last executing test programs:

16.459893959s ago: executing program 4 (id=301):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008ac054b024000010203010902240001011020010904000f0103010233092110e7"], 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client0\x00', 0x2, "0f9714cb073af9d5", "a7cf0c3efcc791df82b600524f9fbdd2706d4f5748e27a2fffd41ab96b2c3206", 0x9, 0xe76})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)

13.878712196s ago: executing program 4 (id=312):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x10000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x538, 0x0, 0x378, 0x0, 0x2a8, 0x2a8, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0x3}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'veth0_to_team\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty, 0xff, 0x2d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
r2 = syz_io_uring_complete(0x0)
tee(r0, r2, 0x17c80000000, 0x81d9132e26bb24e0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
read$FUSE(r4, &(0x7f0000008180)={0x2020, 0x0, <r5=>0x0, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x27}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x3, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x8, 0x9e, 0x4, 0x80000000000, 0x0, 0x400000, 0x0, 0xc000, 0x5f, 0x0, r6, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90, 0xfffffffffffffffe, 0x2, {0x4, 0x4000000000000, 0x0, 0x3, 0xfffffffe, 0x0, {0x0, 0x10000000, 0x0, 0xd298, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x1000, 0x0, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@grpquota}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000100))
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x1f40)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280340001800a0001006c696d6974000000240002800c00024000000000000010000c000140000000000000000108000440000000010c000180080001006475700008000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x48024}, 0x20050800)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000700000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x1d0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xfe}, 0x1d, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@mcast1, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001f0000060000ff0000000000184300000802010000000000000002009500ffdf00000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
accept4$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800)
socket$inet6_tcp(0xa, 0x1, 0x0)

11.848953457s ago: executing program 1 (id=318):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x5a)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0)

11.797047431s ago: executing program 2 (id=319):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
umount2(&(0x7f00000002c0)='./file0\x00', 0x1) (fail_nth: 3)

10.906589151s ago: executing program 2 (id=321):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x9, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x232)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)

10.609195876s ago: executing program 1 (id=324):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xfffc}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000001a80)=""/4133, 0x1025}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000600)=""/228, 0xe4}], 0x4}, 0x1}], 0x4, 0x40000030, 0x0)
syz_usb_connect(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0)

7.989840025s ago: executing program 2 (id=328):
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @multicast2}, @FRA_FLOW={0x8, 0xb, 0xb}]}, 0x2c}}, 0x4000000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pK    \x00'}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04"], 0x8)

6.693891869s ago: executing program 1 (id=331):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x19)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a18344b265ba7f20e413597129961ed189d6343391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d080000000000004d0012"], 0xb4}}, 0x0)
poll(&(0x7f00000003c0)=[{r1, 0x1000}, {r3, 0x2006}, {r1, 0x8008}, {r0}, {r2, 0x8060}, {r4, 0x801a}], 0x6, 0x81)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000440)=0x97f, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x42ea, 0x4)
sendmmsg$sock(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="d6d9e7bba62f9f908d5343f4014d6fc5353e9100dd0d331e96118ae049c40384347e0dbc84ad6aa655e7b229f45d7a57cd0e4e41e99061d96ed586f985d8279c951ec723c562b721", 0x48}, {&(0x7f0000000000)="a91372f4d4", 0x5}, {&(0x7f0000000200)="7c0c66486bcbeabc068877c6f9dc9d3ac9c701dd967ee1d350e31c6d0961904e6249c234e43f0ad9602ff900d3095c30616aae031a746db7f4f6d9db6f95ae50928df48949", 0x45}, {&(0x7f0000000300)="6ed6651d8fae10df7b1fa35753e5c3eaaa634ec85276af9648670a630ccc9f5f41a71b00e2966904b89a6474ccd71e11fc3bd0f0782403f49025cdf29891c312b8733bed05cbf97245c5f120ffb556d6d14f53e235b78a1dd315572beaef9252b2343ba18ad681514d3cc8ff77a45766bc4045a2375a2ec9a84f1aca7611085e43de18b760aace690dec19ee8ddb2d18250acaecab7eb681a015de80f3f02643740d03", 0xa3}], 0x4, &(0x7f00000003c0)}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000480)="228d03794eddf6b791c66e6db66b7d398b701d13e96cc9b9bcdf2983d68053062cdafd804ec402e23932b611cc1242f0c16ce74e3d557a7c8858632e6296ca7143b5e8466ccf65438da06c98ebc125158a353a716c3099d81e36b3c2d4af3d5a65dc1efeed9bbf877a9966678fafac57eed567f4a632f3812a5df3800956fc5b999f50e47e17ed95266415bde2cde7a232156a41559041138e45ed22f8c4620aa7105ce01e91bc36d4ce49ff9b546a17fb19a41eff60aec2cc0827790c373f711e5c17be8eb871b7ef214dc848f593449018086dd45a7d9ff62fd0c268e9838bcc3d779afffa60db33505dbe72be86", 0xef}, {&(0x7f0000000580)="fa9e3f2f577a6747be1dcc8a1e4e1f8290b503cff5d0db645f1d27fd0e7baa18bf4be9d2cf3e8e6bad2a14e50a0ec7deb3111536db8feefa702a60e4b3729d3e64ddca", 0x43}, {&(0x7f0000000600)="17b73f7296797de845a91e10439acfd14997a7a518f2f7a4df183ce2cc44f701d9ab68905e4e7946a1f63be485de256ed1a27c2fce3bf7a825509825866562b86418d3302e908d43d6cfa8b7d7c3a0fde3baac56c9cc8be09aa479b0147818c19e8295762791d001179fcd5f372f6cb1a93d9580b0ec4eab9923b3cbb683af4ce5e5aec51e3e", 0x86}, {&(0x7f00000006c0)="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", 0xfc}, {&(0x7f00000007c0)="88b822a167760b29e54b4c3d74cb969a9364b4aa8175cf535e2dfca8c6dc7234eb8da33b6f533fe0b9631608d24a4f9c7685f17f94ebb8d93bb21b1c254a40832c796f6ec2ca72bc35f12b5ef6ee7bdb9ff3dc192c9c56de95596b70c97294d465557063fb5bf660a1f325fea2ec348d9e277053d609cd6a36687e9d3ffdba7bbe976b3cf25109218c967bd63d9c143a83486997ba3f0f66bbc3ea056aa6c319f36a21f062121701b24d7790e2f8118c33f12f", 0xb3}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="dbc21f274b5ba73dc660919e7c86bd2956c8d8c9e98dbb79ad6fc9698c040e8a1575f4bf0e0ba33724615cdbfdfd7cba8f1b8678c90be21a13aaaf3e36451ca246d412c7ae3653cf616f3773674cf2d697b70f8c3344f6553eed876c651d034f5cf0d670331abe3e6ed6d8375e33efec7ef738e1bce215f58110cd512e6596d15b34ceddefcfee850e93e4ec", 0x8c}, {&(0x7f0000001940)="a6c028e7b98f8a6c7c6dc506718e4b47a317629c8c7b998ed464e39ae718d635d2a95b553d437ec5d27b438f05d9adc5184a0109e55dc2ea836da69c84248c8b3801036b021c3704994f118c7eaf960598fc517fb741789c9a8ff9589f571a4a2b0ff5616f296474d4c921410c5fcc544aabe2444d4bd02f92890342f8789acda6c5c3017d698c849a0e6f11240f11c0abca82e659825eb4d4b48c15191037d43346d08e7f", 0xa5}, {&(0x7f0000001a00)="be876edfe9a8b9ef4d21f9ad32034e87c495840e1a769bf558efb338f2b3ae6d38e8b86f371bdb99849e2c350ef00014420b04a62dc8370d32b65c0f52720f14ee40b76ad1ce45133aaa592807725effd73e7fc7047d0d3a477043acd04c8c511a95dec7", 0x64}], 0x9, &(0x7f0000001b40)=[@txtime={{0x18, 0x1, 0x3d, 0xd36761c0}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3d5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c40)="38dad91042801d7f7537e4b31555f30b911209efc6de6dc8ac179c88936af70ff9cff73c5a3697c709a35e21d5c905de48fc77fb5bf711a9e658d2ceb4b576a930d0630f16dcf60db01e9b281124fcad9fcdf865a259a0de4c0cb91572186f110a09442324643a3295d53850f2b80d5885a9f2fd3d67bebb70ffa11f0165145b28d11b0eda834d5aeb33987a57ecbdd905ef4d76f61e9bac79c1b2d46d3231d6c122a8ab1c1e5d164738509d9368cf4affa35531d2f11354781282edbefe499aaf811b820b5a069f5cb389cc522ef8d5", 0xd0}, {&(0x7f0000000400)="722ca09a04c4456dc9c2", 0xa}], 0x2, &(0x7f0000001d80)=[@timestamping={{0x14, 0x1, 0x25, 0x50}}, @txtime={{0x18, 0x1, 0x3d, 0xf451}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x5d9b2a93}}, @txtime={{0x18, 0x1, 0x3d, 0x8aa}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x90}}, {{&(0x7f0000001e40)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x5, @empty}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001ec0)="7a9db45d9985e6ee26ae76cbf692fd80e1b8bafb2d54fe6e52d94101e231d3ce113313faa7002f27a7c0bb02469b1f781ce3d13d78dc0612b4ca33ba3d1afea6924dc9ae075ef7795c518561", 0x4c}, {&(0x7f0000001f40)="374a8937ee4dfa03e31779ffe101ed941d8b4310d2f5faa3a99e67fd7e84cf7233d0787d50802e4ec7ee7d6a060908f3372a93e9c1d5cea62f863b22be98209c0363d5409a180e979007349a3ff39f345474bf0973d7456cf9036e0a915926ec3f801da0af46d04914f68a1ffcb88aaec7f3d662e66765a67e4250d68dba9509b5796034d2dd347f7a1755", 0x8b}, {&(0x7f0000002000)="be3d5946c26724d15710bee95ca687fad9986f16d740110a3e397fbda62895037a9c935d3528f738355b2d7d00aa72c21bae433d6a9e33ffdf0c32682b2b14449e2ae883a9f5dd5f87e10a0655a979dbbb42154e2eb389328cb3447d9acb4c144f8be6578aac7e541564997cacd92c89345759dc2a15d352657fcc43622fcd5d1a2de72f5c331e4720c8b7988d2330b264fdabf98251c0f09022b4ce9b159c4c7d35148d7056c95c3a43c1e05d8f750f4e2b189b64c67e970d1f99e89494a8678a1ed96a2291b19ab92d99f61b8fc2110eae0fd7c21af4a770c0c4e6c1470f81a69de2", 0xe3}, {&(0x7f0000002100)="1a71f8a4b7462860e11f6136cae551eda91fb70339e6119bd63110c6dba78db4ade45f213e7861ef379bff4049b44d62c4d75a2463ece1322e48054bc510b1db05567807fb67ac2cfce7bb1c00e630ad4ce54ba6ddbef88096224f8e9c19106f9533b2f2e3ab47c8790ef114a0c35660b70f56c55bfe64fe1f72de7c0ce759b8af6d2f78d7e91dd67af589f40729ce86498f4f4cd445bddabbcfb481d1f69187ae593854a67bb92d265f5b9b0ea0e9586072458e1b90da8e056285330ede0d7cf9c120b8c9758a9d5b", 0xc9}, {&(0x7f0000002580)="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", 0xfd}, {&(0x7f0000002300)="7139546ac1a49b823d9296af867465356440d7b2abc4524ddca4dc02e40afcc9a4653fa201e667d2e97b3965335d5acade1a3b535206daf1c596c058ff745635d23626aff5ad5024bca4a9859f11ffe9fa41808b49140967deb1a4c9848c819ff1c4263fb8152b34c5254daad0975fcf1e09b137be15a77e4d4298c386e815e64502d5b2f184de2b7722b268aaca083be91a06f5", 0x94}], 0x6}}], 0x5, 0x0)

5.52427662s ago: executing program 4 (id=335):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x19)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a18344b265ba7f20e413597129961ed189d6343391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d080000000000004d0012"], 0xb4}}, 0x0)
poll(&(0x7f00000003c0)=[{r1, 0x1000}, {r3, 0x2006}, {r1, 0x8008}, {r0}, {r2, 0x8060}, {r4, 0x801a}], 0x6, 0x81)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="d6d9e7bba62f9f908d5343f4014d6fc5353e9100dd0d331e96118ae049c40384347e0dbc84ad6aa655e7b229f45d7a57cd0e4e41e99061d96ed586f985d8279c951ec723c562b721", 0x48}, {&(0x7f0000000000)="a91372f4d4", 0x5}, {&(0x7f0000000200)="7c0c66486bcbeabc068877c6f9dc9d3ac9c701dd967ee1d350e31c6d0961904e6249c234e43f0ad9602ff900d3095c30616aae031a746db7f4f6d9db6f95ae50928df48949", 0x45}, {&(0x7f0000000300)="6ed6651d8fae10df7b1fa35753e5c3eaaa634ec85276af9648670a630ccc9f5f41a71b00e2966904b89a6474ccd71e11fc3bd0f0782403f49025cdf29891c312b8733bed05cbf97245c5f120ffb556d6d14f53e235b78a1dd315572beaef9252b2343ba18ad681514d3cc8ff77a45766bc4045a2375a2ec9a84f1aca7611085e43de18b760aace690dec19ee8ddb2d18250acaecab7eb681a015de80f3f02643740d03", 0xa3}], 0x4, &(0x7f00000003c0)}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000480)="228d03794eddf6b791c66e6db66b7d398b701d13e96cc9b9bcdf2983d68053062cdafd804ec402e23932b611cc1242f0c16ce74e3d557a7c8858632e6296ca7143b5e8466ccf65438da06c98ebc125158a353a716c3099d81e36b3c2d4af3d5a65dc1efeed9bbf877a9966678fafac57eed567f4a632f3812a5df3800956fc5b999f50e47e17ed95266415bde2cde7a232156a41559041138e45ed22f8c4620aa7105ce01e91bc36d4ce49ff9b546a17fb19a41eff60aec2cc0827790c373f711e5c17be8eb871b7ef214dc848f593449018086dd45a7d9ff62fd0c268e9838bcc3d779afffa60db33505dbe72be86", 0xef}, {&(0x7f0000000580)="fa9e3f2f577a6747be1dcc8a1e4e1f8290b503cff5d0db645f1d27fd0e7baa18bf4be9d2cf3e8e6bad2a14e50a0ec7deb3111536db8feefa702a60e4b3729d3e64ddca", 0x43}, {&(0x7f0000000600)="17b73f7296797de845a91e10439acfd14997a7a518f2f7a4df183ce2cc44f701d9ab68905e4e7946a1f63be485de256ed1a27c2fce3bf7a825509825866562b86418d3302e908d43d6cfa8b7d7c3a0fde3baac56c9cc8be09aa479b0147818c19e8295762791d001179fcd5f372f6cb1a93d9580b0ec4eab9923b3cbb683af4ce5e5aec51e3e", 0x86}, {&(0x7f00000006c0)="bf044e824d2900397b9f70e0179a4c3dbebc5865a9b9544e59260563ac6a601baf2a04a9a54af6c4f92360e836dc1b1c8f4f300e3be866a72cc2a28364df854fbd19ccee93118c32f164913323b5083db1d542e93f707fa65cb6ac59f0fc851f027e7c8c2e740798bc34567a2eaf811fd03df7f02dee3c39bd647e167ad3404eca578ae895ff7405cd38e08875fa70d96ced931d46264eed5a69e4ea96e11a31e3928abfc2fc88c748191ffcdb8805b6be0925504e97e14dfb2553b02242248223d1e6e989489beb1a2aa04371804eafbd1ee60d5140295646e90fec943dce9583ebe58079bba5620b1a81384da65b375211398fd0078be85dff6a2f", 0xfc}, {&(0x7f00000007c0)="88b822a167760b29e54b4c3d74cb969a9364b4aa8175cf535e2dfca8c6dc7234eb8da33b6f533fe0b9631608d24a4f9c7685f17f94ebb8d93bb21b1c254a40832c796f6ec2ca72bc35f12b5ef6ee7bdb9ff3dc192c9c56de95596b70c97294d465557063fb5bf660a1f325fea2ec348d9e277053d609cd6a36687e9d3ffdba7bbe976b3cf25109218c967bd63d9c143a83486997ba3f0f66bbc3ea056aa6c319f36a21f062121701b24d7790e2f8118c33f12f", 0xb3}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="dbc21f274b5ba73dc660919e7c86bd2956c8d8c9e98dbb79ad6fc9698c040e8a1575f4bf0e0ba33724615cdbfdfd7cba8f1b8678c90be21a13aaaf3e36451ca246d412c7ae3653cf616f3773674cf2d697b70f8c3344f6553eed876c651d034f5cf0d670331abe3e6ed6d8375e33efec7ef738e1bce215f58110cd512e6596d15b34ceddefcfee850e93e4ec", 0x8c}, {&(0x7f0000001940)="a6c028e7b98f8a6c7c6dc506718e4b47a317629c8c7b998ed464e39ae718d635d2a95b553d437ec5d27b438f05d9adc5184a0109e55dc2ea836da69c84248c8b3801036b021c3704994f118c7eaf960598fc517fb741789c9a8ff9589f571a4a2b0ff5616f296474d4c921410c5fcc544aabe2444d4bd02f92890342f8789acda6c5c3017d698c849a0e6f11240f11c0abca82e659825eb4d4b48c15191037d43346d08e7f", 0xa5}, {&(0x7f0000001a00)="be876edfe9a8b9ef4d21f9ad32034e87c495840e1a769bf558efb338f2b3ae6d38e8b86f371bdb99849e2c350ef00014420b04a62dc8370d32b65c0f52720f14ee40b76ad1ce45133aaa592807725effd73e7fc7047d0d3a477043acd04c8c511a95dec7", 0x64}], 0x9, &(0x7f0000001b40)=[@txtime={{0x18, 0x1, 0x3d, 0xd36761c0}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3d5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c40)="38dad91042801d7f7537e4b31555f30b911209efc6de6dc8ac179c88936af70ff9cff73c5a3697c709a35e21d5c905de48fc77fb5bf711a9e658d2ceb4b576a930d0630f16dcf60db01e9b281124fcad9fcdf865a259a0de4c0cb91572186f110a09442324643a3295d53850f2b80d5885a9f2fd3d67bebb70ffa11f0165145b28d11b0eda834d5aeb33987a57ecbdd905ef4d76f61e9bac79c1b2d46d3231d6c122a8ab1c1e5d164738509d9368cf4affa35531d2f11354781282edbefe499aaf811b820b5a069f5cb389cc522ef8d5", 0xd0}, {&(0x7f0000000400)="722ca09a04c4456dc9c2", 0xa}], 0x2, &(0x7f0000001d80)=[@timestamping={{0x14, 0x1, 0x25, 0x50}}, @txtime={{0x18, 0x1, 0x3d, 0xf451}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x5d9b2a93}}, @txtime={{0x18, 0x1, 0x3d, 0x8aa}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x90}}, {{&(0x7f0000001e40)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x5, @empty}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001ec0)="7a9db45d9985e6ee26ae76cbf692fd80e1b8bafb2d54fe6e52d94101e231d3ce113313faa7002f27a7c0bb02469b1f781ce3d13d78dc0612b4ca33ba3d1afea6924dc9ae075ef7795c518561", 0x4c}, {&(0x7f0000001f40)="374a8937ee4dfa03e31779ffe101ed941d8b4310d2f5faa3a99e67fd7e84cf7233d0787d50802e4ec7ee7d6a060908f3372a93e9c1d5cea62f863b22be98209c0363d5409a180e979007349a3ff39f345474bf0973d7456cf9036e0a915926ec3f801da0af46d04914f68a1ffcb88aaec7f3d662e66765a67e4250d68dba9509b5796034d2dd347f7a1755", 0x8b}, {&(0x7f0000002000)="be3d5946c26724d15710bee95ca687fad9986f16d740110a3e397fbda62895037a9c935d3528f738355b2d7d00aa72c21bae433d6a9e33ffdf0c32682b2b14449e2ae883a9f5dd5f87e10a0655a979dbbb42154e2eb389328cb3447d9acb4c144f8be6578aac7e541564997cacd92c89345759dc2a15d352657fcc43622fcd5d1a2de72f5c331e4720c8b7988d2330b264fdabf98251c0f09022b4ce9b159c4c7d35148d7056c95c3a43c1e05d8f750f4e2b189b64c67e970d1f99e89494a8678a1ed96a2291b19ab92d99f61b8fc2110eae0fd7c21af4a770c0c4e6c1470f81a69de2", 0xe3}, {&(0x7f0000002100)="1a71f8a4b7462860e11f6136cae551eda91fb70339e6119bd63110c6dba78db4ade45f213e7861ef379bff4049b44d62c4d75a2463ece1322e48054bc510b1db05567807fb67ac2cfce7bb1c00e630ad4ce54ba6ddbef88096224f8e9c19106f9533b2f2e3ab47c8790ef114a0c35660b70f56c55bfe64fe1f72de7c0ce759b8af6d2f78d7e91dd67af589f40729ce86498f4f4cd445bddabbcfb481d1f69187ae593854a67bb92d265f5b9b0ea0e9586072458e1b90da8e056285330ede0d7cf9c120b8c9758a9d5b", 0xc9}, {&(0x7f0000002580)="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", 0xfd}, {&(0x7f0000002300)="7139546ac1a49b823d9296af867465356440d7b2abc4524ddca4dc02e40afcc9a4653fa201e667d2e97b3965335d5acade1a3b535206daf1c596c058ff745635d23626aff5ad5024bca4a9859f11ffe9fa41808b49140967deb1a4c9848c819ff1c4263fb8152b34c5254daad0975fcf1e09b137be15a77e4d4298c386e815e64502d5b2f184de2b7722b268aaca083be91a06f5", 0x94}], 0x6}}], 0x5, 0x0)

5.169281564s ago: executing program 1 (id=336):
syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000002000000020000000400000000000000", @ANYRES32, @ANYBLOB="0000ca0418e752925d40735a405b00000000000079a367a8f1bf0470551f383c8fa6f3c8116e2c3f1af701a5419d5694c30d3cc7ff4e2d12fb6cb1d889c305b49eba4c77ffcd749c9f8a92e242af22839b7154f3f79cef39e9c3ad4f20be4470b85a98851326d05abfcdcb230f0cfa20ca45f5633b3a4f3348571858bf0c1b36a00ffa0284589067967ef4437eb087e6589635f7e2ced816dcfbdece1c47708bc364265835e28203fc2a5f495a65c4c1d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000b40)={0x2, @sliced={0xff, [0x6, 0x8, 0x10, 0x8000, 0x5, 0x7, 0x9, 0x6, 0x4, 0x0, 0xff33, 0x4, 0x2, 0x3, 0x4, 0x6c, 0x3, 0x5bdc, 0x0, 0x8, 0x0, 0x6, 0xc, 0x2, 0x0, 0x100, 0x400, 0x6b8b, 0x0, 0x3, 0x3, 0x0, 0x4000, 0x3210, 0xfebf, 0xc8c2, 0x7fff, 0x5, 0x3d, 0x2, 0x7, 0x4, 0x3, 0xb, 0x3, 0xb, 0x0, 0x9], 0xb8}})
syz_usb_connect$uac1(0x69a90eab3db9c902, 0x98, &(0x7f0000000740)=ANY=[@ANYBLOB="12378102000000406b1d010140000102030109028600030100a0060904000000010100000a240109000702010209240323000303030b05240506010904010000010200000904010101010200000724018008021009050109ff03ffc803072501410405000904020000010200000904020101010200000b24020106010b0100000007240101c0020009058209500005080107250182fe0700"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

5.138579466s ago: executing program 2 (id=337):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r5, r4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r4, 0x0)
mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3)

4.972856469s ago: executing program 3 (id=338):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x2, [@union={0x7, 0x5, 0x0, 0x5, 0x1, 0x2ef, [{0x10, 0x5, 0x8}, {0x8, 0x2, 0x4}, {0x8, 0x1, 0xe1}, {0x9, 0x3, 0x5}, {0xc, 0x2, 0x8}]}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x2, 0x1ff}, {0x5, 0x0, 0x8}], "a2c9"}, @restrict={0xf, 0x0, 0x0, 0xb, 0x5}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}, @enum={0xa}]}}, 0x0, 0xae, 0x0, 0x0, 0x4, 0x0, @void, @value}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @broadcast}, 0x12, {0x2, 0x0, @multicast1=0xe000cc02}})

4.947633357s ago: executing program 3 (id=339):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000500)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}}}, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"})

4.668975788s ago: executing program 4 (id=341):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000800)={0x20, 0xe, 0x4, "92280ecf"}, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
creat(0x0, 0x81)
openat$smackfs_cipsonum(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20)
sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00')
getdents64(r9, &(0x7f00000000c0)=""/41, 0x29)
read$char_usb(r9, &(0x7f0000000080)=""/177, 0xb1)

4.581506154s ago: executing program 0 (id=342):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4658}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)
r1 = socket(0x1, 0x2, 0x4400)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r3=>0x0})
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r6}, 0x8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r2, @ANYRESDEC=r5, @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRES32=r3, @ANYRES16=r1, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
accept$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r8, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="01800002001190780000000000000000000000070010e5ede2fd00018000"/45], 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES32=0x0, @ANYRES32=<r10=>0x0], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000400)={'gre0\x00', <r11=>0x0, 0x7800, 0x80, 0xf, 0x3, {{0x1b, 0x4, 0x1, 0x3f, 0x6c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @local, {[@noop, @timestamp_prespec={0x44, 0x24, 0x66, 0x3, 0x2, [{@loopback, 0x9}, {@broadcast, 0x7fff}, {@local, 0x1ff}, {@empty, 0x2}]}, @ssrr={0x89, 0x13, 0x50, [@multicast1, @local, @broadcast, @loopback]}, @rr={0x7, 0x7, 0x6c, [@private=0xa010102]}, @cipso={0x86, 0x17, 0xfffffffffffffffc, [{0x5, 0x5, "1ba680"}, {0x6, 0xc, "4a18fe669828764a29d1"}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES16=r10, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

4.492950325s ago: executing program 3 (id=343):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet(0x2, 0x1, 0x6)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x20, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5a825d88}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffff7f}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x3c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x800)

4.208946829s ago: executing program 3 (id=344):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={<r4=>0xffffffffffffffff})
sendmmsg$inet_sctp(r4, &(0x7f0000008fc0)=[{0x0, 0x0, &(0x7f0000000840)}], 0x1, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

4.035572187s ago: executing program 3 (id=345):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_genetlink_get_family_id$l2tp(0x0, r0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x180800)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05000000000000000000220000000a0001007770616e310000001b605ab3df87942a5811f711753d9841487cde86d42b292e1b104a164561f453f0fd266ae839915ecec81ef82c25cfc5f21c92d8509855b6d8f3ce021fe9c0e7922ff0a0b146c6d7cc34773f17938d469440172f73477fa14d9d"], 0x20}}, 0x2000c094)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r5)
connect$802154_dgram(r4, &(0x7f00000003c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14)
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x1b}, 0x1, 0x0, 0x0, 0x2, 0x4000, 0x4}, 0x20)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = dup(r2)
accept$netrom(r7, &(0x7f00000002c0)={{0x3, @null}, [@bcast, @bcast, @remote, @netrom, @netrom, @netrom, @default, @bcast]}, &(0x7f0000000200)=0x48)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

2.82071225s ago: executing program 0 (id=346):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = dup(r4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000000c0)=0x2)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000500)={0x80a0000, 0x10000, 0x1})

1.953367712s ago: executing program 3 (id=347):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000240000002400000002000000000000000000000400000003000000000000000a00000000000000000000000d020000004beda07a8c2a0000"], 0xffffffffffffffff, 0x3e, 0xb1, 0xd, 0x0, 0x0, @void, @value}, 0x20)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000001380))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = socket(0x22, 0x6, 0x0)
sendto$inet6(r4, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020cfe0560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r5 = io_uring_setup(0x3eae, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})

1.88455908s ago: executing program 1 (id=348):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {}, {0x2}, 0x8}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x0, 0x0, 0x0, 0xf000000}}, 0xe8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
unshare(0x60480)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffffffffffff76)

1.789664365s ago: executing program 0 (id=349):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xb8bd327b920e4413)
pipe2$watch_queue(&(0x7f0000001180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x0)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff)
request_key(&(0x7f00000004c0)='id_legacy\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='\x00', r6)
mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x4000, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout}, {@sq={'sq', 0x3d, 0x7fff}}], [{@seclabel}, {@fsname={'fsname', 0x3d, '/dev/net/tun\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/net/tun\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '%(/'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}})

1.552134681s ago: executing program 4 (id=350):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x5a)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0)

1.285029848s ago: executing program 2 (id=351):
syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00')
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2(&(0x7f0000000200)={<r0=>0x0, 0x0}, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0)
syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4ab7, 0x10100, 0x4}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x80, 0x5, 0xfff9}}}}, 0xd)

1.161089653s ago: executing program 0 (id=352):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
memfd_secret(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'vcan0\x00', {0x8}, 0x7ff})
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x4, 0x4000, 0x0, 'syz1\x00', 0xffffffff}, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x4, 0x0, 0x4000000000000, 0x9, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10000000000000, 0x3, 0x80000001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4, 0xb, 0xfffffffffffffffe, 0x4000000000000000, 0x0, 0x0, 0x0, 0x3bcc9942, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x2000, 0xfffffffffffffff9, 0x0, 0x2, 0x8001, 0x7, 0x0, 0x20000000000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3be5, 0x0, 0x0, 0x0, 0x0, 0x751, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffff00, 0xfffffffffffffffe, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x3, 0x0, 0xc4, 0x8, 0x5, 0x100000000, 0x7, 0xfffffffffffffffc]})
r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xb3\xbb\x00\x00\x00\x00\x00\x00m\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x96\x0e=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe1\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x80%\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x1)
write$binfmt_elf64(r2, 0x0, 0xfebe)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0xdc62, [0x200, 0xffff, 0x2efe, 0x30, 0x0, 0x80, 0x0, 0xd698, 0x7fff, 0x81, 0x0, 0x6, 0xfffe, 0x2, 0x8, 0x5195, 0x9, 0x0, 0x6404, 0x101, 0x2, 0x0, 0x7, 0xfff, 0x0, 0xfff, 0x2f5, 0x5, 0x0, 0xd5, 0x7, 0xd, 0x0, 0x3d4, 0x1004, 0x5, 0x9, 0xfff, 0x402, 0x6, 0xe, 0xfff8, 0x9, 0x3, 0x1, 0xd4, 0x1ff, 0x7]}})
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000940)=0x25b)
syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00')
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40400)
ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f00000003c0))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[], 0x1c}, {&(0x7f0000000d00)=ANY=[@ANYBLOB="d40100002700200027bd7000ffdbdf25bc01b58008008400", @ANYRES32=0x0, @ANYBLOB="b2e8d489697ded2096c6e70b9163c7dfcc4226056ea2a677780bef91f2bbfe098a00f2786a9e51531d2e0c0004800800f800", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="06832838ebea37382fce643281f05c41ecaa92f59744bb34a311ff94672e7c13276542d28f2fed3265ae43723bbebcc77698c97226708a90838c795105398ca329ef0f12ded0f2306f8a4640c5893c7cc35b9bef1b00"/100], 0x1d4}], 0x2, 0x0, 0x0, 0x2800}, 0x0)

536.513507ms ago: executing program 1 (id=353):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (fail_nth: 5)

466.860244ms ago: executing program 2 (id=354):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet(0x2, 0x1, 0x6)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x20, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5a825d88}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffff7f}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x3c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x800)

428.360635ms ago: executing program 0 (id=355):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4a00, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'gre0\x00', <r3=>0x0, 0x20, 0x1, 0x0, 0x8001, {{0xe, 0x4, 0x3, 0x3e, 0x38, 0x64, 0x0, 0x40, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@noop, @cipso={0x86, 0x21, 0x1, [{0x5, 0x9, "46f98fd5d2d395"}, {0x5, 0x2}, {0x1, 0x10, "4f061cf059bda11884d6398670bd"}]}]}}}}})
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@loopback, @in=@loopback, 0x4e23, 0x8, 0x4e24, 0x0, 0x0, 0xa0, 0x20, 0x2f, r3}, {0x6, 0x6, 0x2, 0xc557, 0x8, 0x5, 0x8, 0x8000000000000001}, {0xff, 0x6, 0x1, 0x6}, 0x6, 0x6e6bb3, 0x0, 0x0, 0x6, 0x3}, {{@in=@loopback, 0x4d3, 0x2b}, 0xa, @in=@multicast2, 0x3503, 0x1, 0x3, 0x7, 0xfffffff4, 0x8, 0x7}}, 0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0xf, 0x1000e1b2, 0x1}}, 0x44)

421.270582ms ago: executing program 4 (id=356):
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
memfd_secret(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'vcan0\x00', {0x8}, 0x7ff})
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x4, 0x4000, 0x0, 'syz1\x00', 0xffffffff}, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x4, 0x0, 0x4000000000000, 0x9, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10000000000000, 0x3, 0x80000001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4, 0xb, 0xfffffffffffffffe, 0x4000000000000000, 0x0, 0x0, 0x0, 0x3bcc9942, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x78, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x2000, 0xfffffffffffffff9, 0x0, 0x2, 0x8001, 0x7, 0x0, 0x20000000000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x6, 0x0, 0x0, 0x5, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3be5, 0x0, 0x0, 0x0, 0x0, 0x751, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffff00, 0xfffffffffffffffe, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x3, 0x0, 0xc4, 0x8, 0x5, 0x100000000, 0x7, 0xfffffffffffffffc]})
r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xb3\xbb\x00\x00\x00\x00\x00\x00m\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x96\x0e=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe1\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x80%\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x1)
write$binfmt_elf64(r3, 0x0, 0xfebe)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0xdc62, [0x200, 0xffff, 0x2efe, 0x30, 0x0, 0x80, 0x0, 0xd698, 0x7fff, 0x81, 0x0, 0x6, 0xfffe, 0x2, 0x8, 0x5195, 0x9, 0x0, 0x6404, 0x101, 0x2, 0x0, 0x7, 0xfff, 0x0, 0xfff, 0x2f5, 0x5, 0x0, 0xd5, 0x7, 0xd, 0x0, 0x3d4, 0x1004, 0x5, 0x9, 0xfff, 0x402, 0x6, 0xe, 0xfff8, 0x9, 0x3, 0x1, 0xd4, 0x1ff, 0x7]}})
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000940)=0x25b)
syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00')
r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40400)
ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f00000003c0))
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[], 0x1c}, {&(0x7f0000000d00)=ANY=[@ANYBLOB="d40100002700200027bd7000ffdbdf25bc01b58008008400", @ANYRES32=0x0, @ANYBLOB="b2e8d489697ded2096c6e70b9163c7dfcc4226056ea2a677780bef91f2bbfe098a00f2786a9e51531d2e0c0004800800f800", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="06832838ebea37382fce643281f05c41ecaa92f59744bb34a311ff94672e7c13276542d28f2fed3265ae43723bbebcc77698c97226708a90838c795105398ca329ef0f12ded0f2306f8a4640c5893c7cc35b9bef1b00"/100], 0x1d4}], 0x2, 0x0, 0x0, 0x2800}, 0x0)

0s ago: executing program 0 (id=357):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008a000000760000000000000027000000000000009500000000040000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}], 0x1, 0x0)
io_submit(0x0, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, 0xffffffffffffffff, &(0x7f0000000340), 0x2d}])
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x4401b, 0xffffffffffffffff, 0x2b73a000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={[{@dyn}]})
fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
close(r5)
socket$kcm(0x10, 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts.
[   73.905238][ T5807] cgroup: Unknown subsys name 'net'
[   74.039728][ T5807] cgroup: Unknown subsys name 'cpuset'
[   74.048659][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.468120][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.005625][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.037940][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.045057][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.045766][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.053758][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.061821][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.073927][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.075032][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.081956][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.095618][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.110456][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.111995][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.136117][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.136866][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.156275][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.167942][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.175072][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.182254][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.182425][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.198044][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.198700][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.215645][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.215983][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.231863][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.239585][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.703865][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   78.892534][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   78.966890][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   79.049771][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.057121][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.064371][ T5817] bridge_slave_0: entered allmulticast mode
[   79.071643][ T5817] bridge_slave_0: entered promiscuous mode
[   79.083231][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.090485][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.097747][ T5817] bridge_slave_1: entered allmulticast mode
[   79.105182][ T5817] bridge_slave_1: entered promiscuous mode
[   79.112881][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   79.225011][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.275732][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.297637][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   79.320118][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.329393][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.336608][ T5818] bridge_slave_0: entered allmulticast mode
[   79.343544][ T5818] bridge_slave_0: entered promiscuous mode
[   79.385467][ T5817] team0: Port device team_slave_0 added
[   79.397902][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.405005][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.412806][ T5824] bridge_slave_0: entered allmulticast mode
[   79.419879][ T5824] bridge_slave_0: entered promiscuous mode
[   79.428396][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.435569][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.442839][ T5818] bridge_slave_1: entered allmulticast mode
[   79.450559][ T5818] bridge_slave_1: entered promiscuous mode
[   79.476192][ T5817] team0: Port device team_slave_1 added
[   79.488869][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.496083][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.503389][ T5824] bridge_slave_1: entered allmulticast mode
[   79.511386][ T5824] bridge_slave_1: entered promiscuous mode
[   79.599390][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.611936][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.632878][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.640633][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.651014][ T5828] bridge_slave_0: entered allmulticast mode
[   79.658338][ T5828] bridge_slave_0: entered promiscuous mode
[   79.667529][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.674487][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.700543][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.719353][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.731152][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.756787][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.763891][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.771297][ T5828] bridge_slave_1: entered allmulticast mode
[   79.778712][ T5828] bridge_slave_1: entered promiscuous mode
[   79.797990][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.804938][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.831208][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.880987][ T5818] team0: Port device team_slave_0 added
[   79.931232][ T5818] team0: Port device team_slave_1 added
[   79.939456][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.952338][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.991010][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.998334][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.005501][ T5827] bridge_slave_0: entered allmulticast mode
[   80.012902][ T5827] bridge_slave_0: entered promiscuous mode
[   80.022489][ T5824] team0: Port device team_slave_0 added
[   80.031205][ T5824] team0: Port device team_slave_1 added
[   80.083867][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.092924][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.100452][ T5827] bridge_slave_1: entered allmulticast mode
[   80.109078][ T5827] bridge_slave_1: entered promiscuous mode
[   80.116764][ T5839] Bluetooth: hci0: command tx timeout
[   80.143115][ T5828] team0: Port device team_slave_0 added
[   80.154416][ T5817] hsr_slave_0: entered promiscuous mode
[   80.161213][ T5817] hsr_slave_1: entered promiscuous mode
[   80.192126][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.199219][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.225511][ T5839] Bluetooth: hci1: command tx timeout
[   80.226684][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.244415][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.251635][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.276596][ T5839] Bluetooth: hci4: command tx timeout
[   80.278066][ T5831] Bluetooth: hci2: command tx timeout
[   80.283216][ T5839] Bluetooth: hci3: command tx timeout
[   80.289430][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.307373][ T5828] team0: Port device team_slave_1 added
[   80.325668][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.333283][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.359308][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.371732][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.378712][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.405208][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.449099][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.461154][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.491579][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.498648][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.524679][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.538176][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.545137][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.571394][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.650593][ T5827] team0: Port device team_slave_0 added
[   80.659880][ T5827] team0: Port device team_slave_1 added
[   80.691479][ T5824] hsr_slave_0: entered promiscuous mode
[   80.698260][ T5824] hsr_slave_1: entered promiscuous mode
[   80.705107][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.713060][ T5824] Cannot create hsr debugfs directory
[   80.764984][ T5818] hsr_slave_0: entered promiscuous mode
[   80.771957][ T5818] hsr_slave_1: entered promiscuous mode
[   80.778195][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.785749][ T5818] Cannot create hsr debugfs directory
[   80.852605][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.859611][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.885880][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.920675][ T5828] hsr_slave_0: entered promiscuous mode
[   80.927437][ T5828] hsr_slave_1: entered promiscuous mode
[   80.933487][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.941657][ T5828] Cannot create hsr debugfs directory
[   80.968560][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.975518][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.001756][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.175586][ T5827] hsr_slave_0: entered promiscuous mode
[   81.183074][ T5827] hsr_slave_1: entered promiscuous mode
[   81.189787][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.198079][ T5827] Cannot create hsr debugfs directory
[   81.466627][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.479407][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.533779][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.564622][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.638130][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.654205][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.676982][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.710248][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.817063][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.841082][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.883043][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.895241][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.939805][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.003808][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.013835][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.034891][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   82.048802][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.059707][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.099724][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.145250][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.152452][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.162164][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.169319][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.182450][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.192756][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.199580][ T5839] Bluetooth: hci0: command tx timeout
[   82.234207][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.244872][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.269743][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   82.286390][ T5839] Bluetooth: hci1: command tx timeout
[   82.295272][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.302406][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.319157][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.326323][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.356096][ T5839] Bluetooth: hci2: command tx timeout
[   82.356134][ T5837] Bluetooth: hci4: command tx timeout
[   82.367121][ T5831] Bluetooth: hci3: command tx timeout
[   82.417525][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.430736][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.533548][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.623865][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.649842][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   82.661547][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.692896][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.700032][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.714009][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   82.753300][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.760436][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.788767][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   82.814560][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.821737][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.839482][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.846964][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.885004][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.892205][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.914650][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.921829][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.028610][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.120033][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.228306][ T5817] veth0_vlan: entered promiscuous mode
[   83.302908][ T5817] veth1_vlan: entered promiscuous mode
[   83.348448][ T5824] veth0_vlan: entered promiscuous mode
[   83.394118][ T5824] veth1_vlan: entered promiscuous mode
[   83.450800][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.469746][ T5817] veth0_macvtap: entered promiscuous mode
[   83.500655][ T5824] veth0_macvtap: entered promiscuous mode
[   83.521104][ T5817] veth1_macvtap: entered promiscuous mode
[   83.549333][ T5824] veth1_macvtap: entered promiscuous mode
[   83.608929][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.634549][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.664168][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.678782][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.689225][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.698583][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.707446][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.730411][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.799197][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.880738][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.912024][ T5827] veth0_vlan: entered promiscuous mode
[   83.959718][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.969463][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.978231][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.987102][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.014079][ T5827] veth1_vlan: entered promiscuous mode
[   84.053729][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.058003][ T5818] veth0_vlan: entered promiscuous mode
[   84.071114][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.149499][ T5828] veth0_vlan: entered promiscuous mode
[   84.163183][ T5818] veth1_vlan: entered promiscuous mode
[   84.179888][ T5827] veth0_macvtap: entered promiscuous mode
[   84.190980][ T5827] veth1_macvtap: entered promiscuous mode
[   84.215399][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.226044][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.237832][ T5828] veth1_vlan: entered promiscuous mode
[   84.250843][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.274272][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.286762][ T5831] Bluetooth: hci0: command tx timeout
[   84.298312][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.311707][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.328397][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.361346][ T5831] Bluetooth: hci1: command tx timeout
[   84.373421][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   84.392504][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.418339][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.427250][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.436167][ T5837] Bluetooth: hci4: command tx timeout
[   84.438271][ T5839] Bluetooth: hci2: command tx timeout
[   84.441630][ T5831] Bluetooth: hci3: command tx timeout
[   84.452877][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.461634][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.479267][ T5818] veth0_macvtap: entered promiscuous mode
[   84.558410][ T5818] veth1_macvtap: entered promiscuous mode
[   84.610966][ T5911] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   84.619593][ T5911] netlink: 'syz.2.3': attribute type 2 has an invalid length.
[   84.686389][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.696134][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   84.722108][ T5914] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   84.748800][ T5914] netlink: 'syz.2.3': attribute type 2 has an invalid length.
[   84.896110][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   85.041295][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.098429][ T5828] veth0_macvtap: entered promiscuous mode
[   85.133002][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.161939][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.172042][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.181160][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.190099][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.207621][ T5828] veth1_macvtap: entered promiscuous mode
[   85.216241][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.231581][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.280800][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.287789][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.296240][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.333751][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.376436][   T52] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   85.384973][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.395528][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.414214][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.433158][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.450654][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.459828][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.537957][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.546238][   T52] usb 3-1: Using ep0 maxpacket: 16
[   85.555132][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.565645][   T52] usb 3-1: config 6 has an invalid interface number: 189 but max is 0
[   85.584698][   T52] usb 3-1: config 6 has no interface number 0
[   85.639341][   T52] usb 3-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=2f.a8
[   85.686376][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.704744][   T52] usb 3-1: Product: syz
[   85.737289][   T52] usb 3-1: Manufacturer: syz
[   85.741928][   T52] usb 3-1: SerialNumber: syz
[   85.828857][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.871537][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.004041][   T52] gspca_main: etoms-2.14.0 probing 102c:6251
[   86.210094][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.397005][ T5831] Bluetooth: hci0: command tx timeout
[   86.398831][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.432358][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   86.464752][ T5831] Bluetooth: hci1: command tx timeout
[   86.516421][ T5839] Bluetooth: hci3: command tx timeout
[   86.516827][ T5837] Bluetooth: hci4: command tx timeout
[   86.521865][ T5831] Bluetooth: hci2: command tx timeout
[   86.546640][   T52] usb 3-1: USB disconnect, device number 2
[   86.772725][    T9] cfg80211: failed to load regulatory.db
[   87.596297][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.917589][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'.
[   87.952727][ T5956] sctp: [Deprecated]: syz.0.14 (pid 5956) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.952727][ T5956] Use struct sctp_sack_info instead
[   87.986388][ T5819] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   88.172645][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   88.181956][  T976] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   88.210608][ T5819] usb 5-1: Using ep0 maxpacket: 16
[   88.338784][ T5819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.349462][  T976] usb 1-1: device descriptor read/64, error -71
[   88.409644][ T5819] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.656333][ T5819] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.665957][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.673963][ T5819] usb 5-1: Product: syz
[   88.693014][ T5819] usb 5-1: Manufacturer: syz
[   88.720279][ T5819] usb 5-1: SerialNumber: syz
[   88.766004][  T976] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   88.936049][  T976] usb 1-1: device descriptor read/64, error -71
[   89.057247][ T5819] usb 5-1: 0:2 : does not exist
[   89.137051][  T976] usb usb1-port1: attempt power cycle
[   89.164885][ T5819] usb 5-1: USB disconnect, device number 2
[   89.891754][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.937600][  T976] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   89.991831][  T976] usb 1-1: device descriptor read/8, error -71
[   90.157299][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   90.256295][  T976] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   90.306778][  T976] usb 1-1: device descriptor read/8, error -71
[   90.448188][  T976] usb usb1-port1: unable to enumerate USB device
[   90.542318][ T5989] warning: `syz.4.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   91.461406][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'.
[   92.988337][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.019764][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.032502][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.108380][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.116035][ T5819] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   93.773012][ T5819] usb 1-1: Using ep0 maxpacket: 16
[   93.799390][ T5819] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   93.866039][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.933087][ T5819] usb 1-1: Product: syz
[   93.940430][ T5819] usb 1-1: Manufacturer: syz
[   93.949016][ T5819] usb 1-1: SerialNumber: syz
[   93.978494][ T5819] r8152-cfgselector 1-1: Unknown version 0x0000
[   93.991169][ T5819] r8152-cfgselector 1-1: config 0 descriptor??
[   94.259679][ T6030] FAULT_INJECTION: forcing a failure.
[   94.259679][ T6030] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   94.273037][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   94.302993][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.4.38 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[   94.303018][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   94.303036][ T6030] Call Trace:
[   94.303044][ T6030]  <TASK>
[   94.303055][ T6030]  dump_stack_lvl+0x189/0x250
[   94.303094][ T6030]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.303119][ T6030]  ? __pfx__printk+0x10/0x10
[   94.303165][ T6030]  should_fail_ex+0x414/0x560
[   94.303190][ T6030]  _copy_to_user+0x31/0xb0
[   94.303218][ T6030]  simple_read_from_buffer+0xe1/0x170
[   94.303251][ T6030]  proc_fail_nth_read+0x1df/0x250
[   94.303273][ T6030]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.303295][ T6030]  ? rw_verify_area+0x258/0x650
[   94.303318][ T6030]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   94.303339][ T6030]  vfs_read+0x200/0x980
[   94.303368][ T6030]  ? __pfx___mutex_lock+0x10/0x10
[   94.303392][ T6030]  ? __pfx_vfs_read+0x10/0x10
[   94.303418][ T6030]  ? __fget_files+0x2a/0x420
[   94.303439][ T6030]  ? __fget_files+0x3a0/0x420
[   94.303455][ T6030]  ? __fget_files+0x2a/0x420
[   94.303480][ T6030]  ksys_read+0x145/0x250
[   94.303507][ T6030]  ? __pfx_ksys_read+0x10/0x10
[   94.303536][ T6030]  ? do_syscall_64+0xba/0x210
[   94.303563][ T6030]  do_syscall_64+0xf6/0x210
[   94.303587][ T6030]  ? clear_bhb_loop+0x60/0xb0
[   94.303610][ T6030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.303627][ T6030] RIP: 0033:0x7f724498d37c
[   94.303651][ T6030] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   94.303666][ T6030] RSP: 002b:00007f7245849030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   94.303685][ T6030] RAX: ffffffffffffffda RBX: 00007f7244bb5fa0 RCX: 00007f724498d37c
[   94.303698][ T6030] RDX: 000000000000000f RSI: 00007f72458490a0 RDI: 0000000000000004
[   94.303708][ T6030] RBP: 00007f7245849090 R08: 0000000000000000 R09: 0000000000000000
[   94.303719][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.303729][ T6030] R13: 0000000000000000 R14: 00007f7244bb5fa0 R15: 00007ffdd3eac518
[   94.303758][ T6030]  </TASK>
[   94.515049][    C0] vkms_vblank_simulate: vblank timer overrun
[   94.648693][    T9] usb 2-1: Using ep0 maxpacket: 16
[   94.659074][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   94.668447][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.676760][    T9] usb 2-1: Product: syz
[   94.681035][    T9] usb 2-1: Manufacturer: syz
[   94.685757][    T9] usb 2-1: SerialNumber: syz
[   94.701348][    T9] r8152-cfgselector 2-1: Unknown version 0x0000
[   94.707696][    T9] r8152-cfgselector 2-1: config 0 descriptor??
[   96.979715][ T5873] r8152-cfgselector 2-1: USB disconnect, device number 2
[   97.437092][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.749276][ T5873] usb 2-1: config 0 has an invalid interface number: 90 but max is 0
[   98.377768][ T5873] usb 2-1: config 0 has no interface number 0
[   98.413887][  T976] r8152-cfgselector 1-1: USB disconnect, device number 6
[   98.446070][ T5873] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f
[   98.600452][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.889130][ T5873] usb 2-1: Product: syz
[   98.893343][ T5873] usb 2-1: Manufacturer: syz
[   99.087880][ T5873] usb 2-1: SerialNumber: syz
[   99.346979][ T5873] usb 2-1: config 0 descriptor??
[   99.509046][ T6047] xt_hashlimit: max too large, truncated to 1048576
[   99.516411][ T6047] xt_hashlimit: overflow, try lower: 0/0
[   99.545641][ T6047] input: syz1 as /devices/virtual/input/input5
[   99.560055][ T6069] netlink: 'syz.3.48': attribute type 1 has an invalid length.
[   99.580674][ T5873] cdc_subset 2-1:0.90: probe with driver cdc_subset failed with error -22
[   99.597078][ T6047] syz.4.42 uses obsolete (PF_INET,SOCK_PACKET)
[   99.846886][   T52] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  100.136159][   T52] usb 4-1: device descriptor read/64, error -71
[  100.619253][   T52] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  100.658602][ T5872] usb 2-1: USB disconnect, device number 3
[  100.791550][   T52] usb 4-1: device descriptor read/64, error -71
[  100.929798][   T52] usb usb4-port1: attempt power cycle
[  101.271522][ T6079] @: renamed from vlan0 (while UP)
[  101.586593][   T52] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  101.678859][   T52] usb 4-1: device descriptor read/8, error -71
[  102.406122][   T52] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  102.600826][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[  102.609668][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'.
[  103.113487][   T52] usb 4-1: device descriptor read/8, error -71
[  103.276438][   T52] usb usb4-port1: unable to enumerate USB device
[  103.315343][ T6098] capability: warning: `syz.4.56' uses deprecated v2 capabilities in a way that may be insecure
[  104.017316][ T6114] fuse: Bad value for 'fd'
[  104.206171][   T52] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  104.539040][   T52] usb 2-1: device descriptor read/64, error -71
[  104.776082][   T52] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  105.027599][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  105.097855][   T52] usb 2-1: device descriptor read/64, error -71
[  105.185347][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'.
[  105.275998][   T52] usb usb2-port1: attempt power cycle
[  105.338688][ T5872] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  105.455018][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.547287][ T5872] usb 3-1: Product: syz
[  105.604808][ T5872] usb 3-1: Manufacturer: syz
[  105.656285][ T5872] usb 3-1: SerialNumber: syz
[  105.860051][ T5872] usb 3-1: config 0 descriptor??
[  105.880867][   T52] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  105.904861][ T5872] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 003
[  105.954789][   T52] usb 2-1: device descriptor read/8, error -71
[  106.236291][   T52] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  107.426120][ T5872] i2c i2c-1: failure reading functionality
[  107.482332][   T52] usb 2-1: device not accepting address 7, error -71
[  107.489233][ T5872] i2c i2c-1: connected i2c-tiny-usb device
[  107.524801][   T52] usb usb2-port1: unable to enumerate USB device
[  107.573738][ T5872] usb 3-1: USB disconnect, device number 3
[  107.660876][ T5831] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  107.674175][ T5831] Bluetooth: hci0: Injecting HCI hardware error event
[  107.686270][ T5831] Bluetooth: hci0: hardware error 0x00
[  108.814104][ T6167] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.875052][ T6167] netlink: 'syz.0.78': attribute type 4 has an invalid length.
[  109.197371][ T5819] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  109.598095][ T5819] usb 5-1: unable to get BOS descriptor or descriptor too short
[  109.607234][ T5819] usb 5-1: not running at top speed; connect to a high speed hub
[  109.616606][ T5819] usb 5-1: config 8 interface 0 has no altsetting 0
[  109.625418][ T5819] usb 5-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=5b.9e
[  109.635189][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.776029][   T52] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  109.786409][ T5819] usb 5-1: Product: syz
[  109.795972][ T5819] usb 5-1: Manufacturer: syz
[  109.804244][ T5819] usb 5-1: SerialNumber: syz
[  109.976058][   T52] usb 1-1: Using ep0 maxpacket: 16
[  109.989702][   T52] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  110.012116][   T52] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  110.025614][   T52] usb 1-1: config 0 has no interface number 0
[  110.034856][ T5819] gspca_main: sonixj-2.14.0 probing 06f8:3004
[  110.040021][   T52] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  110.050475][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.058759][   T52] usb 1-1: Product: syz
[  110.063013][   T52] usb 1-1: Manufacturer: syz
[  110.068054][   T52] usb 1-1: SerialNumber: syz
[  110.076503][   T52] usb 1-1: config 0 descriptor??
[  110.106576][   T52] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  110.122856][ T5819] gspca_sonixj: reg_w1 err -71
[  110.129455][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  110.133258][   T52] usb 1-1: No valid video chain found.
[  110.153837][ T5819] sonixj 5-1:8.0: probe with driver sonixj failed with error -71
[  110.173062][ T5819] usb 5-1: USB disconnect, device number 3
[  110.392408][ T6172] netlink: 'syz.4.73': attribute type 1 has an invalid length.
[  110.427338][   T52] usb 1-1: USB disconnect, device number 7
[  110.442435][ T6172] netlink: 'syz.4.73': attribute type 2 has an invalid length.
[  110.608160][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'.
[  111.256442][    T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  111.264569][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'.
[  111.273746][ T5873] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  111.436862][ T5873] usb 2-1: Using ep0 maxpacket: 32
[  111.445096][    T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  111.465979][ T5873] usb 2-1: unable to get BOS descriptor or descriptor too short
[  111.475102][    T9] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  111.486096][ T5873] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  111.496051][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.522737][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.533334][    T9] usb 5-1: Product: syz
[  111.550082][    T9] usb 5-1: Manufacturer: syz
[  111.566478][    T9] usb 5-1: SerialNumber: syz
[  111.571395][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.609433][    T9] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  111.631075][ T5873] usb 2-1: string descriptor 0 read error: -22
[  111.674312][ T5873] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.718794][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.787583][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[  111.796401][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'.
[  112.480570][    T9] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  112.523374][ T5873] usb 2-1: 0:2 : does not exist
[  112.537271][ T5873] usb 2-1: unit 129 not found!
[  112.546060][    T9] usb 5-1: USB disconnect, device number 4
[  112.641533][ T6205] FAULT_INJECTION: forcing a failure.
[  112.641533][ T6205] name failslab, interval 1, probability 0, space 0, times 1
[  112.693706][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.0.87 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  112.693734][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  112.693744][ T6205] Call Trace:
[  112.693751][ T6205]  <TASK>
[  112.693758][ T6205]  dump_stack_lvl+0x189/0x250
[  112.693789][ T6205]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.693813][ T6205]  ? __pfx__printk+0x10/0x10
[  112.693844][ T6205]  ? __pfx___might_resched+0x10/0x10
[  112.693870][ T6205]  ? fs_reclaim_acquire+0x7d/0x100
[  112.693894][ T6205]  should_fail_ex+0x414/0x560
[  112.693916][ T6205]  should_failslab+0xa8/0x100
[  112.693934][ T6205]  __kmalloc_noprof+0xcb/0x4f0
[  112.693959][ T6205]  ? kfree+0x4d/0x440
[  112.693979][ T6205]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  112.694007][ T6205]  tomoyo_realpath_from_path+0xe3/0x5d0
[  112.694032][ T6205]  ? tomoyo_domain+0xda/0x130
[  112.694061][ T6205]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  112.694080][ T6205]  tomoyo_path_number_perm+0x1e8/0x5a0
[  112.694101][ T6205]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  112.694136][ T6205]  ? __lock_acquire+0xaac/0xd20
[  112.694176][ T6205]  ? __fget_files+0x2a/0x420
[  112.694196][ T6205]  ? __fget_files+0x3a0/0x420
[  112.694211][ T6205]  ? __fget_files+0x2a/0x420
[  112.694230][ T6205]  security_file_ioctl+0xcb/0x2d0
[  112.694253][ T6205]  __se_sys_ioctl+0x47/0x170
[  112.694277][ T6205]  do_syscall_64+0xf6/0x210
[  112.694301][ T6205]  ? clear_bhb_loop+0x60/0xb0
[  112.694322][ T6205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.694338][ T6205] RIP: 0033:0x7f14e7f8e969
[  112.694353][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.694367][ T6205] RSP: 002b:00007f14e8d9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  112.694385][ T6205] RAX: ffffffffffffffda RBX: 00007f14e81b5fa0 RCX: 00007f14e7f8e969
[  112.694397][ T6205] RDX: 00002000000002c0 RSI: 000000000000541b RDI: 0000000000000003
[  112.694408][ T6205] RBP: 00007f14e8d9e090 R08: 0000000000000000 R09: 0000000000000000
[  112.694418][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.694427][ T6205] R13: 0000000000000000 R14: 00007f14e81b5fa0 R15: 00007fff77e21f38
[  112.694452][ T6205]  </TASK>
[  112.694484][ T6205] ERROR: Out of memory at tomoyo_realpath_from_path.
[  113.343029][ T6233] kAFS: No cell specified
[  113.570213][   T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  113.735629][   T52] usb 4-1: Using ep0 maxpacket: 8
[  113.750503][   T52] usb 4-1: unable to get BOS descriptor or descriptor too short
[  113.761744][   T52] usb 4-1: config 31 has an invalid interface number: 134 but max is 0
[  113.774179][   T52] usb 4-1: config 31 contains an unexpected descriptor of type 0x2, skipping
[  113.784786][   T52] usb 4-1: config 31 contains an unexpected descriptor of type 0x1, skipping
[  113.797911][   T52] usb 4-1: config 31 descriptor has 1 excess byte, ignoring
[  113.805358][   T52] usb 4-1: config 31 has no interface number 0
[  113.813396][   T52] usb 4-1: config 31 interface 134 altsetting 41 endpoint 0xF has an invalid bInterval 0, changing to 7
[  113.831090][   T52] usb 4-1: config 31 interface 134 altsetting 41 endpoint 0xF has invalid wMaxPacketSize 0
[  113.843189][   T52] usb 4-1: config 31 interface 134 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  113.860860][   T52] usb 4-1: config 31 interface 134 has no altsetting 0
[  113.870911][   T52] usb 4-1: New USB device found, idVendor=0499, idProduct=1052, bcdDevice=a4.d0
[  113.883957][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.892126][   T52] usb 4-1: Product: syz
[  113.899568][   T52] usb 4-1: Manufacturer: syz
[  113.904257][   T52] usb 4-1: SerialNumber: syz
[  114.047454][    T9] usb 2-1: USB disconnect, device number 8
[  114.158753][   T52] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  114.283560][   T52] snd-usb-audio 4-1:31.134: probe with driver snd-usb-audio failed with error -2
[  114.508812][   T52] usb 4-1: USB disconnect, device number 6
[  114.543211][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:31.134/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.471750][ T6251] FAULT_INJECTION: forcing a failure.
[  115.471750][ T6251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.808653][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz.3.99 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  115.808679][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  115.808689][ T6251] Call Trace:
[  115.808696][ T6251]  <TASK>
[  115.808703][ T6251]  dump_stack_lvl+0x189/0x250
[  115.808729][ T6251]  ? __lock_acquire+0xaac/0xd20
[  115.808754][ T6251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.808777][ T6251]  ? __pfx__printk+0x10/0x10
[  115.808803][ T6251]  ? __might_fault+0xb0/0x130
[  115.808840][ T6251]  should_fail_ex+0x414/0x560
[  115.808862][ T6251]  _copy_from_user+0x2d/0xb0
[  115.808887][ T6251]  __keyctl_dh_compute+0x16a/0xca0
[  115.808921][ T6251]  ? __pfx___keyctl_dh_compute+0x10/0x10
[  115.808959][ T6251]  ? __might_fault+0xb0/0x130
[  115.809002][ T6251]  keyctl_dh_compute+0x109/0x160
[  115.809021][ T6251]  ? __pfx_keyctl_dh_compute+0x10/0x10
[  115.809053][ T6251]  ? __se_sys_keyctl+0x40e/0x910
[  115.809081][ T6251]  __se_sys_keyctl+0x423/0x910
[  115.809099][ T6251]  ? __pfx___se_sys_keyctl+0x10/0x10
[  115.809113][ T6251]  ? irqentry_exit+0x74/0x90
[  115.809127][ T6251]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.809148][ T6251]  ? ksys_write+0x1e8/0x250
[  115.809170][ T6251]  ? rcu_is_watching+0x15/0xb0
[  115.809193][ T6251]  ? do_syscall_64+0xba/0x210
[  115.809208][ T6251]  ? __x64_sys_keyctl+0x20/0xc0
[  115.809224][ T6251]  do_syscall_64+0xf6/0x210
[  115.809239][ T6251]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  115.809251][ T6251]  ? clear_bhb_loop+0x60/0xb0
[  115.809266][ T6251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.809277][ T6251] RIP: 0033:0x7f25fb18e969
[  115.809288][ T6251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.809298][ T6251] RSP: 002b:00007f25f8ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  115.809311][ T6251] RAX: ffffffffffffffda RBX: 00007f25fb3b5fa0 RCX: 00007f25fb18e969
[  115.809319][ T6251] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017
[  115.809327][ T6251] RBP: 00007f25f8ff6090 R08: 0000200000000180 R09: 0000000000000000
[  115.809334][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.809341][ T6251] R13: 0000000000000000 R14: 00007f25fb3b5fa0 R15: 00007fff9323a168
[  115.809359][ T6251]  </TASK>
[  116.284323][ T6259] sctp: failed to load transform for md5: -2
[  116.810183][ T6270] Zero length message leads to an empty skb
[  117.106072][ T5872] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  117.286231][ T5872] usb 2-1: device descriptor read/64, error -71
[  117.639025][ T5872] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  117.865200][ T5872] usb 2-1: device descriptor read/64, error -71
[  118.006210][ T5872] usb usb2-port1: attempt power cycle
[  118.026070][ T2148] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  118.201891][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  118.229966][ T6292] binder: BINDER_SET_CONTEXT_MGR already set
[  118.236252][ T6292] binder: 6289:6292 ioctl 4018620d 200000000040 returned -16
[  118.249654][ T2148] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  118.307331][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  118.371897][ T2148] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  118.386124][ T5872] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  118.424701][ T2148] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  118.445875][ T5872] usb 2-1: device descriptor read/8, error -71
[  118.513326][ T2148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.604330][ T2148] usb 1-1: Product: syz
[  118.646846][ T2148] usb 1-1: Manufacturer: syz
[  118.676728][ T2148] usb 1-1: SerialNumber: syz
[  118.756445][ T5872] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  118.796421][ T2148] usb 1-1: config 0 descriptor??
[  118.882367][ T5872] usb 2-1: device descriptor read/8, error -71
[  118.937278][ T2148] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  119.062812][ T5872] usb usb2-port1: unable to enumerate USB device
[  119.292645][ T2148] scsi host1: usb-storage 1-1:0.0
[  119.348336][ T2148] usb 1-1: USB disconnect, device number 8
[  119.410894][ T5819] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  119.878821][ T5888] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  120.046161][ T5888] usb 4-1: Using ep0 maxpacket: 16
[  120.069378][ T5888] usb 4-1: config 0 has no interfaces?
[  120.095007][ T5888] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  120.128112][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.146802][ T5888] usb 4-1: Product: syz
[  120.155495][ T5888] usb 4-1: Manufacturer: syz
[  120.174153][ T5888] usb 4-1: SerialNumber: syz
[  120.211326][ T5888] usb 4-1: config 0 descriptor??
[  120.313225][ T6318] FAULT_INJECTION: forcing a failure.
[  120.313225][ T6318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.332031][ T6318] CPU: 1 UID: 0 PID: 6318 Comm: syz.1.118 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  120.332052][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  120.332064][ T6318] Call Trace:
[  120.332071][ T6318]  <TASK>
[  120.332077][ T6318]  dump_stack_lvl+0x189/0x250
[  120.332109][ T6318]  ? __lock_acquire+0xaac/0xd20
[  120.332131][ T6318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.332151][ T6318]  ? __pfx__printk+0x10/0x10
[  120.332185][ T6318]  ? __might_fault+0xb0/0x130
[  120.332218][ T6318]  should_fail_ex+0x414/0x560
[  120.332240][ T6318]  _copy_from_user+0x2d/0xb0
[  120.332265][ T6318]  ___sys_sendmsg+0x158/0x2a0
[  120.332289][ T6318]  ? __pfx____sys_sendmsg+0x10/0x10
[  120.332356][ T6318]  ? __fget_files+0x2a/0x420
[  120.332371][ T6318]  ? __fget_files+0x3a0/0x420
[  120.332396][ T6318]  __x64_sys_sendmsg+0x19b/0x260
[  120.332422][ T6318]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  120.332461][ T6318]  ? do_syscall_64+0xba/0x210
[  120.332486][ T6318]  do_syscall_64+0xf6/0x210
[  120.332506][ T6318]  ? clear_bhb_loop+0x60/0xb0
[  120.332526][ T6318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.332541][ T6318] RIP: 0033:0x7f744c18e969
[  120.332575][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.332588][ T6318] RSP: 002b:00007f744cff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.332609][ T6318] RAX: ffffffffffffffda RBX: 00007f744c3b5fa0 RCX: 00007f744c18e969
[  120.332619][ T6318] RDX: 0000000000004004 RSI: 0000200000000200 RDI: 0000000000000003
[  120.332628][ T6318] RBP: 00007f744cff5090 R08: 0000000000000000 R09: 0000000000000000
[  120.332637][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.332645][ T6318] R13: 0000000000000000 R14: 00007f744c3b5fa0 R15: 00007ffc5a948648
[  120.332670][ T6318]  </TASK>
[  120.521628][    C1] vkms_vblank_simulate: vblank timer overrun
[  120.578364][ T5873] usb 4-1: USB disconnect, device number 7
[  120.596029][    T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  120.763836][    T9] usb 1-1: config 253 has an invalid interface number: 57 but max is 0
[  120.776606][    T9] usb 1-1: config 253 has no interface number 0
[  120.783079][    T9] usb 1-1: config 253 interface 57 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  120.804431][    T9] usb 1-1: New USB device found, idVendor=1546, idProduct=1313, bcdDevice=1c.86
[  120.814822][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.834678][    T9] usb 1-1: Product: syz
[  120.856234][    T9] usb 1-1: Manufacturer: syz
[  120.861087][    T9] usb 1-1: SerialNumber: syz
[  121.087009][    T9] cdc_ether 1-1:253.57: invalid descriptor buffer length
[  121.094277][    T9] usb 1-1: bad CDC descriptors
[  122.057409][    T9] usb 1-1: USB disconnect, device number 9
[  122.386240][ T6333] Illegal XDP return value 6333 on prog  (id 21) dev N/A, expect packet loss!
[  126.180370][ T6356] syz.1.131 (6356): drop_caches: 2
[  126.202824][ T6356] syz.1.131 (6356): drop_caches: 2
[  126.874874][ T6370] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  126.881534][ T6370] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  127.012143][ T6370] vhci_hcd vhci_hcd.0: Device attached
[  127.042216][ T6373] vhci_hcd: connection closed
[  127.043703][   T78] vhci_hcd: stop threads
[  127.053156][ T5872] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  127.072453][   T78] vhci_hcd: release socket
[  127.082614][   T78] vhci_hcd: disconnect device
[  127.328724][ T5872] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  127.578544][ T5872] usb 2-1: can't read configurations, error -22
[  127.725971][ T5872] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  129.258310][ T5872] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  129.350690][ T5872] usb 2-1: can't read configurations, error -22
[  129.380810][ T5872] usb usb2-port1: attempt power cycle
[  129.669618][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.869302][ T5872] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  129.871159][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.085976][ T5872] usb 2-1: device not accepting address 15, error -71
[  130.095369][ T6407] @: renamed from vlan0 (while UP)
[  130.443155][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'.
[  130.460604][ T6410] ipvlan2: entered promiscuous mode
[  130.482047][ T6410] bridge0: port 3(ipvlan2) entered blocking state
[  130.523641][ T6410] bridge0: port 3(ipvlan2) entered disabled state
[  130.550689][ T6410] ipvlan2: entered allmulticast mode
[  130.559333][ T6410] bridge0: entered allmulticast mode
[  130.572891][ T6410] ipvlan2: left allmulticast mode
[  130.581015][ T6410] bridge0: left allmulticast mode
[  130.644576][ T6414] netlink: 'syz.4.148': attribute type 21 has an invalid length.
[  130.666024][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'.
[  130.681451][ T6414] netlink: 'syz.4.148': attribute type 4 has an invalid length.
[  130.689314][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.148'.
[  130.718189][ T5872] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  130.748060][ T5872] usb 2-1: Using ep0 maxpacket: 16
[  130.773143][ T5872] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  130.792792][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.814441][ T5872] usb 2-1: Product: syz
[  130.824672][ T5872] usb 2-1: Manufacturer: syz
[  130.831369][ T5872] usb 2-1: SerialNumber: syz
[  130.837890][ T5819] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  130.859856][ T5872] r8152-cfgselector 2-1: Unknown version 0x0000
[  130.866590][ T5872] r8152-cfgselector 2-1: config 0 descriptor??
[  130.879699][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'.
[  131.017112][ T5819] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.049059][ T5819] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.140844][ T5819] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  131.256157][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  131.281480][ T5819] usb 1-1: SerialNumber: syz
[  132.331468][ T5819] usb 1-1: 0:2 : does not exist
[  132.343166][ T5819] usb 1-1: unit 48 not found!
[  132.421525][ T5819] usb 1-1: USB disconnect, device number 10
[  132.502746][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.701490][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  133.614269][  T976] r8152-cfgselector 2-1: USB disconnect, device number 16
[  133.676297][ T6441] netlink: 'syz.3.155': attribute type 8 has an invalid length.
[  134.136873][  T976] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  134.156256][ T6460] FAULT_INJECTION: forcing a failure.
[  134.156256][ T6460] name failslab, interval 1, probability 0, space 0, times 0
[  134.206272][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.3.162 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  134.206297][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  134.206325][ T6460] Call Trace:
[  134.206333][ T6460]  <TASK>
[  134.206341][ T6460]  dump_stack_lvl+0x189/0x250
[  134.206377][ T6460]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.206405][ T6460]  ? __pfx__printk+0x10/0x10
[  134.206442][ T6460]  ? ref_tracker_alloc+0x318/0x460
[  134.206468][ T6460]  should_fail_ex+0x414/0x560
[  134.206511][ T6460]  should_failslab+0xa8/0x100
[  134.206541][ T6460]  kmem_cache_alloc_noprof+0x73/0x3c0
[  134.206572][ T6460]  ? skb_clone+0x212/0x3a0
[  134.206607][ T6460]  skb_clone+0x212/0x3a0
[  134.206641][ T6460]  __netlink_deliver_tap+0x404/0x850
[  134.206680][ T6460]  ? netlink_deliver_tap+0x2e/0x1b0
[  134.206706][ T6460]  netlink_deliver_tap+0x19c/0x1b0
[  134.206732][ T6460]  netlink_unicast+0x72f/0x8d0
[  134.206766][ T6460]  netlink_sendmsg+0x805/0xb30
[  134.206788][ T6460]  ? is_bpf_text_address+0x26/0x2b0
[  134.206826][ T6460]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.206860][ T6460]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  134.206882][ T6460]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.206907][ T6460]  __sock_sendmsg+0x219/0x270
[  134.206932][ T6460]  ____sys_sendmsg+0x505/0x830
[  134.206967][ T6460]  ? __pfx_____sys_sendmsg+0x10/0x10
[  134.207009][ T6460]  ? import_iovec+0x74/0xa0
[  134.207042][ T6460]  ___sys_sendmsg+0x21f/0x2a0
[  134.207074][ T6460]  ? __pfx____sys_sendmsg+0x10/0x10
[  134.207143][ T6460]  ? __fget_files+0x2a/0x420
[  134.207162][ T6460]  ? __fget_files+0x3a0/0x420
[  134.207193][ T6460]  __x64_sys_sendmsg+0x19b/0x260
[  134.207224][ T6460]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  134.207272][ T6460]  ? do_syscall_64+0xba/0x210
[  134.207303][ T6460]  do_syscall_64+0xf6/0x210
[  134.207330][ T6460]  ? clear_bhb_loop+0x60/0xb0
[  134.207356][ T6460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.207375][ T6460] RIP: 0033:0x7f25fb18e969
[  134.207393][ T6460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.207410][ T6460] RSP: 002b:00007f25f8ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.207431][ T6460] RAX: ffffffffffffffda RBX: 00007f25fb3b5fa0 RCX: 00007f25fb18e969
[  134.207446][ T6460] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  134.207458][ T6460] RBP: 00007f25f8ff6090 R08: 0000000000000000 R09: 0000000000000000
[  134.207470][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.207481][ T6460] R13: 0000000000000000 R14: 00007f25fb3b5fa0 R15: 00007fff9323a168
[  134.207514][ T6460]  </TASK>
[  134.415957][  T976] usb 3-1: Using ep0 maxpacket: 8
[  134.532581][  T976] usb 3-1: config 0 has an invalid interface number: 3 but max is 0
[  134.549009][  T976] usb 3-1: config 0 has no interface number 0
[  134.555610][  T976] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  134.697989][  T976] usb 3-1: config 0 interface 3 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  134.736214][  T976] usb 3-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=49.e6
[  134.753256][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.783269][  T976] usb 3-1: Product: syz
[  134.802196][  T976] usb 3-1: Manufacturer: syz
[  134.825404][  T976] usb 3-1: SerialNumber: syz
[  134.871122][  T976] usb 3-1: config 0 descriptor??
[  135.099424][ T6449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.114116][ T6449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.187492][  T976] ftdi_sio 3-1:0.3: FTDI USB Serial Device converter detected
[  135.209468][  T976] ftdi_sio ttyUSB0: unknown device type: 0x49e6
[  135.248734][  T976] usb 3-1: USB disconnect, device number 4
[  135.289088][  T976] ftdi_sio 3-1:0.3: device disconnected
[  135.687073][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  135.866301][    T9] usb 5-1: Using ep0 maxpacket: 8
[  136.296255][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.733211][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  136.765321][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.796195][    T9] usb 5-1: Product: syz
[  136.800449][    T9] usb 5-1: Manufacturer: syz
[  136.818291][    T9] usb 5-1: SerialNumber: syz
[  137.417850][ T6500] netlink: 'syz.3.170': attribute type 8 has an invalid length.
[  137.457000][    T9] usb 5-1: USB disconnect, device number 6
[  137.781630][ T6505] FAULT_INJECTION: forcing a failure.
[  137.781630][ T6505] name failslab, interval 1, probability 0, space 0, times 0
[  137.781659][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.1.174 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  137.781679][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  137.781689][ T6505] Call Trace:
[  137.781696][ T6505]  <TASK>
[  137.781703][ T6505]  dump_stack_lvl+0x189/0x250
[  137.781734][ T6505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.781757][ T6505]  ? __pfx__printk+0x10/0x10
[  137.781789][ T6505]  ? ref_tracker_alloc+0x318/0x460
[  137.781811][ T6505]  should_fail_ex+0x414/0x560
[  137.781834][ T6505]  should_failslab+0xa8/0x100
[  137.781852][ T6505]  kmem_cache_alloc_noprof+0x73/0x3c0
[  137.781877][ T6505]  ? skb_clone+0x212/0x3a0
[  137.781906][ T6505]  skb_clone+0x212/0x3a0
[  137.781934][ T6505]  __netlink_deliver_tap+0x404/0x850
[  137.781965][ T6505]  ? netlink_deliver_tap+0x2e/0x1b0
[  137.781986][ T6505]  netlink_deliver_tap+0x19c/0x1b0
[  137.782008][ T6505]  netlink_unicast+0x72f/0x8d0
[  137.782036][ T6505]  netlink_sendmsg+0x805/0xb30
[  137.782053][ T6505]  ? is_bpf_text_address+0x26/0x2b0
[  137.782085][ T6505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.782113][ T6505]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  137.782131][ T6505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.782152][ T6505]  __sock_sendmsg+0x219/0x270
[  137.782173][ T6505]  ____sys_sendmsg+0x505/0x830
[  137.782201][ T6505]  ? __pfx_____sys_sendmsg+0x10/0x10
[  137.782233][ T6505]  ? import_iovec+0x74/0xa0
[  137.782260][ T6505]  ___sys_sendmsg+0x21f/0x2a0
[  137.782285][ T6505]  ? __pfx____sys_sendmsg+0x10/0x10
[  137.782348][ T6505]  ? __fget_files+0x2a/0x420
[  137.782363][ T6505]  ? __fget_files+0x3a0/0x420
[  137.782389][ T6505]  __x64_sys_sendmsg+0x19b/0x260
[  137.782415][ T6505]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  137.782454][ T6505]  ? do_syscall_64+0xba/0x210
[  137.782480][ T6505]  do_syscall_64+0xf6/0x210
[  137.782502][ T6505]  ? clear_bhb_loop+0x60/0xb0
[  137.782524][ T6505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.782540][ T6505] RIP: 0033:0x7f744c18e969
[  137.782555][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.782569][ T6505] RSP: 002b:00007f744cff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  137.782587][ T6505] RAX: ffffffffffffffda RBX: 00007f744c3b5fa0 RCX: 00007f744c18e969
[  137.782599][ T6505] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  137.782610][ T6505] RBP: 00007f744cff5090 R08: 0000000000000000 R09: 0000000000000000
[  137.782620][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.782630][ T6505] R13: 0000000000000000 R14: 00007f744c3b5fa0 R15: 00007ffc5a948648
[  137.782657][ T6505]  </TASK>
[  137.972924][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[  138.001502][ T6511] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  138.575092][ T6529] netlink: 'syz.4.178': attribute type 10 has an invalid length.
[  138.575629][ T6529] hsr0: entered promiscuous mode
[  138.580000][ T6529] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  138.580196][ T6529] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  138.580215][ T6529] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  139.559402][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.179'.
[  140.824163][ T6533] sctp: failed to load transform for md5: -2
[  141.180828][ T5831] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  141.181444][ T5831] Bluetooth: hci1: Injecting HCI hardware error event
[  141.183105][ T5837] Bluetooth: hci1: hardware error 0x00
[  142.626204][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  142.785996][    T9] usb 2-1: Using ep0 maxpacket: 8
[  142.787874][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.790109][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  142.890865][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.890892][    T9] usb 2-1: Product: syz
[  142.890907][    T9] usb 2-1: Manufacturer: syz
[  142.890932][    T9] usb 2-1: SerialNumber: syz
[  143.179026][    T9] usb 2-1: USB disconnect, device number 17
[  143.567982][ T5837] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  144.035287][ T2148] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  144.053237][   T30] audit: type=1326 audit(1748035156.625:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  144.122610][   T30] audit: type=1326 audit(1748035156.635:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  144.371742][   T30] audit: type=1326 audit(1748035156.635:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  144.437019][ T2148] usb 2-1: device not accepting address 18, error -71
[  144.636376][   T30] audit: type=1326 audit(1748035156.635:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  144.750723][ T6604] netlink: 'syz.2.197': attribute type 10 has an invalid length.
[  145.313618][   T30] audit: type=1326 audit(1748035156.635:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  145.489476][   T30] audit: type=1326 audit(1748035156.635:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  145.566016][   T30] audit: type=1326 audit(1748035156.635:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  145.927543][   T30] audit: type=1326 audit(1748035156.635:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  145.935843][ T6610] FAULT_INJECTION: forcing a failure.
[  145.935843][ T6610] name failslab, interval 1, probability 0, space 0, times 0
[  145.955972][   T30] audit: type=1326 audit(1748035156.635:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  146.003189][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.1.198 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  146.003213][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  146.003227][ T6610] Call Trace:
[  146.003233][ T6610]  <TASK>
[  146.003241][ T6610]  dump_stack_lvl+0x189/0x250
[  146.003271][ T6610]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.003295][ T6610]  ? __pfx__printk+0x10/0x10
[  146.003330][ T6610]  ? __pfx___might_resched+0x10/0x10
[  146.003356][ T6610]  ? fs_reclaim_acquire+0x7d/0x100
[  146.003380][ T6610]  should_fail_ex+0x414/0x560
[  146.003406][ T6610]  should_failslab+0xa8/0x100
[  146.003424][ T6610]  __kmalloc_node_track_caller_noprof+0xcc/0x4e0
[  146.003450][ T6610]  ? smk_parse_smack+0x1b1/0x1f0
[  146.003481][ T6610]  kstrndup+0x80/0x160
[  146.003508][ T6610]  smk_parse_smack+0x1b1/0x1f0
[  146.003536][ T6610]  smk_import_entry+0x20/0x1d0
[  146.003582][ T6610]  smk_write_net6addr+0x512/0x13e0
[  146.003612][ T6610]  ? __lock_acquire+0xaac/0xd20
[  146.003648][ T6610]  ? __pfx_smk_write_net6addr+0x10/0x10
[  146.003669][ T6610]  ? rcu_read_lock_any_held+0xb3/0x120
[  146.003712][ T6610]  ? __pfx_smk_write_net6addr+0x10/0x10
[  146.003737][ T6610]  vfs_write+0x27e/0xa90
[  146.003777][ T6610]  ? __pfx_vfs_write+0x10/0x10
[  146.003810][ T6610]  ? __fget_files+0x2a/0x420
[  146.003832][ T6610]  ? __fget_files+0x3a0/0x420
[  146.003847][ T6610]  ? __fget_files+0x2a/0x420
[  146.003876][ T6610]  ksys_write+0x145/0x250
[  146.003900][ T6610]  ? rcu_is_watching+0x15/0xb0
[  146.003928][ T6610]  ? __pfx_ksys_write+0x10/0x10
[  146.003960][ T6610]  ? do_syscall_64+0xba/0x210
[  146.003988][ T6610]  do_syscall_64+0xf6/0x210
[  146.004012][ T6610]  ? clear_bhb_loop+0x60/0xb0
[  146.004038][ T6610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.004055][ T6610] RIP: 0033:0x7f744c18e969
[  146.004071][ T6610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.004086][ T6610] RSP: 002b:00007f744cff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.004105][ T6610] RAX: ffffffffffffffda RBX: 00007f744c3b5fa0 RCX: 00007f744c18e969
[  146.004121][ T6610] RDX: 00000000000000b1 RSI: 0000200000000080 RDI: 0000000000000003
[  146.004132][ T6610] RBP: 00007f744cff5090 R08: 0000000000000000 R09: 0000000000000000
[  146.004142][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.004152][ T6610] R13: 0000000000000000 R14: 00007f744c3b5fa0 R15: 00007ffc5a948648
[  146.004181][ T6610]  </TASK>
[  146.272724][ T6604] hsr0: entered promiscuous mode
[  146.280267][ T6604] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  146.290582][ T6604] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  146.302947][ T6604] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  146.452682][   T30] audit: type=1326 audit(1748035156.635:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6584 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f84b8e969 code=0x7ffc0000
[  146.706181][ T2148] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  146.845984][ T2148] usb 3-1: device descriptor read/64, error -71
[  146.898405][ T5819] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  147.226074][ T5819] usb 1-1: Using ep0 maxpacket: 8
[  147.259882][ T5819] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.261496][ T6627] 9pnet_fd: Insufficient options for proto=fd
[  147.270242][ T5819] usb 1-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  147.336078][ T5819] usb 1-1: config 1 interface 0 has no altsetting 0
[  147.345486][ T5819] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  147.356080][ T2148] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  147.495976][ T2148] usb 3-1: device descriptor read/64, error -71
[  147.611936][ T2148] usb usb3-port1: attempt power cycle
[  147.629964][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.638205][ T5819] usb 1-1: Product: syz
[  147.642754][ T5819] usb 1-1: Manufacturer: syz
[  147.652037][ T5819] usb 1-1: SerialNumber: syz
[  147.875533][ T5819] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6
[  147.889915][ T5174] bcm5974 1-1:1.0: could not read from device
[  147.917778][ T5174] bcm5974 1-1:1.0: could not read from device
[  147.924221][ T5819] usb 1-1: USB disconnect, device number 11
[  147.987946][ T2148] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  148.026856][ T2148] usb 3-1: device descriptor read/8, error -71
[  148.365963][ T2148] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  148.387830][ T2148] usb 3-1: device descriptor read/8, error -71
[  148.527931][ T2148] usb usb3-port1: unable to enumerate USB device
[  149.645983][ T6656] Bluetooth: MGMT ver 1.23
[  149.792528][ T6660] FAULT_INJECTION: forcing a failure.
[  149.792528][ T6660] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.805811][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: syz.0.215 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  149.805832][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  149.805842][ T6660] Call Trace:
[  149.805849][ T6660]  <TASK>
[  149.805855][ T6660]  dump_stack_lvl+0x189/0x250
[  149.805887][ T6660]  ? irqentry_exit+0x74/0x90
[  149.805909][ T6660]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.805947][ T6660]  should_fail_ex+0x414/0x560
[  149.805971][ T6660]  _copy_from_iter+0x1db/0x15a0
[  149.806004][ T6660]  ? __pfx__copy_from_iter+0x10/0x10
[  149.806025][ T6660]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  149.806054][ T6660]  ? skb_put+0x11b/0x210
[  149.806080][ T6660]  hci_sock_sendmsg+0x422/0xee0
[  149.806105][ T6660]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  149.806127][ T6660]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  149.806145][ T6660]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  149.806165][ T6660]  __sock_sendmsg+0x219/0x270
[  149.806184][ T6660]  sock_write_iter+0x258/0x330
[  149.806213][ T6660]  ? __pfx_sock_write_iter+0x10/0x10
[  149.806256][ T6660]  ? bpf_lsm_file_permission+0x9/0x20
[  149.806275][ T6660]  ? security_file_permission+0x75/0x290
[  149.806303][ T6660]  vfs_write+0x54b/0xa90
[  149.806331][ T6660]  ? __pfx_sock_write_iter+0x10/0x10
[  149.806358][ T6660]  ? __pfx_vfs_write+0x10/0x10
[  149.806391][ T6660]  ? __fget_files+0x2a/0x420
[  149.806414][ T6660]  ksys_write+0x145/0x250
[  149.806435][ T6660]  ? rcu_is_watching+0x15/0xb0
[  149.806466][ T6660]  ? __pfx_ksys_write+0x10/0x10
[  149.806493][ T6660]  ? do_syscall_64+0xba/0x210
[  149.806538][ T6660]  do_syscall_64+0xf6/0x210
[  149.806564][ T6660]  ? clear_bhb_loop+0x60/0xb0
[  149.806588][ T6660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.806608][ T6660] RIP: 0033:0x7f14e7f8e969
[  149.806625][ T6660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.806641][ T6660] RSP: 002b:00007f14e8d9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  149.806662][ T6660] RAX: ffffffffffffffda RBX: 00007f14e81b5fa0 RCX: 00007f14e7f8e969
[  149.806676][ T6660] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004
[  149.806687][ T6660] RBP: 00007f14e8d9e090 R08: 0000000000000000 R09: 0000000000000000
[  149.806699][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.806707][ T6660] R13: 0000000000000000 R14: 00007f14e81b5fa0 R15: 00007fff77e21f38
[  149.806731][ T6660]  </TASK>
[  153.799507][ T6695] netlink: 'syz.0.224': attribute type 10 has an invalid length.
[  153.808462][ T6695] hsr0: entered promiscuous mode
[  153.823124][ T6695] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  153.834291][ T6695] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  153.846728][ T6695] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  154.016566][ T5931] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  154.486107][ T5931] usb 3-1: device descriptor read/64, error -71
[  154.667111][ T6703] netlink: 'syz.3.225': attribute type 10 has an invalid length.
[  154.677863][ T6703] hsr0: entered promiscuous mode
[  154.706359][ T6703] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  154.718096][ T6703] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  154.730609][ T6703] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  154.767607][ T5837] Bluetooth: hci4: link tx timeout
[  154.773056][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  154.797666][ T5831] Bluetooth: hci4: link tx timeout
[  154.802988][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  155.756652][ T5931] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  155.936144][ T5931] usb 3-1: device descriptor read/64, error -71
[  156.076196][ T5931] usb usb3-port1: attempt power cycle
[  156.676203][ T5931] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  156.847248][ T5831] Bluetooth: hci4: command 0x0406 tx timeout
[  156.906241][ T5931] usb 3-1: device descriptor read/8, error -71
[  156.998100][ T6726] nvme_fabrics: missing parameter 'transport=%s'
[  157.004553][ T6726] nvme_fabrics: missing parameter 'nqn=%s'
[  157.815986][   T52] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  158.526069][   T52] usb 5-1: Using ep0 maxpacket: 8
[  158.625562][   T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.637061][   T52] usb 5-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  158.660407][   T52] usb 5-1: config 1 interface 0 has no altsetting 0
[  158.682036][   T52] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  158.698440][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.715805][   T52] usb 5-1: Product: syz
[  158.744205][   T52] usb 5-1: Manufacturer: syz
[  158.758514][   T52] usb 5-1: SerialNumber: syz
[  159.044181][   T52] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7
[  159.228751][ T5174] bcm5974 5-1:1.0: could not read from device
[  159.256952][ T5174] bcm5974 5-1:1.0: could not read from device
[  159.318507][ T6765] netlink: 'syz.1.243': attribute type 10 has an invalid length.
[  159.327491][ T6765] hsr0: entered promiscuous mode
[  159.344259][ T6765] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  159.355351][ T6765] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  159.367916][ T6765] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  160.006683][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'.
[  160.309664][   T52] usb 5-1: USB disconnect, device number 7
[  160.337018][ T5174] bcm5974 5-1:1.0: could not read from device
[  161.103600][ T6778] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  161.418621][ T6785] FAULT_INJECTION: forcing a failure.
[  161.418621][ T6785] name failslab, interval 1, probability 0, space 0, times 0
[  161.431647][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.3.249 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  161.431672][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  161.431684][ T6785] Call Trace:
[  161.431692][ T6785]  <TASK>
[  161.431701][ T6785]  dump_stack_lvl+0x189/0x250
[  161.431736][ T6785]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.431763][ T6785]  ? __pfx__printk+0x10/0x10
[  161.431804][ T6785]  ? __pfx___might_resched+0x10/0x10
[  161.431833][ T6785]  ? fs_reclaim_acquire+0x7d/0x100
[  161.431861][ T6785]  should_fail_ex+0x414/0x560
[  161.431888][ T6785]  should_failslab+0xa8/0x100
[  161.431909][ T6785]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  161.431938][ T6785]  ? __d_alloc+0x31/0x6f0
[  161.431965][ T6785]  __d_alloc+0x31/0x6f0
[  161.431993][ T6785]  d_alloc_parallel+0xe0/0x14e0
[  161.432034][ T6785]  ? __d_lookup+0x66/0x780
[  161.432062][ T6785]  ? __pfx_d_alloc_parallel+0x10/0x10
[  161.432105][ T6785]  path_openat+0xa3b/0x3830
[  161.432159][ T6785]  ? __pfx___schedule+0x10/0x10
[  161.432188][ T6785]  ? __pfx_path_openat+0x10/0x10
[  161.432210][ T6785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.432253][ T6785]  do_filp_open+0x1fa/0x410
[  161.432281][ T6785]  ? __pfx_do_filp_open+0x10/0x10
[  161.432331][ T6785]  ? _raw_spin_unlock+0x28/0x50
[  161.432350][ T6785]  ? alloc_fd+0x64c/0x6c0
[  161.432392][ T6785]  do_sys_openat2+0x121/0x1c0
[  161.432419][ T6785]  ? __pfx_do_sys_openat2+0x10/0x10
[  161.432442][ T6785]  ? ksys_write+0x1f0/0x250
[  161.432467][ T6785]  ? rcu_is_watching+0x15/0xb0
[  161.432506][ T6785]  __x64_sys_creat+0x8f/0xc0
[  161.432533][ T6785]  do_syscall_64+0xf6/0x210
[  161.432558][ T6785]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  161.432577][ T6785]  ? clear_bhb_loop+0x60/0xb0
[  161.432608][ T6785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.432627][ T6785] RIP: 0033:0x7f25fb18e969
[  161.432643][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.432659][ T6785] RSP: 002b:00007f25f8fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  161.432679][ T6785] RAX: ffffffffffffffda RBX: 00007f25fb3b6160 RCX: 00007f25fb18e969
[  161.432693][ T6785] RDX: 0000000000000000 RSI: ecf86c37d53049cc RDI: 0000200000000280
[  161.432706][ T6785] RBP: 00007f25f8fb4090 R08: 0000000000000000 R09: 0000000000000000
[  161.432718][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.432730][ T6785] R13: 0000000000000000 R14: 00007f25fb3b6160 R15: 00007fff9323a168
[  161.432761][ T6785]  </TASK>
[  162.245689][ T6789] netlink: 'syz.2.250': attribute type 21 has an invalid length.
[  162.286258][ T6789] netlink: 'syz.2.250': attribute type 6 has an invalid length.
[  162.294367][ T6789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.250'.
[  162.360388][ T6789] process 'syz.2.250' launched '/dev/fd/7' with NULL argv: empty string added
[  163.544472][ T6806] FAULT_INJECTION: forcing a failure.
[  163.544472][ T6806] name failslab, interval 1, probability 0, space 0, times 0
[  163.573048][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.0.254 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  163.573073][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  163.573083][ T6806] Call Trace:
[  163.573090][ T6806]  <TASK>
[  163.573097][ T6806]  dump_stack_lvl+0x189/0x250
[  163.573128][ T6806]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.573151][ T6806]  ? __pfx__printk+0x10/0x10
[  163.573183][ T6806]  ? __pfx___might_resched+0x10/0x10
[  163.573207][ T6806]  ? fs_reclaim_acquire+0x7d/0x100
[  163.573231][ T6806]  should_fail_ex+0x414/0x560
[  163.573253][ T6806]  ? traverse+0xd9/0x570
[  163.573272][ T6806]  should_failslab+0xa8/0x100
[  163.573290][ T6806]  __kvmalloc_node_noprof+0x168/0x5e0
[  163.573307][ T6806]  ? traverse+0xd9/0x570
[  163.573332][ T6806]  traverse+0xd9/0x570
[  163.573352][ T6806]  ? __pfx___mutex_lock+0x10/0x10
[  163.573385][ T6806]  seq_lseek+0x134/0x260
[  163.573410][ T6806]  proc_reg_llseek+0x1bc/0x290
[  163.573435][ T6806]  __x64_sys_lseek+0x14c/0x1e0
[  163.573460][ T6806]  do_syscall_64+0xf6/0x210
[  163.573483][ T6806]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  163.573499][ T6806]  ? clear_bhb_loop+0x60/0xb0
[  163.573520][ T6806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.573536][ T6806] RIP: 0033:0x7f14e7f8e969
[  163.573550][ T6806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.573564][ T6806] RSP: 002b:00007f14e8d9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008
[  163.573582][ T6806] RAX: ffffffffffffffda RBX: 00007f14e81b5fa0 RCX: 00007f14e7f8e969
[  163.573594][ T6806] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000003
[  163.573604][ T6806] RBP: 00007f14e8d9e090 R08: 0000000000000000 R09: 0000000000000000
[  163.573614][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.573624][ T6806] R13: 0000000000000000 R14: 00007f14e81b5fa0 R15: 00007fff77e21f38
[  163.573661][ T6806]  </TASK>
[  163.868187][ T6814] netlink: 'syz.2.255': attribute type 21 has an invalid length.
[  163.878363][ T6814] netlink: 'syz.2.255': attribute type 6 has an invalid length.
[  163.886435][ T6814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.255'.
[  164.371826][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'.
[  165.026210][ T5931] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  165.218874][ T6824] dlm: plock device version mismatch: kernel (1.2.0), user (5.808464432.808464432)
[  165.366113][ T5931] usb 1-1: Using ep0 maxpacket: 8
[  165.376951][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.412490][ T5931] usb 1-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  165.435018][ T6836] FAULT_INJECTION: forcing a failure.
[  165.435018][ T6836] name failslab, interval 1, probability 0, space 0, times 0
[  165.445938][ T5931] usb 1-1: config 1 interface 0 has no altsetting 0
[  165.454506][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.2.265 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  165.454529][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  165.454539][ T6836] Call Trace:
[  165.454546][ T6836]  <TASK>
[  165.454553][ T6836]  dump_stack_lvl+0x189/0x250
[  165.454588][ T6836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.454611][ T6836]  ? __pfx__printk+0x10/0x10
[  165.454642][ T6836]  ? __pfx___might_resched+0x10/0x10
[  165.454667][ T6836]  ? fs_reclaim_acquire+0x7d/0x100
[  165.454691][ T6836]  should_fail_ex+0x414/0x560
[  165.454714][ T6836]  should_failslab+0xa8/0x100
[  165.454731][ T6836]  __kmalloc_noprof+0xcb/0x4f0
[  165.454755][ T6836]  ? kfree+0x4d/0x440
[  165.454776][ T6836]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  165.454805][ T6836]  tomoyo_realpath_from_path+0xe3/0x5d0
[  165.454830][ T6836]  ? tomoyo_domain+0xda/0x130
[  165.454859][ T6836]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  165.454878][ T6836]  tomoyo_path_number_perm+0x1e8/0x5a0
[  165.454899][ T6836]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  165.454935][ T6836]  ? __lock_acquire+0xaac/0xd20
[  165.454976][ T6836]  ? __fget_files+0x2a/0x420
[  165.454996][ T6836]  ? __fget_files+0x3a0/0x420
[  165.455010][ T6836]  ? __fget_files+0x2a/0x420
[  165.455030][ T6836]  security_file_ioctl+0xcb/0x2d0
[  165.455052][ T6836]  __se_sys_ioctl+0x47/0x170
[  165.455077][ T6836]  do_syscall_64+0xf6/0x210
[  165.455100][ T6836]  ? clear_bhb_loop+0x60/0xb0
[  165.455121][ T6836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.455137][ T6836] RIP: 0033:0x7f8f84b8e969
[  165.455152][ T6836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.455166][ T6836] RSP: 002b:00007f8f859fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  165.455183][ T6836] RAX: ffffffffffffffda RBX: 00007f8f84db5fa0 RCX: 00007f8f84b8e969
[  165.455195][ T6836] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000003
[  165.455206][ T6836] RBP: 00007f8f859fb090 R08: 0000000000000000 R09: 0000000000000000
[  165.455216][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.455226][ T6836] R13: 0000000000000000 R14: 00007f8f84db5fa0 R15: 00007ffd254d0318
[  165.455259][ T6836]  </TASK>
[  165.455678][ T6836] ERROR: Out of memory at tomoyo_realpath_from_path.
[  165.608157][ T6840] netlink: 'syz.1.266': attribute type 21 has an invalid length.
[  165.701933][ T6840] netlink: 'syz.1.266': attribute type 6 has an invalid length.
[  165.709688][ T6840] netlink: 132 bytes leftover after parsing attributes in process `syz.1.266'.
[  165.719270][ T5931] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  165.728940][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.759599][ T5931] usb 1-1: Product: syz
[  165.772934][ T5931] usb 1-1: Manufacturer: syz
[  165.788272][ T5931] usb 1-1: SerialNumber: syz
[  165.871584][ T6845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.267'.
[  166.032719][ T5931] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8
[  166.053618][ T5174] bcm5974 1-1:1.0: could not read from device
[  166.062458][ T5174] bcm5974 1-1:1.0: could not read from device
[  166.066604][ T5931] usb 1-1: USB disconnect, device number 12
[  166.885103][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[  167.016165][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[  167.246714][  T976] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  167.367600][ T6857] Bluetooth: MGMT ver 1.23
[  167.540865][  T976] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  167.699097][  T976] usb 2-1: config 0 has no interface number 0
[  167.804055][  T976] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  167.957482][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'.
[  168.272617][  T976] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  168.289137][  T976] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  168.299358][  T976] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  168.319965][ T6865] FAULT_INJECTION: forcing a failure.
[  168.319965][ T6865] name failslab, interval 1, probability 0, space 0, times 0
[  168.348362][  T976] usb 2-1: Product: syz
[  168.354001][  T976] usb 2-1: SerialNumber: syz
[  168.372313][  T976] usb 2-1: config 0 descriptor??
[  168.394274][  T976] cm109 2-1:0.8: invalid payload size 0, expected 4
[  168.409959][ T6865] CPU: 1 UID: 0 PID: 6865 Comm: syz.2.275 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  168.409982][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  168.409993][ T6865] Call Trace:
[  168.409999][ T6865]  <TASK>
[  168.410007][ T6865]  dump_stack_lvl+0x189/0x250
[  168.410042][ T6865]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.410066][ T6865]  ? __pfx__printk+0x10/0x10
[  168.410094][ T6865]  ? __pfx___might_resched+0x10/0x10
[  168.410120][ T6865]  ? fs_reclaim_acquire+0x7d/0x100
[  168.410143][ T6865]  should_fail_ex+0x414/0x560
[  168.410165][ T6865]  should_failslab+0xa8/0x100
[  168.410183][ T6865]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  168.410209][ T6865]  ? __alloc_skb+0x112/0x2d0
[  168.410234][ T6865]  __alloc_skb+0x112/0x2d0
[  168.410258][ T6865]  alloc_skb_with_frags+0xca/0x890
[  168.410293][ T6865]  sock_alloc_send_pskb+0x857/0x990
[  168.410337][ T6865]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  168.410363][ T6865]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  168.410392][ T6865]  ? __might_fault+0xb0/0x130
[  168.410420][ T6865]  hci_sock_sendmsg+0x207/0xee0
[  168.410445][ T6865]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  168.410466][ T6865]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.410484][ T6865]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  168.410520][ T6865]  __sock_sendmsg+0x219/0x270
[  168.410552][ T6865]  sock_write_iter+0x258/0x330
[  168.410579][ T6865]  ? __pfx_sock_write_iter+0x10/0x10
[  168.410613][ T6865]  ? bpf_lsm_file_permission+0x9/0x20
[  168.410632][ T6865]  ? security_file_permission+0x75/0x290
[  168.410659][ T6865]  vfs_write+0x54b/0xa90
[  168.410688][ T6865]  ? __pfx_sock_write_iter+0x10/0x10
[  168.410713][ T6865]  ? __pfx_vfs_write+0x10/0x10
[  168.410744][ T6865]  ? __fget_files+0x2a/0x420
[  168.410767][ T6865]  ksys_write+0x145/0x250
[  168.410789][ T6865]  ? rcu_is_watching+0x15/0xb0
[  168.410815][ T6865]  ? __pfx_ksys_write+0x10/0x10
[  168.410841][ T6865]  ? do_syscall_64+0xba/0x210
[  168.410866][ T6865]  do_syscall_64+0xf6/0x210
[  168.410888][ T6865]  ? clear_bhb_loop+0x60/0xb0
[  168.410909][ T6865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.410924][ T6865] RIP: 0033:0x7f8f84b8e969
[  168.410940][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.410953][ T6865] RSP: 002b:00007f8f859fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  168.410971][ T6865] RAX: ffffffffffffffda RBX: 00007f8f84db5fa0 RCX: 00007f8f84b8e969
[  168.410983][ T6865] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004
[  168.410993][ T6865] RBP: 00007f8f859fb090 R08: 0000000000000000 R09: 0000000000000000
[  168.411003][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.411012][ T6865] R13: 0000000000000000 R14: 00007f8f84db5fa0 R15: 00007ffd254d0318
[  168.411045][ T6865]  </TASK>
[  168.418350][  T976] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input9
[  169.282167][ T6869] bridge0: port 3(vlan2) entered blocking state
[  169.294770][ T6869] bridge0: port 3(vlan2) entered disabled state
[  169.310459][ T6869] vlan2: entered allmulticast mode
[  169.315667][ T6869] bridge0: entered allmulticast mode
[  169.407244][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.415103][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.418513][ T6869] vlan2: left allmulticast mode
[  169.422373][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.434824][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.442276][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.449887][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.457378][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.465253][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.472377][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.480000][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  169.503004][  T976] usb 2-1: USB disconnect, device number 20
[  169.503058][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  169.520729][  T976] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  169.532348][ T6869] bridge0: left allmulticast mode
[  170.581695][ T6898] netlink: 'syz.0.283': attribute type 21 has an invalid length.
[  170.612157][  T976] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  170.728145][ T6898] netlink: 'syz.0.283': attribute type 6 has an invalid length.
[  170.815638][ T6898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.283'.
[  171.195560][  T976] usb 3-1: Using ep0 maxpacket: 8
[  171.228439][  T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.087985][  T976] usb 3-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  172.333191][  T976] usb 3-1: config 1 interface 0 has no altsetting 0
[  172.340140][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  172.340155][   T30] audit: type=1326 audit(1748035184.935:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  172.388689][  T976] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  172.399599][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.414080][  T976] usb 3-1: Product: syz
[  172.433039][   T30] audit: type=1326 audit(1748035184.935:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  172.474654][  T976] usb 3-1: Manufacturer: syz
[  172.483832][  T976] usb 3-1: SerialNumber: syz
[  172.541057][   T30] audit: type=1326 audit(1748035184.945:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  172.561118][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'.
[  172.716393][ T5890] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  172.906685][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  173.019365][ T5890] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.020552][   T30] audit: type=1326 audit(1748035184.945:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  173.072226][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0
[  173.467176][ T5890] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  173.477679][   T30] audit: type=1326 audit(1748035184.955:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  173.528889][  T976] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10
[  173.540475][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.559285][  T976] usb 3-1: USB disconnect, device number 13
[  173.585217][ T5890] usb 2-1: config 0 descriptor??
[  173.604526][   T30] audit: type=1326 audit(1748035184.955:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  173.628358][   T30] audit: type=1326 audit(1748035184.975:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  173.649823][   T30] audit: type=1326 audit(1748035184.975:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  173.673071][   T30] audit: type=1326 audit(1748035184.975:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  173.696163][   T30] audit: type=1326 audit(1748035184.975:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6907 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f724498e969 code=0x7ffc0000
[  173.937586][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.972105][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.054722][ T6915] FAULT_INJECTION: forcing a failure.
[  174.054722][ T6915] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.208673][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.1.287 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  174.208706][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  174.208717][ T6915] Call Trace:
[  174.208723][ T6915]  <TASK>
[  174.208731][ T6915]  dump_stack_lvl+0x189/0x250
[  174.208760][ T6915]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.208785][ T6915]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.208808][ T6915]  ? __pfx__printk+0x10/0x10
[  174.208834][ T6915]  ? __might_fault+0xb0/0x130
[  174.208868][ T6915]  should_fail_ex+0x414/0x560
[  174.208892][ T6915]  _copy_to_user+0x31/0xb0
[  174.208918][ T6915]  simple_read_from_buffer+0xe1/0x170
[  174.208948][ T6915]  proc_fail_nth_read+0x1df/0x250
[  174.208970][ T6915]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  174.208989][ T6915]  ? rw_verify_area+0x258/0x650
[  174.209012][ T6915]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  174.209031][ T6915]  vfs_read+0x200/0x980
[  174.209060][ T6915]  ? __pfx___mutex_lock+0x10/0x10
[  174.209081][ T6915]  ? __pfx_vfs_read+0x10/0x10
[  174.209106][ T6915]  ? __fget_files+0x2a/0x420
[  174.209126][ T6915]  ? __fget_files+0x3a0/0x420
[  174.209140][ T6915]  ? __fget_files+0x2a/0x420
[  174.209165][ T6915]  ksys_read+0x145/0x250
[  174.209186][ T6915]  ? tomoyo_file_fcntl+0x78/0x210
[  174.209212][ T6915]  ? __pfx_ksys_read+0x10/0x10
[  174.209238][ T6915]  ? do_syscall_64+0xba/0x210
[  174.209264][ T6915]  do_syscall_64+0xf6/0x210
[  174.209286][ T6915]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  174.209303][ T6915]  ? clear_bhb_loop+0x60/0xb0
[  174.209324][ T6915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.209339][ T6915] RIP: 0033:0x7f744c18d37c
[  174.209354][ T6915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  174.209368][ T6915] RSP: 002b:00007f744cfd4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  174.209385][ T6915] RAX: ffffffffffffffda RBX: 00007f744c3b6080 RCX: 00007f744c18d37c
[  174.209398][ T6915] RDX: 000000000000000f RSI: 00007f744cfd40a0 RDI: 0000000000000008
[  174.209408][ T6915] RBP: 00007f744cfd4090 R08: 0000000000000000 R09: 0000000000000000
[  174.209418][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.209428][ T6915] R13: 0000000000000000 R14: 00007f744c3b6080 R15: 00007ffc5a948648
[  174.209455][ T6915]  </TASK>
[  174.977043][ T6951] FAULT_INJECTION: forcing a failure.
[  174.977043][ T6951] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.990719][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.1.300 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  174.990743][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  174.990754][ T6951] Call Trace:
[  174.990761][ T6951]  <TASK>
[  174.990780][ T6951]  dump_stack_lvl+0x189/0x250
[  174.990809][ T6951]  ? __lock_acquire+0xaac/0xd20
[  174.990835][ T6951]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.990857][ T6951]  ? __pfx__printk+0x10/0x10
[  174.990885][ T6951]  ? __might_fault+0xb0/0x130
[  174.990922][ T6951]  should_fail_ex+0x414/0x560
[  174.990944][ T6951]  _copy_from_user+0x2d/0xb0
[  174.990969][ T6951]  ___sys_sendmsg+0x158/0x2a0
[  174.990995][ T6951]  ? __pfx____sys_sendmsg+0x10/0x10
[  174.991051][ T6951]  ? __fget_files+0x2a/0x420
[  174.991066][ T6951]  ? __fget_files+0x3a0/0x420
[  174.991092][ T6951]  __x64_sys_sendmsg+0x19b/0x260
[  174.991118][ T6951]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  174.991157][ T6951]  ? do_syscall_64+0xba/0x210
[  174.991182][ T6951]  do_syscall_64+0xf6/0x210
[  174.991204][ T6951]  ? clear_bhb_loop+0x60/0xb0
[  174.991225][ T6951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.991241][ T6951] RIP: 0033:0x7f744c18e969
[  174.991256][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.991269][ T6951] RSP: 002b:00007f744cff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.991287][ T6951] RAX: ffffffffffffffda RBX: 00007f744c3b5fa0 RCX: 00007f744c18e969
[  174.991299][ T6951] RDX: 00000000040180c0 RSI: 0000200000000100 RDI: 0000000000000003
[  174.991309][ T6951] RBP: 00007f744cff5090 R08: 0000000000000000 R09: 0000000000000000
[  174.991320][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.991329][ T6951] R13: 0000000000000000 R14: 00007f744c3b5fa0 R15: 00007ffc5a948648
[  174.991356][ T6951]  </TASK>
[  175.027253][ T5890] usbhid 2-1:0.0: can't add hid device: -71
[  175.649155][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  175.854094][ T5890] usb 2-1: USB disconnect, device number 21
[  176.083077][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'.
[  176.342712][  T976] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  176.657149][  T976] usb 5-1: Using ep0 maxpacket: 8
[  176.698360][  T976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.708748][  T976] usb 5-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  176.742126][  T976] usb 5-1: config 1 interface 0 has no altsetting 0
[  176.758490][  T976] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  176.771200][  T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.799762][  T976] usb 5-1: Product: syz
[  176.809053][  T976] usb 5-1: Manufacturer: syz
[  176.839257][  T976] usb 5-1: SerialNumber: syz
[  177.448430][  T976] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11
[  177.482157][  T976] usb 5-1: USB disconnect, device number 8
[  178.101350][ T6989] FAULT_INJECTION: forcing a failure.
[  178.101350][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.114752][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.2.310 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  178.114778][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  178.114790][ T6989] Call Trace:
[  178.114795][ T6989]  <TASK>
[  178.114800][ T6989]  dump_stack_lvl+0x189/0x250
[  178.114819][ T6989]  ? __lock_acquire+0xaac/0xd20
[  178.114838][ T6989]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.114855][ T6989]  ? __pfx__printk+0x10/0x10
[  178.114874][ T6989]  ? __might_fault+0xb0/0x130
[  178.114901][ T6989]  should_fail_ex+0x414/0x560
[  178.114917][ T6989]  _copy_from_user+0x2d/0xb0
[  178.114934][ T6989]  copy_clone_args_from_user+0x1d5/0x6d0
[  178.114957][ T6989]  ? __pfx_copy_clone_args_from_user+0x10/0x10
[  178.114985][ T6989]  __se_sys_clone3+0xf1/0x2d0
[  178.115001][ T6989]  ? __pfx___se_sys_clone3+0x10/0x10
[  178.115013][ T6989]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  178.115037][ T6989]  ? __fget_files+0x3a0/0x420
[  178.115063][ T6989]  ? do_syscall_64+0xba/0x210
[  178.115081][ T6989]  do_syscall_64+0xf6/0x210
[  178.115096][ T6989]  ? asm_sysvec_call_function_single+0x1a/0x20
[  178.115109][ T6989]  ? clear_bhb_loop+0x60/0xb0
[  178.115124][ T6989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.115135][ T6989] RIP: 0033:0x7f8f84b8e969
[  178.115146][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.115156][ T6989] RSP: 002b:00007f8f859d9f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  178.115169][ T6989] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8f84b8e969
[  178.115177][ T6989] RDX: 00007f8f859d9f20 RSI: 0000000000000058 RDI: 00007f8f859d9f20
[  178.115185][ T6989] RBP: 00007f8f859da090 R08: 0000000000000000 R09: 0000000000000058
[  178.115192][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.115199][ T6989] R13: 0000000000000000 R14: 00007f8f84db6080 R15: 00007ffd254d0318
[  178.115218][ T6989]  </TASK>
[  178.730551][ T6995] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  179.545692][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'.
[  179.555924][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'.
[  179.909346][ T7016] bond0: entered promiscuous mode
[  179.944099][ T7016] bond_slave_0: entered promiscuous mode
[  179.960541][ T7016] bond_slave_1: entered promiscuous mode
[  179.980664][ T7016] bond0: entered allmulticast mode
[  180.025921][ T7016] bond_slave_0: entered allmulticast mode
[  180.066391][ T7016] bond_slave_1: entered allmulticast mode
[  180.200238][ T7027] FAULT_INJECTION: forcing a failure.
[  180.200238][ T7027] name failslab, interval 1, probability 0, space 0, times 0
[  180.266157][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.2.319 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  180.266181][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  180.266191][ T7027] Call Trace:
[  180.266198][ T7027]  <TASK>
[  180.266205][ T7027]  dump_stack_lvl+0x189/0x250
[  180.266236][ T7027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.266260][ T7027]  ? __pfx__printk+0x10/0x10
[  180.266290][ T7027]  ? __pfx___might_resched+0x10/0x10
[  180.266315][ T7027]  ? fs_reclaim_acquire+0x7d/0x100
[  180.266339][ T7027]  should_fail_ex+0x414/0x560
[  180.266362][ T7027]  should_failslab+0xa8/0x100
[  180.266380][ T7027]  __kmalloc_noprof+0xcb/0x4f0
[  180.266404][ T7027]  ? kfree+0x4d/0x440
[  180.266425][ T7027]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  180.266453][ T7027]  tomoyo_realpath_from_path+0xe3/0x5d0
[  180.266478][ T7027]  ? tomoyo_domain+0xda/0x130
[  180.266510][ T7027]  tomoyo_path_perm+0x213/0x4b0
[  180.266537][ T7027]  ? arch_stack_walk+0xfc/0x150
[  180.266577][ T7027]  ? tomoyo_path_perm+0x1e3/0x4b0
[  180.266598][ T7027]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  180.266628][ T7027]  ? stack_trace_save+0x9c/0xe0
[  180.266668][ T7027]  ? user_path_at+0x44/0x60
[  180.266689][ T7027]  ? __x64_sys_umount+0xee/0x160
[  180.266714][ T7027]  ? do_syscall_64+0xf6/0x210
[  180.266738][ T7027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.266763][ T7027]  ? hook_sb_umount+0x1da/0x370
[  180.266799][ T7027]  ? __pfx_hook_sb_umount+0x10/0x10
[  180.266833][ T7027]  tomoyo_sb_umount+0x9c/0xe0
[  180.266863][ T7027]  ? __pfx_tomoyo_sb_umount+0x10/0x10
[  180.266898][ T7027]  ? security_capable+0x7e/0x2e0
[  180.266928][ T7027]  security_sb_umount+0xbb/0x290
[  180.266960][ T7027]  path_umount+0x3e6/0xf70
[  180.267001][ T7027]  ? __pfx_path_umount+0x10/0x10
[  180.267025][ T7027]  ? user_path_at+0x44/0x60
[  180.267045][ T7027]  ? kmem_cache_free+0x192/0x3f0
[  180.267086][ T7027]  __x64_sys_umount+0x122/0x160
[  180.267113][ T7027]  ? __pfx___x64_sys_umount+0x10/0x10
[  180.267146][ T7027]  ? do_syscall_64+0xba/0x210
[  180.267176][ T7027]  do_syscall_64+0xf6/0x210
[  180.267202][ T7027]  ? clear_bhb_loop+0x60/0xb0
[  180.267226][ T7027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.267246][ T7027] RIP: 0033:0x7f8f84b8e969
[  180.267263][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.267279][ T7027] RSP: 002b:00007f8f859fb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  180.267300][ T7027] RAX: ffffffffffffffda RBX: 00007f8f84db5fa0 RCX: 00007f8f84b8e969
[  180.267315][ T7027] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0
[  180.267327][ T7027] RBP: 00007f8f859fb090 R08: 0000000000000000 R09: 0000000000000000
[  180.267339][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.267350][ T7027] R13: 0000000000000000 R14: 00007f8f84db5fa0 R15: 00007ffd254d0318
[  180.267382][ T7027]  </TASK>
[  180.691627][ T7027] ERROR: Out of memory at tomoyo_realpath_from_path.
[  181.226052][ T5890] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  181.685941][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  181.695281][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.729865][ T5890] usb 1-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  181.780125][ T5890] usb 1-1: config 1 interface 0 has no altsetting 0
[  181.791108][ T5890] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  181.803017][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.843479][ T5890] usb 1-1: Product: syz
[  181.859153][ T5890] usb 1-1: Manufacturer: syz
[  181.881953][ T5890] usb 1-1: SerialNumber: syz
[  182.068533][ T7037] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  182.094987][ T7037] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  182.183807][ T7046] netlink: 'syz.3.325': attribute type 10 has an invalid length.
[  182.191829][ T7046] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  182.203349][ T7046] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  182.215806][ T7046] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  182.625731][ T7037] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  182.669506][ T7037] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  182.682174][ T5890] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12
[  182.798875][ T7037] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  182.875127][ T7037] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  182.894409][ T7037] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  182.901769][ T5890] usb 1-1: USB disconnect, device number 13
[  182.908085][ T7037] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  183.396849][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  184.845095][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  184.917122][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  184.985993][ T5890] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  185.155990][ T5890] usb 3-1: Using ep0 maxpacket: 16
[  185.164842][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  185.189839][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  185.281362][ T5890] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  185.313304][ T7059] Invalid source name
[  185.317525][ T7059] UBIFS error (pid: 7059): cannot open "./file0", error -22
[  185.330844][ T7059] =======================================================
[  185.330844][ T7059] WARNING: The mand mount option has been deprecated and
[  185.330844][ T7059]          and is ignored by this kernel. Remove the mand
[  185.330844][ T7059]          option from the mount to silence this warning.
[  185.330844][ T7059] =======================================================
[  185.373148][    C0] vkms_vblank_simulate: vblank timer overrun
[  185.384256][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.475969][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  185.515909][ T5890] usb 3-1: Product: syz
[  185.520200][ T5890] usb 3-1: Manufacturer: syz
[  185.524916][ T5890] usb 3-1: SerialNumber: syz
[  185.561736][ T5890] usb 3-1: config 0 descriptor??
[  185.863317][ T5890] appledisplay 3-1:0.0: Error while getting initial brightness: -71
[  185.887432][ T5890] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71
[  186.159091][ T5890] usb 3-1: USB disconnect, device number 14
[  186.926074][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout
[  186.996180][ T5831] Bluetooth: hci4: command 0x0406 tx timeout
[  187.125576][ T7097] xt_cluster: node mask cannot exceed total number of nodes
[  187.172642][ T7097] fuse: Unknown parameter '{MQ—ˆÚ91¼
[  187.172642][ T7097] T£q'
[  187.246056][ T5890] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  187.436209][ T5890] usb 2-1: device descriptor read/64, error -71
[  187.477326][   T52] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  187.556006][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  187.656129][   T52] usb 5-1: Using ep0 maxpacket: 16
[  187.675078][   T52] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  187.690544][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.702036][   T52] usb 5-1: Product: syz
[  187.712721][   T52] usb 5-1: Manufacturer: syz
[  187.729116][   T52] usb 5-1: SerialNumber: syz
[  187.745986][ T5890] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  187.763266][   T52] r8152-cfgselector 5-1: Unknown version 0x0000
[  187.780845][   T52] r8152-cfgselector 5-1: config 0 descriptor??
[  187.916112][ T5890] usb 2-1: device descriptor read/64, error -71
[  188.029302][ T5890] usb usb2-port1: attempt power cycle
[  189.006777][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  189.026666][ T5890] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  189.056963][ T5890] usb 2-1: device descriptor read/8, error -71
[  189.075953][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  189.347225][ T5890] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  189.918206][ T5890] usb 2-1: device descriptor read/8, error -71
[  190.072138][ T5890] usb usb2-port1: unable to enumerate USB device
[  190.274460][  T976] r8152-cfgselector 5-1: USB disconnect, device number 9
[  190.915905][ T7136] netlink: 'syz.0.352': attribute type 21 has an invalid length.
[  190.925354][ T7136] netlink: 'syz.0.352': attribute type 6 has an invalid length.
[  190.933254][ T7136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.352'.
[  191.466103][ T7139] FAULT_INJECTION: forcing a failure.
[  191.466103][ T7139] name failslab, interval 1, probability 0, space 0, times 0
[  191.503037][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: syz.1.353 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  191.503061][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  191.503073][ T7139] Call Trace:
[  191.503080][ T7139]  <TASK>
[  191.503088][ T7139]  dump_stack_lvl+0x189/0x250
[  191.503116][ T7139]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.503133][ T7139]  ? __pfx__printk+0x10/0x10
[  191.503156][ T7139]  ? ref_tracker_alloc+0x318/0x460
[  191.503171][ T7139]  should_fail_ex+0x414/0x560
[  191.503187][ T7139]  should_failslab+0xa8/0x100
[  191.503200][ T7139]  kmem_cache_alloc_noprof+0x73/0x3c0
[  191.503219][ T7139]  ? skb_clone+0x212/0x3a0
[  191.503240][ T7139]  skb_clone+0x212/0x3a0
[  191.503259][ T7139]  __netlink_deliver_tap+0x404/0x850
[  191.503281][ T7139]  ? netlink_deliver_tap+0x2e/0x1b0
[  191.503296][ T7139]  netlink_deliver_tap+0x19c/0x1b0
[  191.503311][ T7139]  netlink_unicast+0x72f/0x8d0
[  191.503330][ T7139]  netlink_sendmsg+0x805/0xb30
[  191.503350][ T7139]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.503370][ T7139]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.503383][ T7139]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.503398][ T7139]  __sock_sendmsg+0x219/0x270
[  191.503412][ T7139]  ____sys_sendmsg+0x505/0x830
[  191.503432][ T7139]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.503455][ T7139]  ? import_iovec+0x74/0xa0
[  191.503474][ T7139]  ___sys_sendmsg+0x21f/0x2a0
[  191.503492][ T7139]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.503532][ T7139]  ? __fget_files+0x2a/0x420
[  191.503548][ T7139]  ? __fget_files+0x3a0/0x420
[  191.503566][ T7139]  __x64_sys_sendmsg+0x19b/0x260
[  191.503584][ T7139]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  191.503611][ T7139]  ? do_syscall_64+0xba/0x210
[  191.503630][ T7139]  do_syscall_64+0xf6/0x210
[  191.503645][ T7139]  ? clear_bhb_loop+0x60/0xb0
[  191.503660][ T7139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.503672][ T7139] RIP: 0033:0x7f744c18e969
[  191.503683][ T7139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.503693][ T7139] RSP: 002b:00007f744cff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.503706][ T7139] RAX: ffffffffffffffda RBX: 00007f744c3b5fa0 RCX: 00007f744c18e969
[  191.503714][ T7139] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000004
[  191.503722][ T7139] RBP: 00007f744cff5090 R08: 0000000000000000 R09: 0000000000000000
[  191.503729][ T7139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.503736][ T7139] R13: 0000000000000000 R14: 00007f744c3b5fa0 R15: 00007ffc5a948648
[  191.503755][ T7139]  </TASK>
[  192.604486][ T5997] ==================================================================
[  192.612607][ T5997] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x5d6/0x7e0
[  192.620447][ T5997] Read of size 8 at addr ffff888027aac008 by task kworker/u8:9/5997
[  192.628450][ T5997] 
[  192.630788][ T5997] CPU: 0 UID: 0 PID: 5997 Comm: kworker/u8:9 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  192.630808][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  192.630819][ T5997] Workqueue: events_unbound linkwatch_event
[  192.630846][ T5997] Call Trace:
[  192.630853][ T5997]  <TASK>
[  192.630860][ T5997]  dump_stack_lvl+0x189/0x250
[  192.630882][ T5997]  ? __virt_addr_valid+0x18c/0x540
[  192.630902][ T5997]  ? rcu_is_watching+0x15/0xb0
[  192.630924][ T5997]  ? __kasan_check_byte+0x12/0x40
[  192.630949][ T5997]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.630969][ T5997]  ? rcu_is_watching+0x15/0xb0
[  192.630991][ T5997]  ? lock_release+0x4b/0x3e0
[  192.631014][ T5997]  ? __virt_addr_valid+0x18c/0x540
[  192.631033][ T5997]  ? __virt_addr_valid+0x469/0x540
[  192.631053][ T5997]  print_report+0xb4/0x290
[  192.631071][ T5997]  ? __linkwatch_run_queue+0x5d6/0x7e0
[  192.631092][ T5997]  kasan_report+0x118/0x150
[  192.631116][ T5997]  ? __linkwatch_run_queue+0x5d6/0x7e0
[  192.631142][ T5997]  __linkwatch_run_queue+0x5d6/0x7e0
[  192.631167][ T5997]  ? __pfx___linkwatch_run_queue+0x10/0x10
[  192.631191][ T5997]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.631207][ T5997]  ? process_scheduled_works+0x9ec/0x17a0
[  192.631230][ T5997]  ? process_scheduled_works+0x9ec/0x17a0
[  192.631254][ T5997]  linkwatch_event+0x4c/0x60
[  192.631275][ T5997]  process_scheduled_works+0xade/0x17a0
[  192.631312][ T5997]  ? __pfx_process_scheduled_works+0x10/0x10
[  192.631343][ T5997]  worker_thread+0x8a0/0xda0
[  192.631358][ T5997]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.631378][ T5997]  ? __kthread_parkme+0x7b/0x200
[  192.631397][ T5997]  kthread+0x711/0x8a0
[  192.631416][ T5997]  ? __pfx_worker_thread+0x10/0x10
[  192.631429][ T5997]  ? __pfx_kthread+0x10/0x10
[  192.631446][ T5997]  ? __pfx_kthread+0x10/0x10
[  192.631468][ T5997]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.631484][ T5997]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.631502][ T5997]  ? __pfx_kthread+0x10/0x10
[  192.631518][ T5997]  ret_from_fork+0x4b/0x80
[  192.631532][ T5997]  ? __pfx_kthread+0x10/0x10
[  192.631549][ T5997]  ret_from_fork_asm+0x1a/0x30
[  192.631579][ T5997]  </TASK>
[  192.631585][ T5997] 
[  192.841506][ T5997] The buggy address belongs to the physical page:
[  192.847924][ T5997] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027aac340 pfn:0x27aac
[  192.857999][ T5997] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  192.865200][ T5997] raw: 00fff00000000000 ffffea0001f5e708 ffff8880b883f600 0000000000000000
[  192.873775][ T5997] raw: ffff888027aac340 0000000000000000 00000000ffffffff 0000000000000000
[  192.882343][ T5997] page dumped because: kasan: bad access detected
[  192.888749][ T5997] page_owner tracks the page as freed
[  192.894106][ T5997] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 7139, tgid 7138 (syz.1.353), ts 191370321400, free_ts 192256516057
[  192.915803][ T5997]  post_alloc_hook+0x1d8/0x230
[  192.920580][ T5997]  get_page_from_freelist+0x21c7/0x22a0
[  192.926122][ T5997]  __alloc_frozen_pages_noprof+0x181/0x370
[  192.931926][ T5997]  __alloc_pages_noprof+0xa/0x30
[  192.936863][ T5997]  ___kmalloc_large_node+0x85/0x200
[  192.942067][ T5997]  __kmalloc_large_node_noprof+0x18/0x90
[  192.947705][ T5997]  __kvmalloc_node_noprof+0x74/0x5e0
[  192.952994][ T5997]  alloc_netdev_mqs+0xa6/0x11e0
[  192.957840][ T5997]  tun_set_iff+0x532/0xef0
[  192.962250][ T5997]  __tun_chr_ioctl+0x788/0x1d90
[  192.967101][ T5997]  __se_sys_ioctl+0xf9/0x170
[  192.971691][ T5997]  do_syscall_64+0xf6/0x210
[  192.976186][ T5997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.982065][ T5997] page last free pid 7138 tgid 7138 stack trace:
[  192.988396][ T5997]  __free_frozen_pages+0xb05/0xcd0
[  192.993513][ T5997]  __folio_put+0x21b/0x2c0
[  192.997929][ T5997]  free_large_kmalloc+0x145/0x200
[  193.002960][ T5997]  device_release+0x99/0x1c0
[  193.007551][ T5997]  kobject_put+0x22b/0x480
[  193.011966][ T5997]  netdev_run_todo+0xd2e/0xea0
[  193.016731][ T5997]  tun_chr_close+0x13c/0x1c0
[  193.021322][ T5997]  __fput+0x449/0xa70
[  193.025292][ T5997]  task_work_run+0x1d4/0x260
[  193.029893][ T5997]  resume_user_mode_work+0x5e/0x80
[  193.034998][ T5997]  syscall_exit_to_user_mode+0x9a/0x120
[  193.040535][ T5997]  do_syscall_64+0x103/0x210
[  193.045117][ T5997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.051001][ T5997] 
[  193.053316][ T5997] Memory state around the buggy address:
[  193.058936][ T5997]  ffff888027aabf00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  193.066992][ T5997]  ffff888027aabf80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[  193.075047][ T5997] >ffff888027aac000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  193.083093][ T5997]                       ^
[  193.087412][ T5997]  ffff888027aac080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  193.095555][ T5997]  ffff888027aac100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  193.103603][ T5997] ==================================================================
[  193.226125][ T5997] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  193.233345][ T5997] CPU: 0 UID: 0 PID: 5997 Comm: kworker/u8:9 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) 
[  193.245489][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  193.255544][ T5997] Workqueue: events_unbound linkwatch_event
[  193.261447][ T5997] Call Trace:
[  193.264721][ T5997]  <TASK>
[  193.267651][ T5997]  dump_stack_lvl+0x99/0x250
[  193.272248][ T5997]  ? __asan_memcpy+0x40/0x70
[  193.276840][ T5997]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.282041][ T5997]  ? __pfx__printk+0x10/0x10
[  193.286643][ T5997]  panic+0x2db/0x790
[  193.290544][ T5997]  ? __pfx_panic+0x10/0x10
[  193.294957][ T5997]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  193.300845][ T5997]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.307168][ T5997]  ? print_memory_metadata+0x314/0x400
[  193.312635][ T5997]  ? __linkwatch_run_queue+0x5d6/0x7e0
[  193.318096][ T5997]  check_panic_on_warn+0x89/0xb0
[  193.323037][ T5997]  ? __linkwatch_run_queue+0x5d6/0x7e0
[  193.328506][ T5997]  end_report+0x78/0x160
[  193.332751][ T5997]  kasan_report+0x129/0x150
[  193.337264][ T5997]  ? __linkwatch_run_queue+0x5d6/0x7e0
[  193.342737][ T5997]  __linkwatch_run_queue+0x5d6/0x7e0
[  193.348042][ T5997]  ? __pfx___linkwatch_run_queue+0x10/0x10
[  193.353846][ T5997]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.359038][ T5997]  ? process_scheduled_works+0x9ec/0x17a0
[  193.364755][ T5997]  ? process_scheduled_works+0x9ec/0x17a0
[  193.370476][ T5997]  linkwatch_event+0x4c/0x60
[  193.375065][ T5997]  process_scheduled_works+0xade/0x17a0
[  193.380616][ T5997]  ? __pfx_process_scheduled_works+0x10/0x10
[  193.386618][ T5997]  worker_thread+0x8a0/0xda0
[  193.391214][ T5997]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.397546][ T5997]  ? __kthread_parkme+0x7b/0x200
[  193.403012][ T5997]  kthread+0x711/0x8a0
[  193.407085][ T5997]  ? __pfx_worker_thread+0x10/0x10
[  193.412195][ T5997]  ? __pfx_kthread+0x10/0x10
[  193.416785][ T5997]  ? __pfx_kthread+0x10/0x10
[  193.421375][ T5997]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.426575][ T5997]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.431774][ T5997]  ? __pfx_kthread+0x10/0x10
[  193.436361][ T5997]  ret_from_fork+0x4b/0x80
[  193.440778][ T5997]  ? __pfx_kthread+0x10/0x10
[  193.445367][ T5997]  ret_from_fork_asm+0x1a/0x30
[  193.450141][ T5997]  </TASK>
[  193.453473][ T5997] Kernel Offset: disabled
[  193.457810][ T5997] Rebooting in 86400 seconds..