last executing test programs:

8.649087453s ago: executing program 0 (id=77):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000300)={@val={0x70, 0x886b}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x3, 0x0, 0x44, 0x64, 0x0, 0xb1, 0x1, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2d}, {[@end, @ssrr={0x89, 0x13, 0xa7, [@private=0xa010100, @multicast2, @loopback, @multicast1]}, @noop, @timestamp={0x44, 0x10, 0x9f, 0x0, 0x9, [0xfffffff7, 0x6, 0x7]}]}}, @info_request={0xf, 0x0, 0x0, 0x5, 0x9}}}}}}, 0x56)

8.231529612s ago: executing program 1 (id=78):
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x103802, 0x20)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20)
sendfile(r0, r0, 0x0, 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000007100)={@cgroup, 0xffffffffffffffff, 0x10}, 0x20)

7.979222408s ago: executing program 1 (id=80):
r0 = syz_usbip_server_init(0x2)
write$usbip_server(r0, &(0x7f0000000b80)=@ret_submit={{0x3, 0x7, 0x0, 0x1, 0x2}, 0xfffffff7, 0x6, 0x9, 0x2e8, 0xd6c, 0x0, "34387bae4f59", [{0x8, 0x355, 0x0, 0x2}, {0x2, 0x7, 0x4, 0x7f}, {0x200, 0xbe, 0xd, 0x1}, {0xe, 0x4, 0x3, 0xffffffad}, {0xc084, 0x79, 0x1ff, 0x10}, {0x7, 0x7fff, 0x5, 0x2}, {0x1, 0x7fff, 0x3b3a3bd1}, {0x0, 0x4, 0x4, 0x38000000}, {0x3, 0xffffffff, 0x3, 0x100}, {0x5, 0x5, 0xffffff4f, 0xd0}, {0x5, 0x3, 0xbcc9, 0x8}, {0x2, 0x3, 0x1, 0x200}, {0x40, 0x36, 0x80000, 0x180d}, {0x9, 0x2, 0x7ff, 0x1}, {0x3, 0x6, 0x5, 0x1}, {0x101, 0x8, 0xfffffffc, 0xff}, {0x3, 0x7, 0x80000000, 0x4}, {0x1, 0x7, 0x8, 0x2}, {0xc, 0x0, 0x10, 0x993}, {0x4, 0x8001, 0xa6d0, 0x7}, {0x9, 0x7ff, 0x7f, 0xa}, {0x7f, 0x5, 0x3, 0x3}, {0xfffffc6e, 0x2, 0x0, 0x10001}, {0xfffff801, 0x9, 0x9, 0x1000}, {0xfffffffb, 0xc76, 0x0, 0x3}, {0x1ff, 0x835, 0xfffffff7, 0x8}, {0x4, 0xe, 0x7, 0x3}, {0x400, 0x2, 0x101, 0xeaa}, {0x2, 0x9, 0x4, 0xb}, {0x4, 0x3, 0x3, 0x4}, {0x3, 0xe, 0x1, 0xb}, {0x7, 0x393c855f, 0xfffffffb, 0x9}, {0xffff, 0x800, 0xfffffff9, 0xd6a}, {0x4, 0x1ff, 0x1, 0x9}, {0x4, 0x5, 0x9, 0xffff}, {0xffffff58, 0x100, 0x8, 0x8d}, {0x9, 0x5, 0x1, 0x3}, {0x40, 0x1, 0x4, 0x7fff}, {0x8, 0x4, 0x55e7, 0x9}, {0x2763a156, 0x1, 0xffffffff, 0xfffffffb}, {0x4, 0x8, 0x68f, 0x7}, {0xddc1, 0x7, 0x8, 0x6}, {0x6c12e0e6, 0xb, 0x1000, 0x3db}, {0x955, 0x72, 0x2, 0xfffffff9}, {0x8, 0x10001, 0x7daa}, {0x0, 0x6, 0x8, 0x2}, {0x80000001, 0x10, 0x3, 0xb3d}, {0xa, 0x9, 0x6, 0x3}, {0x6, 0x2, 0x9, 0x4}, {0x4, 0x7, 0x9, 0x2}, {0x48, 0xfa1, 0x50000000, 0xc35f}, {0x3b, 0x2, 0x7fffffff, 0x200}, {0x200, 0x7, 0x50c4, 0x2}, {0xd, 0x1, 0xfff, 0x22b1400b}, {0x5, 0x1, 0x30d1, 0x8}, {0x10, 0x1, 0x2, 0x5}, {0x9, 0x7, 0x6, 0x2}, {0x7, 0x80000000, 0x936, 0x5}, {0x3, 0x6, 0xb, 0x8}, {0x6503, 0xa, 0x5}, {0x8001, 0x7, 0xf, 0x1}, {0x4, 0x24, 0x8, 0x5}, {0x9, 0x1, 0x4, 0x9}, {0x200, 0xffff, 0x7, 0x8}, {0x1, 0x1, 0x3}, {0x6, 0x3, 0x4, 0x200}, {0x10001, 0x1, 0x8, 0xa}, {0x7, 0x2, 0x40, 0x1}, {0x2, 0xfffffff9, 0x6, 0x7}, {0x8, 0x800, 0x1, 0x10000}, {0xb159, 0x0, 0x8, 0x6}, {0x81, 0x7f, 0x8, 0x612}, {0x1, 0x1000, 0x8c22, 0x15f9}, {0x7ff, 0x9, 0x4, 0x4}, {0x8, 0x0, 0x4af3, 0x8}, {0x1, 0x8000, 0x9, 0xb}, {0x9, 0x1f4, 0x0, 0xfffff99d}, {0xfffffffc, 0x4, 0x80000001, 0x8001}, {0x0, 0x4, 0x1, 0x80000000}, {0xe4d, 0x9, 0x7, 0x3}, {0x5, 0x81, 0x8, 0x4}, {0x4, 0x2, 0x80000000, 0x400}, {0xffff, 0x40, 0x9, 0xfffffff8}, {0x80, 0xe8, 0x80000001, 0x18}, {0x1, 0x7, 0x8000, 0x7}, {0x6, 0x6, 0x7ff, 0x100}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x3, 0x3, 0x1}, {0x5, 0x4, 0x800, 0x4}, {0x9, 0x5, 0x1, 0x818e}, {0x6, 0x1, 0x81, 0x9}, {0x69c, 0x4, 0x10, 0x10000}, {0x41, 0x8, 0x1, 0x8}, {0x5f, 0x2, 0x0, 0xa}, {0x6, 0x9, 0xc, 0x6}, {0x0, 0x1, 0x7197, 0x20}, {0x4, 0x4, 0x7ff, 0x4ff12c14}, {0x62, 0x0, 0x5, 0x4}, {0x1, 0x8, 0x81, 0xc}, {0x3ff, 0x80000001, 0xc0, 0x6}, {0x1, 0xfffffff7, 0x2, 0x8}, {0xffffff6c, 0x1, 0x1, 0xffffff5f}, {0x9, 0x401, 0x3ff, 0xdc40}, {0x373, 0x9, 0x921, 0x6}, {0x1b1, 0x6, 0x1, 0x5a47a274}, {0x6, 0x2, 0x6, 0x2}, {0x2, 0x4, 0x9, 0xfffffffb}, {0x9, 0xe, 0x6, 0x46}, {0xfffffff7, 0x5, 0x9, 0x2}, {0x0, 0x89df, 0x6, 0x34f}, {0x3, 0xc8, 0x9, 0x2}, {0x180, 0x53b, 0x0, 0x9}, {0x1, 0x9, 0x1}, {0x3, 0x6, 0x9, 0x8}, {0x400, 0x4, 0x0, 0xfa8}, {0x9, 0x1, 0xffff, 0xfffffffc}, {0x0, 0x0, 0xb632, 0x6}, {0x7, 0xc92e, 0x9, 0x3e}, {0x0, 0x7fffffff, 0x8, 0xaf9f}, {0x3ff, 0x8, 0x2, 0x5}, {0xf2, 0x9, 0x5, 0x173}, {0x6, 0xfff, 0x4, 0x5}, {0x3, 0x9, 0x200, 0x9389}, {0x1, 0x4, 0xfffffffe, 0x3ff}, {0x7ff, 0x5, 0xe1d, 0xad}, {0x3f6, 0x6c73, 0x200, 0x3}, {0x2, 0x6, 0x9, 0x9}, {0x5, 0xb8, 0x1, 0x5}, {0x273c5c01, 0x1000, 0x0, 0xff}, {0x7, 0x1, 0x4, 0x7}, {0x0, 0x5, 0x7, 0x3c25}, {0x60, 0x4, 0xf5ff, 0x5}, {0xd, 0xd4000000, 0x2, 0x7}, {0x1, 0x53, 0x4, 0x1}, {0x7fff, 0x2, 0x0, 0x9}, {0x80000001, 0x9, 0x401, 0x3}, {0x7, 0x7, 0x68, 0x6}, {0x1, 0x7b, 0x4, 0x2}, {0xfffffffe, 0x1, 0xfffffffd, 0x6eb6}, {0x5, 0x8, 0x4, 0x2}, {0xffffffff, 0x0, 0xe3, 0xfffffffb}, {0x400, 0x9d, 0xf33, 0x4}, {0x7, 0x9, 0x8, 0x7}, {0xeb, 0x29b, 0x557, 0xd}, {0xe, 0xfffffe01, 0x7fffffff, 0xce}, {0x1, 0x9, 0xa, 0xfff}, {0x2, 0x8, 0x8, 0xfffffff9}, {0x6, 0x1ff}, {0x400, 0x3d7, 0x9, 0x7}, {0x2, 0x7, 0x1, 0x8}, {0x2, 0x5f, 0xffff, 0x16}, {0x5, 0x5, 0x3ff, 0x6}, {0x6, 0x2, 0x17c27ffb, 0x80000000}, {0x2, 0x6, 0x202, 0x4}, {0x9, 0x0, 0x0, 0xfff}, {0x9, 0x1, 0xac, 0x1}, {0xfffffff9, 0x7fff, 0x9}, {0x3, 0x8, 0x3ff, 0x6}, {0x80, 0xffffffff, 0x8, 0x3}, {0x8000, 0x7, 0xca5, 0x7}, {0x0, 0x3, 0x4, 0xffffffa6}, {0x3, 0xffffffff, 0x97d3, 0x101}, {0x101, 0xe3c, 0x7, 0xff}, {0xf2, 0x3, 0x5, 0x4b0c}, {0x0, 0xcd, 0x4b0, 0x200}, {0xf, 0x18f, 0xfffffde8, 0x4}, {0x4, 0x5, 0x6, 0x2}, {0x0, 0xfff, 0x6, 0x40}, {0x7, 0xd, 0xfffffffe, 0x9}, {0x5b7, 0xfffffff8, 0x1, 0x4}, {0x10000, 0x10000, 0x7, 0x2}, {0x2, 0xff, 0x86d, 0x10000}, {0x5, 0xffffffff, 0x8001}, {0x9, 0xffff1711, 0x9, 0x1ff}, {0x7ff, 0x4, 0x1, 0xfffffffa}, {0x4, 0x2, 0x1}, {0x81, 0x0, 0x4, 0x5}, {0x1, 0x0, 0x40, 0xfffff7a0}, {0x3, 0x4, 0x3a, 0x3}, {0x6, 0x3, 0xfffffff8, 0x7}, {0x2, 0x101, 0x80000001, 0x5}, {0x5, 0x7, 0x3, 0xd3}, {0xffff, 0x8, 0xf38, 0x6}, {0x6, 0x2, 0xed8a, 0x7}, {0x5, 0x5791, 0x0, 0x4c2}, {0x2, 0x7, 0x9, 0x1ab}, {0x7, 0x8, 0x4, 0x1}, {0x8, 0x3, 0x2, 0x7}, {0x7, 0x8, 0x1, 0x1}, {0xfffffff7, 0x4, 0x3, 0x40}, {0x3, 0x7, 0x7, 0x6}, {0x6, 0x9b, 0xfffffb22, 0x4}, {0xff5b, 0x3, 0x7, 0x10001}, {0x1b0c7504, 0x7, 0x6, 0x200}, {0xf, 0x4, 0x1, 0xfff}, {0xd3, 0x1c00, 0x2, 0xc5}, {0x100, 0xb9, 0x2, 0x3}, {0x2, 0x3ff, 0x3, 0x9}, {0x2, 0xeb8, 0x7f}, {0x5, 0x4, 0x8, 0x40}, {0x3, 0x4, 0x6, 0x2}, {0x1000, 0x7, 0x1, 0x7}, {0x4336f47a, 0x1, 0x8, 0x6}, {0x3, 0x9, 0x9, 0x7}, {0x101, 0x55, 0x7, 0x5}, {0x6, 0xffffffff, 0x200, 0x4}, {0x40, 0x10001, 0xfffffffe, 0x5}, {0x7ff, 0x4, 0xfffffffa, 0xffffffff}, {0xa, 0xcf8, 0x200, 0x9}, {0x8000, 0x4, 0xbe5f, 0x2}, {0x28, 0x10, 0x9e, 0x83a}, {0x0, 0x3ff, 0xf0b, 0xa}, {0x16, 0x2, 0x200, 0x5}, {0x8, 0x1, 0x80000000, 0x7fff}, {0x217, 0x0, 0x37, 0x3}, {0x0, 0x65, 0xfffffff7, 0xfff}, {0x7, 0xf78, 0x5, 0xc472}, {0x1, 0xfffffffe, 0x3, 0x80}, {0x800, 0x2ef, 0x425, 0x3}, {0x2, 0x1, 0x0, 0x2}, {0x0, 0x81, 0x5, 0x7642}, {0xfffffffb, 0x9, 0x9, 0x4}, {0x1f96, 0x101, 0x3, 0x7}, {0xc, 0x600000, 0x8, 0x3}, {0x7, 0x3ff, 0x5, 0x9}, {0x7, 0x3fe0, 0x4, 0x6}, {0x0, 0x9, 0x4a76, 0x1000}, {0x9, 0x8, 0xfffffffe, 0x8}, {0x6, 0x400, 0x10, 0x7}, {0x81, 0x6, 0x800, 0xffffffff}, {0x9, 0x30b9, 0x0, 0xa3}, {0x9, 0xde4c, 0x10000, 0xfff}, {0x8, 0x10000, 0x5, 0x6}, {0x7fffffff, 0x0, 0xffffffff, 0x6c}, {0xc, 0x6a, 0x5, 0x1}, {0x702, 0xfffffff5, 0x6, 0x5}, {0x8000, 0x10001, 0x9, 0x65e}, {0x9, 0x8, 0x3, 0x1}, {0x6, 0x2, 0x7, 0xddb}, {0xff, 0x5, 0x1ff, 0x8001}, {0xe5b, 0x80, 0x8, 0x4}, {0x9, 0x4, 0x1, 0x469}, {0x1, 0x10, 0x8001, 0x2}, {0x1, 0x3, 0x5, 0x5}, {0x7, 0x5, 0x4, 0x1}, {0x5d, 0x8, 0x4, 0x9}, {0xd146, 0x7, 0x80000001}, {0x9, 0x9, 0x3, 0x10a5ec8e}, {0xa2, 0x3a, 0x6, 0x7fffffff}, {0x4, 0x5, 0x7fffffff, 0xff}, {0x9, 0x80000000, 0x6, 0x9}, {0x101, 0x4, 0x4cf, 0xfa8}, {0x4, 0x4, 0xaa, 0x6}, {0x5, 0x4, 0x763, 0x4757}, {0x1, 0x9, 0x6, 0xffffff8b}, {0x7, 0x1, 0x1, 0x80000000}, {0xb6, 0x9, 0x7, 0xdbc}, {0x10001, 0xffffffff, 0xf, 0x8}, {0x6, 0x400, 0x3, 0x8}, {0x4e, 0x400, 0x8542, 0xc0000000}, {0x5, 0x74, 0x0, 0x81}, {0x2, 0xf, 0x5, 0x3033}, {0x7, 0x9, 0x3ff}, {0x3a5d935b, 0x3, 0x1, 0x5}, {0x200, 0x6, 0x8, 0xcf6}, {0x5, 0x1, 0x3, 0x2}, {0xffff, 0x9, 0x3, 0x7}, {0x5, 0x10000, 0x4, 0x9}, {0x7, 0x8, 0x7, 0x1f75}, {0x3ff, 0x2, 0x7, 0xfffffa89}, {0x1, 0x0, 0x4, 0x5}, {0x6, 0x1, 0x4cfa7d6, 0x4}, {0x9}, {0xfec, 0x800, 0x5, 0x2}, {0x6, 0x6}, {0xb, 0x80000001, 0x9, 0x5}, {0x200, 0xc188, 0x0, 0x5}, {0x9e67, 0x1, 0x6d3, 0x7}, {0x50, 0x25, 0x8000, 0xd}, {0x7, 0x1, 0x732}, {0x5, 0x1ff, 0x6, 0x2}, {0x3, 0xffff, 0x1, 0xfa}, {0x0, 0xfffffff9, 0x5, 0x800}, {0xffff, 0x9, 0x6e78, 0x80}, {0xffff8155, 0x5, 0x2, 0x2}, {0x6, 0x8, 0x200, 0x3}, {0xffff5c7c, 0xce1, 0xd, 0x80000001}, {0x81, 0xff, 0x4, 0x5}, {0x0, 0x6, 0x200, 0xa5d}, {0x8, 0x8e9, 0x9, 0x7}, {0x3, 0x52766a1, 0x81, 0x2}, {0xffff, 0x2, 0xa520, 0x2}, {0x8, 0x6, 0x4061, 0x1}, {0x6, 0x80, 0x7, 0x76f}, {0x3, 0x9, 0x7}, {0x8, 0xc10, 0x0, 0x7}, {0x4, 0x45049e4e, 0x1, 0x2}, {0x8c9, 0x200, 0x8001, 0x5}, {0x401, 0x6, 0x1, 0xb}, {0x0, 0x9, 0xffffffff, 0x7}, {0x3, 0x3, 0x1}, {0xfffffffa, 0x7, 0x1316deaf, 0xb8a}, {0x33, 0x1, 0xe, 0x80000000}, {0x81, 0x1000, 0x8, 0x800}, {0x9, 0x4, 0x1, 0xc38f}, {0x2, 0xefb9, 0x55, 0x7}, {0xd, 0x4, 0x2, 0x1}, {0xfffffffd, 0x6, 0xffff, 0x2}, {0x6, 0xc, 0xe, 0x9}, {0x4, 0x80000000, 0x5, 0x1000}, {0x99ae, 0x79939aaa, 0x6, 0xa}, {0x4, 0xf19, 0x7f8d, 0x3}, {0x1, 0x8f, 0x1, 0x1}, {0x3, 0x2, 0x52eb, 0x58a}, {0x8, 0x4, 0x8, 0x6}, {0x0, 0x1, 0x5, 0x80}, {0xfffffff9, 0x3, 0x2, 0x2}, {0x60a, 0x4, 0x6, 0x6}, {0x3, 0xf, 0x3, 0x4}, {0x2, 0x1, 0x3, 0xfff}, {0x7c, 0x5, 0x81, 0x6}, {0x1, 0xb5, 0x3, 0x8}, {0x6, 0x9, 0x0, 0x68}, {0xffffed0f, 0x3, 0x36c, 0x3}, {0x2, 0xfffffffe, 0x400, 0x7ff}, {0x6, 0x0, 0x2, 0x401}, {0x7, 0x6, 0xffff0169, 0x101}, {0x1ff, 0x8, 0x800000, 0x6}, {0x8, 0xb612, 0x93d, 0x8}, {0x3, 0x9, 0x0, 0x5}, {0x7, 0x9, 0xffff36eb, 0xe}, {0x7f, 0x2, 0x5, 0x6}, {0x3b50, 0x5, 0x1, 0x1}, {0x800, 0x80000, 0x2, 0x7fff}, {0x351, 0x40, 0x10, 0xfffffffd}, {0x686, 0x1, 0xfffffffd, 0x8}, {0xfffffffb, 0x6, 0x611, 0x9}, {0x2, 0x2, 0xfffffbff, 0x5}, {0xffffffff, 0x9886, 0x7, 0x101}, {0x1, 0xf42, 0x622c, 0x5}, {0x10000, 0x4, 0x126, 0x39c52dd6}, {0x0, 0x2, 0x7, 0x3}, {0x8, 0x3, 0x7, 0x3}, {0xf, 0x2, 0x1, 0x9}, {0x4, 0x5, 0x0, 0x8}, {0xa1a, 0x3e, 0xb4, 0x3}, {0x9, 0x6, 0x927, 0x8001}, {0x0, 0x5, 0x800, 0x8}, {0x4, 0x6, 0x5, 0xcdd}, {0xfffff849, 0xff, 0x4, 0x3}, {0x8001, 0x7fffffff, 0x3, 0xa}, {0x88, 0x7, 0xae, 0x4}, {0x2, 0xf, 0xb0, 0x1000}, {0x2, 0x4, 0x80000001, 0x6}, {0x7f, 0x3, 0x3, 0x5}, {0x101, 0x3ee8, 0x3, 0x7fff}, {0x2, 0x1000, 0x3, 0x8001}, {0x81, 0x80000000, 0x400, 0x4}, {0xff, 0x8e0f, 0x0, 0x200}, {0x388, 0x4, 0x11, 0x1}, {0x9, 0x530e, 0x5, 0x8}, {0x2, 0x8001, 0xfffffffb, 0x5}, {0x9, 0x54e, 0x3, 0x5}, {0x9, 0x4, 0x8, 0x5}, {0xd, 0x9, 0x101, 0x7}, {0x7, 0x8, 0x275, 0x400}, {0x65, 0xa4f2, 0x4747, 0xe431}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0x2, 0x10, 0xef}, {0x5ef9, 0xfffffffc, 0x4, 0xbeb}, {0x2, 0x3, 0x5, 0x9}, {0xff, 0x5, 0x7, 0xc90}, {0x6, 0x7, 0x101, 0x50b}, {0x8, 0x5, 0x5, 0x4}, {0x8, 0x7, 0x80000000, 0x4}, {0x4, 0x7, 0x500, 0x5}, {0x4, 0x0, 0xc0000, 0x7}, {0xfffffcb8, 0x1ff, 0x8, 0x3}, {0x9, 0x9, 0x1f429737, 0x1}, {0x55864e92, 0x9, 0x7, 0x7}, {0x5, 0x7, 0x4, 0x6}, {0xfffffff8, 0xffffffff, 0x9, 0x200}, {0x5, 0x8da, 0x3f, 0x80000000}, {0x2, 0x9, 0xc, 0x2}, {0x3, 0x49, 0x6, 0x7}, {0x8c, 0x1, 0x8, 0xd45}, {0x6, 0xc, 0x7, 0x3}, {0x7f, 0x3, 0xffffffad, 0x5}, {0x6bf, 0x2, 0x90, 0x6}, {0x7, 0x2, 0x803, 0x1}, {0xddf, 0x6, 0xffffffff, 0x6}, {0x7, 0x0, 0x8, 0x3}, {0x4, 0xd, 0x7ff, 0x1}, {0x9, 0x4, 0xaa8, 0xa}, {0x8, 0x6f, 0xd, 0x5}, {0x79f0, 0x8, 0x100, 0x2}, {0xd, 0x3, 0x1, 0x947}, {0x4, 0x81, 0x6, 0xc08}, {0xfffffffd, 0x2, 0xfffffffc, 0x3}, {0xb, 0x1, 0x4, 0x87}, {0x10001, 0x80000001, 0xfc, 0x7}, {0x14d, 0x6, 0x101, 0x2}, {0xfffffac1, 0x40, 0xcc2d843, 0x5}, {0x29, 0x9, 0xc1d, 0xc0}, {0xd, 0x2, 0xffffffff, 0x101}, {0x1, 0x40, 0x23f, 0x8}, {0xa, 0x5, 0x8, 0x40}, {0x40, 0xffff, 0xf2, 0x3}, {0x7, 0x4, 0x3, 0x7}, {0x9, 0x5, 0x1, 0xf}, {0x7ff, 0x80000001, 0x7f, 0x8}, {0x8f, 0x5, 0x6, 0x7ff}, {0x8001, 0x7fff, 0xec97, 0x10000}, {0x8, 0x75f, 0x0, 0x4}, {0x0, 0x10000, 0x91c, 0x800}, {0x8, 0x401, 0x2, 0x7}, {0x4, 0x8, 0x1, 0x2}, {0xff, 0x0, 0x5, 0x5}, {0x3ff, 0x5, 0x750, 0x7}, {0x1, 0x200, 0x9, 0x800}, {0x6, 0x0, 0xe, 0x9}, {0xfffffffc, 0x9, 0x4, 0xfffffffd}, {0x8001, 0x3, 0x5b, 0x2}, {0x3, 0x3893, 0x6, 0x10}, {0x401, 0x0, 0x8, 0x1}, {0xfffffff7, 0x10000, 0x0, 0x8}, {0x5, 0x9, 0x5, 0x7}, {0x7ff, 0x3, 0x9, 0x1b}, {0x5, 0x40, 0x1, 0xfffffffd}, {0x4, 0xcb0, 0x2, 0x7}, {0x0, 0x9, 0x72, 0x8}, {0xf, 0x731954f0, 0x3, 0x8690}, {0x10, 0xffffff81, 0x3, 0x800}, {0xc, 0x1d368dce, 0x0, 0x2}, {0xe78, 0xed, 0x3f80, 0x7ff}, {0x7, 0x6, 0x5, 0x3}, {0x5f3, 0xa345, 0xbf83, 0xb6}, {0x10000, 0x10, 0x8001, 0xfffffeff}, {0x1, 0x3, 0x0, 0x2ad59df0}, {0x67b1cd0c, 0x9, 0x1000}, {0x80000000, 0x3, 0x1, 0x5}, {0xfffffffd, 0x0, 0x4, 0xfffffffd}, {0x4d, 0x380000, 0x52cbe8d1, 0x401}, {0x80, 0x4, 0x6, 0xaa29}, {0x400, 0x8, 0x2, 0xfffffff8}, {0x7fffffff, 0x2, 0x0, 0x3}, {0x2, 0x8, 0x7f, 0x4}, {0x9, 0x6, 0x101, 0x80000000}, {0xfd9, 0x7, 0xfffffe00, 0x55fd}, {0xb, 0xd, 0xcf, 0x8}, {0x3, 0x8a8, 0x8, 0xc8b}, {0x0, 0x5, 0x77, 0x2}, {0x80, 0x5, 0x7, 0x9}, {0x8, 0xfffffffa}, {0xd0, 0xb, 0x2, 0x7d}, {0xbc4b, 0x6, 0x4, 0x6}, {0x7ff, 0x7, 0x1, 0xcc37}, {0x6, 0x9, 0x5, 0x7fff}, {0x7fffffff, 0x7f, 0xd3be, 0x6}, {0x4, 0x4, 0x10001}, {0x1, 0x4, 0x2, 0xffffff00}, {0x6b, 0x4, 0x3800000, 0x7}, {0x80000001, 0xa3d2, 0x5, 0x7}, {0x1, 0x7, 0x8000, 0x4396bac7}, {0x6, 0x8, 0xf, 0x2}, {0xf, 0xc0000, 0x3c5b, 0x3}, {0xa, 0x8ba4, 0x4230}, {0xf8, 0xfffffffe, 0x1, 0x2}, {0xfff, 0x6, 0x5913221f, 0x7}, {0x1, 0x2fa, 0x8000, 0x5}, {0x9, 0xc000, 0x2f, 0x3}, {0x3, 0x1, 0xfffffffe, 0x7}, {0xffff, 0x7, 0x400, 0x7}, {0x1, 0x8, 0x4, 0x1}, {0x40, 0x800, 0x101, 0x8}, {0x3, 0xffffffe6, 0x0, 0x7}, {0x4, 0x8, 0x8, 0x8}, {0x9, 0x8, 0x2, 0x1}, {0x7, 0x10001, 0xffffffc0, 0x1a00}, {0x3f3f, 0x4, 0x306c, 0x8}, {0x7, 0x101, 0x3, 0x8}, {0x0, 0x9, 0x10, 0x8}, {0x8, 0x7, 0x3, 0x4}, {0x3, 0x400, 0x3, 0x4}, {0x401, 0x3, 0x8, 0x5}, {0x3, 0x9, 0x6, 0x9}, {0x8697, 0x2, 0xfffffff7, 0x9}, {0xd, 0x9, 0x4, 0x7}, {0x7, 0xffffffc0, 0x401, 0xf65e}, {0x3, 0xc, 0x5, 0x2}, {0x7, 0x5, 0x7, 0x6}, {0xe9b5, 0xd0, 0x0, 0xf174}, {0x2, 0x1, 0x6, 0xf}, {0x5, 0x2, 0x8, 0x1}, {0xcf, 0x3, 0x2, 0x10001}, {0x5, 0x7fffffff, 0xff, 0x5}, {0xe2d, 0x2, 0x74, 0x3}, {0x6, 0x2, 0xffffebf5, 0x3ff}, {0x80, 0x5de0, 0x8784, 0x7fffffff}, {0x3ef52728, 0x0, 0x800, 0x3}, {0x6, 0x0, 0x65, 0xd}, {0x1000, 0x5, 0x81, 0x8c}, {0x81, 0xfffffff8, 0x10c, 0xe}, {0x7fff, 0x8, 0xfffffff8, 0x5}, {0x6b5, 0x1000, 0x7, 0x20}, {0x4, 0x3, 0x4, 0x6}, {0xc, 0x400, 0xc, 0x101}, {0xc0000000, 0x10, 0x9, 0xc}, {0x7, 0x80000001, 0x5aeb, 0x7a}, {0x79, 0x8, 0x2, 0x4}, {0x3, 0x40, 0xa, 0x87}, {0x2, 0x3, 0x100, 0xfff}, {0x1, 0xfff, 0x7}, {0x5, 0x6, 0x2ed, 0x8}, {0x7, 0x0, 0x5, 0x3}, {0x0, 0x0, 0x97a, 0x6a}, {0x0, 0x1, 0x0, 0x7fff}, {0x2, 0x401, 0x1, 0xe0000000}, {0x4b, 0x6, 0x80000001, 0x871}, {0x8, 0x2, 0x950}, {0x7, 0x5, 0x3, 0x9}, {0x8, 0x100, 0x8000, 0xf2}, {0x2, 0xfffffffa, 0x674a1844, 0xdc9}, {0x9, 0x3, 0x1000, 0x5}, {0xfffffff8, 0x7, 0x4, 0xe31e}, {0x78c5138a, 0x6, 0x80, 0x4b}, {0x8000, 0x7fffffff, 0x1, 0xfffffff9}, {0xfffffffd, 0x7ff, 0x3ff, 0xd2}, {0xa147aad, 0x8001, 0x2, 0x7}, {0x10, 0x8, 0x800, 0x7}, {0x2a1, 0x4, 0x7, 0x1}, {0x7, 0x3, 0x4, 0x81}, {0x4, 0x81, 0x2, 0xffffffff}, {0x0, 0xfffffff7, 0xed6, 0x43}, {0x8, 0x80000000, 0x400, 0xff}, {0x1937, 0x681, 0x9, 0x6b}, {0x80000000, 0x1, 0x9, 0x17}, {0x9, 0x9, 0x7, 0x8}, {0x3, 0x3, 0x17d0}, {0x3, 0x7, 0x6, 0x2}, {0x10001, 0x0, 0x80000000, 0xd413}, {0x80000000, 0x7, 0x1, 0x7}, {0x9, 0x100, 0xfffffffd, 0x4}, {0xad1, 0x9, 0x0, 0x8}, {0xd, 0xe7, 0x9, 0x5}, {0x2, 0x800, 0x4, 0x7}, {0x9, 0x3, 0x9, 0x5}, {0x7ff, 0x10000, 0x8, 0x1}, {0x0, 0x7, 0x3, 0xb}, {0xe6ca, 0x8001, 0x6, 0x2}, {0x3, 0x5, 0x6, 0x5}, {0x41, 0xf, 0x3, 0x6}, {0x1, 0xf, 0x6, 0x9}, {0x60000, 0x2, 0x5, 0xffffffff}, {0xed4, 0xc25, 0x3c, 0x100}, {0x8000000, 0x177, 0x3, 0x40}, {0x5, 0x3, 0x10000, 0x8}, {0x2, 0x4, 0x5, 0x3}, {0x4, 0x6931, 0x7f, 0x10}, {0x3, 0x3, 0x1}, {0xc, 0x2, 0x7fffffff, 0x4}, {0x3, 0x4, 0x1, 0xfff}, {0xd0d6, 0x581, 0x3, 0x4e78}, {0x7, 0x3, 0x0, 0x200}, {0x17, 0x7, 0x7ff, 0x3bd3}, {0x4, 0x8001, 0x2, 0x3}, {0x8a45, 0xea, 0xf8eb, 0x43aa}, {0x5, 0xe7, 0x0, 0x1}, {0x19e30350, 0xfff, 0x7, 0x101}, {0x7f, 0xfffffff9, 0x8, 0x8000000}, {0x81, 0x9, 0x9, 0xfffffff8}, {0x3, 0x2, 0xa78, 0x472a}, {0x2, 0xcf6, 0x10000000, 0xd5}, {0xfffffff7, 0x200, 0x8ce0000}, {0x7, 0x6, 0x9, 0x1}, {0x7ff, 0x2, 0x9, 0x2}, {0x2, 0xfffffe00, 0x20, 0x57c}, {0x80ce, 0x80000000, 0x4, 0xffffffff}, {0xfffffffd, 0x3, 0x4, 0x10001}, {0x7, 0x675, 0x80000000, 0x4}, {0x6, 0xffff0000, 0x7f, 0x100}, {0x3, 0x0, 0x3, 0x7}, {0x81, 0x9, 0x100}, {0x13e, 0x0, 0x80, 0x4}, {0x6, 0x7, 0x5, 0x7}, {0xd4, 0x5, 0xf, 0x7}, {0x8, 0x8, 0x1a68424b, 0x45}, {0x1, 0xc, 0x6, 0x7fff}, {0xfffffc01, 0x5, 0x7, 0x5}, {0xd, 0xe02, 0x4, 0x6}, {0xfff, 0xb7, 0x4, 0xffffffff}, {0x7, 0x3ff, 0x5, 0xffff}, {0x7, 0x9, 0x72, 0x4}, {0x669, 0x80000001, 0x5, 0x7be}, {0x8, 0x8000, 0xfb, 0x1000}, {0x3, 0x8, 0x2, 0xca2d}, {0x49, 0x1, 0x5, 0x7}, {0x7fffffff, 0x4, 0x6, 0x5}, {0x6, 0x0, 0x5}, {0x7, 0x5336, 0x2, 0x4}, {0xfc5, 0x5}, {0x3, 0x400, 0x31, 0x76}, {0x9, 0x80000001, 0x9, 0x6}, {0x2, 0x101, 0x7f, 0x5}, {0x4, 0x8, 0x100, 0x4}, {0x672, 0x2a37, 0x0, 0xe}, {0x1000, 0x2, 0x69, 0x9}, {0x10000, 0x80000000, 0x80000000, 0x68}, {0x40000000, 0xdd, 0x1, 0x6}, {0x7, 0x7, 0xffff, 0x9b6}, {0x3, 0x5, 0x8, 0xb2}, {0x6, 0x7ff, 0x9, 0x2}, {0x8, 0x400, 0x4, 0x400}, {0x1, 0x1c0, 0x8, 0x3}, {0x3, 0xbf, 0xffff6652, 0x8}, {0x822, 0x0, 0x1, 0x80}, {0x8, 0xb, 0x1, 0x4}, {0xa, 0x1, 0x10000, 0x4}, {0x4, 0x61ecd83d, 0x1, 0xfffffff9}, {0x0, 0x8, 0x5, 0x56e0}, {0x1, 0x40, 0xd}, {0x0, 0x8, 0x5, 0x401}, {0x86e000, 0x8, 0x7, 0x2}, {0x8, 0xf5, 0x2, 0x5}, {0x9, 0x8c, 0x7f, 0x2}, {0x0, 0x3c, 0x3, 0x2}, {0x0, 0xb6, 0x3, 0x5}, {0x5, 0x0, 0x2, 0x200}, {0x7, 0x4, 0x2, 0xc}, {0x2, 0x2, 0x0, 0x6}, {0x80, 0x7ff, 0xd115, 0x7}, {0x6, 0x8000, 0x9, 0x4}, {0x8, 0xd, 0x2, 0x9}, {0x3, 0xfffffffc, 0x6, 0x97d9}, {0x401, 0xd, 0x1fa6, 0x10000}, {0x9, 0x1, 0x1, 0x47}, {0x8, 0x9, 0x10, 0x7}, {0x6, 0xffffff00, 0xfffffffa}, {0x6, 0x4, 0x5, 0x3}, {0x10, 0x4, 0x45ff9236, 0x5}, {0x5, 0xb26, 0x3, 0x2}, {0x4, 0x7fffffff, 0xb1b, 0x4}, {0x6, 0x1, 0xb, 0x4}, {0x6, 0x3, 0x1, 0xb}, {0x101, 0x100, 0x7ff, 0x4}, {0x0, 0x3ec5, 0x5, 0x300000}, {0x1000, 0x2, 0x5, 0x8}, {0xfff, 0x5, 0x3, 0x8}, {0xf, 0x7, 0x2, 0x5}, {0x0, 0x1, 0x8, 0x2}, {0x9, 0xffffff1b, 0x0, 0x4}, {0x3, 0xe, 0x1, 0x2}, {0x3, 0xb1e, 0x563}, {0x7, 0x5, 0x663b, 0x7ff}, {0xaa3, 0x7, 0x10000}, {0x3, 0x8000, 0x7, 0xfff}, {0x7fff, 0x4, 0x6, 0xfffffff8}, {0x36a8, 0x4, 0x3, 0x389b}, {0xfff, 0x0, 0x9, 0x4}, {0x7, 0xa413, 0x1, 0x8}, {0x8000, 0x1d4, 0x10000, 0x7}, {0x2, 0x6, 0x1, 0x51}, {0x4, 0xfffffffb, 0x80000001, 0x9}, {0x80000001, 0x2, 0x4, 0xfffffffb}, {0x6, 0x6, 0x9, 0x3}, {0x9, 0x1, 0xf, 0x3}, {0xffffffff, 0x5, 0x8}, {0x2, 0x3, 0x8, 0xcb}, {0xfffffffc, 0x7, 0x6, 0x8}, {0x10001, 0x0, 0x7fffffff, 0x9ab}, {0x200, 0x80000001, 0xfffffffc, 0x7}, {0x0, 0x10001, 0x8, 0x9}, {0x0, 0x3, 0x1, 0x60}, {0x100, 0x0, 0x3, 0x9}, {0x1, 0x8, 0x5}, {0x100, 0x20000, 0xfc}, {0x3, 0x5, 0x8, 0xc4b}, {0xffff9601, 0x3, 0xe88, 0x6}, {0x8, 0xffff, 0x0, 0x5}, {0x0, 0x0, 0x7, 0x3}, {0xfffffff9, 0x1000, 0x531, 0x3ff}, {0x0, 0x6, 0xa0, 0x1}, {0x6, 0x80000000, 0xae5a, 0x41f}, {0x3, 0x10000, 0x6, 0x2}, {0x1, 0x4, 0x8, 0x10000}, {0x0, 0x80, 0x7, 0x2}, {0x7, 0x262, 0x7, 0xa9b4}, {0xffff, 0x5a38, 0x6, 0xc8e}, {0x5, 0x4, 0x6, 0xfffffff2}, {0x3, 0x0, 0x2, 0x8}, {0x3, 0x7d9, 0x3e32fa70, 0x8}, {0x23, 0x9, 0x9, 0x6}, {0x71, 0x4, 0xffff0000, 0x8000}, {0x8, 0x9, 0x9, 0x7ff}, {0x7ff, 0xfffff43c, 0x2, 0x9}, {0x3, 0x0, 0x4, 0x83}, {0x8, 0xa, 0xfffffff1, 0x2}, {0x6, 0x6, 0xfffffffd, 0x8}, {0xffffffff, 0x0, 0x9, 0x9ed}, {0x4, 0x0, 0x0, 0x5}, {0x9, 0x3, 0x3, 0x1}, {0x8, 0x2, 0x4, 0xd11}, {0x101, 0x8001, 0x100, 0x9}, {0x1, 0x10001, 0x10000, 0x10100000}, {0x80000001, 0x7f, 0x10000000, 0x9}, {0x8, 0x2, 0x8, 0x8}, {0x2, 0xc4f, 0x40, 0x3}, {0x4, 0x4, 0x5, 0x8000}, {0xfffffffd, 0x7, 0x7, 0x6db5}, {0x10001, 0x6, 0x5, 0x8000}, {0x6, 0xff, 0x9151, 0x1}, {0x100, 0x39da, 0xb3, 0x6c28}, {0xffffff80, 0xb, 0x2, 0x7}, {0xb82c, 0x0, 0x9, 0xffffffff}, {0x2, 0x9, 0x18, 0x10}, {0x1, 0x5, 0x2, 0xfff}, {0xe, 0x2, 0x9, 0x56}, {0xe66, 0xb19, 0x1, 0xffffff81}, {0xfffffffb, 0x1, 0xb, 0x9}, {0x8, 0x4, 0x2}, {0x1, 0x5, 0xfffffffe, 0x4}, {0x1, 0x8000, 0x1, 0x9}, {0x80000001, 0xffffffc0, 0x6, 0x5}, {0x32, 0x1, 0x3e, 0x9}, {0xe37d, 0xffffffff, 0x1, 0x1}, {0xf, 0x8, 0x3, 0x8000}, {0x5caa3e6b, 0x200, 0x100, 0x2}, {0x3, 0x8, 0x5, 0xc}, {0x2, 0x1, 0xbbf9, 0xa}, {0x2, 0xd2, 0x8, 0x9}, {0x4, 0x3, 0xbb4, 0x789c}, {0x1, 0x80, 0xc, 0x5}, {0x6, 0x94, 0x5, 0x7fffffff}, {0xffff7f6b, 0x2, 0x1, 0x3ff}, {0x2, 0x4, 0x0, 0x7}, {0x1, 0x7ff, 0x2, 0x14b9}, {0x3, 0x6, 0x9, 0x80000001}, {0x7, 0x3fe, 0x4, 0x3}, {0x24, 0x4, 0x5, 0x2}, {0x18, 0xe4, 0x2, 0xfffffffd}, {0xa, 0x7f, 0x9, 0x2}, {0x8, 0x6, 0x4, 0x8}, {0x2000000, 0x5, 0x34, 0x291a}, {0x7, 0xd1bc, 0x5, 0xfffff000}]}, 0x2eb6)
syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff)

7.790991416s ago: executing program 0 (id=83):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}}, 0x20040084)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000500000000000800060000020000080007"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a440170102030109026420020100680009040100de020d0000052406f90105240000000d240f0100000000000000000006241a001c0008240821e407840009058103000200ee000904010000020d00"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f0000000880)="3d25ab324119c4cbd0017085080092624cf43f7b424432fc2142a9969ce36ebb5dac", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x10004000, &(0x7f00000002c0)="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", 0xfc, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000008c0)="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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]})

7.226524674s ago: executing program 3 (id=88):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000800008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x67, &(0x7f0000000080)}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x6, &(0x7f0000000440)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x49, 0xfffffffc}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x1, 0x7, 0x4, 0x6, 0x30, 0x10}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="93fc85ff30d22ecafcc67af208004500002000000000002f907800000000e0000001320088be000c907812000001"], 0x0)
fsync(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r1 = fanotify_init(0x8, 0x1000)
fanotify_mark(r1, 0x1d, 0x9, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x1a)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000fd1900008400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000080020000000000000000000000000000000000000040000000"], 0x50)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={<r5=>0x0})
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000001c00)={0x2c, &(0x7f0000001a00)={0x20, 0xf, 0x4, "624c9637"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0035cc0000000000000681"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000140)={0x20, 0x15, 0x4, "f546dfbb"}, 0x0, 0x0})
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
fanotify_init(0x200, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0)

6.348467867s ago: executing program 1 (id=92):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000440)=0x2000000, &(0x7f0000000480)=r2}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503}, 0x18}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r3}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r1, &(0x7f0000000240), &(0x7f0000000600)=""/137}, 0x20) (fail_nth: 3)

6.285680741s ago: executing program 4 (id=93):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000001c0)=0xfffff524, 0x4)

6.18374083s ago: executing program 4 (id=94):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x18, 0x3, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x7, 0x0, 0x3, 0x3f5, 0x5}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = dup(r8)
sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007"], 0x40}, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
setns(0xffffffffffffffff, 0x2000000)
sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x74, r10, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r11 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r12, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000002c0)={r12, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f0000000580)=ANY=[@ANYRESOCT=r12, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

5.923493585s ago: executing program 0 (id=95):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc080)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
sendmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80)

5.516018257s ago: executing program 1 (id=96):
unshare(0x40400)
r0 = epoll_create1(0x80000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x90002008})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$setown(r2, 0x8, 0x0)
ftruncate(0xffffffffffffffff, 0x6000000)

5.319103528s ago: executing program 0 (id=97):
userfaultfd(0x801)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
timer_getoverrun(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffefffd}, 0x94)

5.179815228s ago: executing program 2 (id=98):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x6, {0xba7, 0x5, 0x0, {0x6, 0x8000000000000001, 0xef09, 0xe5d2, 0x1, 0x81, 0x1, 0x6, 0x2, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYBLOB="8abad80e4a53072a5a1147b83c3882280a70bafa662b3556be039436e46f0572c9937aac2ecb9d7d94a07beddd", @ANYRES8=r3, @ANYRESHEX=r3], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x2, 0xa, 0x73)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)

5.170330463s ago: executing program 4 (id=99):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x4}, 0x14)
syz_emit_ethernet(0x7a, &(0x7f0000000e00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv6=@gre_packet={0x9, 0x6, "24350e", 0x44, 0x2f, 0xff, @remote, @empty, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0xe1, 0x1, 0x1, 0x2, 0x0, 0xc}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x4, 0x2, 0x0, 0x0, 0x6, 0xb1}, 0x2, {0x0, 0xfc7d, 0x3, 0x1e, 0x1, 0x1, 0x2, 0x1}}}}}}}}}}, 0x0)
syz_extract_tcp_res(0x0, 0x5, 0x2)

5.068252188s ago: executing program 1 (id=100):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

4.713086885s ago: executing program 4 (id=101):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0xfffffffe, 0x400, 0x6, 0x7aa, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x4, 0x104})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000002440)=0xd)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "48fb8a04"}]}}, 0x0}, 0x0)
read$FUSE(r3, 0x0, 0x0)
openat(r3, &(0x7f0000000080)='./file0\x00', 0x142, 0x82)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0)

4.577354503s ago: executing program 0 (id=102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x121040, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x88)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206012a2d08000034e4000000000a00000005000100060000000500040000000000090002007380003100000020050005000a00000011000300686173683a69702c706f72740000000014000780080008400000005005c91400f8000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000885}, 0x2)
r2 = eventfd2(0x400, 0x80800)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000000200)={0x0, 0x0, 0x7})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x101080)
ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000600))
close_range(r4, r1, 0x2)
r7 = signalfd(r2, &(0x7f0000000c00)={[0xb2b]}, 0x8)
r8 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x4407, 0x0, 0x1, 0x28b}, &(0x7f00000001c0)=<r9=>0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
timer_create(0x3, 0x0, &(0x7f00000000c0)=<r10=>0x0)
timer_settime(r10, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000200)=<r11=>0x0)
timer_settime(r11, 0x1, &(0x7f00000018c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
io_uring_enter(r8, 0x5fc8, 0xfffff800, 0x4, 0x0, 0x0)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r13, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r13, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r14 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r14, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r13, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32)
connect$pppl2tp(r12, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0xe4ff, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26)
ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x6f, 0xd, 0x80, "8dd7966fb40ad935ce51e3b18c20f55e5ff881ee3884048ee528a62a384ed10f", 0x2036b12})

3.853698786s ago: executing program 3 (id=103):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timerfd_create(0x8, 0x0) (fail_nth: 3)

2.051304926s ago: executing program 3 (id=104):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

1.787079008s ago: executing program 1 (id=105):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x214, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x202, 0x1, 0x1, 0x9, 0xa0, 0xa, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0xa, {{0x6, 0x24, 0x6, 0x0, 0x0, "11"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x84e1, 0x68, 0x2e6, 0xb}, [@network_terminal={0x7, 0x24, 0xa, 0xd, 0xf0, 0xab, 0x80}, @obex={0x5, 0x24, 0x15, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mdlm_detail={0xc3, 0x24, 0x13, 0x2, "e1f0359da83dc2394f69f383f6a5d69ae82cd53a8c917a7e499085e1bee2a48f445cbdb1b5e4379c6967044726814a8dcdccda50098c238982cd4856803ee8a78076d4af16bbb5733972f8c89d9afe883b3cd1088d3d91cb7e8bcd36e1dd6b097b400d4d8fcd3eeb2e3e3eeaa5de5795984194e9c9f76c9042ce308421a390aeaf39c2ce9aa07e1c144bd7c39b5ad93053b2ee0ed1c2cf80d70818455d14b76d586049e5d3ba4ab7062c2d9387a4fdccdb5c0a7d7a089a412e34cf36b07198"}, @mdlm_detail={0xf2, 0x24, 0x13, 0xa, "ac555e27a5e2d679b2d30bfdd283ad5e569f95592d5ae5bc92de0926ee481551e25e0da2003fbc83b2e28414eea82f8ea3b31c8f3f1dd3825ab65c16e9a606caab8ca17b504fefcf460a041953b1a2e2190d99a3922a5f289c215746c01513db949ab8bb49517ea912e12dd54458981dce7d52ef575a1cc713adde35cad485559f3224543b054f5938c0c2553454211eb2d50316524132047eb2d8fe4350df638e23fc923c7f847bb8640d37a0fbbaa5ff7054640113cfc00dd6785ab28ebf45e9b34813071b409aaae1e02d74605f4257342a8d03489b0ce0293a1037131f3d22f129d4d71471656340953c6f0e"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0xc8, 0x38}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6e, 0x12, 0x3}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x2, 0x5, 0xfc, 0x40, 0x5}, 0xb, &(0x7f00000002c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x7f, &(0x7f0000000300)=@string={0x7f, 0x3, "78e822d07c8b8cac6b4c9853c808e055a6639bfecfeab361ecb4adb695ec61c76fa301fcc275c983e0fb9723934dd8bbdae4c8e9b0fd33f4f585436fe105569d0484270004b948cd5d5561caf40c2c66e63f8ed668ff176ea38b1136cba8eded2a5fdab83e6a78c19970e870e2de37ccc4e1386a19f26f3c6522aa4696"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}, {0xed, &(0x7f00000005c0)=@string={0xed, 0x3, "108c8d3f3486fcae9bb66f59f89be2e79ad13a20d2c58b8c84d8dde9b778a20392aa0a58d30740e18fb273b1d0627b5b3c1da8d9352396f9a377a4bc9a07d07b2fa72dbc9a430a3a4053fbb28f167f5f95238a4585aa75ed8b646afa4af8ba42165a3626ec0e8ca161634c072902cf0276869167d86ec6ab4fb9a2d23f2d7c36e5a6065067e5940b37e2889f9fac0f4d8117a1f67a6eebb6cf5837a6fba16e60bf42544210c347478402820b23b0beded5c359a4c6948d953e8cc64cfd9ea56283983860fe202229205e3b8417ee5f4f9808e10345445c1b362c4a93efbbb0ba50bd98abd95ed34d15c680"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40a}}, {0xff, &(0x7f0000000a00)=@string={0xff, 0x3, "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"}}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$9p(&(0x7f0000000140), 0x80000)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x1)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00.'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014800d02b7030000000000008500000083000000bf090000000000005509010000000000950000000000000007090000080080ffbf91000000000000b7020000000000008500000085000000b70600000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x1}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, r2, 0xaec}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r4, 0x0, 0x0}, 0x10)

1.68274034s ago: executing program 3 (id=106):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000019140), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000f3ffffff0800000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r4], 0x24}}, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYBLOB="770500000000"])
io_setup(0x10, &(0x7f0000000000)=<r8=>0x0)
sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000002400)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002200)={0x4c, 0x13, 0x2, 0x70bd2a, 0x25dfdbfc, {0x2c, 0x8, 0xcc, 0x2, {0x4e23, 0x4e20, [0x1, 0x0, 0x81, 0x40], [0x96, 0x7, 0xffff, 0xe0], 0x0, [0xc2fa, 0x8]}, 0x9, 0x97b9}}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800)
r9 = dup(r5)
io_submit(r8, 0x4, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f0000000040)="b40c1c080c84590241938fa7d1cea6e453c244fc7188beb96ca6968f7540d777fab96ba491c9d332ccae86ce046922dd144bca3cbdd15bec8ae76564353226a69e974e1099c415dc11acbdb3d497d4bc", 0x50, 0x8001, 0x0, 0x2, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, &(0x7f0000000140)="4c881d1da73c97fc36a0fcacb729e812b9deb66f6f2d93cf830a9e51a6864f58921d5e6b73e9116690b0a38df4dc3f2da2d23bf52e9512be5cadaf8468f71641a5a2144285cd015eef80c0628bfd4382316c20ff8b8f7feaed696afd82bec698acb29a9ba9b01b2dd448f90ec7dd1fa4167847745087fa87447078cfcbb7f0569ed8ba", 0x83, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x8, r5, &(0x7f0000000240)="f7e23a01f6763db5367b949faae9f2a684fd96b38fac169b8fb73baa12aa79429cc31633eea1dc8f378d729cc00427466dfd13bfcaf4314e202350a3a2", 0x3d, 0x6, 0x0, 0x0, r9}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x8, r5, &(0x7f00000002c0)="f77a15a718ea8517dd92ab7e7cc2904affd95f23eaa830f034742464e35babe46c4dc7896f553ab7bc599b6a6aaea02830d5582eae8eaf9bb1ab1ac1d9e62869f2b6eb2af47d79d3c9293385b59bdb441ff9b55cd13822b9b3d5e87daf1b164008efcbea7b7b9f07983477ebc546fc5994c050ac521fe8df63bb12b5f591a67c43897b3bbb8305519e18277a1e830c7328f50822b75473f31a5b107b10e0652a76ddee1946ff53e82d4344a97aa8455e2987008cba91999b15a2e3684d142bc4f5845be9fcc7968265488bb3", 0xcc, 0x92}])
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
read$FUSE(r10, &(0x7f0000000180)={0x2020}, 0x2020)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r12 = accept$alg(r11, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
recvmmsg(r11, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000040)=""/121, 0x79}, {&(0x7f0000000bc0)=""/51, 0x33}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000000d00)=""/103, 0x67}, {&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f0000000e80)=""/90, 0x5a}, {&(0x7f0000000f00)=""/66, 0x42}, {&(0x7f0000000b00)=""/120, 0x78}, {&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000f80)=""/145, 0x91}], 0xd}, 0x3}], 0x1, 0xc0032032, 0x0)
sendmmsg$alg(r12, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810cac7d486d", 0x6}, {&(0x7f00000033c0)="f5ac467833c129406b9fb74227deb178a089305826e44cfd7f63e9cdf5564909270b6644bb52a5dc8491543df407b54008cbe40ce096d8bcbfb31922bb83ab200a8552b045cbcb3858af82ca2bbafa8c9c88e0c6d7f5a814cd8c50c7f0b30d0f5d80d8edf340a5bbcd0f661371f4eca10ce1043da352b209a70a2a5917b4d5c9b3c9aff3646d66279facf5006a353cc21b2527beb2a2966b2de5f16d1dff662922cf7428691eb0196ae4c102c48740f73f2983285308af441ecb9901e7ce508ac319f8536ec7c7ac38cc994dcc4108c70766668e79a3f15f5e26bb32c42a044c59ac3eb5a12c29b8faf47240bbeed4f9cc2151a5a7339c6a9fc3a264eef894466367ff4e99bd1cd158ad892d22e9c74910f4dcc4a15d0bda7cfb6cd24ae68248164119c05a4cf8209eb7e8b1eb7fadcd71bb5975694206ab0c79e91e4e28bc66f800a25a28abe4862ba2ad30f5b1712dc576fd3dbd90d3b5fd419a027fea14f4b0f0d7e53eb8b44e5876b7163963bbc705962b8b93fd2b93ace470cc4ffd122b966fd43f3367327f10c6a85bc67ae3fdc22235dbcadb37f6fdbf3a4ea7d59ece8281881664c1a63890863a9c3822fbf1d5a3db21a5b28b5f850a0b3f038f70cc395b16d90e39d1dba622cfd980e2a87e5f3652bbe23e77678fcc261d6c95d0e4c10311fe24a479ccb9c9e9a52df2d71f71ca190e1a0f43e0a6aadc4e5b847e3cf4bff7918486551142533ab6ec65d56c13fb2e8b42266f6b4c646f641c27ac71caf1bd42715072ae7d0455f6c3da37780aacb54916fea5ae7da88ee7bf9a89c8da7cc8aa6995569ec94acc79fac6dbcc55ce0bc74916afb52719331c6d913d67da0bef31ffe6d03f55b483c1e03062b47ee149feca8ab633b14243ad6d836ce2d36bdae6de38dab024012264d4053e1bf67a7bb5d50c23f1332ae964df729aee8314d37ba7961390a57f8a6608a2613b566247600b0cd673c4e04e2b5046325871ae90cf614b6d596eeb1d7c33f0317cad3d98b92cc04379e6d07ce68d56ab5b470f29b6294965171385cd9053a858ec09e8c2c3a1bb0fa6b2ab3607a5931cfaeee6f2832ccb28adc567ada1d59b7cbe6577e84a9a33cb73dddb5521853df098850b4f9c5209d3a838e6b23ba524efb3d7308036e563b0d0d439361a20c8269125496257763fb69fa3efe949d5949356ea2c216fdd06fff6616caebb718e0d3f34541da48466e70863b147560534da4e5bb6d0908e0ac04d3bc186cda7637979f697a1a44ac3aa54ea99f32f2d1b50dd9e2ce04428e5e4e6290d20718d916b361b99d5a461b9924f94e05bde15509f60648152900b7a4b10d1408109501c96122c2e488519c05b2fe97cf7888e0b0e37ee9c3a24cd8dde1a3edeb86d79451bc7ec827dcc205e40543f8f2c426171546d7e7cebf492603f63d74ed47566f177da6d92ff268547f3a02cec476f2aa084f29dca079835b72aadb8d0a6b1304667b6197c51f6846b0f7195acb5d5032ebb4fced8c631dbc97063755e041ed17609b1b6e82fa5da5e2f699abddf630cf8e7975b3f577d66ba205c4a803e44ce54d08815e2bea6f6321741499c239b2046fb203b63e05fcbf4d1346dd215647eb1a6a54018f842e100b83e5190b74aa7dedb8426ace1b7a2ef7128fd7981b2c9b7e32b5a66d74ad97e84ad30f6861a37695dc10527601eba116fba69c7fcc87053b8796c53b25177dcbaa1c55401623ab3d114f3752c1310cff30c712d29640bfbeee1a3c983185ca73e021c60438c73b760124267444f737e29f30bb4fc5fd78252f7928aa5f0e5e261b5dc17c82dce3db5f20a335bbbb8817b1898b65cf8f6a02e9a69e3a3119899d64cdaa162c215f4b2357db6c8e4f6421192422caf89035ef88ef07a41e084e942ef57c62962129a79acd161ea05e114d1c485f729f2d67d4dc283488f68e5c4f72114e04a1236fffe2d58d9c1a6f51d9fbea8d810de802c8a0032689f9c091b1f0dba896d647dd6c14fdea592d18d7888abd812cd6f01cd880358f7588f1517e6c256465d0dce577bd6b450d974e619dfb2f8a945a8921622cce585a219d26bb01d02fd4ba2132f3ce4405c382af5624c22a9c5b42cc8ac951a76d6bb24dea6655c577f5cd98d0e840dacfd418e68103cd1d01edeee7cab170b990d6b93e354d908095c545cc458d5e2030dd5b6c225646a06f8aedb59fc853b0bca8e8aa5357803a6a3c494e793da5267f6c1be4f775144c61fbc29ae97717e56dbf71d24856e54f4b4801d088049ed2150baa4b7d2bdb856493e03d0a4999f3118558a32ce5c40ee257b1b90a185e5f83b733c20b56ba9525a47012cb251f4b2c4e9333ba1d275c2d69460ad58f3bcdbfcd90311681f3ddf31921e1b6606672a3dd4fb6c4a58ebb8d1fa65ca4024056a1217b5da95552b91ab17e523b01521cce7681bbe823d7bd23ea466e3f5f68298d956d686a480159cb3a4f0e22c287ec64115777c861a96ca88a13853748e4dbc6648e321572717260e638733f3e5cee62b82eebf5e975609397b9ff4a30c36c6aa7c25fdab51a2785c14cdc8170b265ae0c7777b1627c6a5b9c9c3cece28984bdabe9bfcd25edd0ea192a637b016f2af0f35c4dab0badeb77e7f", 0x74b}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004)
recvmsg(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/124}, {&(0x7f00000006c0)=""/128}, {&(0x7f0000000740)=""/105}, {&(0x7f00000007c0)=""/16}, {&(0x7f0000000800)=""/4}], 0x17f}, 0x102)
close_range(r0, r0, 0x0)
fchdir(r0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r5, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.431288279s ago: executing program 2 (id=107):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/power/pm_freeze_timeout', 0x1a1042, 0x0)
write$tcp_mem(r0, &(0x7f0000000280)={0x800800008000000e, 0x2d, 0x2, 0x3a, 0x2000000005, 0x2c}, 0x48)

1.383275663s ago: executing program 4 (id=108):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002000010000000000000000000a0020400000000f00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) (async, rerun: 64)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) (rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)
ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000))
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000007, 0x22010, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x11c, &(0x7f0000000140)=0x9, 0x0, 0x4) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000f60f0400ff01008000000000000000000000007f0c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000000018000680140004002001000000000000000000000000000100000000"], 0xac}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000051c000480180001800d00010073796e70726f867900000000040002800900010073797a30000000000900020073797a320000000000000000000000000500000a00"/120], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)
ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, 0x0) (async, rerun: 64)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) (async, rerun: 64)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01002cb97000fadbdf25250000000a0001007770616e3000000005002b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x20000014)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="340100001000010000000000dd1a000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007"], 0x134}}, 0x200008c0)

1.299588584s ago: executing program 2 (id=109):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
close_range(r0, r0, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r1, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.212292308s ago: executing program 4 (id=110):
socket(0x2c, 0x3, 0x1000)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x17)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0)

1.190422269s ago: executing program 2 (id=111):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%-5lx  \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xd1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x1, 0x9, 0xe, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x2, 0x8, 0xffff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r1, r1, r1], &(0x7f00000002c0)=[{0x2, 0x1, 0x6, 0x1}, {0x3, 0x4, 0x8, 0x2}, {0x4, 0x2, 0x10, 0x7dca1187cdc5e66}, {0x1, 0x5, 0x5, 0x9}, {0x2, 0x2, 0x0, 0x1}, {0x4, 0x5, 0xf, 0x7}], 0x10, 0x8001}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)

1.043341902s ago: executing program 2 (id=112):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f0000000300)={@val={0x70, 0x886b}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x3, 0x0, 0x44, 0x64, 0x0, 0xb1, 0x1, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2d}, {[@end, @ssrr={0x89, 0x13, 0xa7, [@private=0xa010100, @multicast2, @loopback, @multicast1]}, @noop, @timestamp={0x44, 0x10, 0x9f, 0x0, 0x9, [0xfffffff7, 0x6, 0x7]}]}}, @info_request={0xf, 0x0, 0x0, 0x5, 0x9}}}}}}, 0x56)

911.634279ms ago: executing program 3 (id=113):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000009000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000bfb470e4326fc02a126ced78f52400"/42], 0x50)
ptrace$getregs(0xc, r0, 0x0, &(0x7f0000000040)=""/24)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000240)={0x3f, 0x3, 0x102, {0x102, 0xe, "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"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000d40), 0x0}, 0x20)
kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

658.517252ms ago: executing program 0 (id=114):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000007000000000000001f00000091114c000000000095"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

59.531007ms ago: executing program 2 (id=115):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000"], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

0s ago: executing program 3 (id=116):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts.
[   84.475116][ T5786] cgroup: Unknown subsys name 'net'
[   84.756244][ T5786] cgroup: Unknown subsys name 'cpuset'
[   84.811435][ T5786] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   86.721669][ T5786] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.744501][  T856] cfg80211: failed to load regulatory.db
[   89.030077][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.050387][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.055916][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.056826][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.058096][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.062024][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.063570][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.063881][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.066984][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.072471][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.122000][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.136891][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.138987][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.147185][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.148015][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.199191][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.211537][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.214686][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.215465][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.231087][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.251005][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.256944][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.258482][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.262798][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.263588][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.037333][ T5803] chnl_net:caif_netlink_parms(): no params data found
[   90.112352][ T5799] chnl_net:caif_netlink_parms(): no params data found
[   90.225811][ T5800] chnl_net:caif_netlink_parms(): no params data found
[   90.344496][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   90.400448][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   90.469673][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.470655][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.471314][ T5803] bridge_slave_0: entered allmulticast mode
[   90.473997][ T5803] bridge_slave_0: entered promiscuous mode
[   90.543424][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.543560][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.543746][ T5803] bridge_slave_1: entered allmulticast mode
[   90.545400][ T5803] bridge_slave_1: entered promiscuous mode
[   90.547864][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.548010][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.548132][ T5799] bridge_slave_0: entered allmulticast mode
[   90.549881][ T5799] bridge_slave_0: entered promiscuous mode
[   90.627428][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.627523][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.627636][ T5799] bridge_slave_1: entered allmulticast mode
[   90.629376][ T5799] bridge_slave_1: entered promiscuous mode
[   90.725432][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.725552][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.725671][ T5800] bridge_slave_0: entered allmulticast mode
[   90.727184][ T5800] bridge_slave_0: entered promiscuous mode
[   90.761070][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.802087][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.802228][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.802340][ T5800] bridge_slave_1: entered allmulticast mode
[   90.804124][ T5800] bridge_slave_1: entered promiscuous mode
[   90.807378][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.810149][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.914660][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.915004][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.915125][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.915228][ T5809] bridge_slave_0: entered allmulticast mode
[   90.916957][ T5809] bridge_slave_0: entered promiscuous mode
[   91.145319][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.145460][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.145574][ T5809] bridge_slave_1: entered allmulticast mode
[   91.147149][ T5809] bridge_slave_1: entered promiscuous mode
[   91.148412][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.148521][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.148621][ T5808] bridge_slave_0: entered allmulticast mode
[   91.150169][ T5808] bridge_slave_0: entered promiscuous mode
[   91.153834][   T60] Bluetooth: hci1: command tx timeout
[   91.217114][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.219228][ T5803] team0: Port device team_slave_0 added
[   91.221593][   T60] Bluetooth: hci0: command tx timeout
[   91.221698][   T60] Bluetooth: hci2: command tx timeout
[   91.277578][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.277688][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.277792][ T5808] bridge_slave_1: entered allmulticast mode
[   91.279385][ T5808] bridge_slave_1: entered promiscuous mode
[   91.283872][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.301333][ T5117] Bluetooth: hci3: command tx timeout
[   91.304237][ T5803] team0: Port device team_slave_1 added
[   91.314459][ T5799] team0: Port device team_slave_0 added
[   91.380885][ T5117] Bluetooth: hci4: command tx timeout
[   91.399710][ T5799] team0: Port device team_slave_1 added
[   91.403346][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.464768][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.467829][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.469996][ T5800] team0: Port device team_slave_0 added
[   91.491622][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.491639][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.491662][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.537116][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.540307][ T5800] team0: Port device team_slave_1 added
[   91.541479][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.541492][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.541516][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.544086][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.544099][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.544121][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.589807][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.589823][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.589847][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.627822][ T5809] team0: Port device team_slave_0 added
[   91.691623][ T5809] team0: Port device team_slave_1 added
[   91.693482][ T5808] team0: Port device team_slave_0 added
[   91.697013][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.697031][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.697045][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.727444][ T5808] team0: Port device team_slave_1 added
[   91.750636][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.750652][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.750677][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.831170][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.831183][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.831197][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.855396][ T5803] hsr_slave_0: entered promiscuous mode
[   91.856938][ T5803] hsr_slave_1: entered promiscuous mode
[   91.884552][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.884568][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.884591][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.885858][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.885870][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.885892][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.899990][ T5799] hsr_slave_0: entered promiscuous mode
[   91.901870][ T5799] hsr_slave_1: entered promiscuous mode
[   91.902899][ T5799] debugfs: 'hsr0' already exists in 'hsr'
[   91.902994][ T5799] Cannot create hsr debugfs directory
[   91.905650][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.905663][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.905686][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.052199][ T5800] hsr_slave_0: entered promiscuous mode
[   92.053038][ T5800] hsr_slave_1: entered promiscuous mode
[   92.053674][ T5800] debugfs: 'hsr0' already exists in 'hsr'
[   92.053693][ T5800] Cannot create hsr debugfs directory
[   92.724253][ T5809] hsr_slave_0: entered promiscuous mode
[   92.725153][ T5809] hsr_slave_1: entered promiscuous mode
[   92.725713][ T5809] debugfs: 'hsr0' already exists in 'hsr'
[   92.725736][ T5809] Cannot create hsr debugfs directory
[   92.772888][ T5808] hsr_slave_0: entered promiscuous mode
[   92.773726][ T5808] hsr_slave_1: entered promiscuous mode
[   92.774322][ T5808] debugfs: 'hsr0' already exists in 'hsr'
[   92.774341][ T5808] Cannot create hsr debugfs directory
[   93.221073][ T5117] Bluetooth: hci1: command tx timeout
[   93.300927][ T5117] Bluetooth: hci2: command tx timeout
[   93.300963][ T5117] Bluetooth: hci0: command tx timeout
[   93.380898][   T60] Bluetooth: hci3: command tx timeout
[   93.460848][   T60] Bluetooth: hci4: command tx timeout
[   93.582243][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.629780][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.648288][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.699290][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.793311][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.829392][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.869791][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.924820][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   94.044031][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.079291][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.099670][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.154631][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.290450][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.321421][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.360915][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.413137][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.552325][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.612914][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.613165][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.657972][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.678538][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.783570][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[   94.789327][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.832490][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.832907][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.869028][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.869341][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.903425][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[   94.942662][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.942780][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.966022][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.987115][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.987252][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.062454][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[   95.092546][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.107802][  T990] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.109384][  T990] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.175309][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.175418][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.258154][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.260497][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   95.302753][   T60] Bluetooth: hci1: command tx timeout
[   95.325318][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.325599][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.366489][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.377843][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.383169][   T60] Bluetooth: hci0: command tx timeout
[   95.383206][   T60] Bluetooth: hci2: command tx timeout
[   95.400526][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   95.460927][ T5117] Bluetooth: hci3: command tx timeout
[   95.469629][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.469839][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.509871][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.513408][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.541181][ T5117] Bluetooth: hci4: command tx timeout
[   95.717035][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.878978][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.003918][ T5803] veth0_vlan: entered promiscuous mode
[   96.081704][ T5803] veth1_vlan: entered promiscuous mode
[   96.141993][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.190395][ T5799] veth0_vlan: entered promiscuous mode
[   96.258667][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.272636][ T5799] veth1_vlan: entered promiscuous mode
[   96.297901][ T5803] veth0_macvtap: entered promiscuous mode
[   96.327949][ T5803] veth1_macvtap: entered promiscuous mode
[   96.417480][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.435790][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.482776][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.485890][ T5799] veth0_macvtap: entered promiscuous mode
[   96.526572][ T5799] veth1_macvtap: entered promiscuous mode
[   96.551496][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.555444][ T5809] veth0_vlan: entered promiscuous mode
[   96.559551][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.593375][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.609751][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.690285][ T5809] veth1_vlan: entered promiscuous mode
[   96.700676][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.772225][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.874929][   T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.882497][   T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.901103][   T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.903229][ T5808] veth0_vlan: entered promiscuous mode
[   96.925615][   T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.034995][ T5808] veth1_vlan: entered promiscuous mode
[   97.039063][ T1445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.039084][ T1445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.115751][ T5809] veth0_macvtap: entered promiscuous mode
[   97.120488][ T5800] veth0_vlan: entered promiscuous mode
[   97.187865][ T5809] veth1_macvtap: entered promiscuous mode
[   97.216063][ T5800] veth1_vlan: entered promiscuous mode
[   97.227016][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.227044][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.300368][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.300390][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.344482][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.381771][ T5117] Bluetooth: hci1: command tx timeout
[   97.392405][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.405495][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.405516][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.428914][ T5808] veth0_macvtap: entered promiscuous mode
[   97.461345][ T5117] Bluetooth: hci2: command tx timeout
[   97.461376][ T5117] Bluetooth: hci0: command tx timeout
[   97.473993][ T1017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.478938][ T5808] veth1_macvtap: entered promiscuous mode
[   97.486110][ T1017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.492171][ T1017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.498252][ T1017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.499129][ T5800] veth0_macvtap: entered promiscuous mode
[   97.545544][   T60] Bluetooth: hci3: command tx timeout
[   97.575832][ T5800] veth1_macvtap: entered promiscuous mode
[   97.622755][   T60] Bluetooth: hci4: command tx timeout
[   97.702218][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.784978][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.800279][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.894012][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.911512][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.935151][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.942786][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   97.959188][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.978119][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.982732][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.997073][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.000498][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.000516][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.006053][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.015220][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.457482][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.457504][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.642967][ T5811] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   98.720412][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.720436][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.819975][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.819996][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.899749][ T5811] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   98.899783][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.899804][ T5811] usb 1-1: Product: syz
[   98.899818][ T5811] usb 1-1: Manufacturer: syz
[   98.899831][ T5811] usb 1-1: SerialNumber: syz
[   98.988055][ T5811] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   99.114640][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.114660][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.117673][  T807] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   99.160917][ T5883] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   99.275094][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.275128][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.344668][ T5883] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   99.344701][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.344722][ T5883] usb 2-1: Product: syz
[   99.344735][ T5883] usb 2-1: Manufacturer: syz
[   99.344750][ T5883] usb 2-1: SerialNumber: syz
[   99.424889][ T5883] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   99.430854][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   99.499287][    T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   99.570864][   T10] usb 4-1: device descriptor read/64, error -71
[   99.851693][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   99.991224][   T10] usb 4-1: device descriptor read/64, error -71
[  100.069412][ T5926] FAULT_INJECTION: forcing a failure.
[  100.069412][ T5926] name failslab, interval 1, probability 0, space 0, times 1
[  100.069530][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  100.069555][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  100.069566][ T5926] Call Trace:
[  100.069574][ T5926]  <TASK>
[  100.069583][ T5926]  dump_stack_lvl+0xe8/0x150
[  100.069618][ T5926]  should_fail_ex+0x46b/0x600
[  100.069651][ T5926]  ? __pfx_sock_alloc_inode+0x10/0x10
[  100.069677][ T5926]  should_failslab+0xa8/0x100
[  100.069700][ T5926]  ? __pfx_sock_alloc_inode+0x10/0x10
[  100.069723][ T5926]  kmem_cache_alloc_lru_noprof+0x8b/0x680
[  100.069754][ T5926]  ? sock_alloc_inode+0x28/0xc0
[  100.069782][ T5926]  ? __pfx_sock_alloc_inode+0x10/0x10
[  100.069805][ T5926]  sock_alloc_inode+0x28/0xc0
[  100.069829][ T5926]  alloc_inode+0x6a/0x1b0
[  100.069854][ T5926]  do_accept+0x144/0x760
[  100.069883][ T5926]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  100.069913][ T5926]  ? __pfx_do_accept+0x10/0x10
[  100.069973][ T5926]  __sys_accept4+0x139/0x230
[  100.070004][ T5926]  ? __pfx___sys_accept4+0x10/0x10
[  100.070031][ T5926]  ? __pfx_ksys_write+0x10/0x10
[  100.070070][ T5926]  __x64_sys_accept+0x7d/0x90
[  100.070101][ T5926]  do_syscall_64+0x14d/0xf80
[  100.070132][ T5926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.070151][ T5926]  ? clear_bhb_loop+0x40/0x90
[  100.070177][ T5926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.070197][ T5926] RIP: 0033:0x7ff18962c799
[  100.070217][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.070233][ T5926] RSP: 002b:00007ff18785d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  100.070252][ T5926] RAX: ffffffffffffffda RBX: 00007ff1898a6090 RCX: 00007ff18962c799
[  100.070263][ T5926] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  100.070273][ T5926] RBP: 00007ff18785d090 R08: 0000000000000000 R09: 0000000000000000
[  100.070283][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.070292][ T5926] R13: 00007ff1898a6128 R14: 00007ff1898a6090 R15: 00007ffd52e82248
[  100.070320][ T5926]  </TASK>
[  100.109534][   T10] usb usb4-port1: attempt power cycle
[  100.223135][  T807] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  100.295175][  T807] ath9k_htc: Failed to initialize the device
[  100.396790][  T807] usb 1-1: ath9k_htc: USB layer deinitialized
[  100.518608][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.522393][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.530913][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  100.551996][   T10] usb 4-1: device descriptor read/8, error -71
[  100.576432][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.597311][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.743128][    T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  100.744789][    T9] ath9k_htc: Failed to initialize the device
[  100.896507][    T9] usb 2-1: ath9k_htc: USB layer deinitialized
[  100.902162][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  100.924004][   T10] usb 4-1: device descriptor read/8, error -71
[  101.032849][   T10] usb usb4-port1: unable to enumerate USB device
[  101.154938][ T5907] usb 2-1: USB disconnect, device number 2
[  101.236354][ T5939] FAULT_INJECTION: forcing a failure.
[  101.236354][ T5939] name failslab, interval 1, probability 0, space 0, times 0
[  101.236391][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  101.236406][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  101.236413][ T5939] Call Trace:
[  101.236418][ T5939]  <TASK>
[  101.236424][ T5939]  dump_stack_lvl+0xe8/0x150
[  101.236447][ T5939]  should_fail_ex+0x46b/0x600
[  101.236465][ T5939]  should_failslab+0xa8/0x100
[  101.236479][ T5939]  kmem_cache_alloc_lru_noprof+0x8b/0x680
[  101.236496][ T5939]  ? __d_alloc+0x37/0x6f0
[  101.236515][ T5939]  __d_alloc+0x37/0x6f0
[  101.236534][ T5939]  d_alloc+0x4b/0x190
[  101.236548][ T5939]  ? lookup_one_qstr_excl+0xc8/0x360
[  101.236564][ T5939]  lookup_one_qstr_excl+0xdc/0x360
[  101.236581][ T5939]  filename_create+0x20e/0x370
[  101.236602][ T5939]  ? __pfx_filename_create+0x10/0x10
[  101.236625][ T5939]  filename_mkdirat+0xd2/0x520
[  101.236640][ T5939]  ? __pfx_filename_mkdirat+0x10/0x10
[  101.236653][ T5939]  ? do_getname+0x151/0x250
[  101.236668][ T5939]  __se_sys_mkdirat+0x35/0x150
[  101.236681][ T5939]  do_syscall_64+0x14d/0xf80
[  101.236697][ T5939]  ? trace_irq_disable+0x3b/0x150
[  101.236710][ T5939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.236722][ T5939]  ? clear_bhb_loop+0x40/0x90
[  101.236736][ T5939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.236748][ T5939] RIP: 0033:0x7f2c3b08c799
[  101.236760][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.236770][ T5939] RSP: 002b:00007f2c392c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  101.236783][ T5939] RAX: ffffffffffffffda RBX: 00007f2c3b306090 RCX: 00007f2c3b08c799
[  101.236792][ T5939] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c
[  101.236799][ T5939] RBP: 00007f2c392c5090 R08: 0000000000000000 R09: 0000000000000000
[  101.236806][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.236813][ T5939] R13: 00007f2c3b306128 R14: 00007f2c3b306090 R15: 00007ffef6545c98
[  101.236832][ T5939]  </TASK>
[  101.872388][ T5944] Illegal XDP return value 4294967274 on prog  (id 5) dev N/A, expect packet loss!
[  101.970152][ T5907] usb 1-1: USB disconnect, device number 2
[  102.086615][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.264989][ T5951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12'.
[  102.267691][ T5951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12'.
[  102.281644][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  102.281674][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.281692][    T9] usb 5-1: Product: syz
[  102.281705][    T9] usb 5-1: Manufacturer: syz
[  102.281717][    T9] usb 5-1: SerialNumber: syz
[  102.392382][    T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  102.574463][    T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  102.574665][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  102.830875][ T5907] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  102.929040][ T5964] FAULT_INJECTION: forcing a failure.
[  102.929040][ T5964] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  102.929074][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  102.929095][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  102.929104][ T5964] Call Trace:
[  102.929112][ T5964]  <TASK>
[  102.929119][ T5964]  dump_stack_lvl+0xe8/0x150
[  102.929148][ T5964]  should_fail_ex+0x46b/0x600
[  102.929173][ T5964]  _copy_to_user+0x31/0xb0
[  102.929199][ T5964]  simple_read_from_buffer+0xe1/0x170
[  102.929224][ T5964]  proc_fail_nth_read+0x1be/0x230
[  102.929249][ T5964]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  102.929272][ T5964]  ? rw_verify_area+0x2ac/0x4e0
[  102.929294][ T5964]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  102.929362][ T5964]  vfs_read+0x212/0xa80
[  102.929395][ T5964]  ? __pfx_vfs_read+0x10/0x10
[  102.929421][ T5964]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  102.929445][ T5964]  ? lockdep_hardirqs_on+0x7a/0x110
[  102.929472][ T5964]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  102.929502][ T5964]  ? mutex_lock_nested+0x152/0x1d0
[  102.929523][ T5964]  ? fdget_pos+0x252/0x320
[  102.929557][ T5964]  ksys_read+0x156/0x270
[  102.929603][ T5964]  ? __pfx_ksys_read+0x10/0x10
[  102.929650][ T5964]  do_syscall_64+0x14d/0xf80
[  102.929674][ T5964]  ? trace_irq_disable+0x3b/0x150
[  102.929692][ T5964]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.929709][ T5964]  ? clear_bhb_loop+0x40/0x90
[  102.929729][ T5964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.929744][ T5964] RIP: 0033:0x7f3c74edcfce
[  102.929761][ T5964] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  102.929775][ T5964] RSP: 002b:00007f3c73175fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  102.929794][ T5964] RAX: ffffffffffffffda RBX: 00007f3c731766c0 RCX: 00007f3c74edcfce
[  102.929807][ T5964] RDX: 000000000000000f RSI: 00007f3c731760a0 RDI: 0000000000000003
[  102.929817][ T5964] RBP: 00007f3c73176090 R08: 0000000000000000 R09: 0000000000000000
[  102.929828][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.929837][ T5964] R13: 00007f3c75196038 R14: 00007f3c75195fa0 R15: 00007ffcd28767c8
[  102.929876][ T5964]  </TASK>
[  103.148122][ T5907] usb 1-1: config 0 has an invalid interface number: 227 but max is 8
[  103.148153][ T5907] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.148174][ T5907] usb 1-1: config 0 has no interface number 0
[  103.208034][ T5907] usb 1-1: too many endpoints for config 0 interface 227 altsetting 203: 230, using maximum allowed: 30
[  103.208088][ T5907] usb 1-1: config 0 interface 227 altsetting 203 has 0 endpoint descriptors, different from the interface descriptor's value: 230
[  103.208117][ T5907] usb 1-1: config 0 interface 227 has no altsetting 0
[  103.263971][ T5907] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  103.264003][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  103.264023][ T5907] usb 1-1: Product: syz
[  103.264036][ T5907] usb 1-1: Manufacturer: syz
[  103.264051][ T5907] usb 1-1: SerialNumber: syz
[  103.312856][ T5907] usb 1-1: config 0 descriptor??
[  103.861710][    T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  103.862185][    T9] ath9k_htc: Failed to initialize the device
[  103.921432][ T5907] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  103.921499][ T5907] pctv452e: pctv452e_power_ctrl: 1
[  103.921499][ T5907] 
[  103.921544][ T5907] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  103.921544][ T5907] 
[  103.922097][ T5907] dvb-usb: bulk message failed: -22 (5/0)
[  104.019899][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  104.063372][ T5907] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  104.117787][ T5907] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  104.125860][ T5971] capability: warning: `syz.2.18' uses deprecated v2 capabilities in a way that may be insecure
[  104.183421][ T5907] usb 1-1: USB disconnect, device number 3
[  104.312869][ T5811] usb 5-1: USB disconnect, device number 2
[  106.014534][ T5999] FAULT_INJECTION: forcing a failure.
[  106.014534][ T5999] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.014571][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.4.28 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  106.014594][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  106.014606][ T5999] Call Trace:
[  106.014614][ T5999]  <TASK>
[  106.014623][ T5999]  dump_stack_lvl+0xe8/0x150
[  106.014658][ T5999]  should_fail_ex+0x46b/0x600
[  106.014690][ T5999]  _copy_from_user+0x2d/0xb0
[  106.014721][ T5999]  do_sock_getsockopt+0x165/0x3f0
[  106.014757][ T5999]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  106.014790][ T5999]  ? __fget_files+0x3a6/0x420
[  106.014815][ T5999]  ? __fget_files+0x2a/0x420
[  106.014858][ T5999]  __x64_sys_getsockopt+0x1aa/0x250
[  106.014901][ T5999]  do_syscall_64+0x14d/0xf80
[  106.014930][ T5999]  ? trace_irq_disable+0x3b/0x150
[  106.014955][ T5999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.014976][ T5999]  ? clear_bhb_loop+0x40/0x90
[  106.015002][ T5999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.015023][ T5999] RIP: 0033:0x7f2c3b08c799
[  106.015042][ T5999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.015059][ T5999] RSP: 002b:00007f2c392c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  106.015083][ T5999] RAX: ffffffffffffffda RBX: 00007f2c3b306090 RCX: 00007f2c3b08c799
[  106.015097][ T5999] RDX: 0000000000000002 RSI: 000000000000011c RDI: 0000000000000006
[  106.015110][ T5999] RBP: 00007f2c392c5090 R08: 0000200000000000 R09: 0000000000000000
[  106.015123][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.015135][ T5999] R13: 00007f2c3b306128 R14: 00007f2c3b306090 R15: 00007ffef6545c98
[  106.015169][ T5999]  </TASK>
[  106.470808][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.480782][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.490763][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.500747][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.510748][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.520748][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.530745][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.542758][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[  106.711361][ T6015] FAULT_INJECTION: forcing a failure.
[  106.711361][ T6015] name failslab, interval 1, probability 0, space 0, times 0
[  106.711385][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  106.711399][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  106.711405][ T6015] Call Trace:
[  106.711410][ T6015]  <TASK>
[  106.711415][ T6015]  dump_stack_lvl+0xe8/0x150
[  106.711437][ T6015]  should_fail_ex+0x46b/0x600
[  106.711455][ T6015]  should_failslab+0xa8/0x100
[  106.711468][ T6015]  kmem_cache_alloc_noprof+0x87/0x680
[  106.711485][ T6015]  ? anon_vma_clone+0x412/0xa00
[  106.711505][ T6015]  anon_vma_clone+0x412/0xa00
[  106.711528][ T6015]  __split_vma+0x3a5/0xa30
[  106.711546][ T6015]  ? unwind_next_frame+0xa5/0x23c0
[  106.711560][ T6015]  ? __pfx___split_vma+0x10/0x10
[  106.711587][ T6015]  vma_modify+0x94b/0x1f00
[  106.711610][ T6015]  vma_modify_flags+0x24b/0x330
[  106.711625][ T6015]  ? __pfx_vma_modify_flags+0x10/0x10
[  106.711650][ T6015]  ? mas_next_slot+0xc23/0xd00
[  106.711670][ T6015]  mlock_fixup+0x29e/0x440
[  106.711688][ T6015]  ? __pfx_mlock_fixup+0x10/0x10
[  106.711702][ T6015]  ? mas_find+0xb0e/0xd30
[  106.711722][ T6015]  apply_vma_lock_flags+0x2af/0x3e0
[  106.711740][ T6015]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[  106.711763][ T6015]  ? do_mlock+0x173/0x750
[  106.711779][ T6015]  do_mlock+0x558/0x750
[  106.711798][ T6015]  ? __pfx_do_mlock+0x10/0x10
[  106.711811][ T6015]  ? fput+0xa0/0xd0
[  106.711825][ T6015]  ? ksys_write+0x248/0x270
[  106.711851][ T6015]  ? __pfx_ksys_write+0x10/0x10
[  106.711873][ T6015]  __x64_sys_mlock+0x60/0x70
[  106.711895][ T6015]  do_syscall_64+0x14d/0xf80
[  106.711923][ T6015]  ? trace_irq_disable+0x3b/0x150
[  106.711945][ T6015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.711965][ T6015]  ? clear_bhb_loop+0x40/0x90
[  106.711988][ T6015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.712006][ T6015] RIP: 0033:0x7fb666c2c799
[  106.712026][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.712037][ T6015] RSP: 002b:00007fb664e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  106.712051][ T6015] RAX: ffffffffffffffda RBX: 00007fb666ea5fa0 RCX: 00007fb666c2c799
[  106.712059][ T6015] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000bff000
[  106.712067][ T6015] RBP: 00007fb664e86090 R08: 0000000000000000 R09: 0000000000000000
[  106.712074][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.712080][ T6015] R13: 00007fb666ea6038 R14: 00007fb666ea5fa0 R15: 00007ffe2ec30db8
[  106.712099][ T6015]  </TASK>
[  106.921990][  T856] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  107.052229][  T856] usb 5-1: device descriptor read/64, error -71
[  107.288162][ T6029] FAULT_INJECTION: forcing a failure.
[  107.288162][ T6029] name failslab, interval 1, probability 0, space 0, times 0
[  107.288199][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  107.288223][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  107.288235][ T6029] Call Trace:
[  107.288243][ T6029]  <TASK>
[  107.288252][ T6029]  dump_stack_lvl+0xe8/0x150
[  107.288288][ T6029]  should_fail_ex+0x46b/0x600
[  107.288320][ T6029]  ? __pfx_sock_alloc_inode+0x10/0x10
[  107.288343][ T6029]  should_failslab+0xa8/0x100
[  107.288364][ T6029]  ? __pfx_sock_alloc_inode+0x10/0x10
[  107.288385][ T6029]  kmem_cache_alloc_lru_noprof+0x8b/0x680
[  107.288424][ T6029]  ? sock_alloc_inode+0x28/0xc0
[  107.288452][ T6029]  ? __pfx_sock_alloc_inode+0x10/0x10
[  107.288475][ T6029]  sock_alloc_inode+0x28/0xc0
[  107.288498][ T6029]  alloc_inode+0x6a/0x1b0
[  107.288526][ T6029]  sock_create_lite+0x8b/0x510
[  107.288550][ T6029]  ? sctp_id2assoc+0x1cf/0x260
[  107.288577][ T6029]  sctp_getsockopt_peeloff_common+0x1fe/0x5f0
[  107.288608][ T6029]  ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10
[  107.288647][ T6029]  sctp_getsockopt_peeloff+0x13f/0x230
[  107.288668][ T6029]  ? __local_bh_enable+0x1e1/0x2f0
[  107.288698][ T6029]  ? __pfx_sctp_getsockopt_peeloff+0x10/0x10
[  107.288722][ T6029]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  107.288749][ T6029]  ? lockdep_hardirqs_on+0x7a/0x110
[  107.288781][ T6029]  sctp_getsockopt+0x196/0xb90
[  107.288805][ T6029]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  107.288834][ T6029]  do_sock_getsockopt+0x2d3/0x3f0
[  107.288869][ T6029]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  107.288901][ T6029]  ? __fget_files+0x3a6/0x420
[  107.288924][ T6029]  ? __fget_files+0x2a/0x420
[  107.288958][ T6029]  __x64_sys_getsockopt+0x1aa/0x250
[  107.288999][ T6029]  do_syscall_64+0x14d/0xf80
[  107.289028][ T6029]  ? trace_irq_disable+0x3b/0x150
[  107.289052][ T6029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.289072][ T6029]  ? clear_bhb_loop+0x40/0x90
[  107.289097][ T6029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.289115][ T6029] RIP: 0033:0x7fbe7b91c799
[  107.289134][ T6029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.289149][ T6029] RSP: 002b:00007fbe79b4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  107.289171][ T6029] RAX: ffffffffffffffda RBX: 00007fbe7bb96090 RCX: 00007fbe7b91c799
[  107.289186][ T6029] RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003
[  107.289198][ T6029] RBP: 00007fbe79b4d090 R08: 00002000000000c0 R09: 0000000000000000
[  107.289210][ T6029] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  107.289222][ T6029] R13: 00007fbe7bb96128 R14: 00007fbe7bb96090 R15: 00007ffe716ff568
[  107.289256][ T6029]  </TASK>
[  107.307769][  T856] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  107.443097][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  107.443299][  T856] usb 5-1: device descriptor read/64, error -71
[  107.552964][  T856] usb usb5-port1: attempt power cycle
[  107.591636][ T5884] usb 3-1: Using ep0 maxpacket: 8
[  107.594816][ T5884] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  107.596401][ T5884] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  107.596426][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  107.596444][ T5884] usb 3-1: SerialNumber: syz
[  107.890826][  T856] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  107.913767][  T856] usb 5-1: device descriptor read/8, error -71
[  108.150884][  T856] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  108.171847][  T856] usb 5-1: device descriptor read/8, error -71
[  108.281784][  T856] usb usb5-port1: unable to enumerate USB device
[  108.468338][   T37] audit: type=1326 audit(1773510477.778:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  108.509949][   T37] audit: type=1326 audit(1773510477.778:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  108.537446][   T37] audit: type=1326 audit(1773510477.828:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  108.537498][   T37] audit: type=1326 audit(1773510477.858:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  108.537540][   T37] audit: type=1326 audit(1773510477.858:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  108.593606][   T37] audit: type=1326 audit(1773510477.898:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  108.605047][   T37] audit: type=1326 audit(1773510477.918:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  108.609130][   T37] audit: type=1326 audit(1773510477.918:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  108.990997][ T5811] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  109.034068][   T37] audit: type=1326 audit(1773510478.348:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  109.036087][   T37] audit: type=1326 audit(1773510478.348:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7b91c799 code=0x7ffc0000
[  109.165604][ T5811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.165663][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  109.165687][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  109.165753][ T5811] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  109.165777][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.247564][ T5811] usb 1-1: config 0 descriptor??
[  109.493319][ T5811] ath6kl: Failed to submit usb control message: -71
[  109.493378][ T5811] ath6kl: unable to send the bmi data to the device: -71
[  109.493393][ T5811] ath6kl: Unable to send get target info: -71
[  109.513308][ T5811] ath6kl: Failed to init ath6kl core: -71
[  109.514917][ T5811] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  109.603413][ T5811] usb 1-1: USB disconnect, device number 4
[  109.755934][ T5884] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  109.801236][ T5884] usb 3-1: USB disconnect, device number 2
[  110.201400][ T5811] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  110.226022][ T6066] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  110.350798][ T5811] usb 5-1: Using ep0 maxpacket: 32
[  110.355113][ T5811] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  110.355141][ T5811] usb 5-1: config 0 has no interface number 0
[  110.359753][ T5811] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  110.359783][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.359815][ T5811] usb 5-1: Product: syz
[  110.359830][ T5811] usb 5-1: Manufacturer: syz
[  110.359844][ T5811] usb 5-1: SerialNumber: syz
[  110.427100][ T5811] usb 5-1: config 0 descriptor??
[  110.469587][ T5811] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  110.469616][ T5811] usb 5-1: selecting invalid altsetting 1
[  110.469631][ T5811] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  110.514813][ T5811] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  110.515438][ T5811] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  110.515527][ T5811] usb 5-1: media controller created
[  110.571286][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.650994][ T5811] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  110.651060][ T5811] zl10353_read_register: readreg error (reg=127, ret==-71)
[  110.652096][ T5811] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  110.775575][ T5811] usb 5-1: USB disconnect, device number 7
[  110.887785][ T6076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.125495][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'.
[  111.125520][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'.
[  111.160882][ T5884] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  111.334269][ T5884] usb 1-1: device descriptor read/64, error -71
[  111.950869][ T5884] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  112.084406][ T5884] usb 1-1: device descriptor read/64, error -71
[  112.191487][ T5884] usb usb1-port1: attempt power cycle
[  112.476897][ T6093] syz.4.62 uses obsolete (PF_INET,SOCK_PACKET)
[  112.560885][ T5884] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  112.591774][ T5884] usb 1-1: device descriptor read/8, error -71
[  112.970785][ T5884] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  112.991553][ T5884] usb 1-1: device descriptor read/8, error -71
[  113.101366][ T5884] usb usb1-port1: unable to enumerate USB device
[  113.272669][ T6103] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in;
[  113.272669][ T6103]    program syz.2.64 not setting count and/or reply_len properly
[  114.510855][ T5883] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  114.616612][ T6122] FAULT_INJECTION: forcing a failure.
[  114.616612][ T6122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.616648][ T6122] CPU: 1 UID: 0 PID: 6122 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  114.616669][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  114.616680][ T6122] Call Trace:
[  114.616688][ T6122]  <TASK>
[  114.616696][ T6122]  dump_stack_lvl+0xe8/0x150
[  114.616731][ T6122]  should_fail_ex+0x46b/0x600
[  114.616760][ T6122]  _copy_from_iter+0x1d3/0x1670
[  114.616796][ T6122]  ? trace_kmem_cache_alloc+0x29/0xf0
[  114.616825][ T6122]  ? __alloc_skb+0x27d/0x7d0
[  114.616854][ T6122]  ? __pfx__copy_from_iter+0x10/0x10
[  114.616879][ T6122]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  114.616908][ T6122]  ? __alloc_skb+0x27d/0x7d0
[  114.616943][ T6122]  ? netlink_sendmsg+0x650/0xb40
[  114.616970][ T6122]  ? skb_put+0x11b/0x210
[  114.617004][ T6122]  netlink_sendmsg+0x6c0/0xb40
[  114.617042][ T6122]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.617072][ T6122]  ? unwind_get_return_address+0x4d/0x90
[  114.617098][ T6122]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  114.617131][ T6122]  ____sys_sendmsg+0x94c/0x9c0
[  114.617159][ T6122]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.617190][ T6122]  ? import_iovec+0x73/0xa0
[  114.617224][ T6122]  ___sys_sendmsg+0x2a5/0x360
[  114.617251][ T6122]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.617321][ T6122]  ? __fget_files+0x2a/0x420
[  114.617347][ T6122]  ? __fget_files+0x3a6/0x420
[  114.617384][ T6122]  __x64_sys_sendmsg+0x1c3/0x2a0
[  114.617409][ T6122]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  114.617441][ T6122]  ? __pfx_ksys_write+0x10/0x10
[  114.617485][ T6122]  do_syscall_64+0x14d/0xf80
[  114.617516][ T6122]  ? trace_irq_disable+0x3b/0x150
[  114.617539][ T6122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.617561][ T6122]  ? clear_bhb_loop+0x40/0x90
[  114.617587][ T6122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.617608][ T6122] RIP: 0033:0x7fbe7b91c799
[  114.617628][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.617645][ T6122] RSP: 002b:00007fbe79b6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.617668][ T6122] RAX: ffffffffffffffda RBX: 00007fbe7bb95fa0 RCX: 00007fbe7b91c799
[  114.617683][ T6122] RDX: 0000000004000004 RSI: 0000200000000280 RDI: 0000000000000004
[  114.617696][ T6122] RBP: 00007fbe79b6e090 R08: 0000000000000000 R09: 0000000000000000
[  114.617708][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.617720][ T6122] R13: 00007fbe7bb96038 R14: 00007fbe7bb95fa0 R15: 00007ffe716ff568
[  114.617753][ T6122]  </TASK>
[  114.690858][ T5883] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  114.690891][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.730775][ T5884] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  114.951660][ T5884] usb 5-1: device descriptor read/64, error -71
[  114.966016][ T5883] usb 4-1: config 0 descriptor??
[  115.191257][ T5884] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  115.237982][ T5883] ath6kl: Failed to submit usb control message: -71
[  115.238044][ T5883] ath6kl: unable to send the bmi data to the device: -71
[  115.238059][ T5883] ath6kl: Unable to send get target info: -71
[  115.280818][ T5883] ath6kl: Failed to init ath6kl core: -71
[  115.282445][ T5883] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  115.312187][ T5883] usb 4-1: USB disconnect, device number 6
[  115.365189][ T5884] usb 5-1: device descriptor read/64, error -71
[  115.471298][ T5884] usb usb5-port1: attempt power cycle
[  115.810930][ T5884] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  115.831822][ T5884] usb 5-1: device descriptor read/8, error -71
[  116.070826][ T5884] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  116.091608][ T5884] usb 5-1: device descriptor read/8, error -71
[  116.201555][ T5884] usb usb5-port1: unable to enumerate USB device
[  116.202509][ T6142] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  116.202536][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  116.246016][ T6142] vhci_hcd vhci_hcd.0: Device attached
[  116.281659][ T6144] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  116.283470][ T6144] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  116.332819][ T6145] vhci_hcd: connection closed
[  116.337649][   T57] vhci_hcd vhci_hcd.1: stop threads
[  116.338347][   T57] vhci_hcd vhci_hcd.1: release socket
[  116.338436][   T57] vhci_hcd vhci_hcd.1: disconnect device
[  116.700853][ T5884] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  116.876789][ T5884] usb 1-1: config index 0 descriptor too short (expected 8292, got 100)
[  116.876823][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.876843][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  116.876875][ T5884] usb 1-1: config 1 has no interface number 0
[  116.876911][ T5884] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30
[  116.877103][ T5884] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.877133][ T5884] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222
[  116.877160][ T5884] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  116.967477][ T5884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40
[  116.967511][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.967532][ T5884] usb 1-1: Product: syz
[  116.967546][ T5884] usb 1-1: Manufacturer: syz
[  116.967560][ T5884] usb 1-1: SerialNumber: syz
[  117.234479][ T5884] usb 1-1: selecting invalid altsetting 1
[  117.433823][ T5884] cdc_ncm 1-1:1.1: bind() failure
[  117.472539][ T5884] usb 1-1: USB disconnect, device number 9
[  117.520948][  T807] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  117.670983][  T807] usb 4-1: Using ep0 maxpacket: 32
[  117.677043][  T807] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  117.677075][  T807] usb 4-1: config 0 has no interface number 0
[  117.681290][  T807] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  117.681319][  T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.681337][  T807] usb 4-1: Product: syz
[  117.681349][  T807] usb 4-1: Manufacturer: syz
[  117.681362][  T807] usb 4-1: SerialNumber: syz
[  117.697565][  T807] usb 4-1: config 0 descriptor??
[  118.087052][ T6176] FAULT_INJECTION: forcing a failure.
[  118.087052][ T6176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.087087][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: syz.1.92 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  118.087109][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  118.087120][ T6176] Call Trace:
[  118.087132][ T6176]  <TASK>
[  118.087140][ T6176]  dump_stack_lvl+0xe8/0x150
[  118.087175][ T6176]  should_fail_ex+0x46b/0x600
[  118.087206][ T6176]  _copy_from_user+0x2d/0xb0
[  118.087239][ T6176]  vmemdup_user+0x5e/0xd0
[  118.087267][ T6176]  map_get_next_key+0x1c9/0x630
[  118.087294][ T6176]  ? bpf_lsm_bpf+0x9/0x20
[  118.087313][ T6176]  ? security_bpf+0x7e/0x2d0
[  118.087337][ T6176]  __sys_bpf+0x768/0x950
[  118.087364][ T6176]  ? __pfx___sys_bpf+0x10/0x10
[  118.087406][ T6176]  ? ksys_write+0x248/0x270
[  118.087439][ T6176]  ? __pfx_ksys_write+0x10/0x10
[  118.087477][ T6176]  __x64_sys_bpf+0x7c/0x90
[  118.087501][ T6176]  do_syscall_64+0x14d/0xf80
[  118.087531][ T6176]  ? trace_irq_disable+0x3b/0x150
[  118.087554][ T6176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.087575][ T6176]  ? clear_bhb_loop+0x40/0x90
[  118.087601][ T6176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.087622][ T6176] RIP: 0033:0x7ff18962c799
[  118.087642][ T6176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.087659][ T6176] RSP: 002b:00007ff18787e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  118.087683][ T6176] RAX: ffffffffffffffda RBX: 00007ff1898a5fa0 RCX: 00007ff18962c799
[  118.087697][ T6176] RDX: 0000000000000020 RSI: 0000200000000480 RDI: 0000000000000004
[  118.087710][ T6176] RBP: 00007ff18787e090 R08: 0000000000000000 R09: 0000000000000000
[  118.087723][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.087734][ T6176] R13: 00007ff1898a6038 R14: 00007ff1898a5fa0 R15: 00007ffd52e82248
[  118.087767][ T6176]  </TASK>
[  118.411359][ T6179] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  118.576382][ T6175] loop2: detected capacity change from 0 to 7
[  118.607093][ T6175] Dev loop2: unable to read RDB block 7
[  118.607148][ T6175]  loop2: unable to read partition table
[  118.607404][ T6175] loop2: partition table beyond EOD, truncated
[  118.607426][ T6175] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  118.717637][ T6181] netlink: 'syz.1.96': attribute type 10 has an invalid length.
[  118.853786][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.871336][ T6181] team0: Port device bond0 added
[  119.729414][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  119.941001][ T5883] usb 2-1: device descriptor read/64, error -71
[  119.992314][ T5934] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  120.044332][  T807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  120.044363][  T807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  120.086354][  T807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  120.088475][  T807] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  120.202922][ T5883] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  120.357625][  T807] usb 4-1: USB disconnect, device number 7
[  120.392804][ T5883] usb 2-1: device descriptor read/64, error -71
[  120.505579][ T5883] usb usb2-port1: attempt power cycle
[  121.178264][ T6207] FAULT_INJECTION: forcing a failure.
[  121.178264][ T6207] name failslab, interval 1, probability 0, space 0, times 0
[  121.178331][ T6207] CPU: 0 UID: 0 PID: 6207 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  121.178355][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  121.178367][ T6207] Call Trace:
[  121.178376][ T6207]  <TASK>
[  121.178385][ T6207]  dump_stack_lvl+0xe8/0x150
[  121.178422][ T6207]  should_fail_ex+0x46b/0x600
[  121.178454][ T6207]  should_failslab+0xa8/0x100
[  121.178478][ T6207]  kmem_cache_alloc_noprof+0x87/0x680
[  121.178509][ T6207]  ? alloc_empty_file+0x55/0x1d0
[  121.178532][ T6207]  ? __rcu_read_unlock+0x83/0xe0
[  121.178565][ T6207]  alloc_empty_file+0x55/0x1d0
[  121.178592][ T6207]  alloc_file_pseudo+0x155/0x240
[  121.178620][ T6207]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  121.178654][ T6207]  ? alloc_fd+0x64e/0x6c0
[  121.178682][ T6207]  anon_inode_getfile_fmode+0xb0/0x1c0
[  121.178719][ T6207]  __se_sys_timerfd_create+0x247/0x320
[  121.178745][ T6207]  do_syscall_64+0x14d/0xf80
[  121.178776][ T6207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.178797][ T6207]  ? clear_bhb_loop+0x40/0x90
[  121.178823][ T6207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.178844][ T6207] RIP: 0033:0x7fb666c2c799
[  121.178863][ T6207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.178881][ T6207] RSP: 002b:00007fb664e44028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
[  121.178904][ T6207] RAX: ffffffffffffffda RBX: 00007fb666ea6180 RCX: 00007fb666c2c799
[  121.178919][ T6207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  121.178931][ T6207] RBP: 00007fb664e44090 R08: 0000000000000000 R09: 0000000000000000
[  121.178944][ T6207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.178956][ T6207] R13: 00007fb666ea6218 R14: 00007fb666ea6180 R15: 00007ffe2ec30db8
[  121.178990][ T6207]  </TASK>
[  121.257930][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  121.376626][ T5883] usb 2-1: device descriptor read/8, error -71
[  121.876971][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  121.915548][ T5883] usb 2-1: device descriptor read/8, error -71
[  122.024874][ T5883] usb usb2-port1: unable to enumerate USB device
[  122.760806][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  122.940217][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  122.940250][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  122.940274][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  122.940295][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  122.940336][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  122.940359][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.010512][    T9] usb 2-1: config 0 descriptor??
[  123.241009][ T5934] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  123.244005][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.245621][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.417364][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  123.417421][ T5934] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  123.417444][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.436577][ T5934] usb 5-1: config 0 descriptor??
[  123.439015][ T6230] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  123.450859][   T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.099420][ T5934] usbhid 5-1:0.0: can't add hid device: -71
[  124.099558][ T5934] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  124.106365][ T5934] ==================================================================
[  124.106381][ T5934] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  124.106413][ T5934] Read of size 8 at addr ffffc9000e099008 by task kworker/1:5/5934
[  124.106428][ T5934] 
[  124.106439][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  124.106462][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  124.106476][ T5934] Workqueue: usb_hub_wq hub_event
[  124.106500][ T5934] Call Trace:
[  124.106509][ T5934]  <TASK>
[  124.106518][ T5934]  dump_stack_lvl+0xe8/0x150
[  124.106547][ T5934]  print_report+0xba/0x230
[  124.106572][ T5934]  ? __list_add_valid_or_report+0x4e/0x130
[  124.106591][ T5934]  kasan_report+0x117/0x150
[  124.106610][ T5934]  ? __list_add_valid_or_report+0x4e/0x130
[  124.106632][ T5934]  __list_add_valid_or_report+0x4e/0x130
[  124.106652][ T5934]  kcov_remote_stop+0x457/0x680
[  124.106677][ T5934]  hub_event+0x49d8/0x4f60
[  124.106728][ T5934]  ? __pfx_hub_event+0x10/0x10
[  124.106752][ T5934]  ? process_scheduled_works+0xa8d/0x18c0
[  124.106775][ T5934]  ? process_scheduled_works+0xa8d/0x18c0
[  124.106798][ T5934]  process_scheduled_works+0xb6e/0x18c0
[  124.106833][ T5934]  ? __pfx_process_scheduled_works+0x10/0x10
[  124.106860][ T5934]  ? assign_work+0x3d5/0x5e0
[  124.106887][ T5934]  worker_thread+0xa53/0xfc0
[  124.106923][ T5934]  kthread+0x388/0x470
[  124.106941][ T5934]  ? __pfx_worker_thread+0x10/0x10
[  124.106963][ T5934]  ? __pfx_kthread+0x10/0x10
[  124.106981][ T5934]  ret_from_fork+0x51e/0xb90
[  124.107005][ T5934]  ? __pfx_ret_from_fork+0x10/0x10
[  124.107029][ T5934]  ? __switch_to+0xc7d/0x1450
[  124.107052][ T5934]  ? __pfx_kthread+0x10/0x10
[  124.107072][ T5934]  ret_from_fork_asm+0x1a/0x30
[  124.107096][ T5934]  </TASK>
[  124.107102][ T5934] 
[  124.107107][ T5934] The buggy address belongs to a vmalloc virtual mapping
[  124.107123][ T5934] Memory state around the buggy address:
[  124.107133][ T5934]  ffffc9000e098f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  124.107144][ T5934]  ffffc9000e098f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  124.107155][ T5934] >ffffc9000e099000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  124.107163][ T5934]                       ^
[  124.107173][ T5934]  ffffc9000e099080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  124.107184][ T5934]  ffffc9000e099100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  124.107193][ T5934] ==================================================================
[  124.107205][ T5934] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  124.107218][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  124.107240][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  124.107250][ T5934] Workqueue: usb_hub_wq hub_event
[  124.107268][ T5934] Call Trace:
[  124.107275][ T5934]  <TASK>
[  124.107282][ T5934]  vpanic+0x56c/0xa60
[  124.107310][ T5934]  ? __pfx_vpanic+0x10/0x10
[  124.107338][ T5934]  panic+0xc5/0xd0
[  124.107363][ T5934]  ? __pfx_panic+0x10/0x10
[  124.107391][ T5934]  ? __list_add_valid_or_report+0x4e/0x130
[  124.107412][ T5934]  ? rcu_is_watching+0x15/0xb0
[  124.107431][ T5934]  ? __list_add_valid_or_report+0x4e/0x130
[  124.107450][ T5934]  check_panic_on_warn+0x89/0xb0
[  124.107469][ T5934]  ? __list_add_valid_or_report+0x4e/0x130
[  124.107488][ T5934]  end_report+0x73/0x180
[  124.107505][ T5934]  ? __list_add_valid_or_report+0x4e/0x130
[  124.107523][ T5934]  kasan_report+0x128/0x150
[  124.107542][ T5934]  ? __list_add_valid_or_report+0x4e/0x130
[  124.107567][ T5934]  __list_add_valid_or_report+0x4e/0x130
[  124.107590][ T5934]  kcov_remote_stop+0x457/0x680
[  124.107614][ T5934]  hub_event+0x49d8/0x4f60
[  124.107654][ T5934]  ? __pfx_hub_event+0x10/0x10
[  124.107677][ T5934]  ? process_scheduled_works+0xa8d/0x18c0
[  124.107702][ T5934]  ? process_scheduled_works+0xa8d/0x18c0
[  124.107737][ T5934]  process_scheduled_works+0xb6e/0x18c0
[  124.107775][ T5934]  ? __pfx_process_scheduled_works+0x10/0x10
[  124.107803][ T5934]  ? assign_work+0x3d5/0x5e0
[  124.107830][ T5934]  worker_thread+0xa53/0xfc0
[  124.107868][ T5934]  kthread+0x388/0x470
[  124.107887][ T5934]  ? __pfx_worker_thread+0x10/0x10
[  124.107912][ T5934]  ? __pfx_kthread+0x10/0x10
[  124.107933][ T5934]  ret_from_fork+0x51e/0xb90
[  124.107970][ T5934]  ? __pfx_ret_from_fork+0x10/0x10
[  124.107997][ T5934]  ? __switch_to+0xc7d/0x1450
[  124.108021][ T5934]  ? __pfx_kthread+0x10/0x10
[  124.108041][ T5934]  ret_from_fork_asm+0x1a/0x30
[  124.108068][ T5934]  </TASK>
[  124.108362][ T5934] Kernel Offset: disabled