump_stack_lvl+0x10/0x10
[  561.614357][T11767]  ? __pfx__printk+0x10/0x10
[  561.619101][T11767]  ? snprintf+0xda/0x120
[  561.623385][T11767]  should_fail_ex+0x3b0/0x4e0
[  561.628096][T11767]  _copy_to_user+0x2f/0xb0
[  561.632549][T11767]  simple_read_from_buffer+0xca/0x150
[  561.637959][T11767]  proc_fail_nth_read+0x1ec/0x260
[  561.643047][T11767]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  561.648634][T11767]  ? rw_verify_area+0x52a/0x6b0
[  561.653521][T11767]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  561.659093][T11767]  vfs_read+0x204/0xbc0
[  561.663300][T11767]  ? __pfx_lock_release+0x10/0x10
[  561.668352][T11767]  ? __pfx_vfs_read+0x10/0x10
[  561.673047][T11767]  ? __fget_files+0x29/0x470
[  561.677659][T11767]  ? __fget_files+0x3f6/0x470
[  561.682365][T11767]  ksys_read+0x1a0/0x2c0
[  561.686631][T11767]  ? __pfx_ksys_read+0x10/0x10
[  561.691414][T11767]  ? do_syscall_64+0x100/0x230
[  561.696192][T11767]  ? do_syscall_64+0xb6/0x230
[  561.700908][T11767]  do_syscall_64+0xf3/0x230
[  561.705419][T11767]  ? clear_bhb_loop+0x35/0x90
[  561.710117][T11767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.716021][T11767] RIP: 0033:0x7f592b1788bc
[  561.720448][T11767] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  561.740071][T11767] RSP: 002b:00007f592bfdd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  561.748502][T11767] RAX: ffffffffffffffda RBX: 00007f592b315f80 RCX: 00007f592b1788bc
[  561.756506][T11767] RDX: 000000000000000f RSI: 00007f592bfdd0a0 RDI: 0000000000000004
[  561.764506][T11767] RBP: 00007f592bfdd090 R08: 0000000000000000 R09: 0000000000000000
[  561.772487][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  561.780465][T11767] R13: 0000000000000000 R14: 00007f592b315f80 R15: 00007f592b43fa38
[  561.788463][T11767]  </TASK>
[  561.831649][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.867279][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.888274][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.954694][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.983636][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.001622][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.021828][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.045942][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.067973][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.093431][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.104603][T11540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.127520][T11540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.178782][T11540] batman_adv: batadv0: Interface activated: batadv_slave_1
[  562.233217][T11540] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.257042][T11540] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.294438][T11540] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.317026][T11540] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.639005][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'.
[  562.761088][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.787037][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.854093][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.900022][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.116730][T11799] No such timeout policy "syz0"
[  564.277224][ T5286] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  564.510412][ T5286] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  564.575330][ T5286] usb 1-1: config 0 has no interface number 0
[  564.604728][ T5286] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.646870][ T5286] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.673183][T11831] FAULT_INJECTION: forcing a failure.
[  564.673183][T11831] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  564.692271][ T5286] usb 1-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  564.716210][T11831] CPU: 1 UID: 0 PID: 11831 Comm: syz.2.1288 Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  564.727044][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  564.727618][ T5286] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  564.737118][T11831] Call Trace:
[  564.737136][T11831]  <TASK>
[  564.737147][T11831]  dump_stack_lvl+0x241/0x360
[  564.737184][T11831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.737208][T11831]  ? __pfx__printk+0x10/0x10
[  564.747482][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.749514][T11831]  ? __pfx_lock_release+0x10/0x10
[  564.777809][ T5286] usb 1-1: config 0 descriptor??
[  564.779935][T11831]  should_fail_ex+0x3b0/0x4e0
[  564.789629][T11831]  _copy_from_user+0x2f/0xe0
[  564.794265][T11831]  copy_msghdr_from_user+0xae/0x680
[  564.799866][T11831]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  564.805741][T11831]  __sys_sendmsg+0x23d/0x3a0
[  564.810482][T11831]  ? __pfx___sys_sendmsg+0x10/0x10
[  564.815637][T11831]  ? vfs_write+0x7c4/0xc90
[  564.820155][T11831]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  564.826624][T11831]  ? do_syscall_64+0x100/0x230
[  564.831424][T11831]  ? do_syscall_64+0xb6/0x230
[  564.836133][T11831]  do_syscall_64+0xf3/0x230
[  564.840671][T11831]  ? clear_bhb_loop+0x35/0x90
[  564.845394][T11831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.851331][T11831] RIP: 0033:0x7f6457179e79
[  564.855803][T11831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.875452][T11831] RSP: 002b:00007f6457ffa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  564.883918][T11831] RAX: ffffffffffffffda RBX: 00007f6457315f80 RCX: 00007f6457179e79
[  564.891931][T11831] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003
[  564.899951][T11831] RBP: 00007f6457ffa090 R08: 0000000000000000 R09: 0000000000000000
[  564.907955][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  564.916085][T11831] R13: 0000000000000000 R14: 00007f6457315f80 R15: 00007f645743fa38
[  564.924119][T11831]  </TASK>
[  565.398701][ T5286] hid (null): global environment stack underflow
[  565.461612][ T5286] uclogic 0003:28BD:1903.002A: interface is invalid, ignoring
[  565.857841][ T8798] usb 1-1: USB disconnect, device number 83
[  566.646725][T11879] No such timeout policy "syz0"
[  566.974184][   T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.295292][   T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.514881][   T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.798206][   T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.977217][ T8802] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  568.212031][ T8802] usb 2-1: config index 0 descriptor too short (expected 35328, got 18)
[  568.252879][ T8802] usb 2-1: config 9 has too many interfaces: 153, using maximum allowed: 32
[  568.263913][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  568.277229][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  568.288370][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  568.296108][T11908] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1303'.
[  568.308132][ T8802] usb 2-1: config 9 has an invalid descriptor of length 227, skipping remainder of the config
[  568.321500][ T8802] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 153
[  568.332126][ T8802] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  568.341499][ T8802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.349659][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  568.357921][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  568.365423][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  568.375517][   T79] bridge_slave_1: left allmulticast mode
[  568.380652][T11908] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1303'.
[  568.400224][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'.
[  568.418892][   T79] bridge_slave_1: left promiscuous mode
[  568.425023][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.458280][   T79] bridge_slave_0: left allmulticast mode
[  568.473203][   T79] bridge_slave_0: left promiscuous mode
[  568.490374][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.611806][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  568.620535][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  568.638368][ T8802] usb 2-1: string descriptor 0 read error: -71
[  568.655295][ T8802] usb 2-1: USB disconnect, device number 81
[  569.758846][ T8803] usb 2-1: new low-speed USB device number 82 using dummy_hcd
[  569.974010][ T8803] usb 2-1: Invalid ep0 maxpacket: 32
[  570.087761][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  570.147158][ T8803] usb 2-1: new low-speed USB device number 83 using dummy_hcd
[  570.253316][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.284619][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.323419][   T79] bond0 (unregistering): Released all slaves
[  570.337179][ T8803] usb 2-1: Invalid ep0 maxpacket: 32
[  570.352340][ T8803] usb usb2-port1: attempt power cycle
[  570.447736][ T5239] Bluetooth: hci4: command tx timeout
[  570.797129][ T8803] usb 2-1: new low-speed USB device number 84 using dummy_hcd
[  570.849486][ T8803] usb 2-1: Invalid ep0 maxpacket: 32
[  571.041758][T11942] netlink: zone id is out of range
[  571.074304][T11942] netlink: set zone limit has 4 unknown bytes
[  571.085838][ T8803] usb 2-1: new low-speed USB device number 85 using dummy_hcd
[  571.154946][ T8803] usb 2-1: Invalid ep0 maxpacket: 32
[  571.166469][ T8803] usb usb2-port1: unable to enumerate USB device
[  571.423810][   T79] hsr_slave_0: left promiscuous mode
[  571.451969][   T79] hsr_slave_1: left promiscuous mode
[  571.488920][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  571.506074][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  571.566416][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  571.617325][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.680627][T11953] binder: 11950:11953 ioctl 4018620d 0 returned -22
[  571.718673][   T79] veth1_macvtap: left promiscuous mode
[  571.731904][   T79] veth0_macvtap: left promiscuous mode
[  571.746911][   T79] veth1_vlan: left promiscuous mode
[  571.749647][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  571.749668][   T29] audit: type=1326 audit(1724112946.255:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  571.779978][   T79] veth0_vlan: left promiscuous mode
[  571.863772][   T29] audit: type=1326 audit(1724112946.255:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  571.978144][   T29] audit: type=1326 audit(1724112946.285:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  572.047173][ T5239] Bluetooth: hci1: command 0x206a tx timeout
[  572.048232][ T5241] Bluetooth: hci1: Opcode 0x206a failed: -110
[  572.071389][   T29] audit: type=1326 audit(1724112946.285:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  572.097039][ T1189] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  572.172914][   T29] audit: type=1326 audit(1724112946.285:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  572.246130][   T29] audit: type=1326 audit(1724112946.285:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  572.289061][   T29] audit: type=1326 audit(1724112946.295:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  572.331675][   T29] audit: type=1326 audit(1724112946.295:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  572.361216][ T1189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  572.377072][ T1189] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  572.419118][ T1189] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  572.430998][   T29] audit: type=1326 audit(1724112946.295:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f592b179e79 code=0x7ffc0000
[  572.465808][ T1189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  572.495422][   T29] audit: type=1326 audit(1724112946.305:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11956 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f592b178810 code=0x7ffc0000
[  572.507057][ T1189] usb 1-1: SerialNumber: syz
[  572.532274][ T5241] Bluetooth: hci4: command tx timeout
[  574.259475][   T79] team0 (unregistering): Port device team_slave_1 removed
[  574.336513][   T79] team0 (unregistering): Port device team_slave_0 removed
[  574.607327][ T5241] Bluetooth: hci4: command tx timeout
[  575.488348][T11957] tipc: Enabled bearer <udp:syz0>, priority 10
[  575.574875][ T1189] usb 1-1: invalid UAC_HEADER (v1)
[  575.633409][ T1189] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  575.645675][ T1189] usb 1-1: USB disconnect, device number 84
[  575.871008][T10891] udevd[10891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  575.917712][T12006] cannot load conntrack support for proto=3
[  575.951457][T11914] chnl_net:caif_netlink_parms(): no params data found
[  576.029203][T11999] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[  576.137399][T11999] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[  576.267968][ T8803] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  576.355900][T12024] syz.4.1326: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  576.356124][T12024] CPU: 0 UID: 0 PID: 12024 Comm: syz.4.1326 Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  576.356154][T12024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  576.356170][T12024] Call Trace:
[  576.356181][T12024]  <TASK>
[  576.356193][T12024]  dump_stack_lvl+0x241/0x360
[  576.356230][T12024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.356257][T12024]  ? __pfx__printk+0x10/0x10
[  576.356302][T12024]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  576.356331][T12024]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  576.356364][T12024]  warn_alloc+0x278/0x410
[  576.356398][T12024]  ? stack_depot_save_flags+0x29/0x830
[  576.356435][T12024]  ? __vmalloc_node_range_noprof+0x106/0x1400
[  576.356463][T12024]  ? __pfx_warn_alloc+0x10/0x10
[  576.356499][T12024]  ? kasan_save_track+0x3f/0x80
[  576.356531][T12024]  ? __kasan_kmalloc+0x98/0xb0
[  576.356566][T12024]  ? xsk_setsockopt+0x598/0x950
[  576.356599][T12024]  ? do_sock_setsockopt+0x3af/0x720
[  576.356627][T12024]  ? __sys_setsockopt+0x1ae/0x250
[  576.356654][T12024]  ? __x64_sys_setsockopt+0xb5/0xd0
[  576.356682][T12024]  ? do_syscall_64+0xf3/0x230
[  576.356704][T12024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.356744][T12024]  __vmalloc_node_range_noprof+0x126/0x1400
[  576.356803][T12024]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  576.356835][T12024]  ? __kasan_kmalloc+0x98/0xb0
[  576.356868][T12024]  ? xskq_create+0x54/0x170
[  576.356907][T12024]  vmalloc_user_noprof+0x74/0x80
[  576.356933][T12024]  ? xskq_create+0xb6/0x170
[  576.356971][T12024]  xskq_create+0xb6/0x170
[  576.357007][T12024]  xsk_init_queue+0xa1/0x100
[  576.357044][T12024]  xsk_setsockopt+0x598/0x950
[  576.357080][T12024]  ? __pfx_xsk_setsockopt+0x10/0x10
[  576.357116][T12024]  ? __pfx_lock_acquire+0x10/0x10
[  576.357148][T12024]  ? aa_sock_opt_perm+0x79/0x120
[  576.357181][T12024]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  576.357215][T12024]  ? security_socket_setsockopt+0x87/0xb0
[  576.357242][T12024]  ? __pfx_xsk_setsockopt+0x10/0x10
[  576.357272][T12024]  do_sock_setsockopt+0x3af/0x720
[  576.357308][T12024]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  576.357336][T12024]  ? __fget_files+0x29/0x470
[  576.357371][T12024]  ? __fget_files+0x3f6/0x470
[  576.357427][T12024]  __sys_setsockopt+0x1ae/0x250
[  576.357463][T12024]  __x64_sys_setsockopt+0xb5/0xd0
[  576.357497][T12024]  do_syscall_64+0xf3/0x230
[  576.357522][T12024]  ? clear_bhb_loop+0x35/0x90
[  576.357556][T12024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.357586][T12024] RIP: 0033:0x7fd4c0b79e79
[  576.357609][T12024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.357630][T12024] RSP: 002b:00007fd4c05ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  576.357658][T12024] RAX: ffffffffffffffda RBX: 00007fd4c0d16058 RCX: 00007fd4c0b79e79
[  576.357678][T12024] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  576.357694][T12024] RBP: 00007fd4c0be7916 R08: 0000000000000020 R09: 0000000000000000
[  576.357712][T12024] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[  576.357727][T12024] R13: 0000000000000000 R14: 00007fd4c0d16058 R15: 00007fd4c0e3fa38
[  576.357765][T12024]  </TASK>
[  576.395683][T12024] Mem-Info:
[  576.395722][T12024] active_anon:5138 inactive_anon:0 isolated_anon:0
[  576.395722][T12024]  active_file:12849 inactive_file:38449 isolated_file:0
[  576.395722][T12024]  unevictable:768 dirty:102 writeback:0
[  576.395722][T12024]  slab_reclaimable:9507 slab_unreclaimable:103768
[  576.395722][T12024]  mapped:26055 shmem:1282 pagetables:903
[  576.395722][T12024]  sec_pagetables:0 bounce:0
[  576.395722][T12024]  kernel_misc_reclaimable:0
[  576.395722][T12024]  free:1352490 free_pcp:620 free_cma:0
[  576.395792][T12024] Node 0 active_anon:20552kB inactive_anon:0kB active_file:51268kB inactive_file:153724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104092kB dirty:408kB writeback:0kB shmem:3592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:3612kB sec_pagetables:0kB all_unreclaimable? no
[  576.395858][T12024] Node 1 active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  576.395919][T12024] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  576.395993][T12024] lowmem_reserve[]: 0 2561 2562 0 0
[  576.396058][T12024] Node 0 DMA32 free:1440396kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:20500kB inactive_anon:0kB active_file:51268kB inactive_file:152416kB unevictable:1536kB writepending:404kB present:3129332kB managed:2651248kB mlocked:0kB bounce:0kB free_pcp:2460kB local_pcp:1416kB free_cma:0kB
[  576.396144][T12024] lowmem_reserve[]: 0 0 1 0 0
[  576.396196][T12024] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[  576.396262][T12024] lowmem_reserve[]: 0 0 0 0 0
[  576.396315][T12024] Node 1 Normal free:3954200kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  576.396382][T12024] lowmem_reserve[]: 0 0 0 0 0
[  576.396441][T12024] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  576.396619][T12024] Node 0 DMA32: 413*4kB (UME) 449*8kB (UME) 467*16kB (UME) 475*32kB (UME) 252*64kB (UME) 47*128kB (UME) 9*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 9*2048kB (UME) 333*4096kB (UM) = 1440396kB
[  576.396843][T12024] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  576.415705][T12024] Node 1 Normal: 8*4kB (UM) 7*8kB (UM) 12*16kB (UM) 12*32kB (UM) 10*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 963*4096kB (M) = 3954200kB
[  576.415948][T12024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  576.415982][T12024] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  576.416003][T12024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  576.416023][T12024] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  576.416043][T12024] 52580 total pagecache pages
[  576.416055][T12024] 0 pages in swap cache
[  576.416066][T12024] Free swap  = 124436kB
[  576.416076][T12024] Total swap = 124996kB
[  576.416088][T12024] 2097051 pages RAM
[  576.416099][T12024] 0 pages HighMem/MovableOnly
[  576.416109][T12024] 402773 pages reserved
[  576.416120][T12024] 0 pages cma reserved
[  576.459479][T11914] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.459727][T11914] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.459935][T11914] bridge_slave_0: entered allmulticast mode
[  576.461746][T11914] bridge_slave_0: entered promiscuous mode
[  576.465074][T11914] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.465233][T11914] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.465436][T11914] bridge_slave_1: entered allmulticast mode
[  576.472530][T11914] bridge_slave_1: entered promiscuous mode
[  576.497727][ T8803] usb 1-1: Using ep0 maxpacket: 8
[  576.511843][ T8803] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  576.511905][ T8803] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  576.511940][ T8803] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  576.511972][ T8803] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  576.512003][ T8803] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  576.513186][ T8803] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  576.513230][ T8803] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  576.513252][ T8803] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  576.513273][ T8803] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  576.513294][ T8803] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  576.514528][ T8803] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  576.514578][ T8803] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  576.514612][ T8803] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  576.514643][ T8803] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  576.514674][ T8803] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  576.545096][ T8803] usb 1-1: string descriptor 0 read error: -22
[  576.545269][ T8803] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  576.545301][ T8803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.610051][ T8803] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  576.726259][ T5241] Bluetooth: hci4: command tx timeout
[  577.705675][ T8803] usb 1-1: USB disconnect, device number 85
[  577.758712][T11914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.823509][T11914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.086234][T11914] team0: Port device team_slave_0 added
[  578.136469][T11914] team0: Port device team_slave_1 added
[  578.291943][   T79] team0: left allmulticast mode
[  578.311997][   T79] team_slave_0: left allmulticast mode
[  578.322219][   T79] team_slave_1: left allmulticast mode
[  578.324983][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'.
[  578.337157][   T79] team0: left promiscuous mode
[  578.337184][   T79] team_slave_0: left promiscuous mode
[  578.364356][   T79] team_slave_1: left promiscuous mode
[  578.380751][   T79] bridge0: port 3(team0) entered disabled state
[  578.400291][   T79] bridge_slave_1: left allmulticast mode
[  578.411782][   T79] bridge_slave_1: left promiscuous mode
[  578.427478][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.479419][   T79] bridge_slave_0: left allmulticast mode
[  578.489889][   T79] bridge_slave_0: left promiscuous mode
[  578.505146][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.836357][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  579.892673][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  579.927580][   T79] bond0 (unregistering): Released all slaves
[  579.968015][T12053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1331'.
[  579.980537][T11914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.026712][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.106822][T11914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.153434][T11914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.184757][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  580.287786][T11914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.359512][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'.
[  580.929362][T11914] hsr_slave_0: entered promiscuous mode
[  580.958922][T11914] hsr_slave_1: entered promiscuous mode
[  580.985313][T11914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  580.997235][ T5286] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  581.028892][T11914] Cannot create hsr debugfs directory
[  581.209290][ T5286] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  581.267105][ T5286] usb 1-1: config 0 has no interface number 0
[  581.273756][ T5286] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  581.303850][ T5286] usb 1-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  581.318995][ T5286] usb 1-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  581.372465][ T5286] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  581.396293][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.405494][T12104] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  581.423236][   T79] hsr_slave_0: left promiscuous mode
[  581.434536][ T5286] usb 1-1: config 0 descriptor??
[  581.446278][   T79] hsr_slave_1: left promiscuous mode
[  581.459027][T12104] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  581.478340][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.485918][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.518303][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.536579][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.648006][   T79] veth1_macvtap: left promiscuous mode
[  581.677624][   T79] veth0_macvtap: left promiscuous mode
[  582.030166][ T5286] hid (null): global environment stack underflow
[  582.039392][ T1189] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  582.063048][ T5286] uclogic 0003:28BD:1903.002B: interface is invalid, ignoring
[  582.258928][ T8803] usb 1-1: USB disconnect, device number 86
[  582.268480][ T1189] usb 2-1: Using ep0 maxpacket: 16
[  582.311966][ T1189] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  582.332279][ T1189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.356809][ T1189] usb 2-1: Product: syz
[  582.364837][ T1189] usb 2-1: Manufacturer: syz
[  582.377060][ T1189] usb 2-1: SerialNumber: syz
[  582.388102][ T1189] usb 2-1: config 0 descriptor??
[  582.406305][ T1189] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  582.424272][ T1189] usb 2-1: Detected FT232H
[  582.636216][ T1189] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  582.930965][   T79] team0 (unregistering): Port device team_slave_1 removed
[  583.037179][   T79] team0 (unregistering): Port device team_slave_0 removed
[  583.123591][ T1189] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  583.272041][ T1189] usb 2-1: USB disconnect, device number 86
[  583.393946][ T1189] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  583.416019][ T1189] ftdi_sio 2-1:0.0: device disconnected
[  584.288482][ T8798] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  584.341161][T12147] syz_tun: entered promiscuous mode
[  584.377951][T12147] syz_tun: left promiscuous mode
[  584.487145][ T8798] usb 2-1: Using ep0 maxpacket: 32
[  584.506487][ T8798] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  584.536215][ T8798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  584.562604][ T8798] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  584.581922][ T8798] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  584.621167][ T8798] usb 2-1: Product: syz
[  584.627527][ T8798] usb 2-1: Manufacturer: syz
[  584.632194][ T8798] usb 2-1: SerialNumber: syz
[  584.685538][ T8798] usb 2-1: config 0 descriptor??
[  584.719905][ T8798] ldusb 2-1:0.0: Interrupt in endpoint not found
[  584.987340][ T8802] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  585.199584][ T8802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  585.245552][ T8802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  585.293097][ T8802] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  585.356043][ T8802] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  585.399457][ T8802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.465072][ T8802] usb 1-1: config 0 descriptor??
[  585.585083][T12168] binder: 12166:12168 ioctl 4018620d 0 returned -22
[  586.325832][T12153] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1350'.
[  586.649709][T11914] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  586.712345][T11914] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  586.800211][T11914] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  586.854932][T11914] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  586.867214][ T5286] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  586.996554][ T8798] usb 2-1: USB disconnect, device number 87
[  587.049349][ T5286] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  587.112718][ T5286] usb 5-1: config 0 has no interface number 0
[  587.186926][ T5286] usb 5-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  587.216492][ T5286] usb 5-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  587.258279][ T5286] usb 5-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  587.308752][T11914] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.315678][ T5286] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  587.350714][T11914] 8021q: adding VLAN 0 to HW filter on device team0
[  587.388184][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.401257][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.408505][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.432271][ T5286] usb 5-1: config 0 descriptor??
[  587.732057][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.739405][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.889951][T12198] No such timeout policy "syz0"
[  588.016931][ T8802] usbhid 1-1:0.0: can't add hid device: -71
[  588.052812][ T8802] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  588.137102][ T8802] usb 1-1: USB disconnect, device number 87
[  588.189528][ T5286] hid (null): global environment stack underflow
[  588.225525][T11914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  588.262868][ T5286] uclogic 0003:28BD:1903.002C: interface is invalid, ignoring
[  588.495390][T11914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.704858][T12215] fuse: Bad value for 'fd'
[  588.733601][ T1189] usb 5-1: USB disconnect, device number 80
[  588.778979][T11914] veth0_vlan: entered promiscuous mode
[  588.840183][T11914] veth1_vlan: entered promiscuous mode
[  589.004749][T11914] veth0_macvtap: entered promiscuous mode
[  589.055725][T11914] veth1_macvtap: entered promiscuous mode
[  589.111159][   T61] bridge_slave_1: left allmulticast mode
[  589.126012][   T61] bridge_slave_1: left promiscuous mode
[  589.136645][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.169112][   T61] bridge_slave_0: left allmulticast mode
[  589.197438][   T61] bridge_slave_0: left promiscuous mode
[  589.212261][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.728125][   T30] INFO: task syz.4.917:9840 blocked for more than 143 seconds.
[  589.735752][   T30]       Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  589.755759][T12241] FAULT_INJECTION: forcing a failure.
[  589.755759][T12241] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  589.803407][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  589.825652][T12241] CPU: 0 UID: 0 PID: 12241 Comm: syz.0.1362 Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  589.836493][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  589.846592][T12241] Call Trace:
[  589.849918][T12241]  <TASK>
[  589.852884][T12241]  dump_stack_lvl+0x241/0x360
[  589.857695][T12241]  ? __pfx_dump_stack_lvl+0x10/0x10
[  589.862942][T12241]  ? __pfx__printk+0x10/0x10
[  589.867592][T12241]  should_fail_ex+0x3b0/0x4e0
[  589.872298][T12241]  prepare_alloc_pages+0x1da/0x5d0
[  589.877443][T12241]  __alloc_pages_noprof+0x166/0x6c0
[  589.882664][T12241]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  589.888419][T12241]  alloc_pages_mpol_noprof+0x3e8/0x680
[  589.893909][T12241]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  589.899920][T12241]  ? alloc_pages_noprof+0xef/0x170
[  589.905055][T12241]  af_alg_sendmsg+0x1420/0x2650
[  589.909957][T12241]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  589.915175][T12241]  ? __pfx_aa_sk_perm+0x10/0x10
[  589.920039][T12241]  ? __fget_files+0x29/0x470
[  589.924650][T12241]  ? aa_sock_msg_perm+0x91/0x160
[  589.929605][T12241]  ? skcipher_sendmsg+0x28/0xf0
[  589.934469][T12241]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  589.939884][T12241]  __sock_sendmsg+0x221/0x270
[  589.944587][T12241]  __sys_sendto+0x3a4/0x4f0
[  589.949110][T12241]  ? __pfx___sys_sendto+0x10/0x10
[  589.954172][T12241]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  589.960172][T12241]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  589.966516][T12241]  ? exc_page_fault+0x590/0x8c0
[  589.971488][T12241]  __x64_sys_sendto+0xde/0x100
[  589.976270][T12241]  do_syscall_64+0xf3/0x230
[  589.980818][T12241]  ? clear_bhb_loop+0x35/0x90
[  589.985520][T12241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.991427][T12241] RIP: 0033:0x7f592b17bd0c
[  589.995857][T12241] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b
[  590.015477][T12241] RSP: 002b:00007f592bfdbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  590.023908][T12241] RAX: ffffffffffffffda RBX: 00007f592bfdbfc0 RCX: 00007f592b17bd0c
[  590.031913][T12241] RDX: 0000000000000020 RSI: 00007f592bfdc010 RDI: 0000000000000004
[  590.039895][T12241] RBP: 0000000000000000 R08: 00007f592bfdbf14 R09: 000000000000000c
[  590.047876][T12241] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  590.055854][T12241] R13: 00007f592bfdbf68 R14: 00007f592bfdc010 R15: 0000000000000000
[  590.063879][T12241]  </TASK>
[  590.077118][   T30] task:syz.4.917       state:D stack:25424 pid:9840  tgid:9840  ppid:9136   flags:0x00004004
[  590.104506][   T30] Call Trace:
[  590.107943][   T30]  <TASK>
[  590.110998][   T30]  __schedule+0x1800/0x4a60
[  590.116050][   T30]  ? __pfx___schedule+0x10/0x10
[  590.121028][   T30]  ? __pfx_lock_release+0x10/0x10
[  590.126258][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  590.136052][   T30]  ? schedule+0x90/0x320
[  590.148203][   T30]  schedule+0x14b/0x320
[  590.188278][   T30]  schedule_preempt_disabled+0x13/0x30
[  590.193851][   T30]  __mutex_lock+0x6a4/0xd70
[  590.215052][   T30]  ? __mutex_lock+0x527/0xd70
[  590.239598][   T30]  ? hugetlb_wp+0x104d/0x3a90
[  590.276525][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  590.292027][   T30]  ? __pfx_up_write+0x10/0x10
[  590.303344][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  590.315216][   T30]  ? vma_interval_tree_iter_next+0x193/0x340
[  590.329204][   T30]  hugetlb_wp+0x104d/0x3a90
[  590.353117][   T30]  ? mark_lock+0x9a/0x350
[  590.366138][   T30]  ? __pfx_hugetlb_wp+0x10/0x10
[  590.389532][   T30]  ? __pfx___might_resched+0x10/0x10
[  590.394928][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  590.401884][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  590.420424][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  590.435872][   T30]  ? __filemap_get_folio+0x769/0xc10
[  590.441400][ T1189] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  590.457051][   T30]  hugetlb_fault+0x27b2/0x3770
[  590.476099][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[  590.492087][   T30]  ? reacquire_held_locks+0x3eb/0x690
[  590.508969][   T30]  ? __pfx_reacquire_held_locks+0x10/0x10
[  590.517515][   T30]  handle_mm_fault+0x173f/0x1980
[  590.530644][   T30]  ? __pfx_lock_release+0x10/0x10
[  590.543056][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  590.552032][   T30]  ? lock_vma_under_rcu+0x592/0x6e0
[  590.557802][   T30]  ? lock_vma_under_rcu+0x18a/0x6e0
[  590.565521][   T30]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  590.571835][   T30]  ? exc_page_fault+0x113/0x8c0
[  590.579003][   T30]  exc_page_fault+0x459/0x8c0
[  590.584540][   T30]  asm_exc_page_fault+0x26/0x30
[  590.593569][   T30] RIP: 0033:0x7f483934192d
[  590.626719][   T30] RSP: 002b:00007f483963fb98 EFLAGS: 00010287
[  590.641676][   T30] RAX: 0000000020000700 RBX: 0000000000000004 RCX: ffffffffffffffbc
[  590.659744][ T1189] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  590.675712][   T30] RDX: 0000000000000043 RSI: 00007f4838e00445 RDI: 0000000020000700
[  590.684788][ T1189] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  590.708534][   T30] RBP: 00007f483963fc68 R08: 00007f4839200000 R09: 0000000000000001
[  590.727533][ T1189] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  590.757035][   T30] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000032
[  590.765812][ T1189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.782493][   T30] R13: 00007f483963fc90 R14: 00007f483963fcb0 R15: fffffffffffffffe
[  590.806461][   T30]  </TASK>
[  590.807631][T12237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  590.818362][   T30] INFO: task syz.4.917:9841 blocked for more than 144 seconds.
[  590.857084][   T30]       Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  590.870608][ T1189] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  590.879999][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  590.906256][   T30] task:syz.4.917       state:D stack:22392 pid:9841  tgid:9840  ppid:9136   flags:0x00004006
[  590.955388][   T30] Call Trace:
[  590.960595][   T30]  <TASK>
[  590.963594][   T30]  __schedule+0x1800/0x4a60
[  590.994836][   T30]  ? __pfx___schedule+0x10/0x10
[  591.015716][   T30]  ? __pfx_lock_release+0x10/0x10
[  591.032757][   T30]  ? irqentry_exit+0x63/0x90
[  591.049883][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  591.055203][   T30]  ? schedule+0x90/0x320
[  591.077665][   T30]  schedule+0x14b/0x320
[  591.082011][   T30]  io_schedule+0x8d/0x110
[  591.086416][   T30]  folio_wait_bit_common+0x882/0x12b0
[  591.101365][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  591.122687][   T30]  ? __pfx_wake_page_function+0x10/0x10
[  591.142965][   T30]  ? _raw_spin_unlock+0x28/0x50
[  591.156999][   T30]  ? __vma_reservation_common+0x498/0x7d0
[  591.162922][   T30]  __filemap_get_folio+0xb7/0xc10
[  591.197007][   T30]  hugetlb_fault+0x1b72/0x3770
[  591.201981][   T30]  ? __pfx_validate_chain+0x10/0x10
[  591.209893][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[  591.215121][   T30]  ? mt_find+0x226/0x850
[  591.225861][   T30]  ? __pfx_lock_release+0x10/0x10
[  591.231184][   T30]  handle_mm_fault+0x173f/0x1980
[  591.236191][   T30]  ? mt_find+0x62d/0x850
[  591.243152][   T30]  ? mt_find+0x226/0x850
[  591.248903][   T30]  ? __pfx_mt_find+0x10/0x10
[  591.254153][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  591.265763][   T30]  ? find_vma+0xf9/0x170
[  591.270489][   T30]  ? __pfx_find_vma+0x10/0x10
[  591.275238][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  591.281340][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  591.287905][   T30]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  591.293263][   T30]  exc_page_fault+0x2b9/0x8c0
[  591.298088][   T30]  asm_exc_page_fault+0x26/0x30
[  591.302994][   T30] RIP: 0010:__put_user_8+0x11/0x20
[  591.308297][   T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90
[  591.350292][   T30] RSP: 0018:ffffc900041c7778 EFLAGS: 00050202
[  591.377289][   T30] RAX: 0000000000400000 RBX: 0000000000000000 RCX: 0000000020000020
[  591.385389][   T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606d40
[  591.427066][   T30] RBP: ffffc900041c7ec8 R08: ffffffff9017f16f R09: 1ffffffff202fe2d
[  591.436285][   T30] R10: dffffc0000000000 R11: fffffbfff202fe2e R12: 1ffff92000838f7d
[  591.462107][   T30] R13: 1ffff92000838f08 R14: 0000000020800000 R15: 0000000000400000
[  591.477114][   T30]  userfaultfd_ioctl+0x28e7/0x70a0
[  591.482384][   T30]  ? stack_trace_save+0x118/0x1d0
[  591.507032][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  591.512629][   T30]  ? stack_depot_save_flags+0x29/0x830
[  591.528451][   T30]  ? kasan_save_track+0x51/0x80
[  591.534647][   T30]  ? kasan_save_track+0x3f/0x80
[  591.556868][   T30]  ? kasan_save_free_info+0x40/0x50
[  591.567210][   T30]  ? poison_slab_object+0xe0/0x150
[  591.572413][   T30]  ? __kasan_slab_free+0x37/0x60
[  591.587031][   T30]  ? kfree+0x149/0x360
[  591.591180][   T30]  ? tomoyo_path_number_perm+0x68d/0x880
[  591.607057][   T30]  ? security_file_ioctl+0x75/0xb0
[  591.612237][   T30]  ? __se_sys_ioctl+0x47/0x170
[  591.627213][   T30]  ? do_syscall_64+0xf3/0x230
[  591.631974][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.644992][   T30]  ? do_vfs_ioctl+0xf0e/0x2e50
[  591.658905][   T30]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  591.667481][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  591.673988][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[  591.679846][   T30]  ? __pfx_lock_release+0x10/0x10
[  591.685514][   T30]  ? kfree+0x149/0x360
[  591.697057][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[  591.702776][   T30]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  591.727411][   T30]  ? __fget_files+0x29/0x470
[  591.732113][   T30]  ? __fget_files+0x3f6/0x470
[  591.738505][   T30]  ? __fget_files+0x29/0x470
[  591.743181][   T30]  ? bpf_lsm_file_ioctl+0x9/0x10
[  591.760123][   T30]  ? security_file_ioctl+0x87/0xb0
[  591.765320][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  591.797086][   T30]  __se_sys_ioctl+0xfc/0x170
[  591.801766][   T30]  do_syscall_64+0xf3/0x230
[  591.806320][   T30]  ? clear_bhb_loop+0x35/0x90
[  591.811777][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.825465][   T30] RIP: 0033:0x7f4839379e79
[  591.837186][   T30] RSP: 002b:00007f483a21b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  591.846887][   T30] RAX: ffffffffffffffda RBX: 00007f4839515f80 RCX: 00007f4839379e79
[  591.877007][   T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000005
[  591.885051][   T30] RBP: 00007f48393e7916 R08: 0000000000000000 R09: 0000000000000000
[  591.907057][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  591.915109][   T30] R13: 0000000000000000 R14: 00007f4839515f80 R15: 00007f483963fa38
[  591.937050][   T30]  </TASK>
[  591.947722][   T30] 
[  591.947722][   T30] Showing all locks held in the system:
[  591.962359][   T30] 6 locks held by kworker/0:0/8:
[  591.989658][   T30]  #0: ffff888016e9b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  592.017032][   T30]  #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  592.037047][   T30]  #2: ffff888023f20190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  592.067050][   T30]  #3: ffff888020361190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950
[  592.076492][   T30]  #4: ffff8880202d4160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  592.097194][   T30]  #5: ffff88805aa24188 (&hdw->big_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_disconnect+0x6e/0x520
[  592.127782][   T30] 1 lock held by khungtaskd/30:
[  592.132706][   T30]  #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  592.157070][   T30] 5 locks held by kworker/u8:4/61:
[  592.162246][   T30]  #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  592.185430][   T30]  #1: ffffc900015cfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  592.207760][   T30]  #2: ffffffff8fc77a10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  592.227030][   T30]  #3: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0
[  592.236073][   T30]  #4: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  592.277008][   T30] 3 locks held by kworker/u8:5/79:
[  592.282268][   T30]  #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  592.307138][   T30]  #1: ffffc900015dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  592.318778][   T30]  #2: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  592.331697][   T30] 2 locks held by kworker/u8:6/1093:
[  592.347196][   T30] 2 locks held by pvrusb2-context/2043:
[  592.353972][   T30]  #0: ffff88805aa24188 (&hdw->big_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_initialize+0xca/0x3d10
[  592.390658][   T30]  #1: ffffffff8e7e1850 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0x140/0x300
[  592.419931][   T30] 3 locks held by kworker/u8:12/2991:
[  592.427378][   T30]  #0: ffff88802aac2148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  592.466365][   T30]  #1: ffffc90009a57d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  592.493360][   T30]  #2: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[  592.504436][   T30] 2 locks held by getty/4992:
[  592.510374][   T30]  #0: ffff88802b0ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  592.520646][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[  592.531533][   T30] 3 locks held by kworker/0:3/5278:
[  592.536853][   T30]  #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  592.565298][   T30]  #1: ffffc90004057d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  592.576860][   T30]  #2: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  592.587957][   T30] 4 locks held by udevd/9083:
[  592.592859][   T30]  #0: ffff8880203de9e0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60
[  592.602404][   T30]  #1: ffff88802d085088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0
[  592.613998][   T30]  #2: ffff88806fb7da58 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0
[  592.625145][   T30]  #3: ffff888020361190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0
[  592.635155][   T30] 2 locks held by syz.4.917/9840:
[  592.640686][   T30]  #0: ffff8880626a7658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0
[  592.651809][   T30]  #1: ffff88801beb0458 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90
[  592.664154][   T30] 3 locks held by syz.4.917/9841:
[  592.669683][   T30]  #0: ffff888015871498 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  592.680263][   T30]  #1: ffff88801beb0458 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770
[  592.691925][   T30]  #2: ffff88801f5ba8e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770
[  592.701946][   T30] 1 lock held by syz-executor/11914:
[  592.707536][   T30]  #0: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  592.717125][   T30] 1 lock held by syz.4.1361/12233:
[  592.722470][   T30]  #0: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  592.732159][   T30] 1 lock held by syz.2.1364/12249:
[  592.737562][   T30]  #0: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0
[  592.746630][   T30] 
[  592.767080][   T30] =============================================
[  592.767080][   T30] 
[  592.775571][   T30] NMI backtrace for cpu 1
[  592.779932][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  592.790469][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  592.800651][   T30] Call Trace:
[  592.803968][   T30]  <TASK>
[  592.806922][   T30]  dump_stack_lvl+0x241/0x360
[  592.811637][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  592.816842][   T30]  ? __pfx__printk+0x10/0x10
[  592.821447][   T30]  ? vprintk_emit+0x667/0x7c0
[  592.826156][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  592.831221][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  592.836214][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  592.841682][   T30]  ? _printk+0xd5/0x120
[  592.845855][   T30]  ? __pfx__printk+0x10/0x10
[  592.850500][   T30]  ? __wake_up_klogd+0xcc/0x110
[  592.855371][   T30]  ? __pfx__printk+0x10/0x10
[  592.859978][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  592.865103][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  592.871102][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  592.877110][   T30]  watchdog+0xff4/0x1040
[  592.881475][   T30]  ? watchdog+0x1ea/0x1040
[  592.885923][   T30]  ? __pfx_watchdog+0x10/0x10
[  592.890616][   T30]  kthread+0x2f0/0x390
[  592.894704][   T30]  ? __pfx_watchdog+0x10/0x10
[  592.899396][   T30]  ? __pfx_kthread+0x10/0x10
[  592.904003][   T30]  ret_from_fork+0x4b/0x80
[  592.908446][   T30]  ? __pfx_kthread+0x10/0x10
[  592.913061][   T30]  ret_from_fork_asm+0x1a/0x30
[  592.917853][   T30]  </TASK>
[  592.922118][   T30] Sending NMI from CPU 1 to CPUs 0:
[  592.929391][    C0] NMI backtrace for cpu 0
[  592.929406][    C0] CPU: 0 UID: 0 PID: 2972 Comm: kworker/u8:11 Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  592.929428][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  592.929440][    C0] Workqueue: bat_events batadv_nc_worker
[  592.929470][    C0] RIP: 0010:__lock_acquire+0xf44/0x2040
[  592.929500][    C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 40 38 73 93 be 08 00 00 00 e8 d4 eb 8a 00 48 0f a3 1d 8c 54 03 12 <0f> 83 69 02 00 00 48 69 c3 c8 00 00 00 48 8d 98 40 97 41 93 48 bf
[  592.929515][    C0] RSP: 0018:ffffc900099578f0 EFLAGS: 00000057
[  592.929530][    C0] RAX: 0000000000000001 RBX: 00000000000006d3 RCX: ffffffff816fe3ac
[  592.929543][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff93733918
[  592.929556][    C0] RBP: a0d106ab8f8e735b R08: ffffffff9373391f R09: 1ffffffff26e6723
[  592.929570][    C0] R10: dffffc0000000000 R11: fffffbfff26e6724 R12: 0000000000000000
[  592.929583][    C0] R13: ffff88802c31e4d8 R14: 1ffff11005863caa R15: ffff88802c31e550
[  592.929598][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[  592.929613][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  592.929631][    C0] CR2: 0000000020213000 CR3: 000000007af1c000 CR4: 00000000003526f0
[  592.929647][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  592.929657][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  592.929669][    C0] Call Trace:
[  592.929677][    C0]  <NMI>
[  592.929685][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  592.929707][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  592.929733][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  592.929762][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  592.929786][    C0]  ? nmi_handle+0x14f/0x5a0
[  592.929803][    C0]  ? nmi_handle+0x2a/0x5a0
[  592.929820][    C0]  ? __lock_acquire+0xf44/0x2040
[  592.929843][    C0]  ? default_do_nmi+0x63/0x160
[  592.929866][    C0]  ? exc_nmi+0x123/0x1f0
[  592.929888][    C0]  ? end_repeat_nmi+0xf/0x53
[  592.929913][    C0]  ? __lock_acquire+0xf3c/0x2040
[  592.929939][    C0]  ? __lock_acquire+0xf44/0x2040
[  592.929963][    C0]  ? __lock_acquire+0xf44/0x2040
[  592.929988][    C0]  ? __lock_acquire+0xf44/0x2040
[  592.930012][    C0]  </NMI>
[  592.930019][    C0]  <TASK>
[  592.930033][    C0]  lock_acquire+0x1ed/0x550
[  592.930058][    C0]  ? batadv_nc_worker+0xcb/0x610
[  592.930086][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  592.930111][    C0]  ? batadv_nc_worker+0xcb/0x610
[  592.930136][    C0]  ? __pfx_lock_release+0x10/0x10
[  592.930161][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  592.930190][    C0]  batadv_nc_worker+0xec/0x610
[  592.930214][    C0]  ? batadv_nc_worker+0xcb/0x610
[  592.930237][    C0]  ? batadv_nc_worker+0xcb/0x610
[  592.930263][    C0]  ? process_scheduled_works+0x945/0x1830
[  592.930286][    C0]  process_scheduled_works+0xa2c/0x1830
[  592.930323][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  592.930351][    C0]  ? assign_work+0x364/0x3d0
[  592.930376][    C0]  worker_thread+0x86d/0xd40
[  592.930406][    C0]  ? __kthread_parkme+0x169/0x1d0
[  592.930433][    C0]  ? __pfx_worker_thread+0x10/0x10
[  592.930458][    C0]  kthread+0x2f0/0x390
[  592.930484][    C0]  ? __pfx_worker_thread+0x10/0x10
[  592.930508][    C0]  ? __pfx_kthread+0x10/0x10
[  592.930535][    C0]  ret_from_fork+0x4b/0x80
[  592.930560][    C0]  ? __pfx_kthread+0x10/0x10
[  592.930587][    C0]  ret_from_fork_asm+0x1a/0x30
[  592.930627][    C0]  </TASK>
[  592.978121][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  592.978143][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00002-gb0da640826ba #0
[  592.978173][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  592.978188][   T30] Call Trace:
[  592.978199][   T30]  <TASK>
[  592.978210][   T30]  dump_stack_lvl+0x241/0x360
[  592.978245][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  592.978271][   T30]  ? __pfx__printk+0x10/0x10
[  592.978305][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  592.978347][   T30]  ? vscnprintf+0x5d/0x90
[  592.978379][   T30]  panic+0x349/0x860
[  592.978416][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  592.978447][   T30]  ? __pfx_panic+0x10/0x10
[  592.978479][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  592.978508][   T30]  ? __irq_work_queue_local+0x137/0x410
[  592.978543][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  592.978571][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  592.978600][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  592.978641][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  592.978675][   T30]  watchdog+0x1033/0x1040
[  592.978710][   T30]  ? watchdog+0x1ea/0x1040
[  592.978751][   T30]  ? __pfx_watchdog+0x10/0x10
[  592.978784][   T30]  kthread+0x2f0/0x390
[  592.978821][   T30]  ? __pfx_watchdog+0x10/0x10
[  592.978854][   T30]  ? __pfx_kthread+0x10/0x10
[  592.978890][   T30]  ret_from_fork+0x4b/0x80
[  592.978924][   T30]  ? __pfx_kthread+0x10/0x10
[  592.978965][   T30]  ret_from_fork_asm+0x1a/0x30
[  592.979014][   T30]  </TASK>
[  592.993543][   T30] Kernel Offset: disabled
[  593.425496][   T30] Rebooting in 86400 seconds..