last executing test programs:

6.338782818s ago: executing program 0 (id=2226):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x20002)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r0, 0x10c000)
mmap(&(0x7f000007d000/0x4000)=nil, 0x4000, 0x0, 0x8031, r0, 0x74210000)

6.156149613s ago: executing program 0 (id=2229):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x802, 0x0, 0x2}, 0x20)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048080)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000001, 0xfffffffe, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000f55400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001", @ANYRES8=r5], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}}, 0x20008040)
socket$nl_route(0x10, 0x3, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x4004013, 0xffffffffffffffff, 0x80000000)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)

4.236662254s ago: executing program 3 (id=2244):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="090100001000010000009f1bd9bd000000000000000000000019000000000000e00000020000000000000000460100000000000000200004000020fc0c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010100000000000000000000000000000000002b000000e0000002000000000000000000000000ff03000000000000030000000000000000000000000000000000000000000000000000000400000002000000000000000000000000000000000000080000000000000000020000000000000000000000000000000000000004000000000000000000800001000000fcffffff00000000000000000a"], 0x138}, 0x1, 0x0, 0x0, 0x24048021}, 0x0)

4.002325088s ago: executing program 3 (id=2246):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x24008004)

3.808460444s ago: executing program 0 (id=2248):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6a3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="1b", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0xff, @mcast2, 0xfffffffd}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="d095ae9b960d073b35f2ca70833e856c7bc46fb90f1bf4662ddd0e54f67bf8dc1dfe925701c0231abf83fe2865b1d26553bee910a02fe361e1c66c779278a2ebfe40066cf2f462cb67995cc0f53ef5be0e561a6e06e8521aa9594c7f7e138b7585999421ac26dc4e6066d799b40c40ff8a4e98615dae", 0x76}, {&(0x7f0000000400)="a19320f564c3f1ec372395e2e8e6a96df5eb9d7aa2aa163ccbebbc480484195c01f34522ee80af0e5d562739ea59c23d0f03de7492b2b24b67dfb7393b31d8723b86814583298e7cae29e19ec982ec89c0f6f23fb156102f349aff8819073e7481887a06cdfd31c17c5e77466b3266d8b0106c73a76c45cca2676ca04e8a27e133f4658000c4ae07a2a17d1ae8413b2b1a07b996af55413276bf1bec78a830c6281b48021f023bb008361a766fe41b9863438ff07c6b8fa577afafd372390440d6cb899aac95242244", 0xc9}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x2d8}}], 0x2, 0x40881)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x8)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000280), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0xfff2}, {0x7}}}, 0x24}}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r5=>0x0)
sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x100}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
close(r6)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80)
syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[@ANYBLOB="05020100000fff000d8f6cfc0a99ff0fd8d0749aa99c"], 0x16, 0x3)
write$cgroup_int(r7, &(0x7f0000000040)=0x800000000001c8, 0x12)
dup(r2)

3.808242649s ago: executing program 4 (id=2249):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x9, 0x0, 0x0, {}, {0x2, 0x2}, {0x0, 0x5, 0x20}, {0x1, 0x8, 0x4}, 0x3f, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0xb})

3.770805719s ago: executing program 3 (id=2250):
r0 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x40000001, 0xb8}, &(0x7f0000000400)=<r1=>0x0, &(0x7f0000010200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r3, &(0x7f0000000500)=""/45, 0x2d) (async, rerun: 64)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x8008010) (async, rerun: 64)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087ff0f10ab0701fc908d01020301090212433f00003b0009040000000802"], 0x0)

3.594353818s ago: executing program 4 (id=2252):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="ffa933d807000000ea", 0x9}, {&(0x7f0000000100)="906aa801a54549b1f11b6fc237db49e11d5db2b75f10a003264f8b3e3a23a906eea72ae34a88", 0x26}], 0x2}}], 0x400000000000038, 0x2400c040)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', <r2=>0x0, 0x2f, 0x3, 0x9, 0xc42, 0x4, @local, @mcast2, 0x10, 0x8000, 0xa, 0x1}})
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@mcast1, r2}, 0x14)

3.533588248s ago: executing program 4 (id=2253):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

3.521517791s ago: executing program 2 (id=2254):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x18, 0x3)
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x8103, 0x2, 0x2}, 0x18, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff16, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7ffc, 0x2, 0x4})
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000100), 0x8)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000180)={0x3, r4, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1})
close_range(r2, 0xffffffffffffffff, 0x0)
landlock_restrict_self(r0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000040)={'sit0\x00', 0x0})
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)

3.292632963s ago: executing program 3 (id=2256):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x3f00000000000000, 0x7fffffff, 0x6ec}, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

3.275861442s ago: executing program 4 (id=2257):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
r3 = memfd_create(0x0, 0x4)
ftruncate(r3, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'syzkaller0\x00', 0x9})
r4 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x201e, 0x221e, 0xffffffd6, 0xc251, 0x7ffffffe, 0x1})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r9, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x10, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0xb0, 0x2c, 0xd67, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {}, {0x1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x10000, 0x10000000, 0x101000, 0x5}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7bda}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x54}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040011}, 0x4850)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r8, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
read(r6, &(0x7f00000000c0)=""/171, 0xfdef)

3.24073661s ago: executing program 1 (id=2258):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237)
socket(0x2, 0x3, 0x2)
sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
r5 = dup(r4)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={<r6=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r6})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
syz_emit_ethernet(0xba, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000ac00000000000190780a010102ac1414aa0b0090780100000044000000000000000011000000000000e0000002864000000000010f13e7797bc2b15ae36762349a7d050493e40c070703657bcb020b63b2c0902d53073fa90605ce352a070b6e6979b065486afd2e020502fe39443c0001e000000100000000ac1414bb000000000a0101010000000000000000000017000000000000000000ac1e000100"/186], 0x0)

3.128535824s ago: executing program 2 (id=2259):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x400000, @local, 0x3}, 0x1c, 0x0, 0x0, 0x0, 0xf5ff}}], 0x2, 0x4004000)

3.026466921s ago: executing program 2 (id=2260):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x24008004)

2.702453698s ago: executing program 0 (id=2261):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0xea)

2.616492561s ago: executing program 2 (id=2262):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x33c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x310, 0x2, [@TCA_U32_SEL={0x1e4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x2, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x2d1, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x5}, {0x2, 0x8, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x114, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x8, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x7d, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x5, 0x9, 0x2}, {0x1000, 0x80002, 0x264, 0x9}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x7, 0x7}, {0x80, 0x3, 0x2, 0x1e0}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x33c}}, 0x24040084)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_mrelease(0xffffffffffffffff, 0x0)
request_key(0x0, &(0x7f0000001200)={'syz', 0x1}, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c820043b000d85ebbe9fe2407267056d5700010003f69e530dd1cac2df99b50323008de89b535bf037b2fcc1c60b3c3e6a5562a953114859e42984c943b8ff3d4815fc94b44a1ef1436cc216f2e230cb79010d075cebbbc8e61df40d36149db45848f5845bc4dc36449897fe5f943083e58bc83b79fa976ef820a621d730acb85abf4380c2db9d9f5696d593b1dd150d5e76ed04c3761fc608aac4a029470fbbda4ae68f4352fd10a34a96d8418640da8c8c9eae33038380a5e1eebe31c963e4e9f4ca3a3e867e1455c744ccc8a93741ddcaca0cec1ff60ada0a2d3a43394c25c9027ac479d9e918878e4b81c5f9c71e4eb3bc5d564a3376"], 0x9)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r5 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}})
r7 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x2200000000000000, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}})
ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r5)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)

2.548432515s ago: executing program 0 (id=2263):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_usb_disconnect(r0)
read$hidraw(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="4006ec000000ec0b0047e38428e77644bd1ba3ee7f9586e0500b166640817a84fd425fb7f74cec340ef3e1ecef31b4ec280272b6d2eb665151f3e80cb90f29c821466718e1f2a348012e0709701a15af2b354cc4fd8aced21f7b7a0603e18ef2edc38539f8f4b4c31ba1cacabc6f91db83a0f8d835031f97265daf786441fed71cd4a4339a42a309907a3d9b303942e5df74977004c04355e31385ad446cda329cab29d9a86fcc379154be1f92cd4b2d0710a9a661d6bcee68c4c66eb36563db28a05cef8e4638b45a1756aec6fed6985d2b57c320fb57858b5356e184fe8787c0ac255e"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x10, 0xd1, "87a0f7cdbbcc1852e525ae202e7448c00cb94650864999e5b55b5b3d6d811fcbdc22d91ddf0d4a6f332e897f1c51f881a29126a7c6133d1b7a45aabc561c636ba48f8f933b7f6eefde97bb1363fe175d1568b6a3dd77804c2fd81341ad59e1c15a5f12cee2b383eb1e1c4f3c43dd0603619451a330923f079bfbc5d20e704f45129b201f355ac2a4d429838763b3158a1f6b36a648f96e43f7a249b51c1b81fa96a9139513cb7dcfe1a42aa61f3079498bdce71f477f61b2d36c7a834cb1058b1b2d5b5752354bf099b5e8aa801c1b5a3c"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x1800, 0x6, 0x6, 0xc1, 0x7ff, 0x3, 0x7, 0x0, 0x9895, 0x3ff, 0x2, 0x2}}, 0xfffffffffffffffd, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f0000000440)={0x20, 0x89, 0x2}})

2.234729118s ago: executing program 3 (id=2264):
r0 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x3a0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x7, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)

1.77664834s ago: executing program 4 (id=2265):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c8c0)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca", 0x24}], 0x1)

1.711589663s ago: executing program 3 (id=2266):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0x54ef}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000004100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x40, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x11, 0x800000003, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000080))

1.064362707s ago: executing program 1 (id=2267):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

872.520217ms ago: executing program 1 (id=2268):
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = epoll_create1(0x0)
r2 = dup3(r0, r1, 0x80000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009000000000000000400000718110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509feffffff00009500000000000000bf91000000000000b7020000010000008500000085040000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101}, 0x94)

777.314365ms ago: executing program 1 (id=2269):
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)

598.740801ms ago: executing program 2 (id=2270):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xf, 0x7, &(0x7f0000000cc0)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @ldst={0x0, 0x1, 0x4, 0x9, 0x6, 0xffffffffffffffe0, 0x19}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5}], &(0x7f0000000300)='syzkaller\x00', 0x3, 0xea, &(0x7f0000000d40)=""/234, 0x40f00, 0x41, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0xf, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001180)=[{0x0, 0x1, 0xa}, {0x1, 0x2, 0x9, 0x5}, {0x1, 0x1, 0x8, 0x5}, {0x2, 0x1, 0x10, 0xa}, {0x5, 0x2, 0x9, 0xf}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000500)=@multiplanar_overlay={0x2, 0x6, 0x4, 0x400, 0x2c2, {}, {0x3, 0x2, 0xd5, 0x80, 0x3, 0x8, "c61f3a28"}, 0xfffffffe, 0x3, {0x0}, 0x8})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x33, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000024c0)={{0x0, 0x0, 0x80, {0x200000000000000, 0xf000, 0x3}}, "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", "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"})
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000b80))
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080))
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
listen(r0, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
unlinkat(r1, &(0x7f0000000600)='./file0\x00', 0x200)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x218, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4af3}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x29, 0x3, "81785f9162a45cded4d9a9629dfcbde28395484c3edcc369ba9b5a30c09877030b7cf52c12"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "83f85319573575671a99f4ac5d1c8f01059bc908d8"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fa4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d9a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb20}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080)
bind$alg(r7, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r9 = accept4(r7, 0x0, 0x0, 0x800)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x6000000, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffc, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

562.598712ms ago: executing program 1 (id=2271):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$FUSE_INIT(r2, 0x0, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40)
getdents64(r3, 0x0, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
listen(r1, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000540600fe8000000000000000000000001800bbfe8000000000000000000000000000aa00004e22e601e68346e81016bd"], 0x0)

561.748491ms ago: executing program 4 (id=2272):
r0 = socket(0x6, 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x5)
accept(r1, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
syz_open_dev$loop(0x0, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000000)={0x17a6, 0x3, [{0x1, 0x1}, {0x8}, {0x1, 0x1}]})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48})
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000900)}, 0x10)
ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
lstat(0x0, 0x0)
getpid()
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))

352.19354ms ago: executing program 1 (id=2273):
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x301, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="444000cf750f36733bed2700fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="88280000000000002400128009000100626f6e640000000014000280080014000000000005001d0000000000"], 0x44}}, 0x0)
sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b", 0x9d}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2e0}}], 0x1, 0x810)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r7 = accept4(r6, 0x0, 0x0, 0x800)
write$apparmor_current(r0, &(0x7f0000000500)=@hat={'permhat ', 0x4, 0x5e, ['/dev/btrfs-control\x00', '()\xcb,]-\x00', '}-.\xb4\x00', '\x00', '/dev/kvm\x00']}, 0x44)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r8)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r8, 0xc0085504, &(0x7f0000000140)=0x10)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'})

257.424711ms ago: executing program 2 (id=2274):
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = syz_io_uring_setup(0x1b68, &(0x7f0000000380)={0x0, 0x1040, 0x10, 0x1003, 0x101}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127})
io_uring_enter(r5, 0x6d1c, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000000c0)={0x8000, r5, 0x0, {0x6, 0x3}, 0x9}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="400f1100000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r10=>0x0})
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYBLOB="052b33d0"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r10, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
read(r1, &(0x7f0000000040), 0x0)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000015c0)={@loopback, @remote, 0x1, "eb03c2e93b0b5948fed46577da3045acf28bf3a6612aa11c28e097cca7df7ca7", 0x6, 0x51b8, 0x7, 0x9}, 0x3c)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046})
io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000002d00)=[{0x6, 0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000400)=""/147, 0x93}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/206, 0xce}, {&(0x7f00000015c0)}], &(0x7f0000001680)=[0xffffffffffffe2bf, 0xfffffffffffffff7, 0x6, 0x4, 0xdaed]}, {0x3, 0x1, 0x0, &(0x7f0000002800)=[{&(0x7f00000016c0)=""/152, 0x98}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/95, 0x5f}], &(0x7f0000002840)=[0x7, 0xa]}, {0x6, 0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/245, 0xf5}, {&(0x7f0000002a00)}, {&(0x7f0000002a40)=""/228, 0xe4}, {&(0x7f0000002b40)=""/126, 0x7e}, {&(0x7f0000002bc0)=""/122, 0x7a}], &(0x7f0000002cc0)=[0x8000]}], 0x3)
syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)

0s ago: executing program 0 (id=2275):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x6})
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x19, 0x14, "ffb3d741dd17c1ac0d38ef0200000000000000000000000000000000000000000000000000fe00", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xffffffffffffbffe, 0x53e]}})
r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x280}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000240))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000100))
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1401, 0x6cb22a084bac4729, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
unshare(0x20000400)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00000000000000000000000012", [0xc, 0xfffffffffffffffd]})

kernel console output (not intermixed with test programs):

lNumber=3
[  464.777608][T11017] usb 1-1: Product: syz
[  464.787737][T11017] usb 1-1: Manufacturer: syz
[  464.792748][   T30] audit: type=1326 audit(1764708532.375:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  464.822744][T11017] usb 1-1: SerialNumber: syz
[  464.858713][T11017] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  464.893572][T11020] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  464.946017][   T30] audit: type=1326 audit(1764708532.375:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  465.060964][   T30] audit: type=1326 audit(1764708532.375:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  465.218300][   T30] audit: type=1326 audit(1764708532.375:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  465.361517][   T30] audit: type=1326 audit(1764708532.455:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13752 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  466.041442][T11020] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  466.048812][T11020] ath9k_htc: Failed to initialize the device
[  466.174954][T11020] usb 1-1: ath9k_htc: USB layer deinitialized
[  467.266203][T13792] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  467.434225][T13798] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  467.796252][T11017] usb 1-1: USB disconnect, device number 42
[  468.330975][T13812] loop2: detected capacity change from 0 to 7
[  468.391585][T13812] Dev loop2: unable to read RDB block 7
[  468.409320][T13812]  loop2: AHDI p1 p2 p3
[  468.433141][T13812] loop2: partition table partially beyond EOD, truncated
[  468.461683][T13812] loop2: p1 start 1818582900 is beyond EOD, truncated
[  468.469505][T13812] loop2: p3 start 335544320 is beyond EOD, truncated
[  468.768430][T13820] xt_hashlimit: size too large, truncated to 1048576
[  468.785686][T13820] xt_hashlimit: max too large, truncated to 1048576
[  469.281820][T11017] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  469.901409][T11017] usb 1-1: Using ep0 maxpacket: 8
[  469.937885][T11017] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  469.980789][T11017] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024
[  470.025280][T11017] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  470.040406][T11017] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  470.110554][T11017] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  470.120092][T11017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.130236][T11017] usb 1-1: Product: syz
[  470.151871][T11017] usb 1-1: Manufacturer: syz
[  470.170681][T11017] usb 1-1: SerialNumber: syz
[  470.208964][T13826] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  470.217170][T13826] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  470.451930][T13835] set match dimension is over the limit!
[  470.499417][T13826] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1619' resets device
[  470.531082][T11017] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  470.669567][T11017] usbtest 1-1:1.0: Linux user mode ISO test driver
[  470.727462][T11017] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  470.790213][T11017] usb 1-1: USB disconnect, device number 43
[  471.091360][ T5902] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  471.253562][ T5902] usb 2-1: config index 0 descriptor too short (expected 65316, got 36)
[  471.262199][ T5902] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  471.293344][ T5902] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  471.332239][ T5902] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  471.360534][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.406242][ T5902] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  471.442372][T11017] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  471.563894][ T5902] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12
[  471.601573][T11017] usb 3-1: Using ep0 maxpacket: 16
[  471.610142][T11017] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  471.626624][ T5902] usb 2-1: USB disconnect, device number 36
[  471.631892][T11017] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  471.666034][T11017] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  471.691357][T11017] usb 3-1: config 1 interface 2 has no altsetting 0
[  471.713886][T11017] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  471.723602][T11017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.738826][T11017] usb 3-1: Product: syz
[  471.746747][T11017] usb 3-1: Manufacturer: syz
[  471.755861][T11017] usb 3-1: SerialNumber: syz
[  471.940101][T13856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1628'.
[  471.979683][T11017] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  472.016209][T11017] usb 3-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  472.025640][T11017] usb 3-1: found format II with max.bitrate = 3, frame size=7
[  472.035938][T11017] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  472.043920][T11017] usb 3-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  472.056533][T11017] usb 3-1: found format II with max.bitrate = 3, frame size=7
[  472.067372][T11017] usb 3-1: selecting invalid altsetting 0
[  472.077103][T11017] usb 3-1: selecting invalid altsetting 0
[  472.201001][T11017] usb 3-1: USB disconnect, device number 22
[  472.391070][ T6960] udevd[6960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  472.501833][T11020] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  472.631367][ T5902] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  472.701412][T11020] usb 4-1: Using ep0 maxpacket: 32
[  472.709917][T11020] usb 4-1: config 131 has an invalid interface number: 125 but max is 0
[  472.721876][T11020] usb 4-1: config 131 has no interface number 0
[  472.809210][T11020] usb 4-1: config 131 interface 125 has no altsetting 0
[  472.811459][ T5902] usb 1-1: Using ep0 maxpacket: 32
[  472.820719][T11020] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  472.832076][T11020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.840234][T11020] usb 4-1: Product: syz
[  472.842415][ T5902] usb 1-1: config 0 has an invalid interface number: 124 but max is 0
[  472.875453][ T5902] usb 1-1: config 0 has no interface number 0
[  472.875591][T11020] usb 4-1: Manufacturer: syz
[  472.893925][ T5902] usb 1-1: config 0 interface 124 has no altsetting 0
[  472.907981][T11020] usb 4-1: SerialNumber: syz
[  472.928943][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=88.47
[  472.958090][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.979057][ T5902] usb 1-1: Product: syz
[  473.101600][ T5902] usb 1-1: Manufacturer: syz
[  473.108732][ T5902] usb 1-1: SerialNumber: syz
[  473.127485][ T5902] usb 1-1: config 0 descriptor??
[  473.225935][T13883] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  473.272539][T13883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.284769][T13883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.358113][ T5902] usb 1-1: USB disconnect, device number 44
[  474.010781][T13892] loop2: detected capacity change from 0 to 7
[  474.033444][T13892] Dev loop2: unable to read RDB block 7
[  474.050561][T13892]  loop2: AHDI p1 p2 p3
[  474.059700][T13892] loop2: partition table partially beyond EOD, truncated
[  474.083383][T13892] loop2: p1 start 1818582900 is beyond EOD, truncated
[  474.105718][T13892] loop2: p3 start 335544320 is beyond EOD, truncated
[  474.285927][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'.
[  474.678406][T13904] trusted_key: encrypted_key: key user:syz not found
[  474.701600][ T5902] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  474.861475][ T5902] usb 1-1: device descriptor read/64, error -71
[  474.892026][T11017] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  475.051400][T11017] usb 3-1: Using ep0 maxpacket: 16
[  475.059290][T11017] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.070969][T11017] usb 3-1: config 0 interface 0 has no altsetting 0
[  475.078748][T11017] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  475.088419][T11017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.100885][T11017] usb 3-1: config 0 descriptor??
[  475.112240][ T5902] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  475.227584][T11020] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  475.264578][ T5902] usb 1-1: device descriptor read/64, error -71
[  475.384113][ T5902] usb usb1-port1: attempt power cycle
[  475.741522][ T5902] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  475.762289][ T5902] usb 1-1: device descriptor read/8, error -71
[  475.925555][T11017] usbhid 3-1:0.0: can't add hid device: -71
[  475.953561][T11017] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  475.982290][T11017] usb 3-1: USB disconnect, device number 23
[  476.012395][ T5902] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  476.019470][T11020] ueagle-atm 4-1:131.125: usbatm_usb_probe: bind failed: -19!
[  476.036952][ T5902] usb 1-1: device descriptor read/8, error -71
[  476.043664][T11020] usb 4-1: USB disconnect, device number 47
[  476.162129][ T5902] usb usb1-port1: unable to enumerate USB device
[  476.555707][T13929] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  476.861322][T13935] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  477.183360][T13939] FAULT_INJECTION: forcing a failure.
[  477.183360][T13939] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  477.198009][T13939] CPU: 1 UID: 0 PID: 13939 Comm: syz.3.1658 Not tainted syzkaller #0 PREEMPT(full) 
[  477.198039][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  477.198057][T13939] Call Trace:
[  477.198070][T13939]  <TASK>
[  477.198080][T13939]  dump_stack_lvl+0x189/0x250
[  477.198112][T13939]  ? __pfx____ratelimit+0x10/0x10
[  477.198145][T13939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  477.198169][T13939]  ? __pfx__printk+0x10/0x10
[  477.198199][T13939]  ? fs_reclaim_acquire+0x7d/0x100
[  477.198231][T13939]  should_fail_ex+0x414/0x560
[  477.198269][T13939]  prepare_alloc_pages+0x213/0x610
[  477.198300][T13939]  __alloc_frozen_pages_noprof+0x123/0x370
[  477.198328][T13939]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  477.198370][T13939]  alloc_pages_mpol+0x232/0x4a0
[  477.198399][T13939]  alloc_pages_noprof+0xa9/0x190
[  477.198425][T13939]  pte_alloc_one+0x23/0x310
[  477.198452][T13939]  __do_fault+0xd1/0x390
[  477.198477][T13939]  __handle_mm_fault+0x19a9/0x53a0
[  477.198525][T13939]  ? __pfx___handle_mm_fault+0x10/0x10
[  477.198582][T13939]  ? find_vma+0xe7/0x160
[  477.198611][T13939]  ? __pfx_find_vma+0x10/0x10
[  477.198638][T13939]  ? register_lock_class+0x51/0x320
[  477.198676][T13939]  handle_mm_fault+0x40a/0x8e0
[  477.198718][T13939]  do_user_addr_fault+0x764/0x1380
[  477.198768][T13939]  exc_page_fault+0x82/0x100
[  477.198803][T13939]  asm_exc_page_fault+0x26/0x30
[  477.198825][T13939] RIP: 0010:rep_movs_alternative+0x11/0x90
[  477.198851][T13939] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 3a 04 00 66 2e 0f 1f
[  477.198871][T13939] RSP: 0018:ffffc90003c8fca8 EFLAGS: 00050202
[  477.198891][T13939] RAX: ffffffff848a2d00 RBX: 0000000000000004 RCX: 0000000000000004
[  477.198906][T13939] RDX: 0000000000000000 RSI: ffffc90003c8fd70 RDI: 00002000000011c0
[  477.198921][T13939] RBP: ffffc90003c8fdd0 R08: 0000000000000003 R09: 0000000000000004
[  477.198935][T13939] R10: dffffc0000000000 R11: fffff52000791fae R12: 00002000000011c4
[  477.198951][T13939] R13: 00007ffffffff000 R14: ffffc90003c8fd70 R15: 00002000000011c0
[  477.198976][T13939]  ? _copy_from_user+0xa0/0xb0
[  477.199006][T13939]  _copy_to_user+0x8a/0xb0
[  477.199031][T13939]  do_timer_create+0xb50/0x11c0
[  477.199058][T13939]  ? __pfx_vfs_write+0x10/0x10
[  477.199094][T13939]  ? __pfx_do_timer_create+0x10/0x10
[  477.199120][T13939]  ? __fget_files+0x3a0/0x420
[  477.199150][T13939]  __x64_sys_timer_create+0x13f/0x190
[  477.199182][T13939]  ? fput+0xa0/0xd0
[  477.199207][T13939]  ? __pfx___x64_sys_timer_create+0x10/0x10
[  477.199236][T13939]  ? ksys_write+0x22a/0x250
[  477.199272][T13939]  ? __pfx_ksys_write+0x10/0x10
[  477.199309][T13939]  ? do_syscall_64+0xbe/0xf80
[  477.199332][T13939]  do_syscall_64+0xfa/0xf80
[  477.199351][T13939]  ? lockdep_hardirqs_on+0x98/0x140
[  477.199384][T13939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.199406][T13939]  ? clear_bhb_loop+0x60/0xb0
[  477.199433][T13939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.199454][T13939] RIP: 0033:0x7f65dff8f749
[  477.199474][T13939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  477.199492][T13939] RSP: 002b:00007f65e0da5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[  477.199513][T13939] RAX: ffffffffffffffda RBX: 00007f65e01e5fa0 RCX: 00007f65dff8f749
[  477.199529][T13939] RDX: 00002000000011c0 RSI: 0000000000000000 RDI: 00000000fffffffd
[  477.199543][T13939] RBP: 00007f65e0da5090 R08: 0000000000000000 R09: 0000000000000000
[  477.199562][T13939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.199575][T13939] R13: 00007f65e01e6038 R14: 00007f65e01e5fa0 R15: 00007f65e030fa28
[  477.199611][T13939]  </TASK>
[  478.037743][T13951] xfrm0: entered promiscuous mode
[  478.042562][T13949] xt_recent: Unsupported userspace flags (000000de)
[  478.043042][T13951] xfrm0: entered allmulticast mode
[  478.304618][ T5837] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  478.627873][T13971] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  478.880553][T13973] Cannot find del_set index 3 as target
[  481.211171][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  481.211189][   T30] audit: type=1326 audit(1764708549.415:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  481.243141][   T30] audit: type=1326 audit(1764708549.415:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  481.266032][   T30] audit: type=1326 audit(1764708549.415:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  481.291150][   T30] audit: type=1326 audit(1764708549.415:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  481.378326][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'.
[  481.591186][   T30] audit: type=1326 audit(1764708549.415:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  481.671714][   T30] audit: type=1326 audit(1764708549.535:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  481.777331][   T30] audit: type=1326 audit(1764708549.535:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  481.971358][   T30] audit: type=1326 audit(1764708549.585:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  482.134372][   T30] audit: type=1326 audit(1764708549.585:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  482.199844][T14010] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  482.202082][   T30] audit: type=1326 audit(1764708549.585:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  482.277648][T14010] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.285078][T14010] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.327132][T14013] netlink: 'syz.0.1681': attribute type 5 has an invalid length.
[  482.596134][T11020] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  482.753574][T11020] usb 1-1: config 0 has an invalid interface number: 114 but max is 0
[  482.770774][T11020] usb 1-1: config 0 has no interface number 0
[  482.784369][T11020] usb 1-1: too many endpoints for config 0 interface 114 altsetting 111: 97, using maximum allowed: 30
[  482.841822][T11020] usb 1-1: config 0 interface 114 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  482.876158][T11020] usb 1-1: config 0 interface 114 has no altsetting 0
[  482.894453][T11020] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  482.907278][T14019] atomic_op ffff88805dfe8198 conn xmit_atomic 0000000000000000
[  482.907345][T14018] atomic_op ffff88805ea67998 conn xmit_atomic 0000000000000000
[  482.956009][T11020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.972719][T14015] xt_connbytes: Forcing CT accounting to be enabled
[  482.985468][T14015] xt_NFQUEUE: number of total queues is 0
[  482.986428][T11020] usb 1-1: config 0 descriptor??
[  483.250632][T11020] usb 1-1: string descriptor 0 read error: -71
[  483.275694][T11020] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  483.299099][T11020] gp8psk: usb in 128 operation failed.
[  483.320312][T14026] bridge0: Device is already in use.
[  483.325989][T11020] gp8psk: usb in 137 operation failed.
[  483.351990][T11020] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  483.373884][T14028] FAULT_INJECTION: forcing a failure.
[  483.373884][T14028] name failslab, interval 1, probability 0, space 0, times 0
[  483.391592][T11020] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  483.400785][T14028] CPU: 1 UID: 0 PID: 14028 Comm: syz.4.1686 Not tainted syzkaller #0 PREEMPT(full) 
[  483.400816][T14028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  483.400830][T14028] Call Trace:
[  483.400840][T14028]  <TASK>
[  483.400850][T14028]  dump_stack_lvl+0x189/0x250
[  483.400879][T14028]  ? __pfx____ratelimit+0x10/0x10
[  483.400920][T14028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.400944][T14028]  ? __pfx__printk+0x10/0x10
[  483.400978][T14028]  ? __pfx___might_resched+0x10/0x10
[  483.400999][T14028]  ? fs_reclaim_acquire+0x7d/0x100
[  483.401027][T14028]  should_fail_ex+0x414/0x560
[  483.401060][T14028]  should_failslab+0xa8/0x100
[  483.401085][T14028]  kmem_cache_alloc_noprof+0x74/0x6e0
[  483.401116][T14028]  ? ptlock_alloc+0x20/0x70
[  483.401146][T14028]  ? set_page_refcounted+0xa0/0x1e0
[  483.401174][T14028]  ptlock_alloc+0x20/0x70
[  483.401204][T14028]  pte_alloc_one+0x7a/0x310
[  483.401236][T14028]  __do_fault+0xd1/0x390
[  483.401257][T14028]  __handle_mm_fault+0x19a9/0x53a0
[  483.401303][T14028]  ? __pfx___handle_mm_fault+0x10/0x10
[  483.401349][T14028]  ? find_vma+0xe7/0x160
[  483.401376][T14028]  ? __pfx_find_vma+0x10/0x10
[  483.401402][T14028]  ? register_lock_class+0x51/0x320
[  483.401427][T14028]  handle_mm_fault+0x40a/0x8e0
[  483.401455][T14028]  do_user_addr_fault+0x764/0x1380
[  483.401490][T14028]  exc_page_fault+0x82/0x100
[  483.401514][T14028]  asm_exc_page_fault+0x26/0x30
[  483.401529][T14028] RIP: 0010:rep_movs_alternative+0x11/0x90
[  483.401548][T14028] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 3a 04 00 66 2e 0f 1f
[  483.401561][T14028] RSP: 0018:ffffc90003497ca8 EFLAGS: 00050202
[  483.401575][T14028] RAX: ffffffff848a2d00 RBX: 0000000000000004 RCX: 0000000000000004
[  483.401585][T14028] RDX: 0000000000000000 RSI: ffffc90003497d70 RDI: 00002000000011c0
[  483.401596][T14028] RBP: ffffc90003497dd0 R08: 0000000000000003 R09: 0000000000000004
[  483.401605][T14028] R10: dffffc0000000000 R11: fffff52000692fae R12: 00002000000011c4
[  483.401616][T14028] R13: 00007ffffffff000 R14: ffffc90003497d70 R15: 00002000000011c0
[  483.401633][T14028]  ? _copy_from_user+0xa0/0xb0
[  483.401653][T14028]  _copy_to_user+0x8a/0xb0
[  483.401670][T14028]  do_timer_create+0xb50/0x11c0
[  483.401688][T14028]  ? __pfx_vfs_write+0x10/0x10
[  483.401712][T14028]  ? __pfx_do_timer_create+0x10/0x10
[  483.401730][T14028]  ? __fget_files+0x3a0/0x420
[  483.401759][T14028]  __x64_sys_timer_create+0x13f/0x190
[  483.401790][T14028]  ? fput+0xa0/0xd0
[  483.401814][T14028]  ? __pfx___x64_sys_timer_create+0x10/0x10
[  483.401842][T14028]  ? ksys_write+0x22a/0x250
[  483.401871][T14028]  ? __pfx_ksys_write+0x10/0x10
[  483.401903][T14028]  ? do_syscall_64+0xbe/0xf80
[  483.401920][T14028]  do_syscall_64+0xfa/0xf80
[  483.401933][T14028]  ? lockdep_hardirqs_on+0x98/0x140
[  483.401956][T14028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.401971][T14028]  ? clear_bhb_loop+0x60/0xb0
[  483.401989][T14028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.402004][T14028] RIP: 0033:0x7fcb16f8f749
[  483.402017][T14028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.402030][T14028] RSP: 002b:00007fcb17dc6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[  483.402045][T14028] RAX: ffffffffffffffda RBX: 00007fcb171e5fa0 RCX: 00007fcb16f8f749
[  483.402056][T14028] RDX: 00002000000011c0 RSI: 0000000000000000 RDI: 00000000fffffffd
[  483.402066][T14028] RBP: 00007fcb17dc6090 R08: 0000000000000000 R09: 0000000000000000
[  483.402075][T14028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.402083][T14028] R13: 00007fcb171e6038 R14: 00007fcb171e5fa0 R15: 00007fcb1730fa28
[  483.402108][T14028]  </TASK>
[  483.781432][T11020] usb 1-1: USB disconnect, device number 49
[  484.239105][T11020] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  484.401445][T11020] usb 3-1: Using ep0 maxpacket: 8
[  484.408777][T11020] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  484.419801][T11020] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  484.430266][T11020] usb 3-1: config 0 has no interface number 0
[  484.449581][T11020] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  484.485021][T11020] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  484.496978][T11020] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  484.544625][T11020] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4
[  484.554668][T11020] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0
[  484.564299][T11020] usb 3-1: Product: syz
[  484.574467][T11020] usb 3-1: Manufacturer: syz
[  484.590821][T11020] usb 3-1: config 0 descriptor??
[  484.605144][T14030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  484.650019][T14042] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  485.182534][T14048] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1693'.
[  485.237172][T11020] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input24
[  485.663063][ T5902] usb 3-1: USB disconnect, device number 24
[  485.663090][    C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  486.036387][T14058] xt_TPROXY: Can be used only with -p tcp or -p udp
[  486.052991][T14058] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1695'.
[  486.750184][T14070] bridge0: left allmulticast mode
[  488.543179][T14091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1708'.
[  488.575676][T14091] netlink: 'syz.0.1708': attribute type 7 has an invalid length.
[  488.602839][T14091] netlink: 'syz.0.1708': attribute type 8 has an invalid length.
[  488.626529][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'.
[  489.141742][T11020] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  489.156300][T14101] netlink: 'syz.1.1712': attribute type 1 has an invalid length.
[  489.291357][T11020] usb 3-1: Using ep0 maxpacket: 8
[  489.297486][T14101] 8021q: adding VLAN 0 to HW filter on device bond9
[  489.317277][T11020] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  489.332432][T11020] usb 3-1: config 0 has no interface number 0
[  489.348224][T11020] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16
[  489.358099][T11020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.378472][T11020] usb 3-1: Product: syz
[  489.383156][T11020] usb 3-1: Manufacturer: syz
[  489.388069][T11020] usb 3-1: SerialNumber: syz
[  489.403578][T11020] usb 3-1: config 0 descriptor??
[  489.429337][T14103] bond9: (slave veth11): Enslaving as an active interface with a down link
[  489.505382][T14104] 8021q: adding VLAN 0 to HW filter on device batadv2
[  489.530831][T14104] bond9: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  489.549130][    C0] vkms_vblank_simulate: vblank timer overrun
[  489.635341][T11020] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  489.656116][T11020] uvcvideo 3-1:0.31: No valid video chain found.
[  489.703443][T11020] usb 3-1: USB disconnect, device number 25
[  490.676809][T14128] loop2: detected capacity change from 0 to 7
[  490.853648][T14128] Dev loop2: unable to read RDB block 7
[  490.890213][T14128]  loop2: AHDI p1 p2 p3
[  490.932064][T14128] loop2: partition table partially beyond EOD, truncated
[  491.069787][T14128] loop2: p1 start 1601398130 is beyond EOD, truncated
[  491.077703][T14128] loop2: p2 start 1702059890 is beyond EOD, truncated
[  491.107737][T14137] FAULT_INJECTION: forcing a failure.
[  491.107737][T14137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  491.341466][T14137] CPU: 0 UID: 0 PID: 14137 Comm: syz.3.1722 Not tainted syzkaller #0 PREEMPT(full) 
[  491.341496][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  491.341510][T14137] Call Trace:
[  491.341519][T14137]  <TASK>
[  491.341528][T14137]  dump_stack_lvl+0x189/0x250
[  491.341565][T14137]  ? __pfx____ratelimit+0x10/0x10
[  491.341597][T14137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  491.341619][T14137]  ? __pfx__printk+0x10/0x10
[  491.341648][T14137]  ? __might_fault+0xb0/0x130
[  491.341694][T14137]  should_fail_ex+0x414/0x560
[  491.341727][T14137]  _copy_from_user+0x2d/0xb0
[  491.341750][T14137]  ___sys_sendmsg+0x158/0x2a0
[  491.341787][T14137]  ? __pfx____sys_sendmsg+0x10/0x10
[  491.341851][T14137]  ? rcu_read_lock_any_held+0xb3/0x120
[  491.341905][T14137]  ? __fget_files+0x2a/0x420
[  491.341928][T14137]  ? __fget_files+0x3a0/0x420
[  491.341963][T14137]  __x64_sys_sendmsg+0x19b/0x260
[  491.341999][T14137]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  491.342042][T14137]  ? __pfx_ksys_write+0x10/0x10
[  491.342077][T14137]  ? do_syscall_64+0xbe/0xf80
[  491.342101][T14137]  do_syscall_64+0xfa/0xf80
[  491.342119][T14137]  ? lockdep_hardirqs_on+0x98/0x140
[  491.342151][T14137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.342172][T14137]  ? clear_bhb_loop+0x60/0xb0
[  491.342198][T14137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.342217][T14137] RIP: 0033:0x7f65dff8f749
[  491.342236][T14137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  491.342254][T14137] RSP: 002b:00007f65e0da5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  491.342282][T14137] RAX: ffffffffffffffda RBX: 00007f65e01e5fa0 RCX: 00007f65dff8f749
[  491.342298][T14137] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  491.342312][T14137] RBP: 00007f65e0da5090 R08: 0000000000000000 R09: 0000000000000000
[  491.342325][T14137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  491.342337][T14137] R13: 00007f65e01e6038 R14: 00007f65e01e5fa0 R15: 00007f65e030fa28
[  491.342369][T14137]  </TASK>
[  491.557489][    C0] vkms_vblank_simulate: vblank timer overrun
[  491.563493][    C0] hrtimer: interrupt took 212267192 ns
[  491.663538][    C0] vkms_vblank_simulate: vblank timer overrun
[  492.049308][T14140] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  492.504119][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'.
[  493.721433][T11020] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  493.923149][T11020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.951962][T11020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.981346][T11020] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  494.012169][T11020] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  494.026352][T11020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.102241][T11020] usb 5-1: config 0 descriptor??
[  494.234532][T14174] macvlan2: entered promiscuous mode
[  494.336492][T14176] Cannot find set identified by id 65534 to match
[  494.501402][ T5916] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  494.541129][T11020] pantherlord 0003:0810:0002.000D: unknown main item tag 0x3
[  494.562169][T11020] pantherlord 0003:0810:0002.000D: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0
[  494.599955][T11020] pantherlord 0003:0810:0002.000D: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  494.691387][ T5916] usb 2-1: Using ep0 maxpacket: 16
[  494.713758][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.772259][ T5916] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  494.801953][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.828857][ T5916] usb 2-1: config 0 descriptor??
[  494.921772][T14181] kvm: pic: non byte write
[  495.128713][T11020] usb 5-1: USB disconnect, device number 52
[  495.349440][ T5916] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  495.758547][T14174] macvlan3: entered promiscuous mode
[  495.871826][T11020] usb 2-1: USB disconnect, device number 37
[  496.025213][T14201] pim6reg: entered allmulticast mode
[  496.169623][T14203] netlink: 'syz.3.1739': attribute type 1 has an invalid length.
[  496.209892][T14205] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  496.259077][T14205] bond0: (slave lo): Enslaving as a backup interface with an up link
[  496.316156][T14205] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  496.637263][T14216] x_tables: ip_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0
[  496.683590][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  496.683610][   T30] audit: type=1326 audit(1764708564.875:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14213 comm="syz.2.1744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x0
[  496.723782][T14203] 8021q: adding VLAN 0 to HW filter on device bond7
[  496.769961][T14209] bond7: (slave batadv3): Opening slave failed
[  497.181406][ T5916] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  497.333376][ T5916] usb 2-1: device descriptor read/64, error -71
[  497.371490][ T5923] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  497.521379][ T5923] usb 5-1: device descriptor read/64, error -71
[  497.571422][ T5916] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  497.631892][T14237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1753'.
[  497.731832][ T5916] usb 2-1: device descriptor read/64, error -71
[  497.761378][ T5923] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  497.795786][T14245] x_tables: duplicate underflow at hook 1
[  497.824244][T14247] xt_NFQUEUE: number of queues (65535) out of range (got 65541)
[  497.846328][ T5916] usb usb2-port1: attempt power cycle
[  497.921454][ T5923] usb 5-1: device descriptor read/64, error -71
[  497.967736][T14250] xt_hashlimit: size too large, truncated to 1048576
[  497.979923][T14250] xt_hashlimit: max too large, truncated to 1048576
[  498.041757][ T5923] usb usb5-port1: attempt power cycle
[  498.107622][T14255] netlink: 'syz.2.1759': attribute type 25 has an invalid length.
[  498.116463][T14255] netlink: 'syz.2.1759': attribute type 7 has an invalid length.
[  498.130023][T14255] netlink: 'syz.2.1759': attribute type 1 has an invalid length.
[  498.140906][T14255] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1759'.
[  498.150351][T14255] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.201424][ T5916] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  498.222250][ T5916] usb 2-1: device descriptor read/8, error -71
[  498.301465][ T5902] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  498.361421][ T6924] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  498.391356][ T5923] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  498.412058][ T5923] usb 5-1: device descriptor read/8, error -71
[  498.454259][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  498.465652][ T5916] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  498.475458][ T5902] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  498.485092][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.493800][ T5902] usb 4-1: Product: syz
[  498.494087][ T5916] usb 2-1: device descriptor read/8, error -71
[  498.504593][ T5902] usb 4-1: Manufacturer: syz
[  498.509219][ T5902] usb 4-1: SerialNumber: syz
[  498.514429][ T6924] usb 1-1: Using ep0 maxpacket: 32
[  498.531176][ T6924] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  498.539531][ T6924] usb 1-1: config 0 has no interface number 0
[  498.548818][ T6924] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  498.558487][ T6924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.566721][ T6924] usb 1-1: Product: syz
[  498.570996][ T6924] usb 1-1: Manufacturer: syz
[  498.575838][ T6924] usb 1-1: SerialNumber: syz
[  498.584394][ T6924] usb 1-1: config 0 descriptor??
[  498.602523][ T6924] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  498.631768][ T5916] usb usb2-port1: unable to enumerate USB device
[  498.651390][ T5923] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  498.672386][ T5923] usb 5-1: device descriptor read/8, error -71
[  498.781943][ T5923] usb usb5-port1: unable to enumerate USB device
[  498.831404][ T6924] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  498.854461][ T6924] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  498.884976][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  498.892944][ T6924] usb 1-1: USB disconnect, device number 50
[  498.920568][ T6924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  498.958302][ T6924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  498.977951][ T6924] quatech2 1-1:0.51: device disconnected
[  499.550856][T14276] syzkaller1: entered promiscuous mode
[  499.562495][ T5902] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  499.569410][ T5902] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  499.577505][ T5902] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  499.581665][T14276] syzkaller1: entered allmulticast mode
[  499.881012][T14279] FAULT_INJECTION: forcing a failure.
[  499.881012][T14279] name failslab, interval 1, probability 0, space 0, times 0
[  499.934883][T14279] CPU: 1 UID: 0 PID: 14279 Comm: syz.2.1767 Not tainted syzkaller #0 PREEMPT(full) 
[  499.934913][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  499.934927][T14279] Call Trace:
[  499.934936][T14279]  <TASK>
[  499.934945][T14279]  dump_stack_lvl+0x189/0x250
[  499.934975][T14279]  ? __pfx____ratelimit+0x10/0x10
[  499.935008][T14279]  ? __pfx_dump_stack_lvl+0x10/0x10
[  499.935031][T14279]  ? __pfx__printk+0x10/0x10
[  499.935063][T14279]  ? __pfx___might_resched+0x10/0x10
[  499.935085][T14279]  ? fs_reclaim_acquire+0x7d/0x100
[  499.935112][T14279]  should_fail_ex+0x414/0x560
[  499.935146][T14279]  should_failslab+0xa8/0x100
[  499.935170][T14279]  __kmalloc_cache_noprof+0x6f/0x6e0
[  499.935203][T14279]  ? trace_contention_end+0x39/0x100
[  499.935227][T14279]  ? vhost_task_create+0xf8/0x320
[  499.935260][T14279]  vhost_task_create+0xf8/0x320
[  499.935309][T14279]  ? arch_stack_walk+0xfc/0x150
[  499.935330][T14279]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  499.935357][T14279]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  499.935382][T14279]  ? __pfx_vhost_task_create+0x10/0x10
[  499.935418][T14279]  ? __pfx_vhost_task_fn+0x10/0x10
[  499.935450][T14279]  ? __lock_acquire+0x6b6/0x2cf0
[  499.935496][T14279]  kvm_mmu_post_init_vm+0x14c/0x300
[  499.935527][T14279]  kvm_arch_vcpu_ioctl_run+0xdc/0x1c90
[  499.935569][T14279]  ? register_lock_class+0x51/0x320
[  499.935603][T14279]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  499.935636][T14279]  ? __lock_acquire+0x6b6/0x2cf0
[  499.935671][T14279]  ? __mutex_lock+0x335/0x1350
[  499.935700][T14279]  ? kasan_quarantine_put+0xdd/0x220
[  499.935732][T14279]  ? lockdep_hardirqs_on+0x98/0x140
[  499.935798][T14279]  kvm_vcpu_ioctl+0x95c/0xe90
[  499.935832][T14279]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  499.935859][T14279]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  499.935903][T14279]  ? __fget_files+0x2a/0x420
[  499.935933][T14279]  ? __fget_files+0x3a0/0x420
[  499.935957][T14279]  ? __fget_files+0x2a/0x420
[  499.935985][T14279]  ? bpf_lsm_file_ioctl+0x9/0x20
[  499.936012][T14279]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  499.936037][T14279]  __se_sys_ioctl+0xfc/0x170
[  499.936072][T14279]  do_syscall_64+0xfa/0xf80
[  499.936090][T14279]  ? lockdep_hardirqs_on+0x98/0x140
[  499.936122][T14279]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.936144][T14279]  ? clear_bhb_loop+0x60/0xb0
[  499.936171][T14279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.936192][T14279] RIP: 0033:0x7f2fed38f749
[  499.936211][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.936230][T14279] RSP: 002b:00007f2fee177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  499.936251][T14279] RAX: ffffffffffffffda RBX: 00007f2fed5e6090 RCX: 00007f2fed38f749
[  499.936267][T14279] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  499.936287][T14279] RBP: 00007f2fee177090 R08: 0000000000000000 R09: 0000000000000000
[  499.936300][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.936312][T14279] R13: 00007f2fed5e6128 R14: 00007f2fed5e6090 R15: 00007f2fed70fa28
[  499.936349][T14279]  </TASK>
[  500.311315][T14282] fuse: Bad value for 'user_id'
[  500.316238][T14282] fuse: Bad value for 'user_id'
[  500.807346][T14290] xt_NFQUEUE: number of queues (65535) out of range (got 65541)
[  501.631424][T11017] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  501.732726][ T5902] cdc_ncm 4-1:1.0: setting tx_max = 88
[  502.081351][ T5902] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  502.191672][ T5902] usb 4-1: USB disconnect, device number 48
[  502.230529][ T5902] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  502.382530][ T6924] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[  502.431008][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'.
[  502.567245][ T6924] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  502.581900][ T6924] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  502.611382][ T6924] usb 2-1: config 0 interface 0 has no altsetting 0
[  502.623532][ T6924] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00
[  502.633498][ T6924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.692834][ T6924] usb 2-1: config 0 descriptor??
[  502.740963][T14312] bond5: option mode: unable to set because the bond device has slaves
[  502.772835][T14301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  502.792472][T14313] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  503.444122][T14324] netlink: 'syz.0.1783': attribute type 1 has an invalid length.
[  503.613161][T14324] 8021q: adding VLAN 0 to HW filter on device bond13
[  503.892637][T14337] netlink: 'syz.2.1788': attribute type 25 has an invalid length.
[  503.907931][T14337] netlink: 'syz.2.1788': attribute type 7 has an invalid length.
[  503.940343][T14337] netlink: 'syz.2.1788': attribute type 1 has an invalid length.
[  503.980589][T14339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1789'.
[  503.990503][T14337] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1788'.
[  504.022690][T14337] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.361411][ T5923] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  505.516851][ T5923] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  505.550790][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.601486][ T5923] usb 1-1: Product: syz
[  505.606371][ T5923] usb 1-1: Manufacturer: syz
[  505.611022][ T5923] usb 1-1: SerialNumber: syz
[  505.654419][T14367] xt_hashlimit: size too large, truncated to 1048576
[  505.789467][ T6924] usb 2-1: string descriptor 0 read error: -71
[  505.852278][ T6924] usbhid 2-1:0.0: can't add hid device: -71
[  505.894573][ T6924] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  506.026547][ T6924] usb 2-1: USB disconnect, device number 42
[  506.163800][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1798'.
[  506.333563][ T5923] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  506.501420][ T5923] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  506.835109][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  506.843260][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  506.851510][ T6924] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  507.032261][ T6924] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  507.077304][ T6924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.090118][ T6924] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.126388][ T6924] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.146312][ T6924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.160125][ T6924] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.173355][ T6924] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.187967][ T6924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.208721][ T6924] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.211696][T14399] sch_tbf: peakrate 9 is lower than or equals to rate 14594227084430198248 !
[  507.239470][ T6924] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.252817][ T6924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.262625][ T6924] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.275135][ T6924] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.291905][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'.
[  507.310014][ T6924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.319731][T14401] bridge0: entered allmulticast mode
[  507.326574][T14399] sch_tbf: peakrate 9 is lower than or equals to rate 14594227084430198248 !
[  507.370302][ T6924] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.511397][ T6924] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.531581][ T6924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.541595][T14409] bond4: option mode: unable to set because the bond device has slaves
[  507.542091][ T6924] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.565815][ T6924] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.576761][T14409] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  507.594500][ T6924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.604928][ T6924] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.616259][ T6924] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.626386][ T6924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.641428][ T6924] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.663359][ T6924] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.817173][ T6924] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  507.924917][ T6924] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  507.962346][ T5923] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  507.978712][ T6924] usb 5-1: Product: syz
[  507.994151][T14415] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  508.055603][ T6924] usb 5-1: Manufacturer: syz
[  508.060276][ T6924] usb 5-1: SerialNumber: syz
[  508.065067][ T5923] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  508.135224][ T5923] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  508.146616][ T6924] usb 5-1: config 0 descriptor??
[  508.171772][ T6924] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  508.242559][T14419] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  508.319142][ T5923] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  508.406506][ T5923] usb 1-1: USB disconnect, device number 51
[  508.985559][ T5923] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  509.166421][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.186820][ T5923] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  509.217176][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.259120][ T5923] usb 1-1: config 0 descriptor??
[  509.486857][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'.
[  509.662042][ T5923] usbhid 1-1:0.0: can't add hid device: -71
[  509.681674][ T5923] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  509.781765][ T5923] usb 1-1: USB disconnect, device number 52
[  510.211367][ T5923] usb 1-1: new low-speed USB device number 53 using dummy_hcd
[  510.337048][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1816'.
[  510.359843][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1816'.
[  510.391549][ T5923] usb 1-1: Invalid ep0 maxpacket: 32
[  510.407250][T14434] netlink: 'syz.3.1817': attribute type 10 has an invalid length.
[  510.474893][ T6924] usb 5-1: USB disconnect, device number 58
[  510.495191][ T6924] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  510.506625][T14434] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.514028][T14434] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.656246][ T5923] usb 1-1: new low-speed USB device number 54 using dummy_hcd
[  510.851973][ T5923] usb 1-1: Invalid ep0 maxpacket: 32
[  510.881929][ T5923] usb usb1-port1: attempt power cycle
[  510.884570][T14446] set match dimension is over the limit!
[  511.251697][ T5923] usb 1-1: new low-speed USB device number 55 using dummy_hcd
[  511.271964][ T5923] usb 1-1: Invalid ep0 maxpacket: 32
[  511.401425][ T5923] usb 1-1: new low-speed USB device number 56 using dummy_hcd
[  511.447118][T14462] netlink: 'syz.3.1823': attribute type 1 has an invalid length.
[  511.502783][ T5923] usb 1-1: Invalid ep0 maxpacket: 32
[  511.560909][ T5923] usb usb1-port1: unable to enumerate USB device
[  511.730747][T14462] 8021q: adding VLAN 0 to HW filter on device bond8
[  511.818092][T11017] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  512.024114][T11017] usb 5-1: Using ep0 maxpacket: 8
[  512.047031][T11017] usb 5-1: config 127 has an invalid interface number: 171 but max is 1
[  512.136153][T11017] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  512.203842][T11017] usb 5-1: config 127 has no interface number 1
[  512.278229][T11017] usb 5-1: config 127 interface 171 has no altsetting 0
[  512.437724][T11017] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  512.500062][T11017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.601479][T11017] usb 5-1: Product: syz
[  512.605845][T11017] usb 5-1: Manufacturer: syz
[  512.610489][T11017] usb 5-1: SerialNumber: syz
[  512.987122][T14476] pimreg: entered allmulticast mode
[  513.422269][T14476] pimreg: left allmulticast mode
[  513.459434][T14478] xt_TCPMSS: Only works on TCP SYN packets
[  514.299134][T14489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1831'.
[  515.119263][T11017] xr_serial 5-1:127.171: xr_serial converter detected
[  515.163989][T11017] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  515.170530][T11017] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  515.250958][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1836'.
[  515.344720][T14506] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  515.357167][T11017] usb 5-1: USB disconnect, device number 59
[  515.383734][T11017] xr_serial 5-1:127.171: device disconnected
[  515.522978][T14509] fuse: Unknown parameter 'grou00000000000000000000'
[  515.791595][ T6924] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  516.052485][T11017] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  516.184857][ T6924] usb 4-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110
[  516.200084][ T6924] usb 4-1: config 16 has an invalid descriptor of length 101, skipping remainder of the config
[  516.231164][ T6924] usb 4-1: config 16 has no interfaces?
[  516.243601][T11017] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  516.247333][ T6924] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  516.271454][T11017] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  516.280969][ T6924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.315873][T11017] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  516.370397][T11017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  516.378857][T11017] usb 1-1: SerialNumber: syz
[  516.402701][T11017] usb 1-1: 0:2 : does not exist
[  516.709393][T14511] openvswitch: netlink: Key 26 has unexpected len 5864 expected 16
[  516.752456][T11017] usb 1-1: USB disconnect, device number 57
[  516.803632][ T6981] udevd[6981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  517.374436][T14526] set match dimension is over the limit!
[  517.433582][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1842'.
[  517.442916][T14530] netlink: 'syz.4.1842': attribute type 7 has an invalid length.
[  517.460963][T14530] netlink: 'syz.4.1842': attribute type 8 has an invalid length.
[  517.481507][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'.
[  517.647233][T14530] ip6gretap0: entered promiscuous mode
[  517.656933][T14530] syz_tun: entered promiscuous mode
[  517.731362][T14530] ip6gretap0: left promiscuous mode
[  517.747501][T14530] syz_tun: left promiscuous mode
[  518.182451][T14543] xt_recent: Unsupported userspace flags (000000de)
[  519.364841][ T6924] usb 4-1: USB disconnect, device number 49
[  519.428225][T14564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.449239][T14565] xfrm0: entered promiscuous mode
[  519.462378][T14564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.472726][T14565] xfrm0: entered allmulticast mode
[  519.635583][T11020] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  519.962558][T14577] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  519.971091][T14577] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  519.978501][T14577] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  519.986283][T14577] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  519.993736][T14577] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  520.112408][T14588] netlink: 'syz.4.1863': attribute type 1 has an invalid length.
[  520.155555][T14588] 8021q: adding VLAN 0 to HW filter on device bond7
[  520.171461][T11020] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  520.188575][T14592] bond7: (slave veth3): Enslaving as an active interface with a down link
[  520.228401][T14588] 8021q: adding VLAN 0 to HW filter on device batadv1
[  520.241819][T14588] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  520.381520][T11020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  520.412578][T11020] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  520.451440][T11018] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  520.462704][T11020] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  520.473060][T11020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.513926][T11020] usb 2-1: config 0 descriptor??
[  520.527985][T14572] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  520.622017][T11018] usb 4-1: Using ep0 maxpacket: 32
[  520.629847][T11018] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  520.639098][T11018] usb 4-1: config 0 has no interface number 0
[  520.653096][T11018] usb 4-1: config 0 interface 184 has no altsetting 0
[  520.670204][T11018] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  520.686518][T11018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.706554][T11018] usb 4-1: Product: syz
[  520.718905][T11018] usb 4-1: Manufacturer: syz
[  520.728003][T11018] usb 4-1: SerialNumber: syz
[  520.760420][T11018] usb 4-1: config 0 descriptor??
[  520.777958][T11018] smsc75xx v1.0.0
[  520.980019][T11020] hid (null): report_id 57294 is invalid
[  521.105355][T11020] asus 0003:0B05:18C6.000F: collection stack underflow
[  521.142228][T11020] asus 0003:0B05:18C6.000F: item 0 1 0 12 parsing failed
[  521.150085][T11020] asus 0003:0B05:18C6.000F: Asus hid parse failed: -22
[  521.157138][T11020] asus 0003:0B05:18C6.000F: probe with driver asus failed with error -22
[  521.176909][T14572] fuse: Bad value for 'fd'
[  521.285785][T14612] 8021q: adding VLAN 0 to HW filter on device batadv1
[  521.294820][T14612] batadv1: entered promiscuous mode
[  521.302828][T14612] team0: Port device batadv1 added
[  521.455682][T14572] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x7
[  521.655424][T11020] usb 2-1: USB disconnect, device number 44
[  522.002051][T11018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  522.051455][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  522.061385][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  522.067602][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  522.069860][T14617] Bluetooth: hci0: command 0x0c1a tx timeout
[  522.073795][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  522.803545][T14623] trusted_key: encrypted_key: key user:syz not found
[  523.002844][T14627] netlink: 'syz.2.1875': attribute type 10 has an invalid length.
[  523.182341][T14631] set match dimension is over the limit!
[  523.938089][T14657] fuse: Unknown parameter 'grou00000000000000000000'
[  523.971471][T14657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.991522][T14657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.431063][   T30] audit: type=1326 audit(1764708592.625:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14658 comm="syz.2.1886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x0
[  524.922503][ T6924] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  525.085286][ T6924] usb 1-1: Using ep0 maxpacket: 32
[  525.095057][ T6924] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  525.107707][ T6924] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  525.117788][ T6924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  525.179853][ T6924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  525.229263][ T6924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  525.257775][ T6924] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  525.307502][ T6924] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  525.381190][ T6924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.474684][ T6924] usb 1-1: config 0 descriptor??
[  525.702991][ T6924] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  525.900078][ T6924] usb 1-1: USB disconnect, device number 58
[  525.920507][ T6924] usblp0: removed
[  526.054881][T14668] bridge0: Device is already in use.
[  526.310870][ T6924] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  526.661354][ T6924] usb 1-1: Using ep0 maxpacket: 32
[  526.694584][ T6924] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  526.708640][ T6924] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  526.733246][ T6924] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  526.782231][ T6924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  526.841511][ T6924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  526.871736][ T6924] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  526.931868][ T6924] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  526.964702][ T6924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.020628][ T6924] usb 1-1: config 0 descriptor??
[  527.259516][ T6924] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  527.274010][T14684] netlink: 'syz.1.1894': attribute type 1 has an invalid length.
[  527.329453][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.353394][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.437082][T14684] 8021q: adding VLAN 0 to HW filter on device bond10
[  527.472442][T11018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110
[  527.511370][T11018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110
[  527.531326][T11018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  527.567349][T11018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -110
[  527.577955][T14688] bond10: (slave veth13): Enslaving as an active interface with a down link
[  527.597667][T11018] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -110
[  527.670171][T14689] 8021q: adding VLAN 0 to HW filter on device batadv2
[  527.703326][T14689] bond10: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  528.068089][T11018] usb 1-1: USB disconnect, device number 59
[  528.095097][T11018] usblp0: removed
[  528.119746][   T30] audit: type=1326 audit(1764708596.325:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.4.1898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb16f8f749 code=0x0
[  528.145060][T14697] bond4: option mode: unable to set because the bond device has slaves
[  528.172033][T14697] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  528.981376][T11018] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  529.166674][T11018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.231878][T11018] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  529.272881][T11018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.322697][T11018] usb 2-1: config 0 descriptor??
[  529.323197][T14730] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1911'.
[  529.541710][T11017] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  529.549624][T11018] usbhid 2-1:0.0: can't add hid device: -71
[  529.556678][T11018] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  529.587900][T11018] usb 2-1: USB disconnect, device number 45
[  529.711908][T11017] usb 1-1: Using ep0 maxpacket: 16
[  529.720579][T11017] usb 1-1: config 0 has an invalid interface number: 75 but max is 0
[  529.746487][T11017] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.772438][T11017] usb 1-1: config 0 has no interface number 0
[  529.789527][T11017] usb 1-1: config 0 interface 75 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  529.812497][T11017] usb 1-1: config 0 interface 75 has no altsetting 0
[  529.824559][T11017] usb 1-1: New USB device found, idVendor=1410, idProduct=7007, bcdDevice=6f.e0
[  529.843980][T11017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.852250][T11017] usb 1-1: Product: syz
[  529.856619][T11017] usb 1-1: Manufacturer: syz
[  529.893456][T11017] usb 1-1: SerialNumber: syz
[  529.918658][T11017] usb 1-1: config 0 descriptor??
[  529.931005][T11017] option 1-1:0.75: GSM modem (1-port) converter detected
[  530.071417][T11018] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  530.233151][T11018] usb 2-1: Using ep0 maxpacket: 32
[  530.245398][T11018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.269105][T11018] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  530.289246][T11018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.318727][T11018] usb 2-1: config 0 descriptor??
[  530.337550][T11018] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  530.378099][T11018] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  530.416492][   T30] audit: type=1326 audit(1764708598.625:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  530.484907][   T30] audit: type=1326 audit(1764708598.655:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  530.514206][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'.
[  530.542259][   T30] audit: type=1326 audit(1764708598.655:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  530.568242][   T30] audit: type=1326 audit(1764708598.655:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  530.608666][    C1] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped
[  530.725138][   T30] audit: type=1326 audit(1764708598.655:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  530.784048][   T30] audit: type=1326 audit(1764708598.655:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  530.827909][   T30] audit: type=1326 audit(1764708598.655:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  530.887663][   T30] audit: type=1326 audit(1764708598.655:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  530.924693][    C0] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped
[  530.949523][   T30] audit: type=1326 audit(1764708598.665:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  530.997061][   T30] audit: type=1326 audit(1764708598.745:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.2.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  531.543206][T14763] kvm: user requested TSC rate below hardware speed
[  531.971733][T11018] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  532.007920][T11017] usb 2-1: USB disconnect, device number 46
[  532.020869][T11017] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  532.156434][T11018] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  532.165853][T11018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.178979][T11018] usb 3-1: Product: syz
[  532.183830][T11018] usb 3-1: Manufacturer: syz
[  532.188782][T11018] usb 3-1: SerialNumber: syz
[  532.374427][ T6924] usb 1-1: USB disconnect, device number 60
[  532.400936][ T6924] option 1-1:0.75: device disconnected
[  532.544745][T14789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1929'.
[  532.567481][T14789] netlink: 'syz.3.1929': attribute type 7 has an invalid length.
[  532.585726][T14789] netlink: 'syz.3.1929': attribute type 8 has an invalid length.
[  532.608283][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'.
[  532.661781][T11018] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  532.693316][T11018] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  532.708799][T14789] ip6gretap0: entered promiscuous mode
[  532.768184][T14789] syz_tun: entered promiscuous mode
[  532.847099][T14789] ip6gretap0: left promiscuous mode
[  532.913780][T14789] syz_tun: left promiscuous mode
[  533.235155][T14769] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1922'.
[  533.609242][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.728501][T14810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.846702][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.895234][T14810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.948854][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'.
[  534.016893][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'.
[  534.205703][T14820] bond4: option mode: unable to set because the bond device has slaves
[  534.277344][T14820] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  534.771095][T11018] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  534.783405][T11018] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  534.821627][T11018] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  534.855196][T11018] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  534.894115][T11018] usb 3-1: USB disconnect, device number 26
[  534.950716][T14834] veth1_to_bond: entered allmulticast mode
[  535.072297][T14837] netlink: 'syz.4.1943': attribute type 25 has an invalid length.
[  535.080337][T14837] netlink: 'syz.4.1943': attribute type 7 has an invalid length.
[  535.088364][T14837] netlink: 'syz.4.1943': attribute type 1 has an invalid length.
[  535.094387][ T6924] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  535.097117][T14837] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1943'.
[  535.254218][ T6924] usb 2-1: config index 0 descriptor too short (expected 215, got 45)
[  535.273878][ T6924] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  535.281516][T11018] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  535.287646][ T6924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.299097][ T6924] usb 2-1: Product: syz
[  535.307043][ T6924] usb 2-1: Manufacturer: syz
[  535.312740][ T6924] usb 2-1: SerialNumber: syz
[  535.445140][T11018] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  535.458879][T11018] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  535.470921][T11018] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  535.494571][T11018] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  535.509795][T11018] usb 3-1: config 1 interface 1 has no altsetting 0
[  535.522754][T11018] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  535.743261][ T6924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  535.757553][T11018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.776610][T11018] usb 3-1: Product: syz
[  535.780885][T11018] usb 3-1: Manufacturer: syz
[  535.787071][T11018] usb 3-1: SerialNumber: syz
[  535.808977][ T6924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  535.810021][T11018] cdc_ncm 3-1:1.0: skipping garbage
[  535.835996][T11018] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[  535.844601][T11018] cdc_ncm 3-1:1.0: bind() failure
[  535.922050][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  535.922068][   T30] audit: type=1326 audit(1764708604.125:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14846 comm="syz.0.1946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f666e98f749 code=0x0
[  536.007202][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'.
[  536.022945][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'.
[  536.222463][T14834] veth1_to_bond (unregistering): left allmulticast mode
[  536.273955][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.385344][T11018] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  536.406766][T11018] usb 3-1: USB disconnect, device number 27
[  536.771334][T11017] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  536.833074][ T6909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.945538][T11017] usb 5-1: Using ep0 maxpacket: 32
[  537.021391][T11017] usb 5-1: config 0 has an invalid interface number: 145 but max is 1
[  537.040090][T11017] usb 5-1: config 0 has an invalid interface number: 43 but max is 1
[  537.065157][T11017] usb 5-1: config 0 has no interface number 0
[  537.085303][T11017] usb 5-1: config 0 has no interface number 1
[  537.095121][T11017] usb 5-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023
[  537.133741][T11017] usb 5-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping
[  537.182108][T11017] usb 5-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E
[  537.203869][T11017] usb 5-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11
[  537.264699][T11017] usb 5-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024
[  537.302281][T11017] usb 5-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  537.337481][T11017] usb 5-1: config 0 interface 145 has no altsetting 0
[  537.353963][T11017] usb 5-1: config 0 interface 43 has no altsetting 0
[  537.386636][T11017] usb 5-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a
[  537.396912][T11017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.415447][T11017] usb 5-1: Product: syz
[  537.431055][T11017] usb 5-1: Manufacturer: syz
[  537.441932][T11017] usb 5-1: SerialNumber: syz
[  537.457847][T11017] usb 5-1: config 0 descriptor??
[  537.666204][ T6924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  537.680835][ T6924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  537.765680][ T6924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  537.778050][ T6924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  537.897578][ T6924] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  537.940140][ T6924] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  537.951542][T11018] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  537.990477][T11017] keyspan_pda 5-1:0.145: required endpoints missing
[  538.011625][ T6924] usb 2-1: USB disconnect, device number 47
[  538.021400][   T44] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  538.110580][T11017] keyspan_pda 5-1:0.43: Keyspan PDA converter detected
[  538.122457][T11018] usb 3-1: Using ep0 maxpacket: 8
[  538.150828][T11018] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  538.170358][T11017] usb 5-1: Keyspan PDA converter now attached to ttyUSB0
[  538.179035][T11018] usb 3-1: config 0 has no interface number 0
[  538.185302][   T44] usb 1-1: Using ep0 maxpacket: 8
[  538.201175][   T44] usb 1-1: config 127 has an invalid interface number: 171 but max is 1
[  538.212486][T11018] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  538.224922][T11017] usb 5-1: USB disconnect, device number 60
[  538.232778][   T44] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  538.250536][T11018] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  538.268480][T11017] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0
[  538.278564][   T44] usb 1-1: config 127 has no interface number 1
[  538.285935][T11017] keyspan_pda 5-1:0.43: device disconnected
[  538.293330][T11018] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  538.311391][   T44] usb 1-1: config 127 interface 171 has no altsetting 0
[  538.355343][   T44] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  538.367340][T11018] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  538.395589][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.406980][   T44] usb 1-1: Product: syz
[  538.411194][   T44] usb 1-1: Manufacturer: syz
[  538.418022][T11018] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  538.438215][   T44] usb 1-1: SerialNumber: syz
[  538.444273][T11018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.595624][T11018] usb 3-1: config 0 descriptor??
[  538.613397][T11018] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  539.940756][   T30] audit: type=1326 audit(1764708608.145:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14896 comm="syz.3.1962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x0
[  540.450514][ T6924] usb 3-1: USB disconnect, device number 28
[  540.479312][ T6924] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  540.910780][T14906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.936764][T14906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.025033][T14910] bridge0: Device is already in use.
[  541.485251][T14922] bond7: entered promiscuous mode
[  541.529950][ T6924] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  541.801926][ T6924] usb 5-1: Using ep0 maxpacket: 32
[  541.811865][ T6924] usb 5-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config
[  541.860057][ T6924] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  541.871982][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.976540][ T6924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.987545][   T44] xr_serial 1-1:127.171: xr_serial converter detected
[  542.008528][ T6924] usb 5-1: Product: syz
[  542.015953][   T44] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  542.021456][ T6924] usb 5-1: Manufacturer: syz
[  542.084983][ T8386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.117428][ T6924] usb 5-1: SerialNumber: syz
[  542.142028][   T44] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  542.142731][ T6924] usb 5-1: config 0 descriptor??
[  542.205684][   T44] usb 1-1: USB disconnect, device number 61
[  542.242426][ T6924] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  542.262866][   T44] xr_serial 1-1:127.171: device disconnected
[  542.469443][   T30] audit: type=1326 audit(1764708610.665:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.3.1975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x0
[  542.809525][ T6924] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  542.818355][ T6924] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  544.230698][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'.
[  544.261695][   T30] audit: type=1326 audit(1764708612.435:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  544.284085][    C0] vkms_vblank_simulate: vblank timer overrun
[  544.308706][   T30] audit: type=1326 audit(1764708612.435:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  544.332185][   T30] audit: type=1326 audit(1764708612.435:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  544.354539][    C0] vkms_vblank_simulate: vblank timer overrun
[  544.363085][   T30] audit: type=1326 audit(1764708612.435:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  544.385435][    C0] vkms_vblank_simulate: vblank timer overrun
[  544.428527][   T30] audit: type=1326 audit(1764708612.435:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  544.450888][    C0] vkms_vblank_simulate: vblank timer overrun
[  544.544296][   T30] audit: type=1326 audit(1764708612.435:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  544.638645][   T30] audit: type=1326 audit(1764708612.435:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  544.686358][   T30] audit: type=1326 audit(1764708612.435:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  544.801573][   T30] audit: type=1326 audit(1764708612.435:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  544.861984][T11018] usb 5-1: USB disconnect, device number 61
[  545.251699][T14968] xt_hashlimit: size too large, truncated to 1048576
[  545.372194][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'.
[  546.252330][T14987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1989'.
[  546.653371][T14995] FAULT_INJECTION: forcing a failure.
[  546.653371][T14995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  546.700699][T14995] CPU: 0 UID: 0 PID: 14995 Comm: syz.3.1993 Not tainted syzkaller #0 PREEMPT(full) 
[  546.700730][T14995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  546.700745][T14995] Call Trace:
[  546.700753][T14995]  <TASK>
[  546.700762][T14995]  dump_stack_lvl+0x189/0x250
[  546.700791][T14995]  ? __pfx____ratelimit+0x10/0x10
[  546.700821][T14995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  546.700844][T14995]  ? __pfx__printk+0x10/0x10
[  546.700873][T14995]  ? __might_fault+0xb0/0x130
[  546.700914][T14995]  should_fail_ex+0x414/0x560
[  546.700945][T14995]  _copy_from_iter+0x1de/0x1790
[  546.700980][T14995]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  546.701011][T14995]  ? policy_nodemask+0x27c/0x720
[  546.701032][T14995]  ? __pfx__copy_from_iter+0x10/0x10
[  546.701070][T14995]  ? set_page_refcounted+0xa0/0x1e0
[  546.701092][T14995]  ? page_copy_sane+0x4e/0x280
[  546.701124][T14995]  copy_page_from_iter+0xdd/0x170
[  546.701161][T14995]  tun_get_user+0x1d40/0x3da0
[  546.701185][T14995]  ? tun_get_user+0x6fc/0x3da0
[  546.701221][T14995]  ? aa_file_perm+0x44d/0x1540
[  546.701248][T14995]  ? __pfx_tun_get_user+0x10/0x10
[  546.701269][T14995]  ? __lock_acquire+0x6b6/0x2cf0
[  546.701313][T14995]  ? kstrtoull+0x12f/0x1d0
[  546.701347][T14995]  ? ref_tracker_alloc+0x318/0x460
[  546.701377][T14995]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  546.701411][T14995]  ? tun_get+0x1c/0x2f0
[  546.701436][T14995]  ? tun_get+0x1c/0x2f0
[  546.701454][T14995]  ? tun_get+0x1c/0x2f0
[  546.701476][T14995]  tun_chr_write_iter+0x113/0x200
[  546.701511][T14995]  vfs_write+0x5c9/0xb30
[  546.701546][T14995]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  546.701578][T14995]  ? __pfx_vfs_write+0x10/0x10
[  546.701618][T14995]  ? __fget_files+0x2a/0x420
[  546.701651][T14995]  ksys_write+0x145/0x250
[  546.701684][T14995]  ? __pfx_ksys_write+0x10/0x10
[  546.701730][T14995]  ? do_syscall_64+0xbe/0xf80
[  546.701752][T14995]  do_syscall_64+0xfa/0xf80
[  546.701768][T14995]  ? lockdep_hardirqs_on+0x98/0x140
[  546.701799][T14995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.701819][T14995]  ? clear_bhb_loop+0x60/0xb0
[  546.701842][T14995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.701862][T14995] RIP: 0033:0x7f65dff8e1ff
[  546.701880][T14995] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  546.701897][T14995] RSP: 002b:00007f65e0da5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  546.701921][T14995] RAX: ffffffffffffffda RBX: 00007f65e01e5fa0 RCX: 00007f65dff8e1ff
[  546.701936][T14995] RDX: 000000000000006e RSI: 00002000000001c0 RDI: 00000000000000c8
[  546.701950][T14995] RBP: 00007f65e0da5090 R08: 0000000000000000 R09: 0000000000000000
[  546.701963][T14995] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001
[  546.701975][T14995] R13: 00007f65e01e6038 R14: 00007f65e01e5fa0 R15: 00007f65e030fa28
[  546.702009][T14995]  </TASK>
[  547.006020][ T1016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.427916][T15007] netlink: 'syz.3.1996': attribute type 12 has an invalid length.
[  547.951678][T13837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.191839][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.400069][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  549.400091][   T30] audit: type=1326 audit(1764708617.605:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz.3.2007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x0
[  549.573441][T15057] fuse: Unknown parameter 'grou00000000000000000000'
[  549.707227][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2011'.
[  549.831630][ T6924] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  550.030885][ T6924] usb 3-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110
[  550.067535][ T6924] usb 3-1: config 16 has an invalid descriptor of length 101, skipping remainder of the config
[  550.104630][ T6924] usb 3-1: config 16 has no interfaces?
[  550.147663][ T6924] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  550.174061][ T6924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.562967][   T30] audit: type=1326 audit(1764708618.625:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666e98f749 code=0x7ffc0000
[  550.689721][   T30] audit: type=1326 audit(1764708618.845:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f666e98de97 code=0x7ffc0000
[  550.882747][   T30] audit: type=1326 audit(1764708618.845:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666e98f749 code=0x7ffc0000
[  551.020318][   T30] audit: type=1326 audit(1764708618.845:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666e98f749 code=0x7ffc0000
[  551.259321][ T5201] Dev loop6: unable to read RDB block 1
[  551.272256][ T5201]  loop6: unable to read partition table
[  551.292961][T15084] delete_channel: no stack
[  551.328362][ T5201] loop6: partition table beyond EOD, truncated
[  551.904492][T15101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2019'.
[  552.272565][ T8386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.523247][T15103] netlink: 'syz.3.2020': attribute type 11 has an invalid length.
[  553.163081][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'.
[  553.183022][   T30] audit: type=1326 audit(1764708621.365:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  553.281427][   T30] audit: type=1326 audit(1764708621.365:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  553.415661][   T30] audit: type=1326 audit(1764708621.365:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  553.491403][ T6924] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  553.505476][ T5916] usb 3-1: USB disconnect, device number 29
[  553.547405][   T30] audit: type=1326 audit(1764708621.365:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  553.605770][T10584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.651516][ T6924] usb 1-1: Using ep0 maxpacket: 8
[  553.659599][   T30] audit: type=1326 audit(1764708621.375:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65dff8f749 code=0x7ffc0000
[  553.683489][ T6924] usb 1-1: config index 0 descriptor too short (expected 46935, got 18)
[  553.714208][ T6924] usb 1-1: config 184 has too many interfaces: 116, using maximum allowed: 32
[  553.751305][ T6924] usb 1-1: config 184 has an invalid descriptor of length 0, skipping remainder of the config
[  553.800146][ T6924] usb 1-1: config 184 has 0 interfaces, different from the descriptor's value: 116
[  553.843924][ T6924] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  553.863273][ T6924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.882887][ T6924] usb 1-1: Product: syz
[  553.887144][ T6924] usb 1-1: Manufacturer: syz
[  553.913975][ T6924] usb 1-1: SerialNumber: syz
[  554.294219][T15127] 8021q: VLANs not supported on bond0
[  554.991838][ T6924] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  555.042988][ T5923] usb 1-1: USB disconnect, device number 62
[  555.194577][ T5916] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  555.202420][ T6924] usb 3-1: Using ep0 maxpacket: 32
[  555.230591][ T6924] usb 3-1: config index 0 descriptor too short (expected 224, got 54)
[  555.258195][ T6924] usb 3-1: config 0 has an invalid descriptor of length 113, skipping remainder of the config
[  555.301409][ T6924] usb 3-1: config 0 has no interfaces?
[  555.311591][T11018] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  555.317694][ T6924] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[  555.349023][ T6924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.370466][ T6924] usb 3-1: Product: syz
[  555.375470][ T5916] usb 2-1: Using ep0 maxpacket: 16
[  555.387608][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0
[  555.400893][ T5916] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[  555.414614][ T6924] usb 3-1: Manufacturer: syz
[  555.434170][ T6924] usb 3-1: SerialNumber: syz
[  555.448381][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.495797][ T6924] usb 3-1: config 0 descriptor??
[  555.510824][ T5916] usb 2-1: config 0 descriptor??
[  555.525573][T11018] usb 5-1: Using ep0 maxpacket: 8
[  555.534490][T11018] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  555.559594][T11018] usb 5-1: config 0 has no interface number 0
[  555.566770][T11018] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  555.577940][T11018] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  555.590067][T11018] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  555.602210][T11018] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  555.626359][T11018] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  555.636762][T11018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.699951][T15159] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  555.778070][ T6924] usb 3-1: USB disconnect, device number 30
[  555.916802][T11018] usb 5-1: config 0 descriptor??
[  555.927608][T11018] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  555.963364][ T5916] sony 0003:1345:3008.0010: item fetching failed at offset 2/5
[  555.984796][ T5916] sony 0003:1345:3008.0010: parse failed
[  556.001839][ T5916] sony 0003:1345:3008.0010: probe with driver sony failed with error -22
[  556.163034][ T5916] usb 2-1: USB disconnect, device number 48
[  556.393868][ T6924] usb 5-1: USB disconnect, device number 62
[  556.393998][    C1] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  556.417176][T15162] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19
[  556.487548][ T6924] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  557.943020][T15179] netlink: 'syz.3.2040': attribute type 1 has an invalid length.
[  558.032483][T15181] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  558.053667][T12674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.488714][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'.
[  558.718766][T15179] 8021q: adding VLAN 0 to HW filter on device bond9
[  559.101493][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  559.101514][   T30] audit: type=1326 audit(1764708627.305:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15193 comm="syz.4.2043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb16f8f749 code=0x0
[  559.312138][ T6907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.564802][T15198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2044'.
[  560.146806][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2049'.
[  560.161562][ T6924] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  560.421327][ T6924] usb 3-1: Using ep0 maxpacket: 8
[  560.534650][ T6924] usb 3-1: config 127 has an invalid interface number: 171 but max is 1
[  560.545650][ T6924] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  560.584580][ T6924] usb 3-1: config 127 has no interface number 1
[  560.598008][ T6924] usb 3-1: config 127 interface 171 has no altsetting 0
[  560.645012][T15223] xt_TPROXY: Can be used only with -p tcp or -p udp
[  560.672557][T15223] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2052'.
[  560.729916][ T6924] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  560.739855][ T6924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.759992][ T6924] usb 3-1: Product: syz
[  560.766789][ T6924] usb 3-1: Manufacturer: syz
[  560.776621][ T6924] usb 3-1: SerialNumber: syz
[  561.461011][T15229] FAULT_INJECTION: forcing a failure.
[  561.461011][T15229] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  561.491643][T15229] CPU: 1 UID: 0 PID: 15229 Comm: syz.0.2054 Not tainted syzkaller #0 PREEMPT(full) 
[  561.491676][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  561.491692][T15229] Call Trace:
[  561.491702][T15229]  <TASK>
[  561.491713][T15229]  dump_stack_lvl+0x189/0x250
[  561.491743][T15229]  ? __pfx____ratelimit+0x10/0x10
[  561.491776][T15229]  ? __pfx_dump_stack_lvl+0x10/0x10
[  561.491800][T15229]  ? __pfx__printk+0x10/0x10
[  561.491829][T15229]  ? __might_fault+0xb0/0x130
[  561.491875][T15229]  should_fail_ex+0x414/0x560
[  561.491909][T15229]  _copy_from_user+0x2d/0xb0
[  561.491933][T15229]  input_event_from_user+0xb2/0x280
[  561.491960][T15229]  ? __pfx_input_event_from_user+0x10/0x10
[  561.491986][T15229]  ? get_pid_task+0x20/0x1f0
[  561.492023][T15229]  evdev_write+0x2a6/0x480
[  561.492053][T15229]  ? __pfx_evdev_write+0x10/0x10
[  561.492078][T15229]  ? bpf_lsm_file_permission+0x9/0x20
[  561.492104][T15229]  ? security_file_permission+0x75/0x290
[  561.492142][T15229]  ? rw_verify_area+0x255/0x4d0
[  561.492175][T15229]  ? __pfx_evdev_write+0x10/0x10
[  561.492200][T15229]  vfs_write+0x27e/0xb30
[  561.492242][T15229]  ? __pfx_vfs_write+0x10/0x10
[  561.492278][T15229]  ? __fget_files+0x2a/0x420
[  561.492306][T15229]  ? __fget_files+0x2a/0x420
[  561.492330][T15229]  ? __fget_files+0x3a0/0x420
[  561.492354][T15229]  ? __fget_files+0x2a/0x420
[  561.492389][T15229]  ksys_write+0x145/0x250
[  561.492426][T15229]  ? __pfx_ksys_write+0x10/0x10
[  561.492463][T15229]  ? do_syscall_64+0xbe/0xf80
[  561.492507][T15229]  do_syscall_64+0xfa/0xf80
[  561.492527][T15229]  ? lockdep_hardirqs_on+0x98/0x140
[  561.492564][T15229]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.492587][T15229]  ? clear_bhb_loop+0x60/0xb0
[  561.492613][T15229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.492635][T15229] RIP: 0033:0x7f666e98f749
[  561.492655][T15229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.492674][T15229] RSP: 002b:00007f666f814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  561.492697][T15229] RAX: ffffffffffffffda RBX: 00007f666ebe5fa0 RCX: 00007f666e98f749
[  561.492713][T15229] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  561.492728][T15229] RBP: 00007f666f814090 R08: 0000000000000000 R09: 0000000000000000
[  561.492741][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  561.492754][T15229] R13: 00007f666ebe6038 R14: 00007f666ebe5fa0 R15: 00007f666ed0fa28
[  561.492789][T15229]  </TASK>
[  561.748170][    C1] vkms_vblank_simulate: vblank timer overrun
[  562.264026][T15225] could not allocate digest TFM handle nhpoly1305-neon
[  563.338601][   T30] audit: type=1326 audit(1764708631.545:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15249 comm="syz.4.2060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb16f8f749 code=0x0
[  563.545621][T15253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2061'.
[  563.719234][ T6924] xr_serial 3-1:127.171: xr_serial converter detected
[  563.757244][ T6924] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  563.785945][ T6924] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  563.802239][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.838056][ T6924] usb 3-1: USB disconnect, device number 31
[  563.868907][ T6924] xr_serial 3-1:127.171: device disconnected
[  563.883476][   T30] audit: type=1326 audit(1764708632.095:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  563.947716][   T30] audit: type=1326 audit(1764708632.095:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.009888][   T30] audit: type=1326 audit(1764708632.095:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.151052][   T30] audit: type=1326 audit(1764708632.115:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.205693][   T30] audit: type=1326 audit(1764708632.185:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.287567][   T30] audit: type=1326 audit(1764708632.185:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.324036][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2067'.
[  564.334481][T15273] netlink: 'syz.3.2066': attribute type 1 has an invalid length.
[  564.354574][T15275] fuse: Unknown parameter '0x0000000000000008'
[  564.362130][T15275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2067'.
[  564.428061][   T30] audit: type=1326 audit(1764708632.185:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.509105][T15273] 8021q: adding VLAN 0 to HW filter on device bond10
[  564.531809][ T5902] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  564.566245][T15285] netlink: 'syz.4.2069': attribute type 1 has an invalid length.
[  564.672964][T15285] 8021q: adding VLAN 0 to HW filter on device bond8
[  564.805863][   T30] audit: type=1326 audit(1764708632.185:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.805944][   T30] audit: type=1326 audit(1764708632.185:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.805991][   T30] audit: type=1326 audit(1764708632.185:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.806060][   T30] audit: type=1326 audit(1764708632.185:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.806107][   T30] audit: type=1326 audit(1764708632.185:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.806152][   T30] audit: type=1326 audit(1764708632.185:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15259 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fed38f749 code=0x7ffc0000
[  564.835701][ T5902] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  564.835737][ T5902] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  564.835755][ T5902] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  564.835786][ T5902] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  564.835803][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.854147][ T5902] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[  564.897194][T15283] gretap2: entered promiscuous mode
[  565.081771][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.470508][T15295] netlink: 'syz.2.2073': attribute type 1 has an invalid length.
[  565.586691][T15295] 8021q: adding VLAN 0 to HW filter on device bond8
[  565.656116][T15297] bond8: (slave veth9): Enslaving as an active interface with a down link
[  567.291629][T11018] usb 2-1: USB disconnect, device number 49
[  567.790231][T15339] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  568.211316][T11018] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  568.276069][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  568.282576][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  568.363924][T11018] usb 3-1: Using ep0 maxpacket: 16
[  568.374126][T11018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.388354][T15351] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  568.401733][T11018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  568.425423][T11018] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  568.617455][T11018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.652484][T11018] usb 3-1: config 0 descriptor??
[  569.194679][T11018] usbhid 3-1:0.0: can't add hid device: -71
[  569.208553][T11018] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  569.232613][T11018] usb 3-1: USB disconnect, device number 32
[  569.767036][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.198004][T16207] bridge0: Device is already in use.
[  570.832276][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.841459][T11017] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  571.013243][T11017] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  571.043944][T11017] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  571.082980][T11017] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  571.169960][T11017] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  571.179524][T11017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.196956][T11017] usb 1-1: Product: syz
[  571.204864][T11017] usb 1-1: Manufacturer: syz
[  571.213021][T11017] usb 1-1: SerialNumber: syz
[  571.239710][T11017] usb 1-1: config 0 descriptor??
[  571.252411][T16559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  571.260559][T16559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  571.278817][T11017] usb 1-1: ucan: probing device on interface #0
[  572.128546][T17420] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  572.288503][T11017] ucan 1-1:0.0 can0: registered device
[  572.371977][T17418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.382031][T17418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.394726][T11017] ucan 1-1:0.0 can0: firmware string: unknown
[  573.588222][T11017] usb 1-1: USB disconnect, device number 63
[  574.433981][T17446] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  574.762411][T17448] set match dimension is over the limit!
[  575.110123][T17453] netlink: 'syz.1.2111': attribute type 1 has an invalid length.
[  575.224413][T17453] 8021q: adding VLAN 0 to HW filter on device bond12
[  575.314212][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.364165][T17458] bond12: (slave veth15): Enslaving as an active interface with a down link
[  575.402504][T17459] 8021q: adding VLAN 0 to HW filter on device batadv2
[  575.409671][T17459] bond12: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  575.454816][T17461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2113'.
[  575.989745][T17476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2120'.
[  576.011666][T17476] netlink: 'syz.4.2120': attribute type 7 has an invalid length.
[  576.019483][T17476] netlink: 'syz.4.2120': attribute type 8 has an invalid length.
[  576.030653][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'.
[  576.047396][T17476] ip6gretap0: entered promiscuous mode
[  576.056767][T17476] syz_tun: entered promiscuous mode
[  576.078415][T17476] ip6gretap0: left promiscuous mode
[  576.087466][T17476] syz_tun: left promiscuous mode
[  576.156365][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  576.156385][   T30] audit: type=1326 audit(1764708644.365:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.197286][   T30] audit: type=1326 audit(1764708644.405:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.202833][T17484] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2122'.
[  576.245015][   T30] audit: type=1326 audit(1764708644.405:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.276787][T17488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.288981][T17488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.295313][T17486] program syz.1.2122 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  576.299561][   T30] audit: type=1326 audit(1764708644.405:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.363744][   T30] audit: type=1326 audit(1764708644.405:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.441640][   T30] audit: type=1326 audit(1764708644.405:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.469548][   T30] audit: type=1326 audit(1764708644.405:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.494719][   T30] audit: type=1326 audit(1764708644.405:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.521700][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.530435][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.536226][   T30] audit: type=1326 audit(1764708644.405:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.562742][   T30] audit: type=1326 audit(1764708644.405:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6c78f749 code=0x7ffc0000
[  576.607124][T17496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.616650][T17496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.650070][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2127'.
[  576.659393][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2127'.
[  576.902544][T17513] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  576.973759][T17516] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  577.023663][T17519] trusted_key: encrypted_key: key user:syz not found
[  577.461527][ T5902] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  577.682353][ T5902] usb 2-1: Using ep0 maxpacket: 32
[  577.788686][ T5902] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  577.811945][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129
[  577.907686][ T5902] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  577.976648][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.046443][ T5902] usb 2-1: config 0 descriptor??
[  578.260645][ T5902] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  578.309061][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  578.338913][T17543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.364861][T17543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.403928][ T5902] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  578.422027][ T5902] usb 2-1: media controller created
[  578.497552][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  578.571368][T11017] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  578.827019][T11017] usb 5-1: Using ep0 maxpacket: 8
[  578.867494][T11017] usb 5-1: config 127 has an invalid interface number: 171 but max is 1
[  578.905051][T11017] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  578.964163][T11017] usb 5-1: config 127 has no interface number 1
[  578.989114][T11017] usb 5-1: config 127 interface 171 has no altsetting 0
[  579.132147][T11017] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  579.186553][T11017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.212766][T11017] usb 5-1: Product: syz
[  579.234146][T11017] usb 5-1: Manufacturer: syz
[  579.268152][T11017] usb 5-1: SerialNumber: syz
[  579.411535][ T5902] stb0899_attach: Driver disabled by Kconfig
[  579.418488][ T5902] az6027: no front-end attached
[  579.418488][ T5902] 
[  579.562171][ T5902] az6027: usb out operation failed. (-71)
[  579.575617][ T5902] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  579.599372][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25
[  579.636197][T17549] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  579.813623][ T5902] dvb-usb: schedule remote query interval to 400 msecs.
[  579.839950][ T5902] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  579.892572][ T5902] usb 2-1: USB disconnect, device number 50
[  580.170063][ T5902] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  580.432191][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.953926][T17578] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  582.335526][T11017] xr_serial 5-1:127.171: xr_serial converter detected
[  582.378002][T11017] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  582.404337][T11017] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  582.471637][T11017] usb 5-1: USB disconnect, device number 63
[  582.509853][T11017] xr_serial 5-1:127.171: device disconnected
[  582.972696][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2158'.
[  583.071542][T17594] xt_NFQUEUE: number of queues (65535) out of range (got 65541)
[  584.351338][ T5902] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  584.546081][ T5902] usb 2-1: config 0 has an invalid interface number: 11 but max is 0
[  584.588029][ T5902] usb 2-1: config 0 has no interface number 0
[  584.595122][ T5902] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  584.616324][ T5902] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=f7.c4
[  584.657610][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.681359][ T5902] usb 2-1: Product: syz
[  584.685591][ T5902] usb 2-1: Manufacturer: syz
[  584.690189][ T5902] usb 2-1: SerialNumber: syz
[  584.714430][ T5902] usb 2-1: config 0 descriptor??
[  584.723616][ T5916] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  584.803109][T17637] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001
[  584.941319][ T5916] usb 1-1: Using ep0 maxpacket: 16
[  584.958998][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  584.978114][ T5902] usb 2-1: Expected 3 endpoints, found: 1
[  585.010860][ T5902] usb 2-1: USB disconnect, device number 51
[  585.017198][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  585.048494][ T5916] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  585.073105][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.090005][ T5916] usb 1-1: Product: syz
[  585.103772][ T5916] usb 1-1: Manufacturer: syz
[  585.108819][ T5916] usb 1-1: SerialNumber: syz
[  585.382295][T17627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.400275][T17627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.438040][ T5916] usb 1-1: 0:2 : does not exist
[  585.473583][ T5916] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  585.553664][ T5916] usb 1-1: USB disconnect, device number 64
[  585.665267][ T6981] udevd[6981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  585.870661][T17641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.082341][T17648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2179'.
[  586.181374][T17648] veth0: entered promiscuous mode
[  586.192987][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.208312][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'.
[  586.454614][T17657] set match dimension is over the limit!
[  586.497559][T17659] bond1: option mode: unable to set because the bond device has slaves
[  586.898472][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'.
[  587.259422][T17685] program syz.3.2194 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  587.681551][ T5916] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  587.847778][ T5916] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  587.860729][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.879179][ T5916] usb 3-1: Product: syz
[  587.889334][ T5916] usb 3-1: Manufacturer: syz
[  587.899475][ T5916] usb 3-1: SerialNumber: syz
[  587.920821][ T5916] usb 3-1: config 0 descriptor??
[  588.118049][ T5201] Dev loop6: unable to read RDB block 1
[  588.131507][ T5201]  loop6: unable to read partition table
[  588.171674][ T5201] loop6: partition table beyond EOD, truncated
[  588.270394][ T5916] usb 3-1: Firmware version (0.0) predates our first public release.
[  588.300645][ T5916] usb 3-1: Please update to version 0.2 or newer
[  588.427872][ T5916] usb 3-1: USB disconnect, device number 33
[  588.914685][T17740] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2212'.
[  589.938991][ T5151] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  590.331348][ T5916] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  590.501514][ T5916] usb 2-1: Using ep0 maxpacket: 8
[  590.509549][ T5916] usb 2-1: config 0 has an invalid interface number: 250 but max is 0
[  590.518892][ T5916] usb 2-1: config 0 has no interface number 0
[  590.555812][ T5916] usb 2-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10
[  590.655219][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.680740][ T5916] usb 2-1: Product: syz
[  590.701882][ T5916] usb 2-1: Manufacturer: syz
[  590.708762][ T5916] usb 2-1: SerialNumber: syz
[  590.773354][ T5916] usb 2-1: config 0 descriptor??
[  590.807164][ T5916] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614
[  591.006777][ T5916] gspca_sn9c20x: Write register 1000 failed -71
[  591.055428][ T5916] gspca_sn9c20x: Device initialization failed
[  591.075800][ T5916] gspca_sn9c20x 2-1:0.250: probe with driver gspca_sn9c20x failed with error -71
[  591.126663][ T5916] usb 2-1: USB disconnect, device number 52
[  591.314831][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.366393][T17781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.378148][T17781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  592.316748][T17814] bridge0: port 1(ipvlan2) entered blocking state
[  592.349734][T17814] bridge0: port 1(ipvlan2) entered disabled state
[  592.387341][T17814] ipvlan2: entered allmulticast mode
[  592.426726][T17814] ipvlan2: left allmulticast mode
[  593.637701][T17841] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2244'.
[  593.695777][T17844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'.
[  593.721476][T17844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'.
[  594.052816][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'.
[  594.150316][T17861] xt_recent: Unsupported userspace flags (000000de)
[  594.319214][T17865] xt_hashlimit: size too large, truncated to 1048576
[  594.336679][T17865] xt_hashlimit: max too large, truncated to 1048576
[  594.373051][T17869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2255'.
[  594.512035][ T6905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.441683][ T5151] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  595.611327][T11018] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  595.901470][T11018] usb 1-1: Using ep0 maxpacket: 16
[  595.913545][T11018] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.935462][T11018] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.966026][T11018] usb 1-1: config 0 interface 0 has no altsetting 0
[  595.973121][T11018] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  595.986483][T11018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.001076][T11018] usb 1-1: config 0 descriptor??
[  596.591667][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.600412][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.699416][T17906] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  596.780169][T11018] usbhid 1-1:0.0: can't add hid device: -71
[  596.790968][T11018] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  596.869909][T11018] usb 1-1: USB disconnect, device number 65
[  597.090051][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.292413][T17922] set match dimension is over the limit!
[  597.781896][T17924] usb usb7: usbfs: process 17924 (syz.4.2272) did not claim interface 0 before use
[  597.822697][T17924] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  597.975197][T17928] ------------[ cut here ]------------
[  597.980780][T17928] WARNING: mm/page_alloc.c:5154 at __alloc_frozen_pages_noprof+0x2c8/0x370, CPU#1: syz.1.2273/17928
[  597.992683][T17928] Modules linked in:
[  597.996752][T17928] CPU: 1 UID: 0 PID: 17928 Comm: syz.1.2273 Not tainted syzkaller #0 PREEMPT(full) 
[  598.006299][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  598.016501][T17928] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[  598.023251][T17928] Code: 74 10 4c 89 e7 89 54 24 0c e8 24 a1 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 db 6e 51 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[  598.043021][T17928] RSP: 0018:ffffc9001c0ff920 EFLAGS: 00010246
[  598.049125][T17928] RAX: ffffc9001c0ff900 RBX: 0000000000000014 RCX: 0000000000000000
[  598.057175][T17928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001c0ff988
[  598.065280][T17928] RBP: ffffc9001c0ffa18 R08: ffffc9001c0ff987 R09: 0000000000000000
[  598.074143][T17928] R10: ffffc9001c0ff960 R11: fffff5200381ff31 R12: 0000000000000000
[  598.082738][T17928] R13: 1ffff9200381ff28 R14: 0000000000040cc0 R15: dffffc0000000000
[  598.090742][T17928] FS:  00007fef6d6186c0(0000) GS:ffff8881261c5000(0000) knlGS:0000000000000000
[  598.099750][T17928] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  598.106390][T17928] CR2: 000000110c3fe6dd CR3: 000000004a8c6000 CR4: 00000000003526f0
[  598.114602][T17928] Call Trace:
[  598.117895][T17928]  <TASK>
[  598.120831][T17928]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  598.127240][T17928]  ? policy_nodemask+0x27c/0x720
[  598.132254][T17928]  alloc_pages_mpol+0x232/0x4a0
[  598.137114][T17928]  ___kmalloc_large_node+0x5f/0x1b0
[  598.142494][T17928]  __kmalloc_large_node_noprof+0x18/0x90
[  598.148185][T17928]  __kmalloc_noprof+0x4bd/0x7e0
[  598.153189][T17928]  ? raw_ioctl+0x1962/0x3bc0
[  598.157809][T17928]  raw_ioctl+0x1962/0x3bc0
[  598.162302][T17928]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  598.167947][T17928]  ? do_vfs_ioctl+0xbe8/0x1430
[  598.172826][T17928]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  598.178507][T17928]  ? __pfx_raw_ioctl+0x10/0x10
[  598.183339][T17928]  ? do_futex+0x395/0x420
[  598.187697][T17928]  ? __fget_files+0x2a/0x420
[  598.192373][T17928]  ? __fget_files+0x3a0/0x420
[  598.197073][T17928]  ? __fget_files+0x2a/0x420
[  598.201699][T17928]  ? bpf_lsm_file_ioctl+0x9/0x20
[  598.206820][T17928]  ? __pfx_raw_ioctl+0x10/0x10
[  598.211662][T17928]  __se_sys_ioctl+0xfc/0x170
[  598.216269][T17928]  do_syscall_64+0xfa/0xf80
[  598.220771][T17928]  ? lockdep_hardirqs_on+0x98/0x140
[  598.226026][T17928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.232135][T17928]  ? clear_bhb_loop+0x60/0xb0
[  598.236820][T17928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.242771][T17928] RIP: 0033:0x7fef6c78f749
[  598.247208][T17928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  598.266902][T17928] RSP: 002b:00007fef6d618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  598.275471][T17928] RAX: ffffffffffffffda RBX: 00007fef6c9e5fa0 RCX: 00007fef6c78f749
[  598.283500][T17928] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 000000000000000b
[  598.291503][T17928] RBP: 00007fef6c813f91 R08: 0000000000000000 R09: 0000000000000000
[  598.299494][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  598.307511][T17928] R13: 00007fef6c9e6038 R14: 00007fef6c9e5fa0 R15: 00007fef6cb0fa28
[  598.315537][T17928]  </TASK>
[  598.318571][T17928] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  598.325848][T17928] CPU: 1 UID: 0 PID: 17928 Comm: syz.1.2273 Not tainted syzkaller #0 PREEMPT(full) 
[  598.335235][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  598.345292][T17928] Call Trace:
[  598.348576][T17928]  <TASK>
[  598.351511][T17928]  dump_stack_lvl+0x99/0x250
[  598.356283][T17928]  ? __asan_memcpy+0x40/0x70
[  598.360881][T17928]  ? __pfx_dump_stack_lvl+0x10/0x10
[  598.366087][T17928]  ? __pfx__printk+0x10/0x10
[  598.370697][T17928]  vpanic+0x237/0x6d0
[  598.374684][T17928]  ? __pfx_vpanic+0x10/0x10
[  598.379280][T17928]  ? is_bpf_text_address+0x292/0x2b0
[  598.384571][T17928]  ? is_bpf_text_address+0x26/0x2b0
[  598.389781][T17928]  panic+0xb9/0xc0
[  598.393593][T17928]  ? __pfx_panic+0x10/0x10
[  598.398031][T17928]  __warn+0x317/0x4b0
[  598.402023][T17928]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[  598.408006][T17928]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[  598.413984][T17928]  __report_bug+0x288/0x500
[  598.418508][T17928]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[  598.424493][T17928]  ? __pfx___report_bug+0x10/0x10
[  598.429529][T17928]  ? is_bpf_text_address+0x292/0x2b0
[  598.434831][T17928]  ? is_bpf_text_address+0x26/0x2b0
[  598.440034][T17928]  ? kernel_text_address+0xa5/0xe0
[  598.445154][T17928]  ? __kernel_text_address+0xd/0x40
[  598.450398][T17928]  ? unwind_get_return_address+0x4d/0x90
[  598.456129][T17928]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[  598.462113][T17928]  report_bug+0x16a/0x220
[  598.466455][T17928]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[  598.472518][T17928]  ? __alloc_frozen_pages_noprof+0x2ca/0x370
[  598.478498][T17928]  handle_bug+0x98/0x200
[  598.482744][T17928]  exc_invalid_op+0x1a/0x50
[  598.487272][T17928]  asm_exc_invalid_op+0x1a/0x20
[  598.492124][T17928] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[  598.498710][T17928] Code: 74 10 4c 89 e7 89 54 24 0c e8 24 a1 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 db 6e 51 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[  598.518316][T17928] RSP: 0018:ffffc9001c0ff920 EFLAGS: 00010246
[  598.524389][T17928] RAX: ffffc9001c0ff900 RBX: 0000000000000014 RCX: 0000000000000000
[  598.532369][T17928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001c0ff988
[  598.540350][T17928] RBP: ffffc9001c0ffa18 R08: ffffc9001c0ff987 R09: 0000000000000000
[  598.548322][T17928] R10: ffffc9001c0ff960 R11: fffff5200381ff31 R12: 0000000000000000
[  598.556296][T17928] R13: 1ffff9200381ff28 R14: 0000000000040cc0 R15: dffffc0000000000
[  598.564288][T17928]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  598.570652][T17928]  ? policy_nodemask+0x27c/0x720
[  598.575595][T17928]  alloc_pages_mpol+0x232/0x4a0
[  598.580458][T17928]  ___kmalloc_large_node+0x5f/0x1b0
[  598.585668][T17928]  __kmalloc_large_node_noprof+0x18/0x90
[  598.591313][T17928]  __kmalloc_noprof+0x4bd/0x7e0
[  598.596172][T17928]  ? raw_ioctl+0x1962/0x3bc0
[  598.600771][T17928]  raw_ioctl+0x1962/0x3bc0
[  598.605198][T17928]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  598.610838][T17928]  ? do_vfs_ioctl+0xbe8/0x1430
[  598.615611][T17928]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  598.621249][T17928]  ? __pfx_raw_ioctl+0x10/0x10
[  598.626061][T17928]  ? do_futex+0x395/0x420
[  598.630426][T17928]  ? __fget_files+0x2a/0x420
[  598.635038][T17928]  ? __fget_files+0x3a0/0x420
[  598.640167][T17928]  ? __fget_files+0x2a/0x420
[  598.644777][T17928]  ? bpf_lsm_file_ioctl+0x9/0x20
[  598.649718][T17928]  ? __pfx_raw_ioctl+0x10/0x10
[  598.654488][T17928]  __se_sys_ioctl+0xfc/0x170
[  598.659100][T17928]  do_syscall_64+0xfa/0xf80
[  598.663599][T17928]  ? lockdep_hardirqs_on+0x98/0x140
[  598.668805][T17928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.674960][T17928]  ? clear_bhb_loop+0x60/0xb0
[  598.679649][T17928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.685541][T17928] RIP: 0033:0x7fef6c78f749
[  598.689955][T17928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  598.709670][T17928] RSP: 002b:00007fef6d618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  598.718091][T17928] RAX: ffffffffffffffda RBX: 00007fef6c9e5fa0 RCX: 00007fef6c78f749
[  598.726061][T17928] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 000000000000000b
[  598.734033][T17928] RBP: 00007fef6c813f91 R08: 0000000000000000 R09: 0000000000000000
[  598.742005][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  598.750059][T17928] R13: 00007fef6c9e6038 R14: 00007fef6c9e5fa0 R15: 00007fef6cb0fa28
[  598.758047][T17928]  </TASK>
[  598.761370][T17928] Kernel Offset: disabled
[  598.765711][T17928] Rebooting in 86400 seconds..