last executing test programs:

3m22.530870752s ago: executing program 2 (id=2852):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x5cf, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4)
r7 = eventfd2(0xff, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000300)=r7, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
io_uring_enter(r5, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x28}}, 0x20000000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
syz_open_dev$video(0x0, 0xa4, 0x0)
socket$kcm(0x15, 0x5, 0x0)
r9 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0)
r10 = fsmount(r9, 0x1, 0x0)
fchdir(r10)

3m20.412337659s ago: executing program 2 (id=2859):
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="127a38440003a939df030400005efa2f73b9e1978e0000", @ANYRES32=0x0, @ANYBLOB="0000050011800200240012800b0001006d61637365630000140002800500080003000000050007"], 0x44}}, 0x20)

3m19.893116204s ago: executing program 2 (id=2861):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100afd010ff"})

3m19.664330786s ago: executing program 2 (id=2862):
msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000)
msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="01"], 0x8, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10)
msgsnd(0x0, &(0x7f0000000180)={0x2}, 0x8, 0x800)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000480)={@loopback, <r4=>0x0}, &(0x7f00000004c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@getqdisc={0x44, 0x26, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xfff3, 0xffe6}, {0xfff1, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008045}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000300)={'tunl0\x00', <r5=>r3, 0x8, 0x80, 0xfffffffd, 0x100, {{0x18, 0x4, 0x1, 0x11, 0x60, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast2, @multicast1, {[@noop, @cipso={0x86, 0x1f, 0x3, [{0x6, 0x6, "8fbdf674"}, {0x6, 0x2}, {0x7, 0x11, "0f8a18dfb987e9394d4bd9f485bdb5"}]}, @timestamp={0x44, 0x1c, 0x8e, 0x0, 0x4, [0x0, 0xbe, 0xfffffff5, 0x1, 0x4, 0x6]}, @rr={0x7, 0x7, 0xe9, [@local]}, @generic={0x0, 0x8, "a41c12530130"}]}}}}})
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000200)=@req={0xa, 0x4, 0xfffffffc, 0x2}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', r5, 0x2f, 0x12, 0x4, 0x2, 0x10, @private2, @mcast2, 0x10, 0x10, 0x80000001, 0x81}})
r6 = msgget$private(0x0, 0x4)
io_setup(0x10000, &(0x7f0000000180))
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000000)=""/144)

3m19.236026626s ago: executing program 2 (id=2867):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911077000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x1, 0x0, 0x0, {[@md5sig={0x13, 0x12, "473ecfd2106a00"}]}}}}}}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x1d, 0x2, [{0xfe}, {0xfffffff9}]}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000240)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]})
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize}]}})
r7 = socket(0x10, 0x2, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x80000000, 0x0, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0x2, 0x0, 0xa, 0x0, 0x4}, {0xa, 0x0, 0x0, 0x0, 0x40, 0x1, 0x8, 0xff, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffff7}, {0x200000, 0xc, 0x21, 0x53, 0x0, 0x2, 0x0, 0x0, 0x58, 0xb, 0x0, 0x0, 0x8080}], 0x3fb})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="2ea8d2811b2a246ba8a8a78787aee7bb20c96807b6d8761f859ec6fa331e777591ed11248a94c0cfc19c61fe7c081ddaf685d4d5b414a01ac8d511cfb5d75e8878514da879142e585b1f9213b0f04d67baae20dd2e742f1286afc7a9bb0ad44aa05e2e3db382651792f2945409e7c6dda83d14fef1fb50a3cb8d0a189d28277f501a04c5d4414479db27bd23c1fbdf28124c317129fe42ebf9", @ANYRES32, @ANYRES8, @ANYRES64, @ANYRESOCT=r2, @ANYRES32, @ANYRESDEC=r5], 0x30}, 0x1, 0x0, 0x0, 0xc885}, 0x4000880)

3m15.413180671s ago: executing program 2 (id=2875):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500010000000800124000000000050005000a000000050001000600000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r1, &(0x7f0000001140)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000140)=""/4096, 0x1000, 0x40, 0x400, 0x4, 0x3, 0x8}}, 0x120)

3m0.192097467s ago: executing program 32 (id=2875):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500010000000800124000000000050005000a000000050001000600000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r1, &(0x7f0000001140)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000140)=""/4096, 0x1000, 0x40, 0x400, 0x4, 0x3, 0x8}}, 0x120)

16.070903527s ago: executing program 4 (id=3352):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xee, 0x5, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x5d, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0xd, 0x80, 0xe9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xf7, {{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x4, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x7ff, 0x2, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xfa, 0x14, 0xea}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x40, 0x9f}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0x9, 0x5a, 0x0, 0x8, 0x2}, 0x2d, &(0x7f0000000740)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x9, 0x5, 0x9d9}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x5, 0xff0f, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x1, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x6, 0x1, 0xa, 0x1}]}, 0x5, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x101, &(0x7f0000000800)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc0c}}, {0xd, &(0x7f0000000980)=@string={0xd, 0x3, "6e72199177bca555d57b57"}}]})
syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4004b6000000b6039665f5747ad6f03767d5fd8d227c00002ad403af82465c3369a5905173f1e9434b9286032c009c2bc428c9f806a2b3b5415b085400d4af2188ffb871eef5e7508a9345fe27151ccce898ab13b3d5a98b9f071f03318471d416d66ab7d2ee0887cf0b43625a17f46850cfe89f233da13f50984efc725061559248b7bb97fa6c8591592e6af68cf2ac0d82e85868dfd19f60d051f3fa09c1b2609f85c7d62d589a2cd9791836748a41247193f088d84a20c4bed09f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
fsopen(&(0x7f0000000100)='zonefs\x00', 0x0)
r1 = semget$private(0x0, 0x1, 0x12)
semtimedop(r1, &(0x7f0000000040)=[{0x4, 0x66, 0x1000}, {0x4, 0x4, 0x1800}, {0x3, 0x3, 0xc00}, {0x4, 0x1}, {0x4, 0xdc}], 0x5, &(0x7f0000000080))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006a000b0000000100000000000000000000000000080001"], 0x20}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d48e8840c21536007abb000000010902240001100049000904004b028d4add060905070b0804090800090506"], 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000280))
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000300)={0x20, 0x1, 0xb5, {0xb5, 0x4, "f9c72eddd9cb345f789b06d049b713bc3c40cd500595fb064cdfcd90a8f5ca6d485a4f808b7f8307f19e5d8ea47464352b8e007c281b2eed3097ec5833364b641b7b30750010d630d07a9423f28223aea2925afdfc7fd97f08f1aa941e41c0b77b0d6843f75f1d8707fdc74ce32d834e92b9a50d41996c0e3e32bfb13a919393fa3031206902ec093dee865c11e2a47c710f93d746d1ff9b8ef781c11b874db425944eff485470bc15efb4b7cc752105d4a3a9"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f0000000240)={0x0, 0x22, 0x15, {[@main=@item_4={0x3, 0x0, 0xa, 'q6=T'}, @local=@item_012={0x2, 0x2, 0x4, "429a"}, @main=@item_012={0x2, 0x0, 0xb, "bae4"}, @local=@item_4={0x3, 0x2, 0x1, "40cdf47f"}, @main=@item_4={0x3, 0x0, 0xa, "ff265a9e"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xaa9f, 0x6, 0x1, {0x22, 0x301}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x12, 0x65, "6ebe9f69c7f41834c78cfc8cf7a8736d44ab02d42d4809c786825b806803803fd7a0919102f1463f898121b6aab92f81d7d1781a8160b3940ccbf59e77d19b6ef20be2659a3a27cd528951fe805c2e687ba09425178749a18dfc5cb49dda39e588c8ee9867"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x1, 0x6d, "006e562d540eeebb584d662a7e4b2bca73b15feef00d0ffdd0c9f12e8fcc1c500110517b4179d5aeb32d15e1528aa1e9eae9c43cba3c8105381ecb4205d778a1014883307eeb051d05e7d8a13e5a7727e09f783f9b4b571ecbdf6ff9a783eaad52072ab542c764aff35b4a87f8"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x4}})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
connect$unix(r6, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r5, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r7, &(0x7f00000000c0)="2650b4a5003ad6917a06f7c0fb0081a87e4f730747c052c89ce9", 0x1a)

11.569163781s ago: executing program 4 (id=3363):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f00001f3000/0x1000)=nil, 0x1000, 0x0, 0x28011, r1, 0x0)
ftruncate(r1, 0x3)
syz_io_uring_setup(0x6d42, &(0x7f00000000c0)={0x0, 0x32c8, 0x1000, 0x0, 0x0, 0x0, r1}, &(0x7f0000c57000), 0x0)
read(r0, &(0x7f00000004c0)=""/244, 0xf4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000005c0)=@ethtool_eeprom={0xb, 0x8, 0x81, 0x1000, "f451054045f4e240a12cb5f80a52a4e467aa70874114345034adcdd9e2ac361e621f19d8a4f41cd5f32136a1e2ae3b87d3d8b9186e06b30718b5bd6e6097d5daa7dd8a12b54779efb2b1ad5d63064c6bc2017315789fe89bcb9642e05651e8a05c238aed9f01171c6d10f0860e3094aef8618f58e2027a560eb01154c0c440bf61b3dd71db2d2e6df99c92d25f7d24be714a7bb5c8a0f5de57b5c08a0bb21bcead3a2b5f81e954c07b1c43bed824227bccacd2ed15ef363233f003d6e467a630688278e91aed6cd721c0021e00e5ba3293446db8479d3357f78dbfc238ba883e8c67e5e1afe06b40f12bde792110a17ae567a1429d26ec03f1ad883ca7388c1ebaea56f804511315018153f495e82393d10e7d0dbb34351e1021612a63669e9e95a7b27342eb311efbcb26506ac62cc3af6647938323a0ebff19c49dd6ed5551baa9c4e562ff55a9cc7ef54dc342fc31a8fdbcfd5941beea9e9bbc385f3cd91306289ca30aae49a9c78166b65631961c95d03a135a6d2b83daf2ab5a9e787201fd10cf3c8c63386975daf03aa1be7278b72767aa109607f63a76d797fe2672214c51bd041073979cb9565cbed586fabc5aca426e26e8830a070f1082beab78e687dad3bc2fa45cf532bf27d59e14350be6c71c164917fbbe5826eca95d314d8e66cdac958522cedcf7089953619722283ee3b8065864e4fb6a43724348d423d13110d30d4d465830956cae504a696b385b3bd4bfc384afae94261ed8fd421d319c2b553c611501d2973189c688bc128d5450f3ce588debf396405ec73dc83006c4d589ab8de3e766d9cbb64ff934d3dfe7224cbfbaf473915e49c145ca185cf083ad3e01f23c815f175494c68a042141be77b0ddb73eff7d56945a49638d4ff93bafa9df0776421ea510938e08d9ff45d9b6293d42406b511e334951d176981956423a1df18a85b9a7e7d43b9d4a913522c06736a4f80f6233fc36b30fbe2757e0e4b8e2703e05f11bf8961fb3525971471632b6bea9fa6ba54413e899ded496bfc339f7437884f45beaf84b2782efbed9e18375367a002692b892a5057d66d0636a423af0ad256018ad024a686b50f07e04fee8fc84798c20994293b7f19ad3bbd324efac305bd06f96441fbdb875b0750ae39cda946df95f56f3c28010fa9ff43a31a3aec3cddd1e74b980d7df43166e661726d179e6d81462085d8885538dc93d1b5010ce097413b13e572deeab2eff00baf936275a9281797ff72d28a2b6e870eaf2c8e95dfa497ce5c50f8f51ff6082422c02a86142376aae6a7c5e2bbaee9e9b8c3c98e937d013800c94cda84017123f935eb0752455631f3477775d985ebe6471e4eda2d6e399b28de5a6dabc271af8124f9bc1dfe3c7523597265357811753be19f7136f45967eb5a60c578bbe276e4a8e4a6ebe6b3281f7719aa33c0f96e694e8cd17b97cee76682b0039c09aa6d8692273b72c6f2930c0f6e052d7ca52c02e8d597aab4b486ee0a8ecfc819bd7e96e06a7efb3f65b40a2500a46db7e229f69bea9716502f9a95459a3393882ad408a0892bf382191b80254fbb175274173646d2aaa7c45c2b253c7f4bdafc89efcded4bf7d9e9a31893c9a4b1f4859543d1b0e38faf1c30a3f07b440b6f707dc3e437fb4dcf33ba843228e409515d4e92ecf10ea0e3b0eedbaa79e4f3e12dc3b5d5680af29478192594a25f1bd2bed551432cfe00f8c79e92aaa3899b81c0f0e9c1bb0e46bf86a3ee2161b35a0156bd0faff8992ba67f077555b0f976b2d0dab5495ff844932a28fe74f2c3f25aecef84460d4140416a63f6d1f4103cfc6fd77cc8b8cf8304ab5b3a2862753571aa5528948a72764d3240648e41350529aeefc087fd787c41fef5f3008bf7c83bc45d4cf2de78a9c4a9eefa7672440c91fbd0198d6e3bed0031d949eafd1c0739da2c5e730382df2d7e623db206da4ec3079252a70e9e6b7ca1587566a4462c87982ed8da80f3090ec34df5147f40ffb95523df017b07c315a48b6cdbf17aedfab313980ed074d91fa68f4281b02d256047beb10ff49f6c3229d164b432df2dc0850f78b6e258a243df8bfe98739d11fbc2ba84e4b5929729005f8e058d3da50a18cfa0064050ddfb4754f03f2a56c340098aefdfda8ebd5f2d29fe1d1b93a525acba937912ee8bc1946239c7b1cd47f3dc10d8ba2104938597ac674e5969f9c2e8561e9b1782ece13e46841872c010f7e349d64d9e46907489a773be00b66a7d4b141bb2277ebf70ab66d14d614170841e3b41e5e775649077d1fe61902c87dd8b6a49581a4fb784cf294fdcaaf0b800d447b2e0aa4f05a620016e4d201bf7cb6823a53b7c9639202138468fe5641e463506c5b9350fee486477582a2523beb79b8f2a6afc122e13353f10b266351e7625971c4887fc686b28b20f67d16b4477d45ef507e2af37208e54f6a1337eaa1a5a64cd6602ea228bf6f82fc83d2581a791169c45d83531b359b450095988ad1587dcb3e8018e1011a5db97292323b8208eac67e0de7b726e3df8c467f21f74c2f9629ffb84158303daba06ec26cda006d92d6405b8320d6b242a470ac7e4fbbab3c217d9996e4273951c67e5dbccc177b4f2f9dee6c9fd0f7bff0d24a777794b47f06d7baa6c01e9a9a9dbd40163ac5d63a2814f3727b6cf047eb3f281cd28e7b50832f2279d4452e00941a241d0625265fcdc4d53109c37e6848fbf722535a6bb38ab92b3f8e838162438c287adafe2938209a431eec498276eedda7e31b5aa87b50c98a6e9126fec8f2a1dde6d6ee8a2740a2fcb5729e6cd66741642202e4c0a26f5f3964e1be87903bbaaf75ff64249233f5e591be8e5d9fc0c9f093cded6cb6028075d9b5ad63ec6804184478350392feb845ceaadc690f86d57564883ffef3fbc6c703aadac4fa2bcf7471feff9c2721972443659529fd9527a7948c972c16e1219a85f5b0dcaa23fd4487cff048a63d8582a675999d8855b824caf0cdaf2a4c2c46da4191a297a0c28b85cad1605db79705a363da64be3619da15957786e4c6cb253dabd5e7b6bbd0d6c7b80013dd3935a85147e82996421c46262d855ac4c4a7a93f38515ef6a428065eca280bad6fac3117379839ef761aa13f831ce2dd567e119968f4c6a25d07df6f60f4114d11d16d86e6de1892c6bc51e867e43206564a47ec10d49f83ba3a42249eb967faf627289df7e4d10cf83910f15962b490eec745e47545d6d221621b2b7e47a65f5db14197bae90155f78f67692bda8e755686380c545c688a0603ec29ab0585ed4379f0ba76b3bf14653e065f12a3a6e9fd82c5c66c2404abf919f900ae05a995da3ea5eea02a4c21aab895ce59276d14e4bd9e63a890f657fbe7ea5f4cf8b876a85913fd0025712fde20e383d2f967895d70d85dd4a186042df886b516030a5c24214e45145d178b27674f2583643c355ad3cb8c79803af0149fd8133ea9d48962b313480f30114ec8efa07df27ea811852a53f135d132d7acb730db0559560af24af08d06583bb1e18524b1fedc44957c344b42cb14deadacead9580e8e4300ca2c7c50b08f3de87fb25d967e0a6df1b42266b7217846149821b4ebef839ad52a31e6322df7bbc5b0c845368627c3f628e820d3bdb9b2f3f7d4763e58b602cf17533cababc132d0cb6a25ee0d6ba8f54c7dded279fe43fbce14b406c33636dadfe3148455c9c3c475eaacc7ee1bbcab164f185b9b0416b426c2fc0e045cb96bcd2a8c4840119f7c2c704b729f4aebb33c6f5dbed7c51f9cfe5291e1836f20892082b33ef3fd9f1b2cd48c124c4219eb7ebea643f6f0083a896bef1e15cb0b79badc7a4125160990a93969c9e0eed320b6a88d55d9b2c7b11053746b4f52dc5fa88acdb7cc9a9069f087ccc6538b3e1cd518879c62ed0ef682b84cddb112b97dca2485922af5ab20c9f31107dd695208a7736bb5a20e85e211851027be89b7dc9ee5399d4f5a68bd2e39603807d261f1533ccb4e26f39a19cc8f38a62a9875d4c8956e06b1d64c78b048bddd228abc581a5f404c7f4a44ed0a0e8ec4a874669e1d751ad5b64a0a3b35df060e6978c725a125c789c92b9ce52791162b0e947a195d58e6d2449d5a0e438e2c28e892d110f20636e0a4a89ca6801899f77825382f2d2d2ad37197d985db05b1a48529581d0ce6491f63f7a9993425d43b17f6d8f42a24ac476e4212b3f31f3a484683e0ef37584022d21c6d04779498b5c299647b7ac9a68e7a4ae1a5d1f4d74764b7db3acf81e8a258529fbd62773ce2c95de8623d235d9bfa7a79355ed1ddd042ee47135096b1fe1364e6c0c0a2064fb0b2f2b5bbbbbb7be5b35d4dd1b20303a6669a3c06f2d76e6f823215755f1565915ddc543b44cad1a661a57b9ef14037826f2df10813d73a1b9083f96389a1cb6b668b878496b0f0dbbd32c3a067a40cce15661ac0832c3b4efd5fa25deacaf691034df2578857f48185f04cae6cc89d53d18ba2027d2ba48cf69051e2b9cc84deeb62e9632eb1e1a2d7786710a507a762201b84ac0bffa4d1b492a799900b74dbbc033801206a9ee927bc1e83e1edc356d3a1ef43427f484b85f73876ef2d3ea4ffefad19c3a1803372999974c3073800ae4ca0ebd7887d539ae7e0f763d65ab68441fcbc83c0db9ff76ecb91ef898925e3496721e367538c02b502a14ef0f29b4d6802f0cbd8d6151cf58ff9296be73e83d2a95d4910952dad656ea1461d535683c643c7d4a9a408ffec239c422568f1d07ab26cc3e12dbfb5582734ebcff2493bedf8168ea60230c7b14dec75907e35be6f33faf04b52ff609f4449b08e639686f20500fa217c96b7bb8edcbd22d1c8f3f5a12f22d67de81b9ebddbe613f335c8a653387084dd7ad86f419a9f97ef0f9b437d48a47b302ce6c582769f6aaf1cc9bf38fac7e1b6efdbf0c8869f9e74eca3e1a55dc8aa33c9850ce3af9a0dfc57d0edfe472a15c4e6a6933bc7a21715d1760fe1b350a44629cf1819b20ebb7f5e38dd7ace16abfa152c1fc3e5a9085c840fa24ee205a223d34891a2f1662aa07ffed7738bce2bd5969eb5a821db9636767b3c9f5a30edaaf282216d2491df2d80a2fe4d7303d78adf0f523762788d810b32bd96c5b07602f6a7bc4e9ad824eec6da32b7d5c95fdba738ebb7f911bb11e0914f3e8ec78db967168771f0f2c4403028732beeb66b31065cae71f64db435ca31c2f9f8d86890ffc9cc30edf123b42fa44731e6f9f47ddf8d973cae1c1e956263baaf6710aaa06dfed1d2ca3b6b03559a22c814f89557ee5faa65ea1aab38c583e37fbc270330b44e7e4db2509630783996392eb4bd2bb8bad2ba50783761cee273ef7b73cfa2ba76f875f49326f601335f73106431461da13728bfb9b61e9f79bd8a86ceba7cafa8d3b953f11de4188847a36f4ca48c4a8f671484de2a807420ed1bb60a16765a8dd72b974e193b3565295663fcb1201c8b1c96312bcadfdbcd43ea25fb812b24c6ef4a9b39d343064d2e7919868c16fa64734e3d23614ad21041549b3c1debdd5c3b8c05e904575e49933f09679ea2d55ca6809a5cda02c403d1d174fe4b99de6bca4fb814a10bb890748acda27c7190ebec6872125a1584aa57b4f4c726b43338b5cb287d0e67d14f5bd03e0d12db671e4cbd475bbaa0c2c4ce1db9604a94b78ea3f316787e42beb789e47adda399e770dd5a0bd5225e246edac55c0532a5475677aea1636b6d297436ac5fff51497a2ab792158c82359245b1a7188b955d2de324adc82969d2e75eb1"}})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})

10.298209214s ago: executing program 4 (id=3367):
socket$inet6(0xa, 0x2, 0x3a)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@l2tp={0x2, 0x0, @private=0xa010101, 0x1}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)="2b798f1d03278dc2d84da42e42e12f7e5281bac49b20b0b0cdc3c540a195a8cdcd50118da93cb8ed67ad2543feca9432dd3f5fb89bbb327f58f835b4c3231dacd30e3b0ad6bb5c8609edece9f174b3a8896e7d41b411f535fb989b44f9a0b4dbc97649132947b1e1e258717d874c169e04ea4620298bfa4106754ca46a0d372e9d574e0548fdf55362c2c932462d6e9fb9d44ac875ae033ca7eadbe5a5274ebbf8c6f1bd66a043494ab5c97dd34efc1434bf9e70e190f9ec379a5bfbcefe38fdad6ba370602afe5c7e44568dd7671594b0025233c0e293851abc00ecce25c7b07bc4296a37941d62220d2f398b80", 0xee}, {&(0x7f0000000240)="2f29a9efe49f8a", 0x7}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="99232ca01866f57a7218fc4b4df9cf64bcec5c7423acb7ed2757d4101d5f7d869fca9dac8a58cd568b2b8a7e8ffc0c3a5a4342f6df90cdec667cc9d34920f9678d679d56e81d5ec380207e6593b3eb61dd450077566f0c5807b5eecc86d3449dd5d3f60061597222c16354f9e9248494a89c765d80f70d1589747479b2e24bbfc28bd867b70ab787c73af5d4e41081cfb4c1934953a5f074f3e7f3a4eb1d88cd8b9512fe", 0xa4}, {&(0x7f0000001380)="a2f65c41f6e32f7074df6d9394bf5c6cf766e55e9bf446034cf2236aed62c07d112000b66907351b279063827b9be6737cb9a975e8dacf78ba8fc4609ce06eeb757c554671908d7be8f6b52ccc1393fc88e072defd5bfc093150a02f0d9402a77ace9a044d", 0x65}, {&(0x7f0000001400)="ef27e9c9bef7d335a844cf11db9e94ff95ecda1d78be680842fc3e2d", 0x1c}], 0x6, &(0x7f00000014c0)}}], 0x2, 0x0)

8.78185956s ago: executing program 4 (id=3374):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
r2 = epoll_create(0x8)
epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
io_setup(0x30, &(0x7f0000000600))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
r6 = socket(0x10, 0x3, 0x6)
r7 = socket(0x10, 0x3, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c1b39a08e604090000000000030109021200010508e0220904a206009e694b50"], 0x0)
setxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "48dcbe70371d1a1dead7a00739749a85"}, 0x11, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x30, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x2, 0x8, 0x7]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb41}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="02002dbd7000fbdbdf25a0fb7344d5031fb1", @ANYRES32=0x0, @ANYBLOB="0600fd000200000014005500cc66f186ab8b144debd2365ab4feeab305002001290000001400fe007a8d775de9498f146a9f1c7e8936a88508001f01db5f0000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
close(r0)

7.180945364s ago: executing program 3 (id=3380):
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x30, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="850000002e000000661200000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000200)='GPL\x00', 0x7, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

7.093615658s ago: executing program 3 (id=3381):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
poll(&(0x7f0000000100)=[{r0, 0x8282}], 0x1, 0x9)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x548d2552, 0x4)

6.780568191s ago: executing program 3 (id=3383):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)
r0 = io_uring_setup(0x67bb, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4e0, &(0x7f0000000480)={0x0, 0xa49e, 0x2}, &(0x7f0000000300), &(0x7f0000000340))
io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3a5, 0x4)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0)
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000ef0285b72eae795b11ad261777db75186baf0b2792ade1f10772662181fe046096c5dfe96334e2d836395560230500ef286f21c974d520c247fd200851c50b2dd5e5f6b23909a23ee27007dae2a0fd08dbf92809a931196df3be84781f7ecafa0a4bcf7e01a23999fdfb4b490f6cfe5edf3850576acb265f2ee288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd614ec41f636ec0e299e370f5631acfab526519a36f963679457241bc05a307f8be0c828a43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975e8617ffc7e8cc497f437853d9c04b195fa52848dd1555796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f766c3cb8cd6a4a46895dc5b44d224a0b3c2ca8087486aead1d034d94d32ad677b28b10ed58f8de2d5a8d25c7c62ae49ba35be16888ea8da622daf5f0f02d9c08752113ab1ec6bde50940e9bf33f91a6c5056aabc04eedfeb6535540e5c027ff4df6589cb47171bfbb564a23508f2b34570d5ef2bb8e9274d5d40af19b0afe0c774b5623070000008be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e131d8e3142ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff0017957481ee790b301e3e817c3b651bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc491b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31bae3fb66ffe0e9913d32301c844e58f000094f5766dc1ca5e8cfee332a28809591c14098f71a7bdcb88186bcd36a2ecce33a3048f6f97f14dac56e84a1fdfdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a616d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b7eb835d28f977ab43670412afe8361b60bf361aa4d351214801c57dad50ad6179a7507011e3060badbe396b3fb928c7e8b7289b227c6b313e2852c5cd124771bef02f431afe50e7bf614eeda252393d85cc0a9e491479270ae41b9bcd44eabfd75bab74cb4d2a50b566b4c21aea43e27cd304a45f2f79f4eb7ff4fd1256a00adf186c4a754f28bf948977a78114f7a186db5a1bf4ced7261bdb5e3c1124462961f03dfbbb308be4c3c3f7038901da597f2ec5edca4e0db84130f0b3cee139da076250e961c8c52216c63a148fb3a06057504b81ca783193a90a98b1f4e0f2c0242f91aa62732881446fcd09a664ffa8de9ad4e7ea99895535069f017dee4c557740eb50291231a44cb9693b62bf38613751a79ef892bd2748243553b6b02571932f6d167cf32bd420faa6362d24d8c83"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c86dd", 0x0, 0x4000}, 0x28)
recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
close(r8)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002000400000014000100fe88000000000000000000000000000108"], 0x5c}}, 0x20000000)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, 0x0, &(0x7f00000002c0))

6.779891884s ago: executing program 0 (id=3384):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1101000073"], 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0xfffffffe, &(0x7f0000001000/0x4000)=nil)

6.475382716s ago: executing program 1 (id=3385):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x5cf, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4)
r8 = eventfd2(0xff, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000300)=r8, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r5, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x28}}, 0x20000000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
syz_open_dev$video(0x0, 0xa4, 0x0)
socket$kcm(0x15, 0x5, 0x0)
r10 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0)
r11 = fsmount(r10, 0x1, 0x0)
fchdir(r11)

6.027907861s ago: executing program 3 (id=3386):
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x3, 'lc\x00', 0x6, 0x6, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x6, 0x12d5c}}, 0x44)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x2, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000180)=0x1)
socket$inet_udp(0x2, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1)
shutdown(r0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e04, 0x7ece, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000080)=0x31, 0x4)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0, 0x5})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(0x0, 0x500, 0x0)
close(r6)

5.97855536s ago: executing program 0 (id=3387):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sysinfo(0x0)

5.977504928s ago: executing program 5 (id=3388):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b000000000000007b0a00ff000000001d0a000000000000950000000000000018100000", @ANYRES32], 0x0, 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x803, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x81, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x3200})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg(r1, &(0x7f0000000180), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)
r5 = io_uring_setup(0x1694, &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0), 0x0)

5.712827196s ago: executing program 0 (id=3389):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@l2tp={0x2, 0x0, @private=0xa010101, 0x1}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)="2b798f1d03278dc2d84da42e42e12f7e5281bac49b20b0b0cdc3c540a195a8cdcd50118da93cb8ed67ad2543feca9432dd3f5fb89bbb327f58f835b4c3231dacd30e3b0ad6bb5c8609edece9f174b3a8896e7d41b411f535fb989b44f9a0b4dbc97649132947b1e1e258717d874c169e04ea4620298bfa4106754ca46a0d372e9d574e0548fdf55362c2c932462d6e9fb9d44ac875ae033ca7eadbe5a5274ebbf8c6f1bd66a043494ab5c97dd34efc1434bf9e70e190f9ec379a5bfbcefe38fdad6ba370602afe5c7e44568dd7671594b0025233c0e293851abc00ecce25c7b07bc4296a37941d62220d2f398b80", 0xee}, {&(0x7f0000000240)="2f29a9efe49f8a", 0x7}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="99232ca01866f57a7218fc4b4df9cf64bcec5c7423acb7ed2757d4101d5f7d869fca9dac8a58cd568b2b8a7e8ffc0c3a5a4342f6df90cdec667cc9d34920f9678d679d56e81d5ec380207e6593b3eb61dd450077566f0c5807b5eecc86d3449dd5d3f60061597222c16354f9e9248494a89c765d80f70d1589747479b2e24bbfc28bd867b70ab787c73af5d4e41081cfb4c1934953a5f074f3e7f3a4eb1d88cd8b9512fe", 0xa4}, {&(0x7f0000001380)="a2f65c41f6e32f7074df6d9394bf5c6cf766e55e9bf446034cf2236aed62c07d112000b66907351b279063827b9be6737cb9a975e8dacf78ba8fc4609ce06eeb757c554671908d7be8f6b52ccc1393fc88e072defd5bfc093150a02f0d9402a77ace9a044d", 0x65}, {&(0x7f0000001400)="ef27e9c9bef7d335a844cf11db9e94ff95ecda1d78be680842fc3e2d", 0x1c}], 0x6, &(0x7f00000014c0)}}], 0x2, 0x0)

5.560281831s ago: executing program 4 (id=3390):
syz_emit_ethernet(0x90e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2786dd603000bb08d82b00fc020000000000000000000000000000fe8000000000000000000000000000aa3c19000000000000c910ff0100000000000000000000000000010401100708000000010004060014a7d6104212567aa3978a2c3cd1a4d868b66b717801cff409c4"], 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0)
r1 = dup(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc000)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, 0x0)
cachestat(r2, &(0x7f0000000080)={0x2b9, 0x1}, &(0x7f00000000c0), 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
fanotify_init(0x10, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3})
r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbb", 0x5, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
read$dsp(r9, &(0x7f00000000c0)=""/229, 0xe5)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)

5.170007813s ago: executing program 0 (id=3391):
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x30, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="850000002e000000661200000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000200)='GPL\x00', 0x7, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

4.915639583s ago: executing program 0 (id=3392):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000082505a0a4400000000101090244000101000000090400001202060000052406000005240000000d240f0100000000000000000009058103200000000009058202"], 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001040)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], 0x0, [0xb, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}}, 0x0)

4.080802304s ago: executing program 5 (id=3393):
r0 = syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigsuspend(0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
r2 = dup2(r1, r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1)
read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020)
write$vhost_msg_v2(r2, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/121, 0x79, 0x0, 0x0, 0x2}}, 0x48)

3.948023263s ago: executing program 1 (id=3394):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x1, 0x1, 0x1, 0x1, 0x4, 0x5, 0x6, 0x7ffffffa, [{0x6783, 0x2, 0x8001, 0x10}]}}]}}]}, 0x54}}, 0x24040084)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x400800, 0x111)
io_uring_enter(r3, 0x4994, 0x95ff, 0x40, &(0x7f0000000180)={[0x6]}, 0x8)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x288, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23b6dff4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2849}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2dd4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ef952a33896e0c7b18f42a8198b32309e6e87666d423c8bc2a3df2ac8a110adf1c"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xafc6}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x529}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x3c)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getchain={0x34, 0x66, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf, 0x9}, {0x10, 0xffe0}, {0x2, 0x6}}, [{0x8, 0xb, 0xa15}, {0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004840}, 0x4c0c0)

3.917558557s ago: executing program 4 (id=3395):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x5cf, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4)
r7 = eventfd2(0xff, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000300)=r7, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r4, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES16], 0x28}}, 0x20000000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
syz_open_dev$video(0x0, 0xa4, 0x0)
socket$kcm(0x15, 0x5, 0x0)
r9 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0)
r10 = fsmount(r9, 0x1, 0x0)
fchdir(r10)

3.742174673s ago: executing program 5 (id=3396):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)
r0 = io_uring_setup(0x67bb, &(0x7f0000000280))
r1 = syz_io_uring_setup(0x4e0, &(0x7f0000000480)={0x0, 0xa49e, 0x2}, &(0x7f0000000300), &(0x7f0000000340))
io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x3a5, 0x4)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0)
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c86dd", 0x0, 0x4000}, 0x28)
recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
close(r8)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002000400000014000100fe88000000000000000000000000000108"], 0x5c}}, 0x20000000)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, 0x0, &(0x7f00000002c0))

3.594194158s ago: executing program 1 (id=3397):
syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r0, 0x7a98, 0x7ffff000, 0x0, 0x0, 0x0)

3.335821301s ago: executing program 1 (id=3398):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, &(0x7f0000000340))
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000003c0)={0xa, 0x3, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}})
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xffff}, 0x1c, 0x0}}], 0x1, 0x20004004)

3.121753093s ago: executing program 5 (id=3399):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sysinfo(0x0)

2.717427994s ago: executing program 1 (id=3400):
syz_emit_ethernet(0x90e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2786dd603000bb08d82b00fc020000000300000000000000000000fe8000000000000000000000000000aa3c19000000000000c910ff0100000000000000000000000000010401100708000000010004060014a7d6104212567aa3978a2c3cd1a4d868b66b717801cff409c4"], 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0)
r1 = dup(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0xc000)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
epoll_create(0xe)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)

2.428105087s ago: executing program 3 (id=3401):
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x0, 0x0})
r0 = openat$vsock(0xffffff9c, 0x0, 0x40101, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x4, 0x4, 0x70, '\x00', 0x10000})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x6, 0x5, 0x2, 0xffffffff}, {0x28, 0x19, 0x73, 0xfffff034}, {0x1000, 0xd9, 0x7}, {0x0, 0x9, 0x7, 0x6}, {0x100, 0x1a, 0x9, 0x4}]}, 0x10)
timerfd_settime(r0, 0x2, 0x0, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x400000000000], 0x100000})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3)
sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)

2.032256038s ago: executing program 5 (id=3402):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x58, r1, 0x101, 0x0, 0x2000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "7199eb6c57ab063794dcd030f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}]}, 0x58}}, 0x40080)

1.973738142s ago: executing program 1 (id=3403):
unshare(0x4020400)
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)

868.539277ms ago: executing program 0 (id=3404):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)={{0x14}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x34, 0x3, "55b0f1230a6a7db23b6d45fcd6c231e61562388840e6520b620f0c97ff4d151ff6840ec33256fa29356e76d1711be493"}, @NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x20000091}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
socket$key(0xf, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8d6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

624.028243ms ago: executing program 3 (id=3405):
syz_usb_connect(0x6, 0xf4, &(0x7f0000000700)=ANY=[], 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

0s ago: executing program 5 (id=3406):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0)
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x30, 0x300, 0x80, 0xf0, 0x40, 0x0, 0x20, 0xfffffffd, {0x0, 0x8, 0x1}, {0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x3}, 0x0, 0x0, 0x2, 0xd613, 0x0, 0xfffffffd, 0xffffffff, 0x4, 0x40000009, 0x6, 0xfffffffd, 0x0, 0x20, 0x2, 0x0, 0x1})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3b0, 0x1c8, 0xf0, 0xffffffff, 0x1c8, 0x270, 0x270, 0x480, 0xffffffff, 0x480, 0x480, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x2f, 0x0, 0x40}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0x410, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x10, '6n'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x2, 0x2, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @private=0xa010101, @empty, @port=0x4e22, @gre_key=0x6f6}}}}, {{@ip={@multicast2, @empty, 0xffffff00, 0xff000000, 'wg2\x00', 'bridge0\x00', {0xff}, {}, 0x8b, 0x1, 0x2}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x18, @local, @private=0xa010101, @port=0x4e22, @gre_key=0x81}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410)
getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f00000001c0)=""/81, &(0x7f00000000c0)=0x51)
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0})
r10 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
r11 = fsmount(r10, 0x0, 0x0)
sendmmsg$inet6(r11, 0x0, 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))

kernel console output (not intermixed with test programs):

n0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.737413][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.778013][T14164] usb 4-1: Using ep0 maxpacket: 8
[  930.793075][T14164] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  930.817145][T14164] usb 4-1: config 0 has no interface number 0
[  930.861025][T14164] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  930.868609][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.877290][T14180] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  930.892870][T14164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.901025][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.909170][T16491] x_tables: unsorted entry at hook 2
[  930.922152][T14180] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  930.937877][T14164] usb 4-1: Product: syz
[  930.942083][T14164] usb 4-1: Manufacturer: syz
[  930.946700][T14164] usb 4-1: SerialNumber: syz
[  930.976614][T14180] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  930.990028][T14164] usb 4-1: config 0 descriptor??
[  930.995249][T14180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.034481][T14180] usb 6-1: config 0 descriptor??
[  931.074098][T14180] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  931.087810][T14180] dvb-usb: bulk message failed: -22 (3/0)
[  931.106070][T14180] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  931.131533][T14180] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  931.142009][T14180] usb 6-1: media controller created
[  931.154770][T14180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  931.182258][T14180] dvb-usb: bulk message failed: -22 (6/0)
[  931.199309][T14180] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  931.221148][T14164] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  931.229012][T14164] usb 4-1: No valid video chain found.
[  931.237315][T14180] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input60
[  931.253196][T14180] dvb-usb: schedule remote query interval to 150 msecs.
[  931.266842][T14180] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  931.421110][T14180] dvb-usb: bulk message failed: -22 (1/0)
[  931.426916][T14180] dvb-usb: error while querying for an remote control event.
[  931.617787][T14180] dvb-usb: bulk message failed: -22 (1/0)
[  931.623607][T14180] dvb-usb: error while querying for an remote control event.
[  931.726843][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  931.733768][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  931.787800][T14180] dvb-usb: bulk message failed: -22 (1/0)
[  931.793679][T14180] dvb-usb: error while querying for an remote control event.
[  931.957861][T14164] dvb-usb: bulk message failed: -22 (1/0)
[  931.963672][T14164] dvb-usb: error while querying for an remote control event.
[  932.127986][T14164] dvb-usb: bulk message failed: -22 (1/0)
[  932.136162][T14164] dvb-usb: error while querying for an remote control event.
[  932.325924][T14180] dvb-usb: bulk message failed: -22 (1/0)
[  932.336462][T14180] dvb-usb: error while querying for an remote control event.
[  932.475280][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  932.485737][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  932.498505][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  932.506243][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  932.518033][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  932.528310][ T5891] dvb-usb: bulk message failed: -22 (1/0)
[  932.534768][ T5891] dvb-usb: error while querying for an remote control event.
[  932.721621][ T5891] dvb-usb: bulk message failed: -22 (1/0)
[  932.771352][ T5891] dvb-usb: error while querying for an remote control event.
[  932.830435][T16511] chnl_net:caif_netlink_parms(): no params data found
[  932.950524][ T9845] usb 6-1: USB disconnect, device number 15
[  933.016649][ T9845] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  933.223115][T16511] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.238971][T16511] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.246812][T16511] bridge_slave_0: entered allmulticast mode
[  933.273690][T14180] usb 4-1: USB disconnect, device number 5
[  933.303167][T16511] bridge_slave_0: entered promiscuous mode
[  933.323562][T16511] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.341114][T16511] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.356186][T16511] bridge_slave_1: entered allmulticast mode
[  933.398323][T16511] bridge_slave_1: entered promiscuous mode
[  933.448199][T16529] misc userio: No port type given on /dev/userio
[  933.490413][T16529] misc userio: Invalid payload size
[  933.511256][T16529] misc userio: The device must be registered before sending interrupts
[  933.566682][T16511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  933.887458][T16511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  934.060639][ T9845] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  934.250508][ T9845] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  934.294495][ T9845] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  934.324128][T16511] team0: Port device team_slave_0 added
[  934.343425][ T9845] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  934.355412][T16511] team0: Port device team_slave_1 added
[  934.358016][ T9845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.378601][ T9845] usb 6-1: config 0 descriptor??
[  934.387445][ T9845] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  934.400958][ T9845] dvb-usb: bulk message failed: -22 (3/0)
[  934.456897][ T9845] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  934.563571][T16511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.591670][ T5148] Bluetooth: hci4: command tx timeout
[  934.626947][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.630596][ T9845] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  934.662784][ T9845] usb 6-1: media controller created
[  934.671170][ T9845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  934.703968][ T9845] dvb-usb: bulk message failed: -22 (6/0)
[  934.710637][ T9845] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  934.729413][ T9845] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61
[  934.771909][T16511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.881689][ T9845] dvb-usb: schedule remote query interval to 150 msecs.
[  934.945207][ T9845] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  935.012389][T16511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.065071][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.098608][T16511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.098608][ T9845] dvb-usb: bulk message failed: -22 (1/0)
[  935.153869][ T9845] dvb-usb: error while querying for an remote control event.
[  935.332233][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  935.338537][ T5890] dvb-usb: error while querying for an remote control event.
[  935.417933][ T9845] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  935.537840][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  935.543696][ T5890] dvb-usb: error while querying for an remote control event.
[  935.565093][T14173] usb 6-1: USB disconnect, device number 16
[  935.605294][T16511] hsr_slave_0: entered promiscuous mode
[  935.615878][ T9845] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  935.617624][T16511] hsr_slave_1: entered promiscuous mode
[  935.630115][ T9845] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  935.653498][T14173] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  935.666541][ T9845] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  935.680111][ T9845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.714256][ T9845] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  935.776790][ T9845] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[  935.943862][ T9845] usb 4-1: USB disconnect, device number 6
[  935.953684][T16539] delete_channel: no stack
[  936.062919][   T49] bridge_slave_1: left allmulticast mode
[  936.080783][   T49] bridge_slave_1: left promiscuous mode
[  936.096420][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.121352][   T49] bridge_slave_0: left allmulticast mode
[  936.164464][   T49] bridge_slave_0: left promiscuous mode
[  936.175566][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.363324][T16549] FAULT_INJECTION: forcing a failure.
[  936.363324][T16549] name failslab, interval 1, probability 0, space 0, times 0
[  936.401565][T16549] CPU: 0 UID: 0 PID: 16549 Comm: syz.5.3097 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  936.401596][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  936.401610][T16549] Call Trace:
[  936.401618][T16549]  <TASK>
[  936.401628][T16549]  dump_stack_lvl+0x189/0x250
[  936.401664][T16549]  ? __pfx____ratelimit+0x10/0x10
[  936.401689][T16549]  ? __pfx_dump_stack_lvl+0x10/0x10
[  936.401720][T16549]  ? __pfx__printk+0x10/0x10
[  936.401745][T16549]  ? __pfx___might_resched+0x10/0x10
[  936.401772][T16549]  ? fs_reclaim_acquire+0x7d/0x100
[  936.401798][T16549]  should_fail_ex+0x414/0x560
[  936.401830][T16549]  should_failslab+0xa8/0x100
[  936.401863][T16549]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  936.401892][T16549]  ? __alloc_skb+0x112/0x2d0
[  936.401927][T16549]  __alloc_skb+0x112/0x2d0
[  936.401961][T16549]  alloc_skb_with_frags+0xca/0x890
[  936.401992][T16549]  ? ipv6_addr_label+0x31/0x1e0
[  936.402019][T16549]  sock_alloc_send_pskb+0x857/0x990
[  936.402063][T16549]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  936.402091][T16549]  ? ipv6_dev_get_saddr+0x143/0xb70
[  936.402128][T16549]  __ip6_append_data+0x2ab5/0x3de0
[  936.402171][T16549]  ? __lock_acquire+0xab9/0xd20
[  936.402198][T16549]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  936.402239][T16549]  ? ip6_mtu+0x7d/0x3f0
[  936.402263][T16549]  ? __pfx___ip6_append_data+0x10/0x10
[  936.402283][T16549]  ? __pfx_ip6_mtu+0x10/0x10
[  936.402313][T16549]  ip6_append_data+0x1c4/0x380
[  936.402339][T16549]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  936.402366][T16549]  udpv6_sendmsg+0xb18/0x2710
[  936.402403][T16549]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  936.402431][T16549]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  936.402458][T16549]  ? __lock_acquire+0xab9/0xd20
[  936.402500][T16549]  ? __local_bh_enable_ip+0x12d/0x1c0
[  936.402526][T16549]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  936.402559][T16549]  ? inet_send_prepare+0x1b9/0x270
[  936.402588][T16549]  ? inet_send_prepare+0x1b9/0x270
[  936.402619][T16549]  ? inet6_sendmsg+0xe4/0x120
[  936.402649][T16549]  __sock_sendmsg+0xe5/0x270
[  936.402678][T16549]  ____sys_sendmsg+0x52d/0x830
[  936.402705][T16549]  ? __pfx_____sys_sendmsg+0x10/0x10
[  936.402736][T16549]  ? import_iovec+0x74/0xa0
[  936.402762][T16549]  ___sys_sendmsg+0x21f/0x2a0
[  936.402786][T16549]  ? __pfx____sys_sendmsg+0x10/0x10
[  936.402846][T16549]  ? __fget_files+0x2a/0x420
[  936.402865][T16549]  ? __fget_files+0x3a0/0x420
[  936.402895][T16549]  __sys_sendmmsg+0x227/0x430
[  936.402922][T16549]  ? __pfx___sys_sendmmsg+0x10/0x10
[  936.402941][T16549]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  936.402996][T16549]  ? ksys_write+0x22a/0x250
[  936.403026][T16549]  ? __pfx_ksys_write+0x10/0x10
[  936.403051][T16549]  ? rcu_is_watching+0x15/0xb0
[  936.403085][T16549]  __x64_sys_sendmmsg+0xa0/0xc0
[  936.403108][T16549]  do_syscall_64+0xfa/0x3b0
[  936.403133][T16549]  ? lockdep_hardirqs_on+0x9c/0x150
[  936.403157][T16549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.403189][T16549]  ? clear_bhb_loop+0x60/0xb0
[  936.403215][T16549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.403235][T16549] RIP: 0033:0x7f7c8298e969
[  936.403253][T16549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  936.403270][T16549] RSP: 002b:00007f7c837f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  936.403292][T16549] RAX: ffffffffffffffda RBX: 00007f7c82bb5fa0 RCX: 00007f7c8298e969
[  936.403307][T16549] RDX: 0000000000000002 RSI: 0000200000006b80 RDI: 0000000000000003
[  936.403320][T16549] RBP: 00007f7c837f1090 R08: 0000000000000000 R09: 0000000000000000
[  936.403333][T16549] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[  936.403345][T16549] R13: 0000000000000000 R14: 00007f7c82bb5fa0 R15: 00007f7c82cdfa28
[  936.403377][T16549]  </TASK>
[  936.668321][ T5148] Bluetooth: hci4: command tx timeout
[  936.669857][    C0] vkms_vblank_simulate: vblank timer overrun
[  936.687786][ T5891] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  937.199808][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0
[  937.206796][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  937.222291][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.238446][ T5891] usb 2-1: config 0 descriptor??
[  937.348031][ T5892] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  937.416716][   T49] bond1 (unregistering): (slave gretap1): Releasing active interface
[  937.424929][   T49] gretap1 (unregistering): left allmulticast mode
[  937.513245][ T5892] usb 6-1: config index 0 descriptor too short (expected 2084, got 36)
[  937.540611][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  937.552255][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  937.564776][ T5892] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  937.574234][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.586834][ T5892] usb 6-1: config 0 descriptor??
[  937.868534][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3096'.
[  938.012370][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  938.026539][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  938.036577][   T49] bond0 (unregistering): Released all slaves
[  938.168372][ T5891] video4linux radio48: keene_cmd_set failed (-110)
[  938.175678][ T5891] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  938.223164][   T49] bond1 (unregistering): Released all slaves
[  938.255348][ T5892] dragonrise 0003:0079:0006.0023: item fetching failed at offset 0/2
[  938.264746][ T5892] dragonrise 0003:0079:0006.0023: parse failed
[  938.271454][ T5892] dragonrise 0003:0079:0006.0023: probe with driver dragonrise failed with error -22
[  938.344734][   T49] : left promiscuous mode
[  938.389976][ T5892] usb 2-1: USB disconnect, device number 21
[  938.448416][T14164] usb 6-1: USB disconnect, device number 17
[  938.755508][ T5148] Bluetooth: hci4: command tx timeout
[  938.904564][   T49] hsr_slave_0: left promiscuous mode
[  938.918615][   T49] hsr_slave_1: left promiscuous mode
[  938.932832][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  938.953503][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  940.478700][T16607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  940.791332][   T49] team0 (unregistering): Port device team_slave_1 removed
[  940.828200][ T5148] Bluetooth: hci4: command tx timeout
[  940.845058][   T49] team0 (unregistering): Port device team_slave_0 removed
[  941.213928][ T9845] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  941.437542][ T9845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  941.463969][ T9845] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  941.483445][ T9845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  941.504140][ T9845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  941.526389][ T9845] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  941.545893][ T9845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.566360][ T9845] usb 2-1: Product: syz
[  941.576062][ T9845] usb 2-1: Manufacturer: syz
[  941.594400][ T9845] usb 2-1: SerialNumber: syz
[  941.616712][ T9845] usb 2-1: config 0 descriptor??
[  941.653701][ T9845] xbox_remote_probe: Unexpected endpoint_in
[  941.909380][T16614] usb usb8: usbfs: process 16614 (syz.1.3113) did not claim interface 0 before use
[  941.940031][T16614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.955231][T16511] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  942.000208][T16511] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  942.026468][T16614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  942.082276][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3114'.
[  942.083737][T16511] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  942.114238][T16511] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  942.414663][   T49] IPVS: stop unused estimator thread 0...
[  942.522779][T16624] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  942.774340][T16511] 8021q: adding VLAN 0 to HW filter on device bond0
[  942.850063][ T9845] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  942.905620][T16511] 8021q: adding VLAN 0 to HW filter on device team0
[  942.966475][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.973710][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  943.041154][T14173] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  943.049883][ T9845] usb 4-1: Using ep0 maxpacket: 32
[  943.054744][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.062261][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  943.070798][ T9845] usb 4-1: config 4 has an invalid interface number: 8 but max is 0
[  943.080521][ T9845] usb 4-1: config 4 has no interface number 0
[  943.096603][ T9845] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  943.134552][ T9845] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[  943.196179][ T9845] usb 4-1: config 4 interface 8 has no altsetting 0
[  943.238963][T14173] usb 6-1: Using ep0 maxpacket: 32
[  943.251689][T14173] usb 6-1: config 0 has an invalid interface number: 247 but max is 0
[  943.260252][ T9845] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[  943.269763][T14173] usb 6-1: config 0 has no interface number 0
[  943.279268][ T9845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.322988][T14173] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  943.340250][ T9845] usb 4-1: Product: syz
[  943.351208][ T9845] usb 4-1: Manufacturer: syz
[  943.363286][T14173] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  943.380513][ T9845] usb 4-1: SerialNumber: syz
[  943.416274][T14173] usb 6-1: Product: syz
[  943.433531][T14173] usb 6-1: Manufacturer: syz
[  943.459990][T14173] usb 6-1: config 0 descriptor??
[  943.505762][T16511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  943.600108][T16511] veth0_vlan: entered promiscuous mode
[  943.633083][T16511] veth1_vlan: entered promiscuous mode
[  943.641292][ T9845] opticon 4-1:4.8: opticon converter detected
[  943.662547][ T9845] usb 4-1: opticon converter now attached to ttyUSB0
[  943.683966][T14173] usb 6-1: USB disconnect, device number 18
[  943.719042][ T9845] usb 4-1: USB disconnect, device number 7
[  943.755860][ T9845] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  943.767425][T16511] veth0_macvtap: entered promiscuous mode
[  943.778163][ T9845] opticon 4-1:4.8: device disconnected
[  943.791081][T16511] veth1_macvtap: entered promiscuous mode
[  943.831922][T16511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  943.866210][T16511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  943.889376][T14174] IPVS: starting estimator thread 0...
[  943.915255][T16511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  943.928331][T16511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  943.937095][T16511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  943.945947][T16511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  943.987850][T16642] IPVS: using max 28 ests per chain, 67200 per kthread
[  943.992726][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3120'.
[  944.070525][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  944.114248][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  944.144035][ T9845] usb 2-1: USB disconnect, device number 22
[  944.222571][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  944.231484][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  944.352316][T16652] sctp: [Deprecated]: syz.4.3086 (pid 16652) Use of int in max_burst socket option deprecated.
[  944.352316][T16652] Use struct sctp_assoc_value instead
[  944.498102][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3124'.
[  944.658868][ T9845] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  944.901926][ T9845] usb 2-1: Using ep0 maxpacket: 16
[  944.922499][ T9845] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  944.981746][ T9845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  944.997438][ T9845] usb 2-1: config 0 has no interface number 0
[  945.013120][ T9845] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  945.026642][ T9845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.036747][ T9845] usb 2-1: Product: syz
[  945.044512][ T9845] usb 2-1: Manufacturer: syz
[  945.051671][ T9845] usb 2-1: SerialNumber: syz
[  945.070410][ T9845] usb 2-1: config 0 descriptor??
[  945.478939][T16681] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  945.503860][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  945.514847][T16681] netlink: 'syz.1.3122': attribute type 10 has an invalid length.
[  945.536439][T16681] 8021q: adding VLAN 0 to HW filter on device bond0
[  945.563862][T16681] team0: Port device bond0 added
[  945.585643][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  945.587860][T14164] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  945.893973][T14164] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  945.937908][T14164] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  946.154316][T14164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  946.230892][T14164] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  946.291697][T14164] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  946.316529][T14164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.563970][T16682] team0 (unregistering): Port device team_slave_0 removed
[  946.571299][T14164] usb 5-1: Product: syz
[  946.571326][T14164] usb 5-1: Manufacturer: syz
[  946.571343][T14164] usb 5-1: SerialNumber: syz
[  946.594014][T14164] usb 5-1: config 0 descriptor??
[  946.603908][T14164] xbox_remote_probe: Unexpected endpoint_in
[  946.778175][T16682] team0 (unregistering): Port device team_slave_1 removed
[  946.801624][T16682] team0 (unregistering): Port device bond0 removed
[  946.831552][T16686] lo: entered promiscuous mode
[  946.837320][T16686] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3133'.
[  946.846991][T16686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  946.885405][T16680] usb usb8: usbfs: process 16680 (syz.4.3131) did not claim interface 0 before use
[  946.909140][T16680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.918591][T16680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  947.267825][ T5892] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  947.427864][ T5892] usb 4-1: Using ep0 maxpacket: 16
[  947.435289][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  947.446154][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  947.551982][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  947.597629][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  947.631239][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  947.686395][ T5892] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  947.699735][ T5892] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  947.735798][ T5892] usb 4-1: Manufacturer: syz
[  947.776543][ T5892] usb 4-1: config 0 descriptor??
[  948.144688][ T5890] usb 2-1: USB disconnect, device number 23
[  948.300673][ T5892] rc_core: IR keymap rc-hauppauge not found
[  948.333098][ T5892] Registered IR keymap rc-empty
[  948.350888][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  948.387843][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  948.449352][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  948.525407][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62
[  948.654104][T16707] netlink: 'syz.1.3140': attribute type 1 has an invalid length.
[  948.672649][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  948.725583][T15574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  948.733948][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  948.742832][T15574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  948.756869][T15574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  948.766814][T14180] usb 5-1: USB disconnect, device number 43
[  948.776788][T15574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  948.785580][T15574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  948.828462][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  948.851151][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  948.878689][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  948.921164][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  948.968656][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  949.044649][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  949.078022][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  949.115786][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  949.139369][ T5892] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  949.168078][ T5892] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  949.241863][ T5892] usb 4-1: USB disconnect, device number 8
[  949.492011][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  949.936992][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  950.193019][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  950.464714][T16713] chnl_net:caif_netlink_parms(): no params data found
[  950.528104][T14164] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  950.757807][T14164] usb 2-1: Using ep0 maxpacket: 16
[  950.770130][T14164] usb 2-1: config 1 has an invalid interface number: 6 but max is 2
[  950.791692][T14164] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  950.827999][ T5148] Bluetooth: hci0: command tx timeout
[  950.923245][T14164] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  950.968777][T14164] usb 2-1: config 1 has no interface number 1
[  951.058271][T14164] usb 2-1: too many endpoints for config 1 interface 6 altsetting 1: 105, using maximum allowed: 30
[  951.073393][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  951.090830][T14164] usb 2-1: config 1 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 105
[  951.106848][T14164] usb 2-1: config 1 interface 6 has no altsetting 0
[  951.116961][T14164] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  951.150933][T14164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.305390][T14164] usb 2-1: Product: С
[  951.328099][T14164] usb 2-1: Manufacturer: ⠉
[  951.332948][T14164] usb 2-1: SerialNumber: 䵾슯ꋦ䝅爒襙ﱘꦡﴛற몌㞝瓫淵뫩׃釄휬쟗ᑋꤕ䲍듯딙੥퍨ﳠ矵歷꛿૤〺潗篽闱跉˜༌⭄ൊ岌☦ᯫ뀔
[  951.941731][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'.
[  952.066534][T14164] usb 2-1: 0:2 : does not exist
[  952.248451][T16713] bridge0: port 1(bridge_slave_0) entered blocking state
[  952.267018][T14164] usb 2-1: USB disconnect, device number 24
[  952.357936][T16713] bridge0: port 1(bridge_slave_0) entered disabled state
[  952.393096][T16713] bridge_slave_0: entered allmulticast mode
[  952.423632][T16713] bridge_slave_0: entered promiscuous mode
[  952.517533][T16713] bridge0: port 2(bridge_slave_1) entered blocking state
[  952.551876][T16713] bridge0: port 2(bridge_slave_1) entered disabled state
[  952.596603][T16713] bridge_slave_1: entered allmulticast mode
[  952.629890][T16713] bridge_slave_1: entered promiscuous mode
[  952.765577][T16713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  952.846982][T16713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  952.907971][ T5148] Bluetooth: hci0: command tx timeout
[  953.102277][ T5890] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  953.333414][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  953.372931][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  953.373778][T16713] team0: Port device team_slave_0 added
[  953.435469][ T1142] bridge_slave_1: left allmulticast mode
[  953.590561][ T1142] bridge_slave_1: left promiscuous mode
[  953.604040][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  953.641957][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.664832][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  953.699967][ T1142] bridge_slave_0: left allmulticast mode
[  953.705693][ T1142] bridge_slave_0: left promiscuous mode
[  953.759283][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  953.773424][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.788354][ T5888] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  953.801803][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.887244][ T5890] usb 5-1: Product: syz
[  953.904534][ T5890] usb 5-1: Manufacturer: syz
[  953.967900][ T5888] usb 6-1: Using ep0 maxpacket: 32
[  953.976392][ T5890] usb 5-1: SerialNumber: syz
[  953.984740][ T5888] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  954.002560][ T5888] usb 6-1: config 0 has no interface number 0
[  954.011213][ T5890] usb 5-1: config 0 descriptor??
[  954.039157][ T5888] usb 6-1: config 0 interface 85 has no altsetting 0
[  954.055501][ T5890] xbox_remote_probe: Unexpected endpoint_in
[  954.065300][ T5888] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  954.080553][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.117092][ T5888] usb 6-1: Product: syz
[  954.127209][ T5888] usb 6-1: Manufacturer: syz
[  954.147438][ T5888] usb 6-1: SerialNumber: syz
[  954.175907][ T5888] usb 6-1: config 0 descriptor??
[  954.199579][ T5888] appletouch 6-1:0.85: Could not find int-in endpoint
[  954.227018][ T5888] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[  954.244650][T16766] usb usb8: usbfs: process 16766 (syz.4.3151) did not claim interface 0 before use
[  954.263233][T16766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  954.277942][T16766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.314850][ T5888] usbhid 6-1:0.85: couldn't find an input interrupt endpoint
[  954.987997][ T5148] Bluetooth: hci0: command tx timeout
[  955.497752][ T1142] bond2 (unregistering): (slave gretap1): Releasing active interface
[  955.782394][ T5890] usb 5-1: USB disconnect, device number 44
[  956.155597][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  956.166309][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  956.177363][ T1142] bond0 (unregistering): Released all slaves
[  956.312925][ T1142] bond1 (unregistering): Released all slaves
[  956.328609][ T1142] bond2 (unregistering): Released all slaves
[  956.347925][T16713] team0: Port device team_slave_1 added
[  956.395495][T16808] vxcan3: entered promiscuous mode
[  956.641451][ T1142] : left promiscuous mode
[  956.712827][T16713] batman_adv: batadv0: Adding interface: batadv_slave_0
[  956.793408][T16713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  956.865857][T16713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  956.918614][ T5890] usb 6-1: USB disconnect, device number 19
[  956.959122][T16713] batman_adv: batadv0: Adding interface: batadv_slave_1
[  956.966140][T16713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  957.046770][T16713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  957.067995][ T5148] Bluetooth: hci0: command tx timeout
[  957.129145][ T1142] tipc: Left network mode
[  957.507120][T16829] syz.3.3170 (16829): drop_caches: 2
[  957.599850][T14173] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  957.670677][T16713] hsr_slave_0: entered promiscuous mode
[  957.680619][T16713] hsr_slave_1: entered promiscuous mode
[  957.698717][T16713] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  957.717856][ T5890] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  957.728661][T16713] Cannot create hsr debugfs directory
[  957.789095][T14173] usb 6-1: Using ep0 maxpacket: 32
[  957.830968][T14173] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  957.857825][T14173] usb 6-1: config 0 has no interface number 0
[  957.868686][T14174] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  957.901105][ T5890] usb 5-1: Using ep0 maxpacket: 8
[  957.906543][T14173] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  957.957898][ T5890] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  958.017287][ T5890] usb 5-1: config 0 has no interface number 0
[  958.034368][T14173] usb 6-1: config 0 interface 85 has no altsetting 0
[  958.090068][ T5890] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  958.178564][T14173] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  958.221978][T14174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  958.243794][T14173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.277345][ T1142] hsr_slave_0: left promiscuous mode
[  958.287774][ T5890] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  958.310920][T14174] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  958.327730][T14173] usb 6-1: Product: syz
[  958.331944][T14173] usb 6-1: Manufacturer: syz
[  958.340480][ T1142] hsr_slave_1: left promiscuous mode
[  958.354552][ T5890] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 56, changing to 9
[  958.367053][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  958.374765][T14174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  958.396168][T14173] usb 6-1: SerialNumber: syz
[  958.410298][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  958.429197][ T5890] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 8568, setting to 1024
[  958.441661][T14173] usb 6-1: config 0 descriptor??
[  958.460061][T14174] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  958.530744][ T1142] pimreg (unregistering): left allmulticast mode
[  958.538151][ T5890] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  958.607109][T14174] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  958.664375][ T5890] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  958.674424][T14174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.725509][T14174] usb 2-1: Product: syz
[  958.732315][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.740628][T14174] usb 2-1: Manufacturer: syz
[  958.746480][T14174] usb 2-1: SerialNumber: syz
[  958.769972][ T5890] usb 5-1: config 0 descriptor??
[  958.785331][T14174] usb 2-1: config 0 descriptor??
[  958.804693][ T5890] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  958.827009][T14174] xbox_remote_probe: Unexpected endpoint_in
[  959.046526][T16842] usb usb8: usbfs: process 16842 (syz.1.3171) did not claim interface 0 before use
[  959.070083][T16842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  959.103204][T16842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  959.231261][T14180] usb 5-1: USB disconnect, device number 45
[  959.233415][T16857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  959.249700][T14180] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  959.318235][T16857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  959.356503][T14173] appletouch 6-1:0.85: Geyser mode initialized.
[  959.399811][T14173] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input63
[  959.466164][    C1] appletouch 6-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  959.921330][ T5888] usb 6-1: USB disconnect, device number 20
[  960.029527][ T5888] appletouch 6-1:0.85: input: appletouch disconnected
[  960.316538][ T1142] team0 (unregistering): Port device team_slave_1 removed
[  960.364759][ T1142] team0 (unregistering): Port device team_slave_0 removed
[  961.099396][T16868] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  961.105966][T16868] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  961.176269][T16868] vhci_hcd vhci_hcd.0: Device attached
[  961.284984][T14180] usb 2-1: USB disconnect, device number 25
[  961.348177][T14173] vhci_hcd: vhci_device speed not set
[  961.398089][T14164] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  961.435367][T14173] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  961.547471][T14164] usb 6-1: device descriptor read/64, error -71
[  961.789789][T14164] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  961.950860][T14164] usb 6-1: device descriptor read/64, error -71
[  962.063526][T14164] usb usb6-port1: attempt power cycle
[  962.242978][ T1142] IPVS: stop unused estimator thread 0...
[  962.248963][T14180] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  962.260455][ T5890] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  962.410152][T14180] usb 5-1: Using ep0 maxpacket: 16
[  962.421346][ T5890] usb 4-1: Using ep0 maxpacket: 8
[  962.430642][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  962.431698][T14164] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  962.448311][T14180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  962.452149][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  962.475082][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  962.478399][T14180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  962.487998][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  962.512547][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  962.522498][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.553158][T14180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  962.563991][T14164] usb 6-1: device descriptor read/8, error -71
[  962.588143][T14180] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  962.608924][T14180] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  962.640113][T14180] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  962.651396][T14180] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  962.677945][T14180] usb 5-1: Manufacturer: syz
[  962.686030][T14180] usb 5-1: config 0 descriptor??
[  962.849500][T14164] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  962.889094][T14164] usb 6-1: device descriptor read/8, error -71
[  962.973677][ T5890] usb 4-1: GET_CAPABILITIES returned 0
[  962.988741][T14180] rc_core: IR keymap rc-hauppauge not found
[  962.994707][T14180] Registered IR keymap rc-empty
[  962.999978][ T5890] usbtmc 4-1:16.0: can't read capabilities
[  963.028160][T14164] usb usb6-port1: unable to enumerate USB device
[  963.039473][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.069885][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.119596][T14180] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  963.179561][T16713] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  963.226738][T14180] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input64
[  963.243903][T16713] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  963.267420][T16713] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  963.310189][T16713] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  963.335642][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.360936][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.447897][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.507956][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.618050][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.688715][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.754820][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.844416][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.897983][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.959033][T14180] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  963.995528][T16713] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.029909][T14180] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  964.053136][T14180] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  964.061840][ T5892] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  964.114767][T16713] 8021q: adding VLAN 0 to HW filter on device team0
[  964.124937][T14180] usb 5-1: USB disconnect, device number 46
[  964.165980][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.173153][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.204520][T16869] vhci_hcd: connection reset by peer
[  964.240998][ T5892] usb 2-1: Using ep0 maxpacket: 16
[  964.250854][   T12] vhci_hcd: stop threads
[  964.255155][   T12] vhci_hcd: release socket
[  964.278148][   T12] vhci_hcd: disconnect device
[  964.294783][ T5892] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  964.335271][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  964.383207][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.390521][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  964.412561][ T5892] usb 2-1: config 0 has no interface number 0
[  964.424125][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  964.480621][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.545435][ T5892] usb 2-1: Product: syz
[  964.580968][ T5892] usb 2-1: Manufacturer: syz
[  964.605955][ T5892] usb 2-1: SerialNumber: syz
[  964.649528][ T5892] usb 2-1: config 0 descriptor??
[  964.739268][T16713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  964.791390][T16925] lo: left promiscuous mode
[  964.933606][ T5892] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  964.968492][ T5892] usb 2-1: No valid video chain found.
[  964.975584][T16931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3187'.
[  965.188164][ T9845] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  965.236443][T16925] bridge0: port 2(bridge_slave_1) entered disabled state
[  965.244041][T16925] bridge0: port 1(bridge_slave_0) entered disabled state
[  965.392690][ T9845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  965.419640][ T9845] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  965.511167][ T9845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  965.583851][T16925] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  965.617082][ T9845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  965.653256][T16925] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  965.653265][ T9845] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  965.670743][ T9845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.680140][ T9845] usb 5-1: Product: syz
[  965.693398][ T9845] usb 5-1: Manufacturer: syz
[  965.701827][ T5892] usb 4-1: USB disconnect, device number 9
[  965.706170][ T9845] usb 5-1: SerialNumber: syz
[  965.785359][ T9845] usb 5-1: config 0 descriptor??
[  965.829609][ T9845] xbox_remote_probe: Unexpected endpoint_in
[  965.970864][T16925] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  965.993183][T16942] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  966.038404][T16929] usb usb8: usbfs: process 16929 (syz.4.3186) did not claim interface 0 before use
[  966.051618][T16929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.061023][T16929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.070155][T16925] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  966.107774][T16925] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  966.150618][T16925] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  966.250786][T16713] veth0_vlan: entered promiscuous mode
[  966.345818][T16713] veth1_vlan: entered promiscuous mode
[  966.404701][T16713] veth0_macvtap: entered promiscuous mode
[  966.426794][T16713] veth1_macvtap: entered promiscuous mode
[  966.466040][T16713] batman_adv: batadv0: Interface activated: batadv_slave_0
[  966.589924][T16713] batman_adv: batadv0: Interface activated: batadv_slave_1
[  966.640640][T14173] vhci_hcd: vhci_device speed not set
[  966.656531][T16713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  966.687880][T16713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  966.702255][T16713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  966.712472][T16713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  966.914247][T14180] usb 2-1: USB disconnect, device number 26
[  967.886288][T10349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  967.968342][T14173] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  968.137909][T14173] usb 2-1: Using ep0 maxpacket: 16
[  968.163669][T14173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  968.214736][T14173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  968.244405][T14173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  968.299126][T14173] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  968.309290][T14173] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  968.324762][T14173] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  968.338550][T14173] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  968.346828][T14173] usb 2-1: Manufacturer: syz
[  968.374169][T14173] usb 2-1: config 0 descriptor??
[  968.423513][T10349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.657014][T14174] usb 5-1: USB disconnect, device number 47
[  968.920852][T10349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.978269][T14173] rc_core: IR keymap rc-hauppauge not found
[  968.984317][T14173] Registered IR keymap rc-empty
[  968.995873][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.014201][T16982] sch_tbf: burst 32852 is lower than device lo mtu (65550) !
[  969.038817][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.092015][T14173] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  969.256993][T14173] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input65
[  969.372693][T10349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.457986][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.534899][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.568936][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.642489][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.734542][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.777931][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.817924][ T5890] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  969.858026][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.908999][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  969.967271][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  970.007914][ T5890] usb 6-1: Using ep0 maxpacket: 8
[  970.017166][T14173] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  970.027172][ T5890] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  970.123377][T14173] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  970.138115][T10349] bridge_slave_1: left allmulticast mode
[  970.188224][ T5890] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  970.227778][T10349] bridge_slave_1: left promiscuous mode
[  970.247179][T14173] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  970.274329][T10349] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.286997][ T5890] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  970.351599][ T5890] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  970.367832][T14173] usb 2-1: USB disconnect, device number 27
[  970.384390][ T5890] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  970.429961][T10349] bridge_slave_0: left allmulticast mode
[  970.447743][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.479845][T10349] bridge_slave_0: left promiscuous mode
[  970.500509][T10349] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.523448][T15574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  970.534103][T15574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  970.548178][T15574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  970.563572][T15574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  970.579776][T15574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  970.934942][ T5890] usb 6-1: GET_CAPABILITIES returned 0
[  970.945706][ T5890] usbtmc 6-1:16.0: can't read capabilities
[  972.500094][T10349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  972.535889][T10349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  972.562545][T10349] bond0 (unregistering): Released all slaves
[  972.687927][ T5148] Bluetooth: hci0: command tx timeout
[  972.928425][T14176] usb 6-1: USB disconnect, device number 25
[  973.481378][T17064] vxcan3: entered promiscuous mode
[  973.901260][T10349] hsr_slave_0: left promiscuous mode
[  973.929111][T10349] hsr_slave_1: left promiscuous mode
[  973.959074][T10349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  973.989436][T10349] batman_adv: batadv0: Removing interface: batadv_slave_0
[  974.070131][T10349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  974.092340][T10349] batman_adv: batadv0: Removing interface: batadv_slave_1
[  974.200300][T10349] veth1_macvtap: left promiscuous mode
[  974.210617][T10349] veth0_macvtap: left promiscuous mode
[  974.216466][T10349] veth1_vlan: left promiscuous mode
[  974.225702][T10349] veth0_vlan: left promiscuous mode
[  974.745504][T10349] team0 (unregistering): Port device team_slave_1 removed
[  974.753044][ T5148] Bluetooth: hci0: command tx timeout
[  974.805158][T10349] team0 (unregistering): Port device team_slave_0 removed
[  975.496661][T17078] sch_tbf: burst 32852 is lower than device lo mtu (65550) !
[  976.011014][T17017] chnl_net:caif_netlink_parms(): no params data found
[  976.097828][ T5891] usb 5-1: new low-speed USB device number 48 using dummy_hcd
[  976.151142][ T5892] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  976.281775][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  976.296235][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  976.330676][ T5892] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  976.351202][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  976.366589][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  976.389213][ T5892] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  976.407838][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.416180][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  976.435396][ T5892] usb 4-1: Product: syz
[  976.441715][ T5892] usb 4-1: Manufacturer: syz
[  976.447503][ T5892] usb 4-1: SerialNumber: syz
[  976.453210][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  976.461889][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  976.508802][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  976.547783][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  976.594784][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  976.634207][T10349] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  976.669174][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  976.676748][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  976.696011][T10349] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.717860][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  976.772620][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  976.821123][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  976.838047][ T5148] Bluetooth: hci0: command tx timeout
[  976.883211][ T5891] usb 5-1: string descriptor 0 read error: -22
[  976.891960][ T5891] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  976.967462][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.015735][ T5891] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  977.109409][T10349] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  977.148236][T14180] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  977.156500][T10349] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.238912][T17096] usb 5-1: Couldn't submit interrupt_out_urb -90
[  977.318018][T14180] usb 6-1: Using ep0 maxpacket: 16
[  977.330153][T14180] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  977.348113][T14180] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  977.359619][T14180] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  977.369781][T14180] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  977.380010][T14180] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  977.397399][T14180] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  977.454586][T14180] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  977.480389][T14180] usb 6-1: Manufacturer: syz
[  977.498849][T14180] usb 6-1: config 0 descriptor??
[  977.556241][T10349] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  977.582725][T10349] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.670019][T17017] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.679899][T17017] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.697741][T17017] bridge_slave_0: entered allmulticast mode
[  977.747973][T17017] bridge_slave_0: entered promiscuous mode
[  977.780307][T17017] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.790033][T17017] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.797461][T17017] bridge_slave_1: entered allmulticast mode
[  977.875725][T17017] bridge_slave_1: entered promiscuous mode
[  977.898440][T14180] rc_core: IR keymap rc-hauppauge not found
[  977.915608][T14180] Registered IR keymap rc-empty
[  977.979253][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.013221][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.040193][T14180] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  978.056194][T14180] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input66
[  978.090380][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.117823][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.148988][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.170614][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.226190][T10349] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  978.228169][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.245466][T10349] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.313230][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.366713][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.398929][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.489482][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.528037][T14180] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  978.559694][T14180] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  978.579264][T17017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.598543][T14180] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  978.632212][T17017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.664081][T14180] usb 6-1: USB disconnect, device number 26
[  978.891935][ T5892] cdc_ncm 4-1:1.0: bind() failure
[  978.892490][T17017] team0: Port device team_slave_0 added
[  978.903341][ T5892] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  978.906775][ T5892] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  978.920028][T15574] Bluetooth: hci0: command tx timeout
[  978.944242][T17017] team0: Port device team_slave_1 added
[  978.952422][ T5892] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  978.979160][ T5892] usb 4-1: USB disconnect, device number 10
[  979.233546][T17017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  979.243527][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  979.275557][T17017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  979.352458][T17017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  979.370635][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  979.581199][T17017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  979.828401][T10349] bridge_slave_1: left allmulticast mode
[  979.842406][T10349] bridge_slave_1: left promiscuous mode
[  979.851229][T14176] usb 5-1: USB disconnect, device number 48
[  979.867770][T15574] Bluetooth: hci2: command 0x0406 tx timeout
[  979.913784][T10349] bridge0: port 2(bridge_slave_1) entered disabled state
[  980.137100][T10349] bridge_slave_0: left allmulticast mode
[  980.174780][T10349] bridge_slave_0: left promiscuous mode
[  980.218732][T10349] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.247792][ T5891] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  982.397780][ T5891] usb 5-1: Using ep0 maxpacket: 16
[  982.414572][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  982.437810][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  982.472439][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  982.506902][T10349] tipc: Resetting bearer <eth:gre0>
[  982.512337][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  982.548466][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  982.600721][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  982.628420][ T5891] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  982.655708][ T5891] usb 5-1: Manufacturer: syz
[  982.688206][ T5891] usb 5-1: config 0 descriptor??
[  982.757405][T17186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3233'.
[  982.980955][T10349] tipc: Disabling bearer <eth:gre0>
[  982.988045][ T5891] rc_core: IR keymap rc-hauppauge not found
[  983.003687][ T5891] Registered IR keymap rc-empty
[  983.055631][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.087863][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.122232][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  983.233075][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input67
[  983.255073][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.278030][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.308382][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.328256][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.353601][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.378063][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.411789][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.438537][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.457877][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.486260][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  983.552272][ T5891] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  983.580762][ T5891] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  983.596918][ T5891] usb 5-1: USB disconnect, device number 49
[  983.895315][T10349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  983.910416][T10349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  983.921625][T10349] bond0 (unregistering): Released all slaves
[  983.947503][T10349] bond1 (unregistering): Released all slaves
[  984.025449][T17201] FAULT_INJECTION: forcing a failure.
[  984.025449][T17201] name failslab, interval 1, probability 0, space 0, times 0
[  984.067831][T17201] CPU: 1 UID: 0 PID: 17201 Comm: syz.4.3236 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  984.067862][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  984.067875][T17201] Call Trace:
[  984.067884][T17201]  <TASK>
[  984.067894][T17201]  dump_stack_lvl+0x189/0x250
[  984.067931][T17201]  ? __pfx____ratelimit+0x10/0x10
[  984.067958][T17201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  984.067994][T17201]  ? __pfx__printk+0x10/0x10
[  984.068023][T17201]  ? __pfx___might_resched+0x10/0x10
[  984.068050][T17201]  ? fs_reclaim_acquire+0x7d/0x100
[  984.068077][T17201]  should_fail_ex+0x414/0x560
[  984.068110][T17201]  should_failslab+0xa8/0x100
[  984.068144][T17201]  __kmalloc_noprof+0xcb/0x4f0
[  984.068173][T17201]  ? ethnl_default_notify+0x1cd/0x990
[  984.068201][T17201]  ethnl_default_notify+0x1cd/0x990
[  984.068230][T17201]  ? __pfx_ethnl_default_notify+0x10/0x10
[  984.068271][T17201]  ? mutex_is_locked+0x17/0x50
[  984.068297][T17201]  ? rtnl_is_locked+0x15/0x20
[  984.068323][T17201]  ethnl_default_set_doit+0x64e/0xa20
[  984.068357][T17201]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  984.068384][T17201]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  984.068420][T17201]  genl_family_rcv_msg_doit+0x215/0x300
[  984.068454][T17201]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  984.068495][T17201]  ? bpf_lsm_capable+0x9/0x20
[  984.068523][T17201]  ? security_capable+0x7e/0x2e0
[  984.068558][T17201]  genl_rcv_msg+0x60e/0x790
[  984.068591][T17201]  ? __pfx_genl_rcv_msg+0x10/0x10
[  984.068614][T17201]  ? ref_tracker_free+0x63a/0x7d0
[  984.068642][T17201]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  984.068673][T17201]  ? __pfx_ref_tracker_free+0x10/0x10
[  984.068715][T17201]  netlink_rcv_skb+0x205/0x470
[  984.068749][T17201]  ? __pfx_genl_rcv_msg+0x10/0x10
[  984.068776][T17201]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  984.068828][T17201]  ? down_read+0x1ad/0x2e0
[  984.068861][T17201]  genl_rcv+0x28/0x40
[  984.068883][T17201]  netlink_unicast+0x758/0x8d0
[  984.068926][T17201]  netlink_sendmsg+0x805/0xb30
[  984.068958][T17201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  984.068982][T17201]  ? aa_sock_msg_perm+0x94/0x160
[  984.069012][T17201]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  984.069035][T17201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  984.069057][T17201]  __sock_sendmsg+0x219/0x270
[  984.069087][T17201]  ____sys_sendmsg+0x505/0x830
[  984.069116][T17201]  ? __pfx_____sys_sendmsg+0x10/0x10
[  984.069149][T17201]  ? import_iovec+0x74/0xa0
[  984.069176][T17201]  ___sys_sendmsg+0x21f/0x2a0
[  984.069201][T17201]  ? __pfx____sys_sendmsg+0x10/0x10
[  984.069265][T17201]  ? __fget_files+0x2a/0x420
[  984.069285][T17201]  ? __fget_files+0x3a0/0x420
[  984.069317][T17201]  __x64_sys_sendmsg+0x19b/0x260
[  984.069355][T17201]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  984.069387][T17201]  ? __pfx_ksys_write+0x10/0x10
[  984.069411][T17201]  ? rcu_is_watching+0x15/0xb0
[  984.069444][T17201]  ? do_syscall_64+0xbe/0x3b0
[  984.069475][T17201]  do_syscall_64+0xfa/0x3b0
[  984.069499][T17201]  ? lockdep_hardirqs_on+0x9c/0x150
[  984.069523][T17201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.069543][T17201]  ? clear_bhb_loop+0x60/0xb0
[  984.069568][T17201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.069588][T17201] RIP: 0033:0x7f1b1898e969
[  984.069606][T17201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  984.069624][T17201] RSP: 002b:00007f1b19755038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  984.069646][T17201] RAX: ffffffffffffffda RBX: 00007f1b18bb5fa0 RCX: 00007f1b1898e969
[  984.069661][T17201] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  984.069680][T17201] RBP: 00007f1b19755090 R08: 0000000000000000 R09: 0000000000000000
[  984.069693][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  984.069705][T17201] R13: 0000000000000000 R14: 00007f1b18bb5fa0 R15: 00007f1b18cdfa28
[  984.069738][T17201]  </TASK>
[  984.857633][T10349] : left promiscuous mode
[  985.035015][T17017] hsr_slave_0: entered promiscuous mode
[  985.101431][T17017] hsr_slave_1: entered promiscuous mode
[  985.131077][T17017] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  985.143828][T17017] Cannot create hsr debugfs directory
[  985.153730][T10349] tipc: Left network mode
[  985.177759][T14180] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  985.338717][T14180] usb 5-1: Using ep0 maxpacket: 32
[  985.362990][T14180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  985.380289][T14180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  985.397988][ T5890] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  985.428610][T14180] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  985.501636][T14180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  985.547887][T14180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  985.574009][T14180] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  985.584601][T14180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.591701][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  985.604836][T14180] usb 5-1: Product: syz
[  985.609087][T14180] usb 5-1: Manufacturer: syz
[  985.613717][T14180] usb 5-1: SerialNumber: syz
[  985.653495][ T5890] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  985.667054][T14180] usb 5-1: config 0 descriptor??
[  985.672932][ T5890] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  985.708041][T14180] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input68
[  985.725856][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.795043][ T5890] usb 6-1: config 0 descriptor??
[  985.835482][ T5890] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  985.864977][T10349] hsr_slave_0: left promiscuous mode
[  985.877473][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[  985.912823][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  985.918618][T14180] usb 5-1: USB disconnect, device number 50
[  985.948607][T10349] hsr_slave_1: left promiscuous mode
[  985.978773][ T5890] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  985.985920][ T5890] usb 6-1: media controller created
[  986.008478][T10349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  986.028328][T10349] batman_adv: batadv0: Removing interface: batadv_slave_0
[  986.055487][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  986.103046][ T5890] dvb-usb: bulk message failed: -22 (6/0)
[  986.121369][T10349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  986.135222][ T5890] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  986.169495][T10349] batman_adv: batadv0: Removing interface: batadv_slave_1
[  986.200233][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input69
[  986.295472][ T5890] dvb-usb: schedule remote query interval to 150 msecs.
[  986.313228][ T5890] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  986.340934][T17234] PKCS7: Unknown OID: [5] (bad)
[  986.346298][T17234] PKCS7: Only support pkcs7_signedData type
[  986.386426][T10349] veth0_macvtap: left promiscuous mode
[  986.457503][T17237] usb usb8: usbfs: process 17237 (syz.1.3245) did not claim interface 0 before use
[  986.483623][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  986.483875][T10349] veth1_vlan: left promiscuous mode
[  986.501062][ T5890] dvb-usb: error while querying for an remote control event.
[  986.507942][ T5891] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  986.518277][T10349] veth0_vlan: left promiscuous mode
[  986.707830][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  986.715888][ T5890] dvb-usb: error while querying for an remote control event.
[  986.748221][ T5891] usb 4-1: Using ep0 maxpacket: 16
[  986.756099][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  987.014228][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  987.026309][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  987.031103][ T5890] dvb-usb: error while querying for an remote control event.
[  987.063165][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  987.083653][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  987.107713][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  987.124043][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  987.147755][ T5891] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  987.156080][ T5891] usb 4-1: Manufacturer: syz
[  987.179000][ T5891] usb 4-1: config 0 descriptor??
[  987.349878][T14176] dvb-usb: bulk message failed: -22 (1/0)
[  987.355820][T14176] dvb-usb: error while querying for an remote control event.
[  987.390738][T14163] usb 6-1: USB disconnect, device number 27
[  987.428376][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'.
[  987.536908][T14163] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  987.627984][ T5891] rc_core: IR keymap rc-hauppauge not found
[  987.633943][ T5891] Registered IR keymap rc-empty
[  987.654292][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  987.687844][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  987.720536][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  987.804348][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70
[  987.852359][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  987.887954][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  987.934702][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  987.979461][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  988.005391][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  988.055479][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  988.077881][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  988.097853][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  988.138510][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  988.167839][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  988.192018][ T5891] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  988.200973][ T5891] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  988.236346][ T5891] usb 4-1: USB disconnect, device number 11
[  988.298635][T17256] sctp: [Deprecated]: syz.3.3250 (pid 17256) Use of int in max_burst socket option deprecated.
[  988.298635][T17256] Use struct sctp_assoc_value instead
[  988.507753][   T30] audit: type=1326 audit(1748796330.010:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c392ab39 code=0x7ffc0000
[  988.560161][   T30] audit: type=1326 audit(1748796330.010:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c392ab39 code=0x7ffc0000
[  988.617816][   T30] audit: type=1326 audit(1748796330.010:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c398e969 code=0x7ffc0000
[  988.649075][   T30] audit: type=1326 audit(1748796330.010:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c392ab39 code=0x7ffc0000
[  988.672055][   T30] audit: type=1326 audit(1748796330.010:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c392ab39 code=0x7ffc0000
[  988.702225][   T30] audit: type=1326 audit(1748796330.010:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c392ab39 code=0x7ffc0000
[  988.775493][T10349] team0 (unregistering): Port device team_slave_1 removed
[  988.812093][   T30] audit: type=1326 audit(1748796330.010:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c398e969 code=0x7ffc0000
[  988.926657][   T30] audit: type=1326 audit(1748796330.010:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c392ab39 code=0x7ffc0000
[  988.975700][T10349] team0 (unregistering): Port device team_slave_0 removed
[  989.014102][   T30] audit: type=1326 audit(1748796330.010:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c392ab39 code=0x7ffc0000
[  989.046639][   T30] audit: type=1326 audit(1748796330.010:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.3.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c392ab39 code=0x7ffc0000
[  991.003732][T17283] syzkaller1: entered promiscuous mode
[  991.028767][T17283] syzkaller1: entered allmulticast mode
[  991.244989][T14176] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  991.454504][T14176] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[  991.570836][T14176] usb 5-1: config 8 has no interface number 0
[  991.617854][T14176] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  991.745331][T14176] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64
[  991.900617][T14176] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  991.942073][T14176] usb 5-1: config 8 interface 177 has no altsetting 0
[  991.974851][T14176] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  992.133366][T14176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.282524][T17290] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  992.515866][T14176] usb 5-1: string descriptor 0 read error: -71
[  992.553374][T14176] ir_toy 5-1:8.177: required endpoints not found
[  992.641002][T14176] usb 5-1: USB disconnect, device number 51
[  993.007930][ T5890] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  993.152383][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  993.159049][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  993.176914][T17017] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  993.197051][ T5890] usb 4-1: not running at top speed; connect to a high speed hub
[  993.216833][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  993.222216][T17017] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  993.244826][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  993.253405][ T5890] usb 4-1: Product: ࡡ
[  993.257605][ T5890] usb 4-1: Manufacturer: 蓮ᇷ꣪睅胲䄷做돌ꂽٔ캗稘䍚耻唎꺾贚䚡윚뽿룃罦ｿⴌन偌氞뾄賑ﯷፇ麩山扗ሳ₊ၖ뇳⮯颾김ퟏꤨ頕刂爬杊ﳾ퉟ۯ싲Ⲝ弹濡ᥔ㇈஬曽ஜ婒渴梣鯶잫牗Ҽ클⻎뻓럯갼叁÷
[  993.289107][ T5890] usb 4-1: SerialNumber: 㐉
[  993.313120][T17335] sctp: [Deprecated]: syz.4.3268 (pid 17335) Use of int in max_burst socket option deprecated.
[  993.313120][T17335] Use struct sctp_assoc_value instead
[  993.335466][T17017] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  993.406550][T17017] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  993.729049][T17344] FAULT_INJECTION: forcing a failure.
[  993.729049][T17344] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  993.744441][ T5890] cdc_ncm 4-1:1.0: bind() failure
[  993.753035][ T5890] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  993.760114][T17344] CPU: 0 UID: 0 PID: 17344 Comm: syz.1.3270 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  993.760135][T17344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  993.760144][T17344] Call Trace:
[  993.760151][T17344]  <TASK>
[  993.760157][T17344]  dump_stack_lvl+0x189/0x250
[  993.760184][T17344]  ? __pfx____ratelimit+0x10/0x10
[  993.760203][T17344]  ? __pfx_dump_stack_lvl+0x10/0x10
[  993.760225][T17344]  ? __pfx__printk+0x10/0x10
[  993.760249][T17344]  should_fail_ex+0x414/0x560
[  993.760273][T17344]  _copy_to_user+0x31/0xb0
[  993.760290][T17344]  simple_read_from_buffer+0xe1/0x170
[  993.760316][T17344]  proc_fail_nth_read+0x1df/0x250
[  993.760334][T17344]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  993.760352][T17344]  ? rw_verify_area+0x258/0x650
[  993.760372][T17344]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  993.760388][T17344]  vfs_read+0x200/0x980
[  993.760411][T17344]  ? __pfx___mutex_lock+0x10/0x10
[  993.760432][T17344]  ? __pfx_vfs_read+0x10/0x10
[  993.760452][T17344]  ? __fget_files+0x2a/0x420
[  993.760469][T17344]  ? __fget_files+0x3a0/0x420
[  993.760481][T17344]  ? __fget_files+0x2a/0x420
[  993.760501][T17344]  ksys_read+0x145/0x250
[  993.760522][T17344]  ? __pfx_ksys_read+0x10/0x10
[  993.760550][T17344]  do_syscall_64+0xfa/0x3b0
[  993.760569][T17344]  ? lockdep_hardirqs_on+0x9c/0x150
[  993.760586][T17344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.760600][T17344]  ? clear_bhb_loop+0x60/0xb0
[  993.760618][T17344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.760632][T17344] RIP: 0033:0x7f978338d37c
[  993.760645][T17344] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  993.760658][T17344] RSP: 002b:00007f978414e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  993.760673][T17344] RAX: ffffffffffffffda RBX: 00007f97835b5fa0 RCX: 00007f978338d37c
[  993.760684][T17344] RDX: 000000000000000f RSI: 00007f978414e0a0 RDI: 0000000000000004
[  993.760693][T17344] RBP: 00007f978414e090 R08: 0000000000000000 R09: 0000000000000000
[  993.760702][T17344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  993.760723][T17344] R13: 0000000000000000 R14: 00007f97835b5fa0 R15: 00007f97836dfa28
[  993.760749][T17344]  </TASK>
[  993.761400][ T5890] cdc_ncm 4-1:1.1: bind() failure
[  994.071760][ T5890] usb 4-1: USB disconnect, device number 12
[  994.392917][T17017] 8021q: adding VLAN 0 to HW filter on device bond0
[  994.481095][T17017] 8021q: adding VLAN 0 to HW filter on device team0
[  994.538187][T15845] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.545347][T15845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  994.619370][T15845] bridge0: port 2(bridge_slave_1) entered blocking state
[  994.626596][T15845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  995.232005][T17017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  995.392839][T17017] veth0_vlan: entered promiscuous mode
[  995.404735][T17017] veth1_vlan: entered promiscuous mode
[  995.443416][T17017] veth0_macvtap: entered promiscuous mode
[  995.508342][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  995.524207][T17017] veth1_macvtap: entered promiscuous mode
[  995.574020][T17377] FAULT_INJECTION: forcing a failure.
[  995.574020][T17377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  995.589598][T17017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  995.604961][T17017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  995.650436][T17377] CPU: 1 UID: 0 PID: 17377 Comm: syz.5.3276 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  995.650467][T17377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  995.650481][T17377] Call Trace:
[  995.650490][T17377]  <TASK>
[  995.650499][T17377]  dump_stack_lvl+0x189/0x250
[  995.650536][T17377]  ? __pfx____ratelimit+0x10/0x10
[  995.650563][T17377]  ? __pfx_dump_stack_lvl+0x10/0x10
[  995.650594][T17377]  ? __pfx__printk+0x10/0x10
[  995.650630][T17377]  should_fail_ex+0x414/0x560
[  995.650663][T17377]  _copy_to_user+0x31/0xb0
[  995.650689][T17377]  simple_read_from_buffer+0xe1/0x170
[  995.650726][T17377]  proc_fail_nth_read+0x1df/0x250
[  995.650765][T17377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  995.650791][T17377]  ? rw_verify_area+0x258/0x650
[  995.650817][T17377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  995.650841][T17377]  vfs_read+0x200/0x980
[  995.650874][T17377]  ? __pfx___mutex_lock+0x10/0x10
[  995.650901][T17377]  ? __pfx_vfs_read+0x10/0x10
[  995.650930][T17377]  ? __fget_files+0x2a/0x420
[  995.650954][T17377]  ? __fget_files+0x3a0/0x420
[  995.650972][T17377]  ? __fget_files+0x2a/0x420
[  995.651001][T17377]  ksys_read+0x145/0x250
[  995.651031][T17377]  ? __pfx_ksys_read+0x10/0x10
[  995.651056][T17377]  ? rcu_is_watching+0x15/0xb0
[  995.651088][T17377]  ? do_syscall_64+0xbe/0x3b0
[  995.651118][T17377]  do_syscall_64+0xfa/0x3b0
[  995.651143][T17377]  ? lockdep_hardirqs_on+0x9c/0x150
[  995.651167][T17377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.651187][T17377]  ? clear_bhb_loop+0x60/0xb0
[  995.651211][T17377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.651231][T17377] RIP: 0033:0x7f7c8298d37c
[  995.651249][T17377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  995.651267][T17377] RSP: 002b:00007f7c837d0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  995.651288][T17377] RAX: ffffffffffffffda RBX: 00007f7c82bb6080 RCX: 00007f7c8298d37c
[  995.651303][T17377] RDX: 000000000000000f RSI: 00007f7c837d00a0 RDI: 0000000000000004
[  995.651315][T17377] RBP: 00007f7c837d0090 R08: 0000000000000000 R09: 0000000000000000
[  995.651327][T17377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  995.651349][T17377] R13: 0000000000000001 R14: 00007f7c82bb6080 R15: 00007f7c82cdfa28
[  995.651380][T17377]  </TASK>
[  995.653203][T17017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  996.013528][ T5892] usb 4-1: Using ep0 maxpacket: 16
[  996.098205][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  996.117751][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  996.167775][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  996.202745][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  996.227068][T17017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  996.243291][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  996.267043][T17017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  996.295410][T17017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  996.306634][ T5892] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  996.376802][ T5892] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  996.527725][ T5892] usb 4-1: Manufacturer: syz
[  996.563290][ T5892] usb 4-1: config 0 descriptor??
[  996.637829][T14163] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  996.840023][T14163] usb 6-1: config 0 has no interfaces?
[  996.853792][T14163] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  996.865975][T14163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.874327][T14163] usb 6-1: Product: syz
[  996.886740][T14163] usb 6-1: Manufacturer: syz
[  996.904701][T14163] usb 6-1: SerialNumber: syz
[  997.014495][ T5892] rc_core: IR keymap rc-hauppauge not found
[  997.048488][ T5892] Registered IR keymap rc-empty
[  997.149417][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.158716][T14163] usb 6-1: config 0 descriptor??
[  997.210386][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.240933][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  997.260387][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  997.291289][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  997.306443][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input74
[  997.353459][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.398150][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.423105][T17390] program syz.5.3279 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  997.461951][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  997.471854][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  997.479510][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.502698][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.521274][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.537909][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.568740][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.597914][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.636217][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.652629][ T5892] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  997.672407][ T5892] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  997.672428][ T5892] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  997.675374][ T5892] usb 4-1: USB disconnect, device number 13
[  997.775158][T17406] loop8: detected capacity change from 0 to 16384
[  998.086458][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3283'.
[  998.116143][T17419] bridge0: port 3(vlan2) entered blocking state
[  998.117080][T17410] syz.0.3137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  998.146302][T17419] bridge0: port 3(vlan2) entered disabled state
[  998.163172][T17419] vlan2: entered allmulticast mode
[  998.180339][T17419] bridge0: entered allmulticast mode
[  998.258879][T17410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3137'.
[  998.443972][T17419] vlan2: left allmulticast mode
[  998.485209][T17419] bridge0: left allmulticast mode
[  998.518001][ T5892] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  998.811722][ T5892] usb 4-1: not running at top speed; connect to a high speed hub
[  998.823427][ T5892] usb 4-1: config 1 has an invalid interface number: 74 but max is 0
[  998.834125][ T5892] usb 4-1: config 1 has no interface number 0
[  998.851981][T17426] pim6reg: entered allmulticast mode
[  998.952677][ T5890] IPVS: starting estimator thread 0...
[  998.997767][ T5891] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  999.015858][ T5892] usb 4-1: config 1 interface 74 has no altsetting 0
[  999.038092][ T5892] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=22.be
[  999.053810][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.107774][T17432] IPVS: using max 27 ests per chain, 64800 per kthread
[  999.165748][ T5891] usb 2-1: device descriptor read/64, error -71
[  999.177206][ T5892] usb 4-1: Product: syz
[  999.212475][ T5892] usb 4-1: Manufacturer: syz
[  999.221682][ T5892] usb 4-1: SerialNumber: syz
[  999.480666][ T5891] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  999.517894][ T5890] usb 6-1: USB disconnect, device number 28
[  999.697974][ T5891] usb 2-1: device descriptor read/64, error -71
[  999.727263][ T5892] usb 4-1: unknown interface protocol 0x55, assuming v1
[  999.773323][ T5892] usb 4-1: cannot find UAC_HEADER
[  999.848219][ T5891] usb usb2-port1: attempt power cycle
[  999.922634][ T5892] snd-usb-audio 4-1:1.74: probe with driver snd-usb-audio failed with error -22
[  999.971730][ T5892] usb 4-1: USB disconnect, device number 14
[  999.999657][T15834] udevd[15834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1000.217789][ T5891] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[ 1000.261007][ T5891] usb 2-1: device descriptor read/8, error -71
[ 1000.350890][T15574] Bluetooth: hci5: command 0x0406 tx timeout
[ 1000.458305][ T5890] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1000.547819][ T5891] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[ 1000.615487][ T5891] usb 2-1: device descriptor read/8, error -71
[ 1000.647861][ T5890] usb 5-1: Using ep0 maxpacket: 8
[ 1000.733333][ T5890] usb 5-1: config 5 has an invalid interface number: 162 but max is 0
[ 1000.780903][ T5891] usb usb2-port1: unable to enumerate USB device
[ 1000.794231][ T5890] usb 5-1: config 5 has no interface number 0
[ 1000.813172][ T5890] usb 5-1: config 5 interface 162 has no altsetting 0
[ 1000.849058][ T5890] usb 5-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 0.00
[ 1000.859119][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1000.876697][ T5890] usb 5-1: SerialNumber: syz
[ 1002.637808][ T9845] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1002.687944][T14176] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[ 1002.878266][ T9845] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1002.887623][ T9845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.905163][ T9845] usb 4-1: Product: syz
[ 1002.912123][T14176] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1002.919948][T14176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1002.930838][ T9845] usb 4-1: Manufacturer: syz
[ 1002.935554][ T9845] usb 4-1: SerialNumber: syz
[ 1002.940486][T14176] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1002.955892][ T9845] usb 4-1: config 0 descriptor??
[ 1002.965758][T14176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1002.979935][T14176] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1002.990724][ T9845] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1002.998576][T14176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1003.010874][T14176] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1003.022976][T14176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1003.039509][T14176] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1003.050740][T14176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1003.088033][T14176] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1003.119002][T14176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1003.134210][T14176] usb 2-1: string descriptor 0 read error: -22
[ 1003.142412][T14176] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1003.151694][T14176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.288843][T14176] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1003.404314][ T5890] usb 5-1: USB disconnect, device number 52
[ 1003.519633][T14176] usb 2-1: USB disconnect, device number 32
[ 1003.542063][T17519] FAULT_INJECTION: forcing a failure.
[ 1003.542063][T17519] name failslab, interval 1, probability 0, space 0, times 0
[ 1003.576534][T17519] CPU: 0 UID: 0 PID: 17519 Comm: syz.4.3302 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[ 1003.576564][T17519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1003.576578][T17519] Call Trace:
[ 1003.576591][T17519]  <TASK>
[ 1003.576600][T17519]  dump_stack_lvl+0x189/0x250
[ 1003.576637][T17519]  ? __pfx____ratelimit+0x10/0x10
[ 1003.576664][T17519]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1003.576696][T17519]  ? __pfx__printk+0x10/0x10
[ 1003.576733][T17519]  ? __pfx___might_resched+0x10/0x10
[ 1003.576759][T17519]  ? fs_reclaim_acquire+0x7d/0x100
[ 1003.576787][T17519]  should_fail_ex+0x414/0x560
[ 1003.576821][T17519]  should_failslab+0xa8/0x100
[ 1003.576855][T17519]  __kmalloc_noprof+0xcb/0x4f0
[ 1003.576882][T17519]  ? kfree+0x4d/0x440
[ 1003.576906][T17519]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1003.576942][T17519]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1003.576974][T17519]  ? tomoyo_domain+0xd9/0x130
[ 1003.577011][T17519]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1003.577037][T17519]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1003.577065][T17519]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1003.577109][T17519]  ? __lock_acquire+0xab9/0xd20
[ 1003.577154][T17519]  ? __fget_files+0x2a/0x420
[ 1003.577178][T17519]  ? __fget_files+0x2a/0x420
[ 1003.577196][T17519]  ? __fget_files+0x3a0/0x420
[ 1003.577214][T17519]  ? __fget_files+0x2a/0x420
[ 1003.577237][T17519]  security_file_ioctl+0xcb/0x2d0
[ 1003.577263][T17519]  __se_sys_ioctl+0x47/0x170
[ 1003.577292][T17519]  do_syscall_64+0xfa/0x3b0
[ 1003.577319][T17519]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1003.577343][T17519]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1003.577363][T17519]  ? clear_bhb_loop+0x60/0xb0
[ 1003.577388][T17519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1003.577408][T17519] RIP: 0033:0x7f1b1898e969
[ 1003.577426][T17519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1003.577445][T17519] RSP: 002b:00007f1b19755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1003.577467][T17519] RAX: ffffffffffffffda RBX: 00007f1b18bb5fa0 RCX: 00007f1b1898e969
[ 1003.577483][T17519] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004
[ 1003.577497][T17519] RBP: 00007f1b19755090 R08: 0000000000000000 R09: 0000000000000000
[ 1003.577510][T17519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1003.577522][T17519] R13: 0000000000000000 R14: 00007f1b18bb5fa0 R15: 00007f1b18cdfa28
[ 1003.577553][T17519]  </TASK>
[ 1003.577584][T17519] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1004.088046][T14173] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[ 1004.250997][T14173] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1004.261834][T14173] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1004.275058][T14173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1004.334416][T14173] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1004.356992][T14173] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1004.378265][T14173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1004.403362][T14173] usb 6-1: Product: syz
[ 1004.427888][T14173] usb 6-1: Manufacturer: syz
[ 1004.457057][T14173] usb 6-1: SerialNumber: syz
[ 1004.512247][ T9845] usb 4-1: USB disconnect, device number 15
[ 1004.658242][T14173] usb 6-1: config 0 descriptor??
[ 1004.719283][T14173] xbox_remote_probe: Unexpected endpoint_in
[ 1005.456277][T17485] delete_channel: no stack
[ 1005.810951][T17554] vxcan3: entered promiscuous mode
[ 1005.882226][T14163] IPVS: starting estimator thread 0...
[ 1005.891314][T17524] usb usb8: usbfs: process 17524 (syz.5.3303) did not claim interface 0 before use
[ 1005.916334][T17524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1005.939513][T17524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1006.038022][T17559] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1008.128221][T14163] usb 6-1: USB disconnect, device number 29
[ 1008.168115][T14173] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1008.371590][T14173] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1008.459196][T14173] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1008.499725][T14173] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1008.553198][T14173] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1008.585788][T14173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1008.607878][T14163] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1008.627862][T14173] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1008.807456][T14173] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1008.819470][T14163] usb 2-1: Using ep0 maxpacket: 8
[ 1008.831781][T15834] udevd[15834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1008.866209][T14163] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1008.883395][T14163] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1008.927317][T14163] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1008.962479][T14163] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1008.993142][T14163] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1009.050942][T14163] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1009.093668][T14163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.346473][T14163] usb 2-1: usb_control_msg returned -32
[ 1009.380399][T14163] usbtmc 2-1:16.0: can't read capabilities
[ 1010.367860][ T9845] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[ 1010.579440][ T9845] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1010.660263][ T9845] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1010.800487][ T9845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1010.844144][ T5892] usb 4-1: USB disconnect, device number 16
[ 1010.877087][T17597] delete_channel: no stack
[ 1010.969806][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3329'.
[ 1011.010954][ T9845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1011.051787][ T9845] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1011.130298][ T9845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.197064][ T9845] usb 6-1: Product: syz
[ 1011.217696][ T9845] usb 6-1: Manufacturer: syz
[ 1011.222358][ T9845] usb 6-1: SerialNumber: syz
[ 1011.368827][ T9845] usb 6-1: config 0 descriptor??
[ 1011.420258][ T9845] xbox_remote_probe: Unexpected endpoint_in
[ 1011.420621][T17663] vcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1011.484178][ T5891] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1011.621409][T17640] usb usb8: usbfs: process 17640 (syz.5.3327) did not claim interface 0 before use
[ 1011.635017][T17640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1011.645326][T14163] usb 2-1: USB disconnect, device number 33
[ 1011.663747][ T5891] usb 4-1: device descriptor read/64, error -71
[ 1011.694311][T17640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1011.947813][ T5891] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1012.118231][ T5891] usb 4-1: device descriptor read/64, error -71
[ 1012.251572][ T5891] usb usb4-port1: attempt power cycle
[ 1012.538681][ T5890] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[ 1012.710196][ T5891] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1012.730637][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1012.741800][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1012.742384][ T5891] usb 4-1: device descriptor read/8, error -71
[ 1012.756762][ T5890] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1012.783216][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.799040][ T5890] usb 2-1: config 0 descriptor??
[ 1012.820889][ T5890] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1012.831063][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[ 1012.852918][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1012.879317][ T5890] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1012.895882][ T5890] usb 2-1: media controller created
[ 1012.904999][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1012.931705][ T5890] dvb-usb: bulk message failed: -22 (6/0)
[ 1013.037856][ T5890] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1013.048103][ T5891] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1013.075953][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input78
[ 1013.081561][ T5891] usb 4-1: device descriptor read/8, error -71
[ 1013.179566][ T5890] dvb-usb: schedule remote query interval to 150 msecs.
[ 1013.212323][ T5890] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1013.228837][ T5891] usb usb4-port1: unable to enumerate USB device
[ 1013.368137][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[ 1013.384603][ T5890] dvb-usb: error while querying for an remote control event.
[ 1013.577752][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[ 1013.583575][ T5890] dvb-usb: error while querying for an remote control event.
[ 1013.607017][T17701] netlink: 'syz.4.3338': attribute type 1 has an invalid length.
[ 1013.639489][ T9845] usb 2-1: USB disconnect, device number 34
[ 1013.665906][T14173] usb 6-1: USB disconnect, device number 30
[ 1013.735772][ T9845] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1014.403681][T17715] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1014.768125][ T5891] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1014.929447][ T5891] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1014.953874][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1014.971277][ T5891] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1014.991878][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1015.020533][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.029240][T14163] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1015.074899][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1015.166873][ T5891] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1015.207744][T14163] usb 2-1: Using ep0 maxpacket: 32
[ 1015.226732][T14163] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1015.277947][T14163] usb 2-1: config 0 has no interface number 0
[ 1015.289937][T14163] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1015.301913][T14163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.313137][T14163] usb 2-1: Product: syz
[ 1015.321827][T14163] usb 2-1: Manufacturer: syz
[ 1015.328066][T14163] usb 2-1: SerialNumber: syz
[ 1015.336708][T14163] usb 2-1: config 0 descriptor??
[ 1015.347263][T14163] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1015.517798][ T5891] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1015.717922][ T5891] usb 6-1: Using ep0 maxpacket: 32
[ 1015.750137][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1015.796481][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1015.840995][ T5891] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1015.878521][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.936388][ T5891] usb 6-1: config 0 descriptor??
[ 1016.401146][ T5891] ft260 0003:0403:6030.0024: unknown main item tag 0x0
[ 1016.586688][ T5891] ft260 0003:0403:6030.0024: chip code: 0000 0000
[ 1016.793676][ T5891] ft260 0003:0403:6030.0024: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[ 1017.510565][T17722] delete_channel: no stack
[ 1017.575404][ T5890] usb 5-1: USB disconnect, device number 53
[ 1018.007935][ T5890] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1018.223630][ T5890] usb 5-1: Using ep0 maxpacket: 16
[ 1018.241823][ T5890] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11
[ 1018.260352][ T5890] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1018.287800][ T5890] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1018.367743][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1018.381140][ T5890] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[ 1018.422834][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.446817][ T5890] usb 5-1: config 0 descriptor??
[ 1019.719455][ T5890] hid-alps 0003:044E:120B.0025: global environment stack underflow
[ 1019.727435][ T5890] hid-alps 0003:044E:120B.0025: item 0 2 1 11 parsing failed
[ 1019.806660][ T5890] hid-alps 0003:044E:120B.0025: parse failed
[ 1019.856629][ T5890] hid-alps 0003:044E:120B.0025: probe with driver hid-alps failed with error -22
[ 1020.042265][T17789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1020.073828][T17789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1020.163424][ T5891] ft260 0003:0403:6030.0024: failed to retrieve status: -71, no wakeup
[ 1020.213621][ T5891] ft260 0003:0403:6030.0024: failed to retrieve status: -71
[ 1020.231589][T14163] usb 2-1: qt2_attach - failed to power on unit: -71
[ 1020.268649][T14163] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[ 1020.287858][ T5891] ft260 0003:0403:6030.0024: failed to reset I2C controller: -71
[ 1020.305486][T14163] usb 2-1: USB disconnect, device number 35
[ 1020.395478][ T5891] usb 6-1: USB disconnect, device number 31
[ 1020.879880][T17803] syz.0.3357 (17803): drop_caches: 2
[ 1020.895513][T14163] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1021.147801][T14163] usb 2-1: Using ep0 maxpacket: 16
[ 1021.162517][T14163] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1021.208443][T14163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1021.309316][T14163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1021.361798][T14163] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1021.399395][T14163] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1021.433512][T14163] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1021.443897][T14163] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1021.459515][T14163] usb 2-1: Manufacturer: syz
[ 1021.492265][T14163] usb 2-1: config 0 descriptor??
[ 1021.652906][ T9845] usb 5-1: USB disconnect, device number 54
[ 1022.039926][T14163] rc_core: IR keymap rc-hauppauge not found
[ 1022.097472][T14163] Registered IR keymap rc-empty
[ 1022.122820][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.183130][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.238772][T14163] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1022.286817][T14163] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input79
[ 1022.337230][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.367868][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.409985][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.458914][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.468218][ T5891] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1022.528001][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.582811][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.642287][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.660221][ T5891] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1022.710985][ T5891] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1022.721368][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.753228][ T5891] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1022.773742][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.820947][T14163] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1022.833727][ T5891] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1022.838175][   T30] kauditd_printk_skb: 193 callbacks suppressed
[ 1022.838196][   T30] audit: type=1400 audit(1748796364.340:3679): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=17843 comm="syz.5.3364"
[ 1022.867833][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1022.902725][T14163] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 1022.937779][T14163] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1023.016959][T14163] usb 2-1: USB disconnect, device number 36
[ 1023.048328][ T5891] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1023.223306][ T5891] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1023.373201][T16003] udevd[16003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1023.611921][T17865] bridge_slave_0: left allmulticast mode
[ 1023.636615][T17865] bridge_slave_0: left promiscuous mode
[ 1023.666697][T17865] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.738663][T17865] bridge_slave_1: left allmulticast mode
[ 1023.774242][T17865] bridge_slave_1: left promiscuous mode
[ 1023.827426][T17865] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.931901][T17865] bond0: (slave bond_slave_0): Releasing backup interface
[ 1024.048512][T17865] bond0: (slave bond_slave_1): Releasing backup interface
[ 1024.240076][T17865] team0: Port device team_slave_0 removed
[ 1024.448903][T17865] team0: Port device team_slave_1 removed
[ 1024.512254][T17865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1024.553053][T17865] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1024.634754][T17865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1024.668770][T17865] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1024.817834][ T5888] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[ 1024.968170][ T5888] usb 6-1: device descriptor read/64, error -71
[ 1025.660606][T14176] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1025.722021][T14163] usb 4-1: USB disconnect, device number 21
[ 1025.801498][T17835] delete_channel: no stack
[ 1025.817766][T14176] usb 5-1: Using ep0 maxpacket: 8
[ 1025.843138][T14176] usb 5-1: config 5 has an invalid interface number: 162 but max is 0
[ 1025.856840][T14176] usb 5-1: config 5 has no interface number 0
[ 1025.873805][ T5888] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[ 1025.893445][T14176] usb 5-1: config 5 interface 162 has no altsetting 0
[ 1025.928655][T14176] usb 5-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 0.00
[ 1025.937922][T14176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1025.987850][T14176] usb 5-1: SerialNumber: syz
[ 1026.017937][ T5888] usb 6-1: device descriptor read/64, error -71
[ 1026.141670][ T5888] usb usb6-port1: attempt power cycle
[ 1026.182210][T17913] vxcan1: entered promiscuous mode
[ 1026.250128][T17915] fuse: Bad value for 'fd'
[ 1026.488228][ T5888] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[ 1026.529962][ T5888] usb 6-1: device descriptor read/8, error -71
[ 1026.789119][ T5888] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[ 1026.841720][ T5888] usb 6-1: device descriptor read/8, error -71
[ 1026.968450][ T5888] usb usb6-port1: unable to enumerate USB device
[ 1026.997967][T17933] vcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1027.295804][T17937] syz.1.3385 (17937): drop_caches: 2
[ 1028.108803][T14176] usb 5-1: USB disconnect, device number 55
[ 1028.317748][T14164] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1028.563296][T14164] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1028.573946][T14164] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1028.656319][T14164] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1028.704655][T14164] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1028.744934][T14164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.800059][T14164] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1028.891919][T14164] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1029.651957][   T30] audit: type=1326 audit(1748796371.160:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1029.695781][   T30] audit: type=1326 audit(1748796371.160:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1029.827113][   T30] audit: type=1326 audit(1748796371.160:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1029.886963][   T30] audit: type=1326 audit(1748796371.160:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1029.943399][   T30] audit: type=1326 audit(1748796371.160:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1030.072307][   T30] audit: type=1326 audit(1748796371.190:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1030.134221][   T30] audit: type=1326 audit(1748796371.190:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1030.170229][   T30] audit: type=1326 audit(1748796371.190:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1030.264621][   T30] audit: type=1326 audit(1748796371.200:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1030.433339][   T30] audit: type=1326 audit(1748796371.200:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f7c8298e969 code=0x7ffc0000
[ 1030.822395][T14164] usb 4-1: USB disconnect, device number 22
[ 1030.867375][T17956] delete_channel: no stack
[ 1031.091972][T15574] Bluetooth: hci3: command 0x0406 tx timeout
[ 1055.057764][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.072093][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.854138][ T5148] Bluetooth: hci4: command 0x0406 tx timeout
[ 1130.411581][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1162.977609][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1162.984607][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P18016/1:b..l P18021/1:b..l P18024/1:b..l P5187/1:b..l
[ 1162.996651][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=130701, q=1404 ncpus=2)
[ 1163.004595][    C1] task:klogd           state:R  running task     stack:22952 pid:5187  tgid:5187  ppid:1      task_flags:0x400100 flags:0x00004002
[ 1163.019211][    C1] Call Trace:
[ 1163.022493][    C1]  <TASK>
[ 1163.025427][    C1]  __schedule+0x16f5/0x4d00
[ 1163.029950][    C1]  ? sched_clock+0x3f/0x60
[ 1163.034393][    C1]  ? sched_clock_cpu+0x74/0x430
[ 1163.039275][    C1]  ? preempt_schedule_common+0x83/0xd0
[ 1163.044738][    C1]  ? psi_task_change+0xe5/0x250
[ 1163.049695][    C1]  ? __pfx___schedule+0x10/0x10
[ 1163.054581][    C1]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[ 1163.060697][    C1]  ? psi_task_change+0xe5/0x250
[ 1163.065589][    C1]  ? preempt_schedule+0xae/0xc0
[ 1163.070466][    C1]  preempt_schedule_common+0x83/0xd0
[ 1163.075761][    C1]  preempt_schedule+0xae/0xc0
[ 1163.080463][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[ 1163.085865][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1163.091783][    C1]  preempt_schedule_thunk+0x16/0x30
[ 1163.096986][    C1]  _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1163.102717][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1163.109072][    C1]  ? autoremove_wake_function+0x39/0x100
[ 1163.114713][    C1]  __wake_up_common_lock+0x190/0x1f0
[ 1163.120024][    C1]  sock_def_readable+0x1fb/0x550
[ 1163.124993][    C1]  ? sock_def_readable+0xbe/0x550
[ 1163.130055][    C1]  unix_dgram_sendmsg+0xd94/0x1870
[ 1163.135166][    C1]  ? kasan_quarantine_put+0xdd/0x220
[ 1163.140538][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1163.146133][    C1]  ? aa_sock_msg_perm+0x94/0x160
[ 1163.151112][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1163.156403][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1163.161970][    C1]  __sock_sendmsg+0x219/0x270
[ 1163.166696][    C1]  __sys_sendto+0x3bd/0x520
[ 1163.171233][    C1]  ? __pfx___sys_sendto+0x10/0x10
[ 1163.176272][    C1]  ? __rseq_handle_notify_resume+0x37e/0x11f0
[ 1163.182384][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1163.187190][    C1]  __x64_sys_sendto+0xde/0x100
[ 1163.192006][    C1]  do_syscall_64+0xfa/0x3b0
[ 1163.196518][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1163.202599][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1163.208785][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1163.213466][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1163.219368][    C1] RIP: 0033:0x7f26d300a407
[ 1163.223807][    C1] RSP: 002b:00007fffe2905ed0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 1163.232250][    C1] RAX: ffffffffffffffda RBX: 00007f26d2ebac80 RCX: 00007f26d300a407
[ 1163.240253][    C1] RDX: 000000000000005f RSI: 00007fffe2906010 RDI: 0000000000000003
[ 1163.248294][    C1] RBP: 00007fffe2906440 R08: 0000000000000000 R09: 0000000000000000
[ 1163.256296][    C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffe2906458
[ 1163.264292][    C1] R13: 00007fffe2906010 R14: 0000000000000044 R15: 00007fffe2906010
[ 1163.272297][    C1]  </TASK>
[ 1163.275337][    C1] task:kworker/u8:1    state:R  running task     stack:26920 pid:18024 tgid:18024 ppid:13     task_flags:0x8040 flags:0x00004000
[ 1163.288663][    C1] Call Trace:
[ 1163.291943][    C1]  <TASK>
[ 1163.294871][    C1]  __schedule+0x16f5/0x4d00
[ 1163.299400][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1163.304298][    C1]  ? preempt_schedule_irq+0xb5/0x150
[ 1163.309608][    C1]  ? __pfx___schedule+0x10/0x10
[ 1163.314480][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1163.319603][    C1]  ? unwind_next_frame+0x19ae/0x2390
[ 1163.324934][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1163.330077][    C1]  ? preempt_schedule_irq+0xaa/0x150
[ 1163.335374][    C1]  preempt_schedule_irq+0xb5/0x150
[ 1163.340500][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1163.346268][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1163.352115][    C1]  irqentry_exit+0x6f/0x90
[ 1163.356532][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1163.362523][    C1] RIP: 0010:unwind_next_frame+0x1174/0x2390
[ 1163.368442][    C1] Code: 8b 14 24 4d 89 65 00 41 0f b6 04 2f 84 c0 0f 85 f9 0f 00 00 c6 03 00 4c 8b 64 24 10 4c 8b 7c 24 28 48 8b 44 24 40 0f b6 04 28 <84> c0 0f 85 8a 0d 00 00 41 0f b6 04 2f 84 c0 0f 85 a1 0d 00 00 0f
[ 1163.388057][    C1] RSP: 0018:ffffc9000b9e7098 EFLAGS: 00000246
[ 1163.394127][    C1] RAX: 0000000000000000 RBX: ffffc9000b9e71a0 RCX: 0000000000000000
[ 1163.402107][    C1] RDX: ffffffff903b3a92 RSI: 0000000000000000 RDI: ffffc9000b9e71c8
[ 1163.410096][    C1] RBP: dffffc0000000000 R08: ffffc9000b9e71c7 R09: 0000000000000000
[ 1163.418083][    C1] R10: ffffc9000b9e71b8 R11: fffff5200173ce39 R12: ffffc9000b9e7ba0
[ 1163.426083][    C1] R13: ffffc9000b9e71b8 R14: ffffc9000b9e7168 R15: 1ffffffff2076752
[ 1163.434085][    C1]  ? unwind_next_frame+0xc98/0x2390
[ 1163.439309][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1163.444452][    C1]  ? __get_user_pages+0x1af4/0x30b0
[ 1163.449697][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1163.455906][    C1]  arch_stack_walk+0x11c/0x150
[ 1163.460719][    C1]  ? get_user_pages_remote+0x2f9/0xaa0
[ 1163.466207][    C1]  stack_trace_save+0x9c/0xe0
[ 1163.470903][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1163.476324][    C1]  save_stack+0xf5/0x1f0
[ 1163.480603][    C1]  ? __pfx_save_stack+0x10/0x10
[ 1163.485456][    C1]  ? __free_frozen_pages+0xc71/0xe70
[ 1163.490748][    C1]  ? __put_partials+0x161/0x1c0
[ 1163.495630][    C1]  ? put_cpu_partial+0x17c/0x250
[ 1163.500587][    C1]  ? __slab_free+0x2f7/0x400
[ 1163.505348][    C1]  ? qlist_free_all+0x97/0x140
[ 1163.510122][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[ 1163.515782][    C1]  ? __kasan_slab_alloc+0x22/0x80
[ 1163.520828][    C1]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1163.526462][    C1]  ? ptlock_alloc+0x20/0x70
[ 1163.530976][    C1]  ? pte_alloc_one+0x7d/0x170
[ 1163.535689][    C1]  ? __pte_alloc+0x25/0x1a0
[ 1163.540205][    C1]  ? __handle_mm_fault+0x4b8a/0x5620
[ 1163.545492][    C1]  ? handle_mm_fault+0x40a/0x8e0
[ 1163.550441][    C1]  ? __get_user_pages+0x1af4/0x30b0
[ 1163.555677][    C1]  ? page_ext_put+0x97/0xc0
[ 1163.560210][    C1]  __reset_page_owner+0x71/0x1f0
[ 1163.565195][    C1]  __free_frozen_pages+0xc71/0xe70
[ 1163.570333][    C1]  __put_partials+0x161/0x1c0
[ 1163.575044][    C1]  put_cpu_partial+0x17c/0x250
[ 1163.579826][    C1]  ? put_cpu_partial+0x6d/0x250
[ 1163.584686][    C1]  __slab_free+0x2f7/0x400
[ 1163.589118][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1163.595476][    C1]  ? __phys_addr+0xd3/0x180
[ 1163.600009][    C1]  qlist_free_all+0x97/0x140
[ 1163.604602][    C1]  kasan_quarantine_reduce+0x148/0x160
[ 1163.610079][    C1]  __kasan_slab_alloc+0x22/0x80
[ 1163.614966][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1163.620450][    C1]  ? ptlock_alloc+0x20/0x70
[ 1163.624960][    C1]  ptlock_alloc+0x20/0x70
[ 1163.629301][    C1]  pte_alloc_one+0x7d/0x170
[ 1163.633838][    C1]  __pte_alloc+0x25/0x1a0
[ 1163.638194][    C1]  __handle_mm_fault+0x4b8a/0x5620
[ 1163.643343][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1163.648839][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1163.654166][    C1]  handle_mm_fault+0x40a/0x8e0
[ 1163.658978][    C1]  __get_user_pages+0x1af4/0x30b0
[ 1163.664035][    C1]  ? __pfx___get_user_pages+0x10/0x10
[ 1163.669432][    C1]  get_user_pages_remote+0x2f9/0xaa0
[ 1163.674787][    C1]  ? __pfx_get_user_pages_remote+0x10/0x10
[ 1163.680639][    C1]  ? down_read+0x1ad/0x2e0
[ 1163.685084][    C1]  ? mmap_read_lock_maybe_expand+0xc6/0x3c0
[ 1163.690992][    C1]  get_arg_page+0x104/0x330
[ 1163.695534][    C1]  ? __pfx_get_arg_page+0x10/0x10
[ 1163.700600][    C1]  ? __pfx___might_resched+0x10/0x10
[ 1163.705891][    C1]  copy_string_kernel+0x191/0x2a0
[ 1163.710937][    C1]  kernel_execve+0x5a2/0x9f0
[ 1163.715570][    C1]  call_usermodehelper_exec_async+0x210/0x360
[ 1163.721661][    C1]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[ 1163.728266][    C1]  ret_from_fork+0x3fc/0x770
[ 1163.732889][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1163.738034][    C1]  ? __switch_to_asm+0x39/0x70
[ 1163.742847][    C1]  ? __switch_to_asm+0x33/0x70
[ 1163.747636][    C1]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[ 1163.754281][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1163.759092][    C1]  </TASK>
[ 1163.762118][    C1] task:syz.0.3404      state:R  running task     stack:25080 pid:18021 tgid:18019 ppid:17017  task_flags:0x400140 flags:0x00004006
[ 1163.775625][    C1] Call Trace:
[ 1163.778923][    C1]  <TASK>
[ 1163.781856][    C1]  __schedule+0x16f5/0x4d00
[ 1163.786375][    C1]  ? preempt_schedule_irq+0xb5/0x150
[ 1163.791684][    C1]  ? __pfx___schedule+0x10/0x10
[ 1163.796586][    C1]  ? preempt_schedule_irq+0xaa/0x150
[ 1163.801906][    C1]  preempt_schedule_irq+0xb5/0x150
[ 1163.807033][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1163.812786][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1163.818628][    C1]  irqentry_exit+0x6f/0x90
[ 1163.823049][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1163.829048][    C1] RIP: 0010:debug_lockdep_rcu_enabled+0x2a/0x40
[ 1163.835326][    C1] Code: f3 0f 1e fa 31 c0 83 3d 27 2e 3c 04 00 74 1e 83 3d 4a 5e 3c 04 00 74 15 65 48 8b 0c 25 08 10 9c 92 31 c0 83 b9 ec 0a 00 00 00 <0f> 94 c0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc
[ 1163.854979][    C1] RSP: 0018:ffffc9000b94ef10 EFLAGS: 00000246
[ 1163.861083][    C1] RAX: 0000000000000000 RBX: ffffffff903d2701 RCX: ffff88802fa9bc00
[ 1163.869068][    C1] RDX: ffffc9000b94f001 RSI: dffffc0000000000 RDI: ffffc9000b94eff0
[ 1163.877066][    C1] RBP: dffffc0000000000 R08: ffffc9000b94f460 R09: 0000000000000000
[ 1163.885065][    C1] R10: ffffc9000b94f038 R11: fffff52001729e09 R12: ffffc9000b94f470
[ 1163.893070][    C1] R13: ffffc9000b948000 R14: ffffc9000b94efe8 R15: ffffffff81727e15
[ 1163.901053][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1163.906217][    C1]  unwind_next_frame+0x195c/0x2390
[ 1163.911361][    C1]  ? unwind_next_frame+0xa5/0x2390
[ 1163.916471][    C1]  ? qlist_free_all+0x97/0x140
[ 1163.921253][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1163.927450][    C1]  arch_stack_walk+0x11c/0x150
[ 1163.932254][    C1]  ? kasan_quarantine_reduce+0x148/0x160
[ 1163.937924][    C1]  stack_trace_save+0x9c/0xe0
[ 1163.942644][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1163.948063][    C1]  save_stack+0xf5/0x1f0
[ 1163.952347][    C1]  ? __pfx_save_stack+0x10/0x10
[ 1163.957232][    C1]  ? __free_frozen_pages+0xc71/0xe70
[ 1163.962539][    C1]  ? __put_partials+0x161/0x1c0
[ 1163.967443][    C1]  ? put_cpu_partial+0x17c/0x250
[ 1163.972415][    C1]  ? __slab_free+0x2f7/0x400
[ 1163.977056][    C1]  ? qlist_free_all+0x97/0x140
[ 1163.981865][    C1]  ? page_ext_put+0x97/0xc0
[ 1163.986406][    C1]  __reset_page_owner+0x71/0x1f0
[ 1163.991380][    C1]  __free_frozen_pages+0xc71/0xe70
[ 1163.996496][    C1]  __put_partials+0x161/0x1c0
[ 1164.001192][    C1]  put_cpu_partial+0x17c/0x250
[ 1164.005988][    C1]  ? put_cpu_partial+0x6d/0x250
[ 1164.010862][    C1]  __slab_free+0x2f7/0x400
[ 1164.015277][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1164.021182][    C1]  ? __phys_addr+0xd3/0x180
[ 1164.025729][    C1]  qlist_free_all+0x97/0x140
[ 1164.030344][    C1]  kasan_quarantine_reduce+0x148/0x160
[ 1164.035813][    C1]  __kasan_kmalloc+0x22/0xb0
[ 1164.040423][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[ 1164.045850][    C1]  ? __request_module+0x2b5/0x5e0
[ 1164.050900][    C1]  __request_module+0x2b5/0x5e0
[ 1164.055796][    C1]  ? __pfx___request_module+0x10/0x10
[ 1164.061183][    C1]  ? __up_read+0x280/0x680
[ 1164.065661][    C1]  crypto_alg_mod_lookup+0xa5/0x5f0
[ 1164.070880][    C1]  crypto_has_alg+0x26/0x190
[ 1164.075477][    C1]  xfrm_probe_algs+0x301/0x360
[ 1164.080263][    C1]  pfkey_register+0x113/0x890
[ 1164.084984][    C1]  pfkey_sendmsg+0xbfe/0x1090
[ 1164.089713][    C1]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1164.094867][    C1]  ? aa_sock_msg_perm+0x94/0x160
[ 1164.099821][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1164.105134][    C1]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1164.110299][    C1]  __sock_sendmsg+0x219/0x270
[ 1164.114981][    C1]  ____sys_sendmsg+0x505/0x830
[ 1164.119765][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1164.125088][    C1]  ? import_iovec+0x74/0xa0
[ 1164.129616][    C1]  ___sys_sendmsg+0x21f/0x2a0
[ 1164.134302][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1164.139568][    C1]  ? __fget_files+0x2a/0x420
[ 1164.144182][    C1]  ? __fget_files+0x3a0/0x420
[ 1164.148900][    C1]  __x64_sys_sendmsg+0x19b/0x260
[ 1164.153837][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1164.159319][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1164.164120][    C1]  ? do_syscall_64+0xbe/0x3b0
[ 1164.168825][    C1]  do_syscall_64+0xfa/0x3b0
[ 1164.173331][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.179504][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1164.185695][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1164.190396][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.196315][    C1] RIP: 0033:0x7f1e0638e969
[ 1164.200736][    C1] RSP: 002b:00007f1e071b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1164.209170][    C1] RAX: ffffffffffffffda RBX: 00007f1e065b6080 RCX: 00007f1e0638e969
[ 1164.217139][    C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[ 1164.225118][    C1] RBP: 00007f1e06410ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1164.233105][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1164.241095][    C1] R13: 0000000000000000 R14: 00007f1e065b6080 R15: 00007f1e066dfa28
[ 1164.249109][    C1]  </TASK>
[ 1164.252147][    C1] task:syz.1.3403      state:R  running task     stack:25304 pid:18016 tgid:18014 ppid:16166  task_flags:0x40054c flags:0x00004002
[ 1164.265662][    C1] Call Trace:
[ 1164.268954][    C1]  <TASK>
[ 1164.271911][    C1]  __schedule+0x16f5/0x4d00
[ 1164.276464][    C1]  ? preempt_schedule_common+0x83/0xd0
[ 1164.281950][    C1]  ? __pfx___schedule+0x10/0x10
[ 1164.286824][    C1]  ? do_raw_spin_lock+0x121/0x290
[ 1164.291887][    C1]  ? preempt_schedule+0xae/0xc0
[ 1164.296774][    C1]  preempt_schedule_common+0x83/0xd0
[ 1164.302102][    C1]  preempt_schedule+0xae/0xc0
[ 1164.306785][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[ 1164.312191][    C1]  preempt_schedule_thunk+0x16/0x30
[ 1164.317522][    C1]  _raw_spin_unlock+0x3f/0x50
[ 1164.322229][    C1]  unmap_page_range+0x38e5/0x4580
[ 1164.327316][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1164.332742][    C1]  ? unmap_vmas+0x144/0x580
[ 1164.337277][    C1]  unmap_vmas+0x399/0x580
[ 1164.341633][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1164.346503][    C1]  exit_mmap+0x248/0xb50
[ 1164.350778][    C1]  ? uprobe_clear_state+0x20f/0x290
[ 1164.356029][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1164.360831][    C1]  ? __mutex_unlock_slowpath+0x1cd/0x700
[ 1164.366487][    C1]  ? __pfx_exit_aio+0x10/0x10
[ 1164.371203][    C1]  ? uprobe_clear_state+0x274/0x290
[ 1164.376439][    C1]  __mmput+0x118/0x420
[ 1164.380536][    C1]  exit_mm+0x1da/0x2c0
[ 1164.384610][    C1]  ? __pfx_exit_mm+0x10/0x10
[ 1164.389211][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1164.394098][    C1]  do_exit+0x640/0x22e0
[ 1164.398366][    C1]  ? do_raw_spin_lock+0x121/0x290
[ 1164.403397][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1164.408011][    C1]  do_group_exit+0x21c/0x2d0
[ 1164.412631][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1164.417866][    C1]  get_signal+0x1286/0x1340
[ 1164.422410][    C1]  arch_do_signal_or_restart+0x9a/0x750
[ 1164.427974][    C1]  ? __pfx___sys_connect+0x10/0x10
[ 1164.433124][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1164.439310][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[ 1164.444776][    C1]  exit_to_user_mode_loop+0x75/0x110
[ 1164.450076][    C1]  do_syscall_64+0x2bd/0x3b0
[ 1164.454705][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1164.459927][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.466003][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1164.470707][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.476643][    C1] RIP: 0033:0x7f978338e969
[ 1164.481074][    C1] RSP: 002b:00007f978414e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1164.489516][    C1] RAX: ffffffffffffff8d RBX: 00007f97835b5fa0 RCX: 00007f978338e969
[ 1164.497522][    C1] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003
[ 1164.505704][    C1] RBP: 00007f9783410ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1164.513688][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1164.521679][    C1] R13: 0000000000000000 R14: 00007f97835b5fa0 R15: 00007f97836dfa28
[ 1164.529682][    C1]  </TASK>
[ 1164.532723][    C1] rcu: rcu_preempt kthread starved for 8418 jiffies! g130701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1164.543942][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1164.553930][    C1] rcu: RCU grace-period kthread stack dump:
[ 1164.559839][    C1] task:rcu_preempt     state:R  running task     stack:27224 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[ 1164.573347][    C1] Call Trace:
[ 1164.576645][    C1]  <TASK>
[ 1164.579594][    C1]  __schedule+0x16f5/0x4d00
[ 1164.584137][    C1]  ? preempt_schedule_common+0x83/0xd0
[ 1164.589623][    C1]  ? __pfx___schedule+0x10/0x10
[ 1164.594515][    C1]  ? __lock_acquire+0xab9/0xd20
[ 1164.599399][    C1]  ? do_raw_spin_lock+0x121/0x290
[ 1164.604429][    C1]  ? preempt_schedule+0xae/0xc0
[ 1164.609298][    C1]  preempt_schedule_common+0x83/0xd0
[ 1164.614615][    C1]  preempt_schedule+0xae/0xc0
[ 1164.619315][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[ 1164.624693][    C1]  preempt_schedule_thunk+0x16/0x30
[ 1164.629910][    C1]  _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1164.635661][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1164.642029][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1164.646801][    C1]  __mod_timer+0xb37/0xf30
[ 1164.651246][    C1]  schedule_timeout+0x126/0x270
[ 1164.656123][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1164.661534][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1164.667428][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1164.672741][    C1]  ? prepare_to_swait_event+0x341/0x380
[ 1164.678329][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[ 1164.683191][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[ 1164.689359][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1164.694693][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1164.699933][    C1]  ? finish_swait+0xcd/0x1f0
[ 1164.704566][    C1]  rcu_gp_kthread+0x99/0x390
[ 1164.709176][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1164.714388][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1164.719369][    C1]  ? __kthread_parkme+0x1a1/0x200
[ 1164.724452][    C1]  kthread+0x711/0x8a0
[ 1164.728557][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1164.733760][    C1]  ? __pfx_kthread+0x10/0x10
[ 1164.738371][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1164.743604][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1164.748822][    C1]  ? __pfx_kthread+0x10/0x10
[ 1164.753410][    C1]  ret_from_fork+0x3fc/0x770
[ 1164.758018][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1164.763193][    C1]  ? __switch_to_asm+0x39/0x70
[ 1164.768013][    C1]  ? __switch_to_asm+0x33/0x70
[ 1164.772781][    C1]  ? __pfx_kthread+0x10/0x10
[ 1164.777368][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1164.782156][    C1]  </TASK>
[ 1164.785197][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1164.791538][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1164.796775][    C0] NMI backtrace for cpu 0
[ 1164.796790][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[ 1164.796810][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1164.796821][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1164.796846][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 a0 23 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1164.796861][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[ 1164.796877][    C0] RAX: 0716413ee9c0ed00 RBX: ffffffff81973de8 RCX: 0716413ee9c0ed00
[ 1164.796890][    C0] RDX: 0000000000000001 RSI: ffffffff8d9705da RDI: ffffffff8be26f40
[ 1164.796903][    C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb
[ 1164.796916][    C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0bcf0
[ 1164.796929][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[ 1164.796940][    C0] FS:  0000000000000000(0000) GS:ffff888125c5f000(0000) knlGS:0000000000000000
[ 1164.796954][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1164.796966][    C0] CR2: 00007fda058600a8 CR3: 0000000023732000 CR4: 00000000003526f0
[ 1164.796981][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1164.796991][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1164.797003][    C0] Call Trace:
[ 1164.797009][    C0]  <TASK>
[ 1164.797015][    C0]  default_idle+0x13/0x20
[ 1164.797038][    C0]  default_idle_call+0x74/0xb0
[ 1164.797062][    C0]  do_idle+0x1e8/0x510
[ 1164.797084][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1164.797106][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1164.797132][    C0]  ? do_idle+0x4ed/0x510
[ 1164.797155][    C0]  cpu_startup_entry+0x44/0x60
[ 1164.797177][    C0]  rest_init+0x2de/0x300
[ 1164.797201][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1164.797226][    C0]  start_kernel+0x47d/0x500
[ 1164.797244][    C0]  x86_64_start_reservations+0x24/0x30
[ 1164.797265][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1164.797287][    C0]  common_startup_64+0x13e/0x147
[ 1164.797339][    C0]  </TASK>
[ 1166.434846][ T1302] ieee802154 phy1 wpan1: encryption failed: -22