last executing test programs:

5.882337078s ago: executing program 1 (id=3903):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDENABIO(r1, 0x4b36)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/2818], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{}, &(0x7f0000001980), &(0x7f00000019c0)=r2}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/25, 0x2}, 0x20)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x7, 0x0, 0x800, 0x0, 0x1, 0x0, 0x7f}, 0x1c)
setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000000c0)=0xb, 0x4)
write$vga_arbiter(r0, 0x0, 0x0)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000010000850051253b15016009"], &(0x7f00000004c0)=""/7, 0x38, 0x7, 0x1}, 0x20)

5.79028911s ago: executing program 1 (id=3905):
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0x7)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00042f00fc000000000000000000000000000000fe8000000000000000000000000000aa042065580000000000000800d1e286dd080088"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed500041000e1"], 0x11)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24008041}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000500)="84163d431f3b16dbdef8f5d4d873f2773bf4415e889eecc3"}, 0x3a)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000240)=r5}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @union={0x0, 0x0, 0x2}]}}, 0x0, 0x32}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x10)
r6 = eventfd(0x800a6)
write$eventfd(r6, &(0x7f0000000000)=0xfffffffffffffffb, 0x8)
write$eventfd(r6, &(0x7f0000000080), 0x8)
dup(r6)
read$eventfd(r6, &(0x7f0000000040), 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r7=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ddff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="041d0509c80005c5"], 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, <r9=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r9, 0x0, &(0x7f0000000400)=""/119}, 0x20)

5.224348831s ago: executing program 1 (id=3912):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x9, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x12)

4.573623913s ago: executing program 0 (id=3914):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040623acc800"], 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xb)
io_uring_setup(0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$netlink(r1, 0x10e, 0xc, &(0x7f0000000080)=""/169, &(0x7f00000001c0)=0xa9)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="03c9007efa5943716b52b5866ab1723482af9246e1199d3cf2aa7485b74bd8ee60184099409afa027da0fcfc8a9e66b24ff402c851675bd75a2935c1de60999ac221fbca3f4619f393f959d9cb0686e71c833276e664e0ddb903ad88a3f62edb1199990d054196d273feb7d8c4122acca0fab246b8c386e82d11a202d9fa4ce00332f7d3e759a80200000000000000820605"], 0x82)
pwrite64(r5, 0x0, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="178900000000000000000100000008001700d877dbe026de8c8fb56f8f315568eb0c97504025202cee3b88d3fd8c815a5e805aa4f14e8b50a21921a9d9f6715f1efa0b22102bcd3b1372bc6aac3f884d938e7f7fca22ca2238a60c0cafac2e48adc8b7d45b18a26d3e5a2010e76dc7e85a35f7662ec8c22f297899e2734e6daeca944b5b9b355d0c239b26f8c4fdc96d38e37dbaa767dfa6b7cd31b48e9d62f1e23c7836", @ANYRES32=r5, @ANYBLOB="080009000000000014001800fe80000000000000000000000000000008000a0000000000060002000000000014001f00"/62], 0x5c}, 0x1, 0x620b, 0x0, 0x4095}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "444900e1b0faa9b0071c937f7f00002e0c0000ff070000ff0f0000c39b00", 0x41564e57})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc})
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x3)
r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
dup3(r7, r8, 0x80000)

4.296334615s ago: executing program 0 (id=3915):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDENABIO(r1, 0x4b36)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/2818], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{}, &(0x7f0000001980), &(0x7f00000019c0)=r2}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/25, 0x2}, 0x20)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x7, 0x0, 0x800, 0x0, 0x1, 0x0, 0x7f}, 0x1c)
setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000000c0)=0xb, 0x4)
write$vga_arbiter(r0, 0x0, 0x0)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000000000000010000850051253b15016009"], &(0x7f00000004c0)=""/7, 0x38, 0x7, 0x1}, 0x20)

4.228240304s ago: executing program 0 (id=3917):
socket$inet(0x2, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r2, 0x0, 0xfffffe5d)
getsockname$packet(r2, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB="008104000000000008000a00", @ANYRES32=r3], 0x28}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000002010200000000000000000a0000003c0002802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002809d0001000000000004000180040003"], 0x58}}, 0x0)

4.08887019s ago: executing program 1 (id=3918):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1)
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)

4.016336686s ago: executing program 3 (id=3920):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x1409, 0x4}, 0x10}}, 0x0) (fail_nth: 4)

3.966164121s ago: executing program 0 (id=3921):
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00')
getdents64(r4, &(0x7f00000000c0)=""/44, 0x2c)
r5 = syz_io_uring_setup(0x5169, &(0x7f0000000600)={0x0, 0x4000, 0x10100, 0x7fffffe, 0x0, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=<r7=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0)
unshare(0x24020400)

3.916897037s ago: executing program 1 (id=3922):
socket$alg(0x26, 0x5, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESDEC=0x0, @ANYRES16=r1], 0x28)
r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"a0453822", 0x401, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "000100", "0200", "be4d22a4", ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "2ce50f8a285d9500c522afe1"]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8034)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="030000397058abce57033f29eb6dc1f8b128a7537a3409329d374c1000000044665681347bd58ba6cfa5a5495ffc36ac891ea6f898ba2a0784b3781c59e6bd91a231a605e31d1a74579da505f4e8cd85ad28b3c1d52cc5b2f503252e5c0c00b2337e055112f836"], 0x3d)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8001a001600010002030400080004000f0004007a0e81000147020000009fce22f99748a7702847bb74a07ffa499b587c"], 0x1f)
syz_emit_vhci(0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x400, 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x80000108)
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x885)
syz_emit_vhci(0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000280), 0x101, 0xc2200)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

3.877996758s ago: executing program 3 (id=3923):
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)}, 0x20004800)
r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$smackfs_ipv6host(r0, &(0x7f0000000080)=@l1={{}, 0x20, '/sys/fs/smackfs/ipv6host\x00'}, 0xb2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001c1f00000000000000000000850000006d0007009568ac22a1fd6f57beb2f154e6c0a57f7b27b5c76e631a0d910b43de3d3ccd062acb28a74287dd59e42d75dfa6fe043b95aa8736a0c527e8e9fc1c2badc7035e28a8bb5b93ab2460c7fdfd023dc8499ef27fc97f859ece53b9082d2ece1836757d3c5d83b23c0270c89cc5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MTU={0x8, 0x4, 0xff7f}]}, 0x4c}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f00000003c0)=""/103, 0x67, <r6=>0x0, &(0x7f0000000440)=""/204, 0xcc}}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00'/11, @ANYRES32=r9, @ANYBLOB="00000000000000002c0012800b00010065727370616e00001c0002800500160000000000060011000000000006000f0000000000"], 0x4c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file1\x00'}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11}, 0x10)
socket$netlink(0x10, 0x3, 0x6)

3.378010778s ago: executing program 4 (id=3925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x24, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x4c}}, 0x0)

3.180100172s ago: executing program 2 (id=3926):
keyctl$dh_compute(0x17, &(0x7f0000001080), &(0x7f00000010c0)=""/48, 0x30, &(0x7f0000001180)={0x0, &(0x7f0000001140)})
getpgrp(0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711236000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000780)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r3, 0x31f}, 0x14}}, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x2000000040000000, 0x2003)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
pipe2(&(0x7f0000000100)={<r6=>0xffffffffffffffff}, 0x4880)
fcntl$setpipe(r6, 0x407, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x2e)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0)

3.179706418s ago: executing program 3 (id=3927):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21}, 0x48) (fail_nth: 10)

3.059826189s ago: executing program 4 (id=3928):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x38, 0x1}, [{}]}, 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00')
preadv2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/117, 0x75}], 0x1, 0x68, 0x0, 0x0)

2.648765588s ago: executing program 2 (id=3929):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
listxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0xa0, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5b, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, '.'}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}}, 0x0)
read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r7}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000003940)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0x0, 0x0, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
eventfd(0x0)
unshare(0x28000600)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90)
r9 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600))
accept$unix(r9, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e)

2.538331489s ago: executing program 3 (id=3930):
r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0xe)

2.534564489s ago: executing program 4 (id=3931):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x1409, 0x4, 0x70bd29}, 0x10}}, 0x0)

2.409914673s ago: executing program 4 (id=3932):
socket$inet(0x2, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r2, 0x0, 0xfffffe5d)
getsockname$packet(r2, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB="008104000000000008000a00", @ANYRES32=r3], 0x28}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000002010200000000000000000a0000003c0002802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002809d0001000000000004000180040003"], 0x58}}, 0x0)

2.129154264s ago: executing program 2 (id=3933):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x3}, @ptr]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
timer_gettime(0x0, 0xfffffffffffffffc)
getsockname$packet(r0, &(0x7f0000000080), &(0x7f0000000340)=0x14)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
unshare(0x20000400)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000240), 0x4)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000180)={{0x3c, @broadcast, 0x4e21, 0x2, 'lc\x00', 0x21, 0x1ff, 0x43}, {@broadcast, 0x4e20, 0x3, 0x0, 0x4, 0x200}}, 0x44)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
close(r3)

2.063803941s ago: executing program 4 (id=3934):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x80aa9a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
recvmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000500)=""/163, 0xa3}, 0x6000}, {{&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000640)=""/83, 0x53}, {&(0x7f00000006c0)=""/163, 0xa3}, {&(0x7f0000000780)=""/35, 0x23}, {&(0x7f00000007c0)=""/201, 0xc9}, {&(0x7f00000008c0)=""/129, 0x81}], 0x5, &(0x7f0000000a00)=""/116, 0x74}}], 0x2, 0x40000022, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c)
socket$inet6(0xa, 0x2, 0x3a)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000080ff0000fdff0000000018130000", @ANYRES32=r6, @ANYBLOB="0000000000000000850000002b0000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @link_id}, 0x20)

1.268166055s ago: executing program 3 (id=3935):
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x40000000015, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00')
getdents64(r4, &(0x7f00000000c0)=""/44, 0x2c)
syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), &(0x7f00000005c0))
unshare(0x24020400)

1.083285328s ago: executing program 0 (id=3936):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
exit(0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)

717.923871ms ago: executing program 2 (id=3937):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x25, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=','])

528.536718ms ago: executing program 2 (id=3938):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8)
shutdown(r0, 0x0)

304.760434ms ago: executing program 3 (id=3939):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}})
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x5, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfed}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, '\x00', 0xff}]}})
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x52, &(0x7f0000000080), 0x1, 0x0, 0x44}, 0x40)

223.94223ms ago: executing program 2 (id=3940):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0xfffe, @local}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7d01}}], 0x18}}], 0x2, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
r2 = epoll_create(0x10000e9) (async)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async)
r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7) (async)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000})
r6 = fcntl$dupfd(r5, 0x0, r2) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x1000001d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r6, &(0x7f0000000000)={0x40002009}) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x68, r7, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6e}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9ddf}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc1}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x82}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004011)

123.20063ms ago: executing program 0 (id=3941):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14}, 0x14}}, 0x4c050)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000200080006110600000000000b70000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c26838f2b9000f205891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fe5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0)
mkdir(&(0x7f0000003040)='./file0\x00', 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1, 0x0, 0xfffffffffffeffff, 0x2200000})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0xd000})
syz_emit_vhci(&(0x7f0000000580)=ANY=[], 0xa7)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/186, 0x0, 0xf000})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
futex(&(0x7f0000000040), 0x4, 0x0, 0x0, &(0x7f0000000140), 0x35000000)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c83020001c97b5dbeb5f0924a300000002080400030003080303080000000200d3", @ANYRESOCT=0x0], 0x25)
syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)

52.080639ms ago: executing program 1 (id=3942):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x40000000015, 0x0, 0x0)
r3 = syz_io_uring_setup(0x5169, &(0x7f0000000600)={0x0, 0x4000, 0x10100, 0x7fffffe}, &(0x7f0000000100), &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0)
unshare(0x24020400)

0s ago: executing program 4 (id=3943):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x3}, @ptr]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
timer_gettime(0x0, 0xfffffffffffffffc)
getsockname$packet(r0, &(0x7f0000000080), &(0x7f0000000340)=0x14)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
unshare(0x20000400)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000240), 0x4)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000180)={{0x3c, @broadcast, 0x4e21, 0x2, 'lc\x00', 0x21, 0x1ff, 0x43}, {@broadcast, 0x4e20, 0x3, 0x0, 0x4, 0x200}}, 0x44)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
close(r3)

kernel console output (not intermixed with test programs):

roblems!
[ 1277.335987][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1277.346990][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1277.357986][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1277.370773][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1277.381323][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1277.391868][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1277.401756][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1277.414626][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1277.429942][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1277.442278][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1277.452507][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1277.468108][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1277.480244][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1277.491748][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1277.504681][T18061] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1277.525218][T18061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1277.534761][T18061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1277.544543][T18061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1277.553630][T18061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1277.706960][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1277.746678][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1279.742119][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1279.925101][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1280.358933][T18352] syzkaller1: entered promiscuous mode
[ 1280.364422][T18352] syzkaller1: entered allmulticast mode
[ 1280.687084][ T5198] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1280.886854][ T9865] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1280.934474][ T5198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1280.985616][ T5198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1281.046404][ T5198] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09
[ 1281.076122][ T5198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1281.094978][ T5198] usb 1-1: config 0 descriptor??
[ 1281.136662][ T9865] usb 2-1: Using ep0 maxpacket: 16
[ 1281.144771][ T9865] usb 2-1: config 0 has an invalid interface number: 133 but max is 2
[ 1281.153305][ T9865] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1281.170323][ T9865] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1281.197969][ T9865] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 1281.318928][ T9865] usb 2-1: config 0 has an invalid interface number: 16 but max is 2
[ 1281.347838][ T9865] usb 2-1: config 0 has an invalid interface number: 118 but max is 2
[ 1281.381462][ T9865] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 1281.411143][ T9865] usb 2-1: config 0 has an invalid interface number: 89 but max is 2
[ 1281.437829][ T9865] usb 2-1: config 0 has an invalid descriptor of length 122, skipping remainder of the config
[ 1281.486627][ T9865] usb 2-1: config 0 has 4 interfaces, different from the descriptor's value: 3
[ 1281.576219][ T9865] usb 2-1: config 0 has no interface number 0
[ 1281.596482][ T9865] usb 2-1: config 0 has no interface number 1
[ 1281.602816][ T9865] usb 2-1: config 0 has no interface number 2
[ 1281.845938][ T5198] logitech-hidpp-device 0003:046D:C086.0041: item fetching failed at offset 1/5
[ 1281.875614][ T9865] usb 2-1: config 0 has no interface number 3
[ 1281.882615][ T5198] logitech-hidpp-device 0003:046D:C086.0041: hidpp_probe:parse failed
[ 1281.891000][ T9865] usb 2-1: config 0 interface 133 altsetting 192 has an invalid descriptor for endpoint zero, skipping
[ 1281.902302][ T5198] logitech-hidpp-device 0003:046D:C086.0041: probe with driver logitech-hidpp-device failed with error -22
[ 1281.997034][ T9865] usb 2-1: config 0 interface 133 altsetting 192 has a duplicate endpoint with address 0xC, skipping
[ 1281.997117][ T9865] usb 2-1: config 0 interface 133 altsetting 192 endpoint 0xF has invalid maxpacket 512, setting to 64
[ 1281.997192][ T9865] usb 2-1: config 0 interface 133 altsetting 192 has a duplicate endpoint with address 0xF, skipping
[ 1281.997263][ T9865] usb 2-1: config 0 interface 133 altsetting 192 has a duplicate endpoint with address 0xF, skipping
[ 1281.997333][ T9865] usb 2-1: config 0 interface 133 altsetting 192 has a duplicate endpoint with address 0x7, skipping
[ 1281.997402][ T9865] usb 2-1: config 0 interface 133 altsetting 192 has a duplicate endpoint with address 0xB, skipping
[ 1281.997448][ T9865] usb 2-1: config 0 interface 133 altsetting 192 has a duplicate endpoint with address 0x9, skipping
[ 1281.997579][ T9865] usb 2-1: config 0 interface 16 altsetting 45 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[ 1281.997684][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has an invalid descriptor for endpoint zero, skipping
[ 1281.997752][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has a duplicate endpoint with address 0xF, skipping
[ 1281.997824][ T9865] usb 2-1: config 0 interface 118 altsetting 97 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 1281.997875][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has a duplicate endpoint with address 0x7, skipping
[ 1281.997945][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has a duplicate endpoint with address 0x4, skipping
[ 1281.998029][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has a duplicate endpoint with address 0x9, skipping
[ 1281.998099][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has a duplicate endpoint with address 0x6, skipping
[ 1281.998146][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has an invalid descriptor for endpoint zero, skipping
[ 1281.998215][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has a duplicate endpoint with address 0x6, skipping
[ 1281.998284][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has a duplicate endpoint with address 0x4, skipping
[ 1281.998353][ T9865] usb 2-1: config 0 interface 118 altsetting 97 has a duplicate endpoint with address 0xD, skipping
[ 1281.998476][ T9865] usb 2-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[ 1281.998529][ T9865] usb 2-1: config 0 interface 133 has no altsetting 0
[ 1281.998572][ T9865] usb 2-1: config 0 interface 16 has no altsetting 0
[ 1281.998614][ T9865] usb 2-1: config 0 interface 118 has no altsetting 0
[ 1281.998657][ T9865] usb 2-1: config 0 interface 89 has no altsetting 0
[ 1282.369962][ T5198] usb 1-1: USB disconnect, device number 87
[ 1282.387546][ T9865] usb 2-1: New USB device found, idVendor=0403, idProduct=ff1d, bcdDevice=de.f3
[ 1282.408471][ T9865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.416502][ T9865] usb 2-1: Product: syz
[ 1282.478827][ T9865] usb 2-1: Manufacturer: syz
[ 1282.483460][ T9865] usb 2-1: SerialNumber: syz
[ 1282.525578][T18377] input: syz0 as /devices/virtual/input/input22
[ 1282.546294][ T9865] usb 2-1: config 0 descriptor??
[ 1282.556960][ T9865] usb 2-1: Interface #133 referenced by multiple IADs
[ 1282.564044][ T9865] usb 2-1: Interface #118 referenced by multiple IADs
[ 1282.571980][ T9865] usb 2-1: Interface #89 referenced by multiple IADs
[ 1286.672678][ T9865] ftdi_sio 2-1:0.133: FTDI USB Serial Device converter detected
[ 1286.695994][ T9865] ftdi_sio ttyUSB0: unknown device type: 0xdef3
[ 1287.425418][ T9865] ftdi_sio 2-1:0.16: FTDI USB Serial Device converter detected
[ 1287.438827][ T9865] ftdi_sio ttyUSB1: unknown device type: 0xdef3
[ 1287.448808][ T9865] ftdi_sio 2-1:0.118: FTDI USB Serial Device converter detected
[ 1287.457401][ T9865] ftdi_sio ttyUSB2: unknown device type: 0xdef3
[ 1287.478191][ T9865] ftdi_sio 2-1:0.89: FTDI USB Serial Device converter detected
[ 1287.509382][ T9865] ftdi_sio ttyUSB3: unknown device type: 0xdef3
[ 1287.539463][ T9865] usb 2-1: USB disconnect, device number 75
[ 1287.594871][ T9865] ftdi_sio 2-1:0.133: device disconnected
[ 1287.659953][ T9865] ftdi_sio 2-1:0.16: device disconnected
[ 1287.699449][ T9865] ftdi_sio 2-1:0.118: device disconnected
[ 1288.369983][ T9865] ftdi_sio 2-1:0.89: device disconnected
[ 1288.545542][T18423] netlink: 'syz.2.3511': attribute type 1 has an invalid length.
[ 1288.597231][T18423] bond1: entered promiscuous mode
[ 1288.641322][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3511'.
[ 1290.113067][ T9865] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1291.048295][ T9865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1291.075391][ T9865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1291.086917][ T4491] Bluetooth: hci5: ISO packet for unknown connection handle 0
[ 1291.096915][ T9865] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09
[ 1291.107122][ T9865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1291.116651][ T9865] usb 1-1: config 0 descriptor??
[ 1291.159584][ T4491] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1291.184251][ T4491] Bluetooth: hci5: link tx timeout
[ 1291.199293][ T4491] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1291.680183][ T5146] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1291.742144][ T9865] logitech-hidpp-device 0003:046D:C086.0042: item fetching failed at offset 1/5
[ 1291.807272][ T9865] logitech-hidpp-device 0003:046D:C086.0042: hidpp_probe:parse failed
[ 1291.854730][ T9865] logitech-hidpp-device 0003:046D:C086.0042: probe with driver logitech-hidpp-device failed with error -22
[ 1291.877365][ T5146] usb 2-1: Using ep0 maxpacket: 16
[ 1291.903928][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1291.948664][ T5146] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1291.975195][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.038082][ T5146] usb 2-1: config 0 descriptor??
[ 1292.059272][ T9865] usb 1-1: USB disconnect, device number 88
[ 1292.272412][T18461] FAULT_INJECTION: forcing a failure.
[ 1292.272412][T18461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1292.296874][T18461] CPU: 1 PID: 18461 Comm: syz.2.3524 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1292.306791][T18461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1292.316863][T18461] Call Trace:
[ 1292.320160][T18461]  <TASK>
[ 1292.323106][T18461]  dump_stack_lvl+0x241/0x360
[ 1292.327815][T18461]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1292.333045][T18461]  ? __pfx__printk+0x10/0x10
[ 1292.337660][T18461]  ? __pfx_lock_release+0x10/0x10
[ 1292.342711][T18461]  should_fail_ex+0x3b0/0x4e0
[ 1292.347413][T18461]  _copy_from_user+0x2f/0xe0
[ 1292.352026][T18461]  copy_msghdr_from_user+0xae/0x680
[ 1292.357250][T18461]  ? __pfx___might_resched+0x10/0x10
[ 1292.362570][T18461]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1292.368437][T18461]  ? __might_fault+0xaa/0x120
[ 1292.373145][T18461]  do_recvmmsg+0x40f/0xae0
[ 1292.377590][T18461]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1292.382811][T18461]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1292.387770][T18461]  ? lockdep_hardirqs_on+0x99/0x150
[ 1292.393020][T18461]  ? __pfx___schedule+0x10/0x10
[ 1292.397892][T18461]  ? vfs_write+0x7c4/0xc90
[ 1292.402337][T18461]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1292.408358][T18461]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1292.414710][T18461]  __x64_sys_recvmmsg+0x199/0x250
[ 1292.419759][T18461]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1292.425319][T18461]  ? do_syscall_64+0x100/0x230
[ 1292.430102][T18461]  ? do_syscall_64+0xb6/0x230
[ 1292.434814][T18461]  do_syscall_64+0xf3/0x230
[ 1292.439336][T18461]  ? clear_bhb_loop+0x35/0x90
[ 1292.444035][T18461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1292.449948][T18461] RIP: 0033:0x7f5360975b59
[ 1292.454378][T18461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1292.474000][T18461] RSP: 002b:00007f5361779048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1292.482438][T18461] RAX: ffffffffffffffda RBX: 00007f5360b05f60 RCX: 00007f5360975b59
[ 1292.490435][T18461] RDX: 0000000000000414 RSI: 0000000020000840 RDI: 0000000000000004
[ 1292.498433][T18461] RBP: 00007f53617790a0 R08: 0000000000000000 R09: 0000000000000000
[ 1292.506428][T18461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1292.514424][T18461] R13: 000000000000000b R14: 00007f5360b05f60 R15: 00007ffedb1bee88
[ 1292.522461][T18461]  </TASK>
[ 1292.546767][T18464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1292.555340][ T4491] Bluetooth: hci2: unexpected Set CIG Parameters response data
[ 1292.726970][T18464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1292.765914][T18467] FAULT_INJECTION: forcing a failure.
[ 1292.765914][T18467] name failslab, interval 1, probability 0, space 0, times 0
[ 1292.778711][T18467] CPU: 0 PID: 18467 Comm: syz.0.3525 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1292.788567][T18467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1292.798651][T18467] Call Trace:
[ 1292.801941][T18467]  <TASK>
[ 1292.804749][T13246] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1292.804862][T18467]  dump_stack_lvl+0x241/0x360
[ 1292.817121][T18467]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1292.822351][T18467]  ? __pfx__printk+0x10/0x10
[ 1292.826966][T18467]  ? nf_ct_pernet+0x45/0x270
[ 1292.831666][T18467]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1292.837655][T18467]  ? __pfx_lock_release+0x10/0x10
[ 1292.842686][T18467]  should_fail_ex+0x3b0/0x4e0
[ 1292.847381][T18467]  ? __nf_conntrack_alloc+0x8f/0x380
[ 1292.852685][T18467]  should_failslab+0x9/0x20
[ 1292.857212][T18467]  kmem_cache_alloc_noprof+0x6c/0x2a0
[ 1292.862599][T18467]  __nf_conntrack_alloc+0x8f/0x380
[ 1292.867714][T18467]  init_conntrack+0x3c3/0x1310
[ 1292.872483][T18467]  ? __pfx_init_conntrack+0x10/0x10
[ 1292.877693][T18467]  ? __pfx___nf_conntrack_find_get+0x10/0x10
[ 1292.883705][T18467]  ? __local_bh_enable_ip+0x168/0x200
[ 1292.889552][T18467]  nf_conntrack_in+0xd59/0x1880
[ 1292.894439][T18467]  ? __pfx_nf_conntrack_in+0x10/0x10
[ 1292.899766][T18467]  ? __pfx_ipv6_conntrack_in+0x10/0x10
[ 1292.905225][T18467]  nf_hook_slow+0xc3/0x220
[ 1292.909665][T18467]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1292.914854][T18467]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1292.920047][T18467]  NF_HOOK+0x29e/0x450
[ 1292.924130][T18467]  ? skb_orphan+0x4b/0xd0
[ 1292.928475][T18467]  ? NF_HOOK+0x9a/0x450
[ 1292.932638][T18467]  ? __pfx_NF_HOOK+0x10/0x10
[ 1292.937240][T18467]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1292.942456][T18467]  ? __pfx_ipv6_rcv+0x10/0x10
[ 1292.947142][T18467]  __netif_receive_skb+0x1ea/0x650
[ 1292.952274][T18467]  ? __pfx_lock_acquire+0x10/0x10
[ 1292.957310][T18467]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 1292.963564][T18467]  ? __pfx___netif_receive_skb+0x10/0x10
[ 1292.969211][T18467]  ? __kasan_slab_alloc+0x66/0x80
[ 1292.974248][T18467]  ? read_tsc+0x9/0x20
[ 1292.978320][T18467]  ? timekeeping_get_ns+0x2c0/0x420
[ 1292.983555][T18467]  ? netif_receive_skb+0x131/0x890
[ 1292.988690][T18467]  ? netif_receive_skb+0x131/0x890
[ 1292.989687][T13246] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1292.993807][T18467]  netif_receive_skb+0x1e8/0x890
[ 1292.993839][T18467]  ? tun_rx_batched+0x160/0x8f0
[ 1293.012624][T18467]  ? __pfx_netif_receive_skb+0x10/0x10
[ 1293.018109][T18467]  ? tun_rx_batched+0x160/0x8f0
[ 1293.022960][T18467]  tun_rx_batched+0x1b7/0x8f0
[ 1293.027637][T18467]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1293.033987][T18467]  ? __pfx_lock_acquire+0x10/0x10
[ 1293.039019][T18467]  ? __pfx_tun_rx_batched+0x10/0x10
[ 1293.044238][T18467]  tun_get_user+0x2f84/0x4720
[ 1293.048920][T18467]  ? tun_get_user+0x2a78/0x4720
[ 1293.053799][T18467]  ? __lock_acquire+0x137a/0x2040
[ 1293.058828][T18467]  ? __pfx_tun_get_user+0x10/0x10
[ 1293.063876][T18467]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1293.069341][T18467]  ? tun_get+0x1e/0x2f0
[ 1293.073508][T18467]  ? __pfx_lock_release+0x10/0x10
[ 1293.078553][T18467]  ? tun_get+0x1e/0x2f0
[ 1293.082724][T18467]  ? tun_get+0x27d/0x2f0
[ 1293.086990][T18467]  tun_chr_write_iter+0x113/0x1f0
[ 1293.092027][T18467]  vfs_write+0xa72/0xc90
[ 1293.096297][T18467]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1293.101842][T18467]  ? __pfx_vfs_write+0x10/0x10
[ 1293.106640][T18467]  ksys_write+0x1a0/0x2c0
[ 1293.110980][T18467]  ? __pfx_ksys_write+0x10/0x10
[ 1293.115837][T18467]  ? do_syscall_64+0x100/0x230
[ 1293.120614][T18467]  ? do_syscall_64+0xb6/0x230
[ 1293.125310][T18467]  do_syscall_64+0xf3/0x230
[ 1293.129820][T18467]  ? clear_bhb_loop+0x35/0x90
[ 1293.134493][T18467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1293.140384][T18467] RIP: 0033:0x7efc07f746df
[ 1293.144800][T18467] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48
[ 1293.164418][T18467] RSP: 002b:00007efc08cdf010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1293.172852][T18467] RAX: ffffffffffffffda RBX: 00007efc08105f60 RCX: 00007efc07f746df
[ 1293.180839][T18467] RDX: 000000000000004a RSI: 0000000020000140 RDI: 00000000000000c8
[ 1293.188829][T18467] RBP: 00007efc08cdf0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1293.196802][T18467] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[ 1293.204773][T18467] R13: 000000000000000b R14: 00007efc08105f60 R15: 00007fff7aad44c8
[ 1293.212778][T18467]  </TASK>
[ 1293.221481][T13246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.264968][T13246] usb 5-1: config 0 descriptor??
[ 1293.266512][ T4491] Bluetooth: hci5: command 0x0406 tx timeout
[ 1293.324889][T13246] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1293.877646][T13246] gspca_sonixj: reg_w1 err -110
[ 1293.913261][T13246] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[ 1294.180143][T18481] sch_tbf: burst 9 is lower than device lo mtu (65550) !
[ 1294.446944][ T5146] usbhid 2-1:0.0: can't add hid device: -71
[ 1294.468296][ T5146] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1294.516994][ T5146] usb 2-1: USB disconnect, device number 76
[ 1297.374630][T17610] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1297.409518][T17610] Bluetooth: hci2: Injecting HCI hardware error event
[ 1297.419980][T17610] Bluetooth: hci2: hardware error 0x00
[ 1297.492424][ T9865] usb 5-1: USB disconnect, device number 79
[ 1298.634886][    C1] eth0: bad gso: type: 1, size: 1408
[ 1298.810692][T18502] netlink: 'syz.4.3538': attribute type 12 has an invalid length.
[ 1298.836954][T18502] netlink: 'syz.4.3538': attribute type 11 has an invalid length.
[ 1298.844834][T18502] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.3538'.
[ 1299.036698][  T928] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1299.166804][ T5146] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 1299.214587][ T4491] Bluetooth: hci4: ISO packet for unknown connection handle 0
[ 1299.241505][  T928] usb 4-1: Using ep0 maxpacket: 32
[ 1299.254712][  T928] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[ 1299.281586][  T928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.281954][ T4491] Bluetooth: hci4: SCO packet for unknown connection handle 0
[ 1299.357797][  T928] usb 4-1: Product: syz
[ 1299.375458][  T928] usb 4-1: Manufacturer: syz
[ 1299.380287][ T5146] usb 5-1: Using ep0 maxpacket: 16
[ 1299.404154][  T928] usb 4-1: SerialNumber: syz
[ 1299.413440][ T5146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1299.449281][ T5146] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1299.459353][ T4491] Bluetooth: hci4: link tx timeout
[ 1299.466370][ T4491] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1299.492310][  T928] usb 4-1: config 0 descriptor??
[ 1299.514558][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1299.562335][ T5146] usb 5-1: config 0 descriptor??
[ 1299.741624][  T928] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 076
[ 1299.795056][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3538'.
[ 1300.016212][T18502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.028184][T18502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.062291][ T5146] usbhid 5-1:0.0: can't add hid device: -71
[ 1300.665235][ T1241] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.674152][ T1241] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.856806][T17610] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1300.881682][ T5146] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1300.937459][ T5146] usb 5-1: USB disconnect, device number 80
[ 1301.077492][T18528] 9pnet_fd: Insufficient options for proto=fd
[ 1301.537388][T10389] Bluetooth: hci4: command 0x0406 tx timeout
[ 1301.576803][  T928] usb 4-1: USB disconnect, device number 76
[ 1301.603825][T13246] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 1301.828395][T13246] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1301.864725][T13246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1301.894344][T13246] usb 5-1: config 0 descriptor??
[ 1301.918590][T13246] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1302.163233][T18563] netlink: 'syz.2.3556': attribute type 12 has an invalid length.
[ 1302.193763][T18563] netlink: 'syz.2.3556': attribute type 11 has an invalid length.
[ 1302.214082][T18563] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.3556'.
[ 1302.451978][T13246] gspca_sonixj: reg_w1 err -110
[ 1302.472408][T13246] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[ 1302.578248][ T5146] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1302.685102][T13246] usb 5-1: USB disconnect, device number 81
[ 1302.766774][ T5146] usb 3-1: Using ep0 maxpacket: 16
[ 1302.789036][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1302.821288][ T5146] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1302.848581][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1302.867279][ T5146] usb 3-1: config 0 descriptor??
[ 1302.897143][T17610] Bluetooth: hci2: Opcode 0x206c failed: -110
[ 1303.086234][T18563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3556'.
[ 1303.311682][T18563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1303.336905][T18563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1303.387821][ T5146] usbhid 3-1:0.0: can't add hid device: -71
[ 1303.395589][ T5146] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1303.432440][ T5146] usb 3-1: USB disconnect, device number 76
[ 1304.686367][T18633] trusted_key: encrypted_key: insufficient parameters specified
[ 1305.076913][T17610] Bluetooth: hci2: Opcode 0x2046 failed: -110
[ 1305.343787][ T5146] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1305.440904][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.456019][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.470193][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.480431][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.486696][ T5198] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1305.496779][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.504554][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.526695][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.534461][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.546727][ T5146] usb 1-1: Using ep0 maxpacket: 16
[ 1305.559236][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.568776][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.580976][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.589473][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.598241][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.598406][ T5146] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6
[ 1305.615439][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.623315][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.631256][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1305.639359][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.647987][ T5146] usb 1-1: Product: syz
[ 1305.652175][ T5146] usb 1-1: Manufacturer: syz
[ 1305.656859][  T931] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[ 1305.664556][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.676897][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.684678][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.692661][ T5146] usb 1-1: SerialNumber: syz
[ 1305.696648][ T5198] usb 3-1: Using ep0 maxpacket: 16
[ 1305.700195][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.712410][ T5198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1305.717447][ T5146] usb 1-1: config 0 descriptor??
[ 1305.728620][ T5143] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 1305.736244][ T5198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1305.745752][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.756341][ T5198] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1305.764372][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.775734][ T5198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1305.788407][T13246] hid-generic 4002:0000:FFFFFFFE.0043: unknown main item tag 0x0
[ 1305.798618][ T5198] usb 3-1: config 0 descriptor??
[ 1305.813000][T13246] hid-generic 4002:0000:FFFFFFFE.0043: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1305.853750][  T931] usb 4-1: not running at top speed; connect to a high speed hub
[ 1305.868189][  T931] usb 4-1: config 4 has an invalid interface number: 130 but max is 1
[ 1305.876397][  T931] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1305.891612][  T931] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1305.901203][  T931] usb 4-1: config 4 has an invalid interface number: 227 but max is 1
[ 1305.909440][  T931] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1305.918297][  T931] usb 4-1: config 4 has an invalid descriptor of length 222, skipping remainder of the config
[ 1305.919916][ T5143] usb 5-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config
[ 1305.928653][  T931] usb 4-1: config 4 has no interface number 0
[ 1305.928701][  T931] usb 4-1: config 4 has no interface number 1
[ 1305.928758][  T931] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1305.928785][  T931] usb 4-1: config 4 interface 130 altsetting 190 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1305.928834][  T931] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x86 has invalid maxpacket 22708, setting to 64
[ 1305.947969][ T5143] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 184, using maximum allowed: 30
[ 1305.951387][  T931] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1305.974561][ T5143] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 184
[ 1306.015661][  T931] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1306.055943][  T931] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1306.070043][T18640] sg_write: data in/out 196720/1 bytes for SCSI command 0xcb-- guessing data in;
[ 1306.070043][T18640]    program syz.1.3583 not setting count and/or reply_len properly
[ 1306.080819][  T931] usb 4-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1306.107234][  T931] usb 4-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1306.130076][  T931] usb 4-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1306.148681][  T931] usb 4-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1306.160197][ T5143] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1306.182123][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1306.187008][  T931] usb 4-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1306.215195][  T931] usb 4-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1306.230818][  T931] usb 4-1: config 4 interface 130 has no altsetting 0
[ 1306.237075][ T5143] usb 5-1: config 0 descriptor??
[ 1306.237713][  T931] usb 4-1: config 4 interface 227 has no altsetting 0
[ 1306.270346][T18632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1306.270565][T18632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1306.276814][ T5198] hid-generic 0003:0158:0100.0044: unknown main item tag 0x1
[ 1306.293276][ T5146] usb 1-1: USB disconnect, device number 89
[ 1306.297309][ T5198] hid-generic 0003:0158:0100.0044: unexpected long global item
[ 1306.312593][  T931] usb 4-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1306.321941][  T931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.342374][  T931] usb 4-1: Product: В
[ 1306.355468][ T5198] hid-generic 0003:0158:0100.0044: probe with driver hid-generic failed with error -22
[ 1306.366060][  T931] usb 4-1: Manufacturer: 
[ 1306.376166][  T931] usb 4-1: SerialNumber: ꌇद폈㻲빦☠놧ᖍ쨦๽≔ᭀ᳓眍媁뇄፿豾㶃乏쐊ᆏ䵄搸䞋쏓
[ 1306.410374][T18637] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1306.419749][T18637] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1306.427192][T18637] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1306.493609][ T5198] usb 3-1: USB disconnect, device number 77
[ 1306.571458][T18642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3584'.
[ 1307.289472][T18655] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3588'.
[ 1307.637511][ T5143] usb 5-1: string descriptor 0 read error: -71
[ 1307.690368][ T5143] usb 5-1: USB disconnect, device number 82
[ 1307.832123][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'.
[ 1308.710749][  T931] usb_serial_simple 4-1:4.130: nokia converter detected
[ 1309.038910][  T931] usb 4-1: nokia converter now attached to ttyUSB0
[ 1309.091927][  T931] usb_serial_simple 4-1:4.227: nokia converter detected
[ 1309.326394][  T931] usb 4-1: nokia converter now attached to ttyUSB1
[ 1309.385800][T18685] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in;
[ 1309.385800][T18685]    program syz.3.3596 not setting count and/or reply_len properly
[ 1309.540768][  T931] usb 4-1: USB disconnect, device number 77
[ 1309.551292][  T931] nokia ttyUSB0: nokia converter now disconnected from ttyUSB0
[ 1309.559465][  T931] usb_serial_simple 4-1:4.130: device disconnected
[ 1309.569302][  T931] nokia ttyUSB1: nokia converter now disconnected from ttyUSB1
[ 1309.586915][  T931] usb_serial_simple 4-1:4.227: device disconnected
[ 1309.699038][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3598'.
[ 1309.894821][T17610] Bluetooth: hci4: SCO packet for unknown connection handle 201
[ 1310.337943][  T931] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[ 1310.605019][T18702] sg_write: data in/out 196720/1 bytes for SCSI command 0xcb-- guessing data in;
[ 1310.605019][T18702]    program syz.4.3594 not setting count and/or reply_len properly
[ 1310.668976][  T931] usb 3-1: not running at top speed; connect to a high speed hub
[ 1310.681775][  T931] usb 3-1: config 4 has an invalid interface number: 130 but max is 1
[ 1310.692783][  T931] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1310.703655][  T931] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1310.713987][  T931] usb 3-1: config 4 has an invalid interface number: 227 but max is 1
[ 1310.724996][  T931] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1310.735474][  T931] usb 3-1: config 4 has an invalid descriptor of length 222, skipping remainder of the config
[ 1310.750044][  T931] usb 3-1: config 4 has no interface number 0
[ 1310.758129][  T931] usb 3-1: config 4 has no interface number 1
[ 1310.764499][  T931] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1310.775973][  T931] usb 3-1: config 4 interface 130 altsetting 190 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1310.794291][  T931] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0x86 has invalid maxpacket 22708, setting to 64
[ 1310.821499][  T931] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1310.861901][  T931] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1310.936254][  T931] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1310.991108][  T931] usb 3-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1311.046708][  T931] usb 3-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1311.079296][  T931] usb 3-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1311.124719][  T931] usb 3-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1311.161563][  T931] usb 3-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1311.206044][  T931] usb 3-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1311.241844][  T931] usb 3-1: config 4 interface 130 has no altsetting 0
[ 1311.271200][  T931] usb 3-1: config 4 interface 227 has no altsetting 0
[ 1311.295443][  T931] usb 3-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1311.324853][  T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.344869][  T931] usb 3-1: Product: В
[ 1311.349165][   T25] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[ 1311.356553][  T931] usb 3-1: Manufacturer: 
[ 1311.361429][  T931] usb 3-1: SerialNumber: ꌇद폈㻲빦☠놧ᖍ쨦๽≔ᭀ᳓眍媁뇄፿豾㶃乏쐊ᆏ䵄搸䞋쏓
[ 1311.404983][T18691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1311.442187][T18691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1311.457228][T18691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1311.541074][   T25] usb 4-1: not running at top speed; connect to a high speed hub
[ 1311.550142][ T5146] usb 5-1: new full-speed USB device number 83 using dummy_hcd
[ 1311.580275][   T25] usb 4-1: config 4 has an invalid interface number: 130 but max is 1
[ 1311.596642][   T25] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1311.620008][   T25] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1311.656786][   T25] usb 4-1: config 4 has an invalid interface number: 227 but max is 1
[ 1311.675712][   T25] usb 4-1: config 4 has an invalid descriptor of length 210, skipping remainder of the config
[ 1311.703802][   T25] usb 4-1: config 4 has no interface number 0
[ 1311.718778][   T25] usb 4-1: config 4 has no interface number 1
[ 1311.724932][   T25] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1311.739832][   T25] usb 4-1: config 4 interface 130 altsetting 190 has an invalid endpoint descriptor of length 2, skipping
[ 1311.761088][   T25] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1311.777254][ T5146] usb 5-1: not running at top speed; connect to a high speed hub
[ 1311.819886][ T5146] usb 5-1: config 4 has an invalid interface number: 130 but max is 1
[ 1311.834874][   T25] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1311.858840][ T5146] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1311.889759][   T25] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1311.906590][ T5146] usb 5-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1311.939444][ T5146] usb 5-1: config 4 has an invalid interface number: 227 but max is 1
[ 1311.943254][T18720] netlink: 'syz.1.3610': attribute type 14 has an invalid length.
[ 1311.972998][   T25] usb 4-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1312.104963][ T5146] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1312.124115][   T25] usb 4-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1312.143631][ T5146] usb 5-1: config 4 has an invalid descriptor of length 222, skipping remainder of the config
[ 1312.171349][   T25] usb 4-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1312.182482][ T5146] usb 5-1: config 4 has no interface number 0
[ 1312.192024][ T5146] usb 5-1: config 4 has no interface number 1
[ 1312.201092][   T25] usb 4-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1312.216778][ T5146] usb 5-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1312.236502][   T25] usb 4-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1312.252354][ T5146] usb 5-1: config 4 interface 130 altsetting 190 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1312.266031][   T25] usb 4-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1312.281406][ T5146] usb 5-1: config 4 interface 130 altsetting 190 endpoint 0x86 has invalid maxpacket 22708, setting to 64
[ 1312.294360][   T25] usb 4-1: config 4 interface 130 has no altsetting 0
[ 1312.301505][ T5146] usb 5-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1312.321936][   T25] usb 4-1: config 4 interface 227 has no altsetting 0
[ 1312.348921][ T5146] usb 5-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1312.365592][   T25] usb 4-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1312.379370][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1312.397807][ T5146] usb 5-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1312.414708][   T25] usb 4-1: Product: В
[ 1312.430060][   T25] usb 4-1: Manufacturer: 
[ 1312.438716][ T5146] usb 5-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1312.624594][   T25] usb 4-1: SerialNumber: ꌇद폈㻲빦☠놧ᖍ쨦๽≔ᭀ᳓眍媁뇄፿豾㶃乏쐊ᆏ䵄搸䞋쏓
[ 1312.638852][ T5146] usb 5-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1312.660563][ T5146] usb 5-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1314.766841][T17610] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1314.776276][T17610] Bluetooth: hci1: Injecting HCI hardware error event
[ 1314.791127][T17610] Bluetooth: hci1: hardware error 0x00
[ 1315.036635][ T5146] usb 5-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1315.047922][ T5146] usb 5-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1315.061553][ T5146] usb 5-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1315.075011][ T5146] usb 5-1: config 4 interface 130 has no altsetting 0
[ 1315.085026][ T5146] usb 5-1: config 4 interface 227 has no altsetting 0
[ 1315.130803][ T5146] usb 5-1: string descriptor 0 read error: -71
[ 1315.155444][  T931] usb_serial_simple 3-1:4.130: nokia converter detected
[ 1315.166350][ T5146] usb 5-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1315.174305][  T931] usb 3-1: nokia converter now attached to ttyUSB0
[ 1315.205796][  T931] usb_serial_simple 3-1:4.227: nokia converter detected
[ 1315.220396][  T931] usb 3-1: nokia converter now attached to ttyUSB1
[ 1315.229065][  T931] usb 3-1: USB disconnect, device number 78
[ 1315.243093][  T931] nokia ttyUSB0: nokia converter now disconnected from ttyUSB0
[ 1315.251298][  T931] usb_serial_simple 3-1:4.130: device disconnected
[ 1315.260629][  T931] nokia ttyUSB1: nokia converter now disconnected from ttyUSB1
[ 1315.273286][  T931] usb_serial_simple 3-1:4.227: device disconnected
[ 1315.300583][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1315.372933][ T5146] usb 5-1: can't set config #4, error -71
[ 1315.410458][ T5146] usb 5-1: USB disconnect, device number 83
[ 1315.497962][    C1] eth0: bad gso: type: 1, size: 1408
[ 1316.455544][   T25] usb_serial_simple 4-1:4.130: nokia converter detected
[ 1316.542705][   T25] usb 4-1: nokia converter now attached to ttyUSB0
[ 1316.627887][   T25] usb_serial_simple 4-1:4.227: nokia converter detected
[ 1316.675536][   T25] usb 4-1: nokia converter now attached to ttyUSB1
[ 1316.696179][   T25] usb 4-1: USB disconnect, device number 78
[ 1316.715400][   T25] nokia ttyUSB0: nokia converter now disconnected from ttyUSB0
[ 1316.723759][   T25] usb_serial_simple 4-1:4.130: device disconnected
[ 1316.732165][  T931] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1316.735500][   T25] nokia ttyUSB1: nokia converter now disconnected from ttyUSB1
[ 1316.757280][   T25] usb_serial_simple 4-1:4.227: device disconnected
[ 1318.595030][T17610] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1318.667499][  T931] usb 3-1: device descriptor read/all, error -71
[ 1319.787253][ T5103] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[ 1320.188891][ T5103] usb 4-1: not running at top speed; connect to a high speed hub
[ 1320.204878][ T5103] usb 4-1: config 4 has an invalid interface number: 130 but max is 1
[ 1320.213915][ T5103] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1320.228631][ T5103] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1320.265868][ T5103] usb 4-1: config 4 has an invalid interface number: 227 but max is 1
[ 1320.274233][ T5103] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1320.283178][ T5103] usb 4-1: config 4 has an invalid descriptor of length 222, skipping remainder of the config
[ 1320.293463][ T5103] usb 4-1: config 4 has no interface number 0
[ 1320.299565][ T5103] usb 4-1: config 4 has no interface number 1
[ 1320.305657][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1320.320697][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1320.373233][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x86 has invalid maxpacket 22708, setting to 64
[ 1320.406663][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1320.436616][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1320.481347][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1320.535873][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1320.569457][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1320.614172][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1320.645247][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1320.678445][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1320.725864][ T5103] usb 4-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1320.768974][ T5103] usb 4-1: config 4 interface 130 has no altsetting 0
[ 1320.775780][ T5103] usb 4-1: config 4 interface 227 has no altsetting 0
[ 1320.831546][ T5103] usb 4-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1321.010804][ T5103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1322.311166][ T5103] usb 4-1: Product: В
[ 1322.321312][ T5103] usb 4-1: Manufacturer: 
[ 1322.326593][ T5103] usb 4-1: SerialNumber: ꌇद폈㻲빦☠놧ᖍ쨦๽≔ᭀ᳓眍媁뇄፿豾㶃乏쐊ᆏ䵄搸䞋쏓
[ 1322.394348][ T5103] usb 4-1: can't set config #4, error -71
[ 1322.406654][ T5103] usb 4-1: USB disconnect, device number 79
[ 1323.585566][   T25] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[ 1323.779240][   T25] usb 1-1: not running at top speed; connect to a high speed hub
[ 1323.798099][   T25] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[ 1323.809613][   T25] usb 1-1: can't read configurations, error -22
[ 1323.946652][ T5146] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[ 1323.980186][   T25] usb 1-1: new full-speed USB device number 91 using dummy_hcd
[ 1324.170919][ T5146] usb 3-1: not running at top speed; connect to a high speed hub
[ 1324.191696][ T5146] usb 3-1: config 4 has an invalid interface number: 130 but max is 1
[ 1324.214308][ T5146] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1324.234187][   T25] usb 1-1: not running at top speed; connect to a high speed hub
[ 1324.264654][   T25] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[ 1324.296674][ T5146] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1324.312514][   T25] usb 1-1: can't read configurations, error -22
[ 1324.326768][ T5146] usb 3-1: config 4 has an invalid interface number: 227 but max is 1
[ 1324.346460][   T25] usb usb1-port1: attempt power cycle
[ 1324.350650][T17610] Bluetooth: hci4: command 0x0406 tx timeout
[ 1324.376396][ T5146] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1324.413734][ T5146] usb 3-1: config 4 has an invalid descriptor of length 222, skipping remainder of the config
[ 1324.468666][ T5146] usb 3-1: config 4 has no interface number 0
[ 1324.499931][ T5146] usb 3-1: config 4 has no interface number 1
[ 1324.518012][ T5146] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1324.562548][ T5146] usb 3-1: config 4 interface 130 altsetting 190 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1324.615487][ T5146] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0x86 has invalid maxpacket 22708, setting to 64
[ 1324.641462][ T5146] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1324.655240][ T5146] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1324.672338][ T5146] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1324.703005][ T5146] usb 3-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1324.855865][ T5146] usb 3-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1324.867066][ T5146] usb 3-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1324.878162][ T5146] usb 3-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1324.889291][ T5146] usb 3-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1324.903707][ T5146] usb 3-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1324.917941][   T25] usb 1-1: new full-speed USB device number 92 using dummy_hcd
[ 1325.044813][ T5146] usb 3-1: config 4 interface 130 has no altsetting 0
[ 1325.051929][ T5146] usb 3-1: config 4 interface 227 has no altsetting 0
[ 1325.068021][ T5146] usb 3-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1325.081401][ T5146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1325.089729][ T5146] usb 3-1: Product: В
[ 1325.095265][   T25] usb 1-1: not running at top speed; connect to a high speed hub
[ 1325.103905][ T5146] usb 3-1: Manufacturer: 
[ 1325.109465][   T25] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[ 1325.121427][ T5146] usb 3-1: SerialNumber: ꌇद폈㻲빦☠놧ᖍ쨦๽≔ᭀ᳓眍媁뇄፿豾㶃乏쐊ᆏ䵄搸䞋쏓
[ 1325.135670][   T25] usb 1-1: can't read configurations, error -22
[ 1325.160036][T18850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1327.326753][   T25] usb 1-1: new full-speed USB device number 93 using dummy_hcd
[ 1327.343183][ T5146] usb 3-1: can't set config #4, error -71
[ 1327.358169][ T5146] usb 3-1: USB disconnect, device number 81
[ 1327.375905][   T25] usb 1-1: not running at top speed; connect to a high speed hub
[ 1327.386883][   T25] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[ 1327.395422][   T25] usb 1-1: can't read configurations, error -22
[ 1327.403685][   T25] usb usb1-port1: unable to enumerate USB device
[ 1327.898471][  T931] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1327.982172][ T4491] Bluetooth: hci5: ISO packet for unknown connection handle 0
[ 1327.990494][ T4491] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1328.104164][  T931] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1328.173465][  T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1328.199166][  T931] usb 3-1: config 0 descriptor??
[ 1328.248217][  T931] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1328.505824][  T931] gspca_sonixj: reg_w1 err -71
[ 1328.524246][  T931] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[ 1328.566729][  T931] usb 3-1: USB disconnect, device number 82
[ 1329.106773][ T5146] usb 1-1: new full-speed USB device number 94 using dummy_hcd
[ 1329.438724][ T5146] usb 1-1: not running at top speed; connect to a high speed hub
[ 1329.452468][ T5146] usb 1-1: config 4 has an invalid interface number: 130 but max is 1
[ 1332.816301][T17610] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1332.818059][ T5146] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1332.826059][T17610] Bluetooth: hci4: Injecting HCI hardware error event
[ 1332.845237][T17610] Bluetooth: hci4: hardware error 0x00
[ 1332.852199][ T5146] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1332.867408][ T5146] usb 1-1: config 4 has an invalid interface number: 227 but max is 1
[ 1332.875691][ T5146] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1332.913218][ T5146] usb 1-1: config 4 has an invalid descriptor of length 222, skipping remainder of the config
[ 1332.951655][ T5146] usb 1-1: config 4 has no interface number 0
[ 1332.971418][ T5146] usb 1-1: config 4 has no interface number 1
[ 1333.232388][T18929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3672'.
[ 1334.239784][T18931] netlink: 'syz.4.3676': attribute type 12 has an invalid length.
[ 1334.248122][ T5146] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1334.248158][ T5146] usb 1-1: config 4 interface 130 altsetting 190 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1334.248185][ T5146] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0x86 has invalid maxpacket 22708, setting to 64
[ 1334.248213][ T5146] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1334.248240][ T5146] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1334.248267][ T5146] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1334.248295][ T5146] usb 1-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1334.248316][ T5146] usb 1-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1334.248339][ T5146] usb 1-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1334.283551][T18931] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3676'.
[ 1334.351956][T18934] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3673'.
[ 1334.385346][ T5146] usb 1-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1334.412558][ T5146] usb 1-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1334.444798][ T5146] usb 1-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1334.459009][ T5146] usb 1-1: config 4 interface 130 has no altsetting 0
[ 1334.487017][ T5146] usb 1-1: config 4 interface 227 has no altsetting 0
[ 1334.514197][ T5146] usb 1-1: string descriptor 0 read error: -71
[ 1334.559029][ T5146] usb 1-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1334.617889][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1334.634880][ T5146] usb 1-1: can't set config #4, error -71
[ 1334.642839][ T5146] usb 1-1: USB disconnect, device number 94
[ 1334.775391][T18946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3679'.
[ 1334.867782][   T25] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 1334.896941][T17610] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1334.904297][T17610] Bluetooth: hci5: command 0x0406 tx timeout
[ 1335.098574][   T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1335.118963][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.142060][   T25] usb 5-1: config 0 descriptor??
[ 1335.159617][   T25] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1335.275517][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3685'.
[ 1335.285688][T18963] bridge_slave_1: left allmulticast mode
[ 1335.293412][T18963] bridge_slave_1: left promiscuous mode
[ 1335.301346][T18963] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1335.313114][T18963] bridge_slave_0: left allmulticast mode
[ 1335.319167][T18963] bridge_slave_0: left promiscuous mode
[ 1335.325793][T18963] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1335.399541][T18971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3686'.
[ 1335.717187][   T25] gspca_sonixj: reg_w1 err -110
[ 1336.043764][   T25] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[ 1336.091322][   T25] usb 5-1: USB disconnect, device number 84
[ 1336.187812][T18972] netlink: 'syz.2.3684': attribute type 12 has an invalid length.
[ 1336.203195][T18972] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3684'.
[ 1336.370453][T18982] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3689'.
[ 1336.796265][T18995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3694'.
[ 1337.011247][T19003] FAULT_INJECTION: forcing a failure.
[ 1337.011247][T19003] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1337.066869][T19003] CPU: 0 PID: 19003 Comm: syz.4.3697 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1337.076733][T19003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1337.086780][T19003] Call Trace:
[ 1337.090054][T19003]  <TASK>
[ 1337.092977][T19003]  dump_stack_lvl+0x241/0x360
[ 1337.097662][T19003]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1337.102859][T19003]  ? __pfx__printk+0x10/0x10
[ 1337.107455][T19003]  ? __pfx_lock_release+0x10/0x10
[ 1337.112477][T19003]  ? __lock_acquire+0x137a/0x2040
[ 1337.117509][T19003]  should_fail_ex+0x3b0/0x4e0
[ 1337.122190][T19003]  _copy_from_user+0x2f/0xe0
[ 1337.126777][T19003]  kstrtouint_from_user+0xc6/0x190
[ 1337.131884][T19003]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1337.137607][T19003]  ? __pfx_lock_acquire+0x10/0x10
[ 1337.142635][T19003]  proc_fail_nth_write+0xaa/0x2d0
[ 1337.147657][T19003]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1337.153547][T19003]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1337.159178][T19003]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1337.164803][T19003]  vfs_write+0x2a2/0xc90
[ 1337.169052][T19003]  ? __pfx_vfs_write+0x10/0x10
[ 1337.173810][T19003]  ? __fget_files+0x29/0x470
[ 1337.178398][T19003]  ? __fget_files+0x3f6/0x470
[ 1337.183081][T19003]  ksys_write+0x1a0/0x2c0
[ 1337.187410][T19003]  ? __pfx_ksys_write+0x10/0x10
[ 1337.192257][T19003]  ? do_syscall_64+0x100/0x230
[ 1337.197015][T19003]  ? do_syscall_64+0xb6/0x230
[ 1337.201685][T19003]  do_syscall_64+0xf3/0x230
[ 1337.206179][T19003]  ? clear_bhb_loop+0x35/0x90
[ 1337.210852][T19003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1337.216747][T19003] RIP: 0033:0x7f01797746df
[ 1337.221167][T19003] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48
[ 1337.240770][T19003] RSP: 002b:00007f017a49f040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1337.249182][T19003] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f01797746df
[ 1337.257149][T19003] RDX: 0000000000000001 RSI: 00007f017a49f0b0 RDI: 0000000000000004
[ 1337.265111][T19003] RBP: 00007f017a49f0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1337.273077][T19003] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1337.281041][T19003] R13: 000000000000000b R14: 00007f0179905f60 R15: 00007fff6a3c2398
[ 1337.289023][T19003]  </TASK>
[ 1337.454618][T19007] netlink: 'syz.1.3698': attribute type 1 has an invalid length.
[ 1337.537928][T19007] bond2: entered promiscuous mode
[ 1337.623102][T19012] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1337.683838][   T29] audit: type=1326 audit(1721516786.715:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19008 comm="syz.3.3700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2998575b59 code=0x0
[ 1337.691799][T19012] bond2: (slave lo): making interface the new active one
[ 1337.764836][T19012] bond2: (slave lo): Enslaving as an active interface with an up link
[ 1337.803637][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3698'.
[ 1337.936786][T10389] Bluetooth: hci5: unexpected event 0x06 length: 8 > 3
[ 1338.006089][T10389] Bluetooth: hci5: SCO packet for unknown connection handle 201
[ 1338.095890][T19012] syz.1.3698 (19012) used greatest stack depth: 18736 bytes left
[ 1338.326267][T19036] netlink: 'syz.4.3709': attribute type 5 has an invalid length.
[ 1338.344477][T19037] __nla_validate_parse: 1 callbacks suppressed
[ 1338.344498][T19037] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3706'.
[ 1338.371871][T19034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3708'.
[ 1338.436643][  T928] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1338.459183][   T29] audit: type=1326 audit(1721516787.515:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19035 comm="syz.4.3709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0179775b59 code=0x0
[ 1338.564223][T19041] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[ 1338.570942][T19041] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1338.581408][T19041] vhci_hcd vhci_hcd.0: Device attached
[ 1338.609998][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3709'.
[ 1338.680102][  T928] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1338.805805][  T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1338.820036][T19041] netlink: 'syz.4.3709': attribute type 1 has an invalid length.
[ 1338.822634][  T928] usb 2-1: config 0 descriptor??
[ 1338.838747][  T928] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1338.846789][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3709'.
[ 1338.865236][T19041] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1338.922966][   T25] vhci_hcd: vhci_device speed not set
[ 1339.207869][   T25] usb 17-1: new full-speed USB device number 2 using vhci_hcd
[ 1339.489568][  T928] gspca_sonixj: reg_w1 err -110
[ 1339.498441][  T928] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[ 1339.510819][T19041] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1339.527890][T19041] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1339.543949][T19041] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1339.742002][  T931] usb 2-1: USB disconnect, device number 77
[ 1339.816837][T19042] vhci_hcd: connection closed
[ 1339.843721][T18005] vhci_hcd: stop threads
[ 1339.854630][T18005] vhci_hcd: release socket
[ 1339.868005][T18005] vhci_hcd: disconnect device
[ 1340.853325][T19068] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3717'.
[ 1341.267310][T19079] FAULT_INJECTION: forcing a failure.
[ 1341.267310][T19079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1341.314563][T19079] CPU: 1 PID: 19079 Comm: syz.1.3721 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1341.324390][T19079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1341.334435][T19079] Call Trace:
[ 1341.337700][T19079]  <TASK>
[ 1341.340616][T19079]  dump_stack_lvl+0x241/0x360
[ 1341.345285][T19079]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1341.350470][T19079]  ? __pfx__printk+0x10/0x10
[ 1341.355051][T19079]  should_fail_ex+0x3b0/0x4e0
[ 1341.359720][T19079]  _copy_from_user+0x2f/0xe0
[ 1341.364296][T19079]  sg_io+0x2b6/0x850
[ 1341.368179][T19079]  scsi_ioctl+0x1935/0x2d80
[ 1341.372664][T19079]  ? kasan_save_track+0x51/0x80
[ 1341.377498][T19079]  ? kasan_save_track+0x3f/0x80
[ 1341.382339][T19079]  ? __pfx_scsi_ioctl+0x10/0x10
[ 1341.387176][T19079]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1341.392196][T19079]  ? tomoyo_path_number_perm+0x208/0x880
[ 1341.397813][T19079]  ? __pfx_lock_release+0x10/0x10
[ 1341.402822][T19079]  ? __pfx___might_resched+0x10/0x10
[ 1341.408098][T19079]  ? kfree+0x149/0x360
[ 1341.412158][T19079]  ? scsi_block_when_processing_errors+0x295/0x360
[ 1341.418655][T19079]  ? __pfx_scsi_block_when_processing_errors+0x10/0x10
[ 1341.425486][T19079]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1341.431458][T19079]  sg_ioctl+0x1c82/0x2e80
[ 1341.435776][T19079]  ? __pfx_sg_ioctl+0x10/0x10
[ 1341.440439][T19079]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1341.446405][T19079]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1341.451328][T19079]  ? security_file_ioctl+0x87/0xb0
[ 1341.456423][T19079]  ? __pfx_sg_ioctl+0x10/0x10
[ 1341.461089][T19079]  __se_sys_ioctl+0xfc/0x170
[ 1341.465667][T19079]  do_syscall_64+0xf3/0x230
[ 1341.470154][T19079]  ? clear_bhb_loop+0x35/0x90
[ 1341.474813][T19079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1341.480686][T19079] RIP: 0033:0x7ff8d9575b59
[ 1341.485081][T19079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1341.504670][T19079] RSP: 002b:00007ff8da3bb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1341.513072][T19079] RAX: ffffffffffffffda RBX: 00007ff8d9705f60 RCX: 00007ff8d9575b59
[ 1341.521032][T19079] RDX: 0000000020000000 RSI: 0000000000005393 RDI: 0000000000000004
[ 1341.528987][T19079] RBP: 00007ff8da3bb0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1341.536935][T19079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1341.544884][T19079] R13: 000000000000000b R14: 00007ff8d9705f60 R15: 00007fffdaf0a828
[ 1341.552845][T19079]  </TASK>
[ 1341.846382][T19085] netlink: 'syz.3.3724': attribute type 12 has an invalid length.
[ 1341.883198][T19085] netlink: 'syz.3.3724': attribute type 11 has an invalid length.
[ 1341.926935][T19085] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.3724'.
[ 1342.266729][ T9865] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1342.489819][ T9865] usb 4-1: Using ep0 maxpacket: 16
[ 1342.575212][ T9865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1342.619414][ T9865] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1342.648872][ T9865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1342.721829][ T9865] usb 4-1: config 0 descriptor??
[ 1343.020652][ T5103] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1343.058958][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3724'.
[ 1343.238850][ T5103] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1343.272375][ T5103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.309132][T19085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1343.317850][ T5103] usb 5-1: config 0 descriptor??
[ 1343.337688][ T5103] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1343.355287][T19085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1343.410893][ T9865] hid (null): invalid report_size 24940
[ 1343.425470][ T9865] hid (null): nested delimiters
[ 1343.436624][ T9865] hid (null): nested delimiters
[ 1343.446984][ T9865] hid (null): nested delimiters
[ 1343.457645][ T9865] hid (null): report_id 2838798905 is invalid
[ 1343.471087][ T9865] hid (null): unknown global tag 0xc
[ 1343.491449][ T9865] hid (null): unknown global tag 0xa5
[ 1343.503043][ T9865] hid (null): unknown global tag 0xd
[ 1343.508694][ T9865] hid (null): unknown global tag 0xc
[ 1343.515843][ T9865] hid-generic 0003:0158:0100.0045: unknown main item tag 0x1
[ 1343.523377][ T9865] hid-generic 0003:0158:0100.0045: unexpected long global item
[ 1343.532747][ T9865] hid-generic 0003:0158:0100.0045: probe with driver hid-generic failed with error -22
[ 1343.603904][ T5103] gspca_sonixj: reg_w1 err -71
[ 1343.616677][ T5103] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[ 1343.631681][ T5223] usb 4-1: USB disconnect, device number 80
[ 1343.643092][ T5103] usb 5-1: USB disconnect, device number 85
[ 1343.754910][T19105] sch_tbf: burst 64 is lower than device lo mtu (65550) !
[ 1343.933826][T19110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3729'.
[ 1344.338183][   T25] vhci_hcd: vhci_device speed not set
[ 1345.557866][T19125] dccp_invalid_packet: P.Data Offset(0) too small
[ 1346.860934][T19141] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3740'.
[ 1350.264060][T19154] netlink: 'syz.3.3743': attribute type 12 has an invalid length.
[ 1350.286698][T19154] netlink: 'syz.3.3743': attribute type 11 has an invalid length.
[ 1350.294641][T19154] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.3743'.
[ 1350.356724][ T5103] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1350.434840][T19157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3744'.
[ 1350.577880][ T5103] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1350.606617][ T5103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.606625][ T5223] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1350.647550][ T5103] usb 3-1: config 0 descriptor??
[ 1350.655511][ T5103] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1350.789176][ T5223] usb 4-1: Using ep0 maxpacket: 16
[ 1350.808454][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1350.840705][ T5223] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1350.860308][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.879900][ T5223] usb 4-1: config 0 descriptor??
[ 1350.909693][ T5103] gspca_sonixj: reg_w1 err -71
[ 1350.914584][ T5103] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[ 1350.938284][ T5103] usb 3-1: USB disconnect, device number 83
[ 1351.105859][T19154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3743'.
[ 1351.128046][T19175] usb usb8: usbfs: process 19175 (syz.4.3749) did not claim interface 0 before use
[ 1351.149835][   T29] audit: type=1326 audit(1721516800.195:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19174 comm="syz.4.3749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0179775b59 code=0x0
[ 1351.248215][T19181] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3752'.
[ 1351.320852][T19154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1351.330894][T19154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1351.346902][  T931] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1351.347857][ T5223] hid (null): invalid report_size 24940
[ 1351.373164][ T5223] hid (null): nested delimiters
[ 1351.380491][ T5223] hid (null): nested delimiters
[ 1351.388810][ T5223] hid (null): nested delimiters
[ 1351.394655][ T5223] hid (null): report_id 2838798905 is invalid
[ 1351.400937][ T5223] hid (null): unknown global tag 0xc
[ 1351.406403][ T5223] hid (null): unknown global tag 0xa5
[ 1351.415243][ T5223] hid (null): unknown global tag 0xd
[ 1351.427751][ T5223] hid (null): unknown global tag 0xc
[ 1351.435830][ T5223] hid-generic 0003:0158:0100.0046: unknown main item tag 0x1
[ 1351.443432][ T5223] hid-generic 0003:0158:0100.0046: unexpected long global item
[ 1351.473989][ T5223] hid-generic 0003:0158:0100.0046: probe with driver hid-generic failed with error -22
[ 1351.571574][  T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1351.575465][ T5223] usb 4-1: USB disconnect, device number 81
[ 1351.606945][  T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1351.618551][T19188] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3755'.
[ 1351.650136][  T931] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09
[ 1351.684539][  T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1351.705659][  T931] usb 1-1: config 0 descriptor??
[ 1351.823233][T19192] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3757'.
[ 1352.331172][  T931] logitech-hidpp-device 0003:046D:C086.0047: item fetching failed at offset 1/5
[ 1352.395671][  T931] logitech-hidpp-device 0003:046D:C086.0047: hidpp_probe:parse failed
[ 1352.446466][  T931] logitech-hidpp-device 0003:046D:C086.0047: probe with driver logitech-hidpp-device failed with error -22
[ 1352.827375][ T5223] usb 1-1: USB disconnect, device number 95
[ 1353.705471][T19219] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3764'.
[ 1354.026846][T19225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3767'.
[ 1354.199465][ T5223] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1355.297080][ T5223] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1355.306169][ T5223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1355.398947][ T5223] usb 1-1: config 0 descriptor??
[ 1355.444980][ T5223] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1355.692798][ T5223] gspca_sonixj: reg_w1 err -71
[ 1355.714391][ T5223] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[ 1355.738674][ T5223] usb 1-1: USB disconnect, device number 96
[ 1355.801493][T19240] netlink: 'syz.4.3773': attribute type 5 has an invalid length.
[ 1356.014758][T19246] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3774'.
[ 1356.939936][T10389] Bluetooth: hci5: Received unexpected HCI Event 0x00
[ 1356.966701][T10389] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1356.969003][T10389] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1362.100471][ T1241] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.106917][ T1241] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.476874][  T931] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1362.678080][  T931] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1362.699115][  T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1362.739107][  T931] usb 1-1: config 0 descriptor??
[ 1362.787878][  T931] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1363.053059][  T931] gspca_sonixj: reg_w1 err -71
[ 1363.074896][  T931] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[ 1363.123270][  T931] usb 1-1: USB disconnect, device number 97
[ 1363.585906][T19307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3793'.
[ 1365.024856][T19312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3794'.
[ 1365.740239][   T29] audit: type=1326 audit(1721516814.795:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19331 comm="syz.0.3801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc07f75b59 code=0x0
[ 1367.429100][T19366] FAULT_INJECTION: forcing a failure.
[ 1367.429100][T19366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1367.484402][T19366] CPU: 1 PID: 19366 Comm: syz.4.3809 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1367.494257][T19366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1367.504328][T19366] Call Trace:
[ 1367.507597][T19366]  <TASK>
[ 1367.510513][T19366]  dump_stack_lvl+0x241/0x360
[ 1367.515181][T19366]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1367.520371][T19366]  ? __pfx__printk+0x10/0x10
[ 1367.524958][T19366]  ? __pfx_lock_release+0x10/0x10
[ 1367.529979][T19366]  should_fail_ex+0x3b0/0x4e0
[ 1367.534643][T19366]  _copy_to_user+0x2f/0xb0
[ 1367.539048][T19366]  finalize_log+0xed/0x250
[ 1367.543450][T19366]  ? __pfx_finalize_log+0x10/0x10
[ 1367.548457][T19366]  ? btf_check_type_tags+0x6aa/0x6b0
[ 1367.553731][T19366]  btf_new_fd+0x9cd/0xd30
[ 1367.558045][T19366]  ? safesetid_security_capable+0xb2/0x1d0
[ 1367.563840][T19366]  ? __pfx_btf_new_fd+0x10/0x10
[ 1367.568677][T19366]  ? bpf_btf_load+0xcf/0x1a0
[ 1367.573251][T19366]  __sys_bpf+0x6ef/0x810
[ 1367.577479][T19366]  ? __pfx___sys_bpf+0x10/0x10
[ 1367.582232][T19366]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1367.588197][T19366]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1367.594514][T19366]  ? do_syscall_64+0x100/0x230
[ 1367.599262][T19366]  __x64_sys_bpf+0x7c/0x90
[ 1367.603664][T19366]  do_syscall_64+0xf3/0x230
[ 1367.608148][T19366]  ? clear_bhb_loop+0x35/0x90
[ 1367.612809][T19366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1367.618683][T19366] RIP: 0033:0x7f0179775b59
[ 1367.623080][T19366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1367.642680][T19366] RSP: 002b:00007f017a49f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1367.651087][T19366] RAX: ffffffffffffffda RBX: 00007f0179905f60 RCX: 00007f0179775b59
[ 1367.659044][T19366] RDX: 0000000000000020 RSI: 00000000200007c0 RDI: 0000000000000012
[ 1367.666998][T19366] RBP: 00007f017a49f0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1367.674951][T19366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1367.682905][T19366] R13: 000000000000000b R14: 00007f0179905f60 R15: 00007fff6a3c2398
[ 1367.690869][T19366]  </TASK>
[ 1368.038894][  T931] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1368.258393][  T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1368.283292][  T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1368.293313][  T931] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09
[ 1368.303905][  T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.331963][  T931] usb 1-1: config 0 descriptor??
[ 1368.949641][  T931] logitech-hidpp-device 0003:046D:C086.0048: item fetching failed at offset 1/5
[ 1368.997251][  T931] logitech-hidpp-device 0003:046D:C086.0048: hidpp_probe:parse failed
[ 1369.005516][  T931] logitech-hidpp-device 0003:046D:C086.0048: probe with driver logitech-hidpp-device failed with error -22
[ 1369.312388][ T5223] usb 1-1: USB disconnect, device number 98
[ 1369.422280][T19391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3818'.
[ 1371.527729][T19414] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1371.630349][T19421] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3829'.
[ 1371.706727][ T5198] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1371.780764][T19424] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1371.792986][T19424] FAULT_INJECTION: forcing a failure.
[ 1371.792986][T19424] name failslab, interval 1, probability 0, space 0, times 0
[ 1371.805615][T19424] CPU: 1 PID: 19424 Comm: syz.1.3829 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1371.815404][T19424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1371.825447][T19424] Call Trace:
[ 1371.828717][T19424]  <TASK>
[ 1371.831635][T19424]  dump_stack_lvl+0x241/0x360
[ 1371.836303][T19424]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1371.841491][T19424]  ? __pfx__printk+0x10/0x10
[ 1371.846069][T19424]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1371.851255][T19424]  should_fail_ex+0x3b0/0x4e0
[ 1371.855920][T19424]  ? __alloc_skb+0x1c3/0x440
[ 1371.860501][T19424]  should_failslab+0x9/0x20
[ 1371.864989][T19424]  kmem_cache_alloc_node_noprof+0x71/0x320
[ 1371.870786][T19424]  __alloc_skb+0x1c3/0x440
[ 1371.875189][T19424]  ? __pfx___alloc_skb+0x10/0x10
[ 1371.880117][T19424]  tcp_make_synack+0x10f/0x2600
[ 1371.884964][T19424]  ? __pfx_tcp_make_synack+0x10/0x10
[ 1371.890242][T19424]  ? __pfx_lock_acquire+0x10/0x10
[ 1371.895252][T19424]  ? ip6_mtu+0x81/0x3f0
[ 1371.899395][T19424]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1371.905357][T19424]  ? __pfx_lock_release+0x10/0x10
[ 1371.910371][T19424]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1371.916254][T19424]  ? tcp_select_initial_window+0x270/0x3d0
[ 1371.922048][T19424]  ? tcp_openreq_init_rwin+0x5be/0xa60
[ 1371.927500][T19424]  tcp_v6_send_synack+0xdf/0xe90
[ 1371.932430][T19424]  ? __pfx_tcp_openreq_init_rwin+0x10/0x10
[ 1371.938227][T19424]  ? __pfx_tcp_v6_send_synack+0x10/0x10
[ 1371.943760][T19424]  ? __pfx_inet6_csk_route_req+0x10/0x10
[ 1371.949380][T19424]  ? cookie_v6_init_sequence+0xac/0x160
[ 1371.954936][T19424]  tcp_conn_request+0x1ade/0x3490
[ 1371.959982][T19424]  ? __pfx_tcp_conn_request+0x10/0x10
[ 1371.965362][T19424]  ? tcp_v6_conn_request+0x247/0x350
[ 1371.970637][T19424]  ? tcp_rcv_state_process+0x20a/0x45d0
[ 1371.976176][T19424]  tcp_rcv_state_process+0x1bcd/0x45d0
[ 1371.981638][T19424]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[ 1371.987436][T19424]  ? sk_filter_trim_cap+0x1b3/0xa80
[ 1371.992627][T19424]  ? sk_filter_trim_cap+0x5bf/0xa80
[ 1371.997825][T19424]  ? __pfx_tcp_inbound_hash+0x10/0x10
[ 1372.003201][T19424]  ? inet6_lookup_listener+0x1d1/0x2d0
[ 1372.008654][T19424]  tcp_v6_do_rcv+0x8bc/0x13a0
[ 1372.013334][T19424]  ? __asan_memcpy+0x40/0x70
[ 1372.017955][T19424]  ? tcp_v6_fill_cb+0x1e2/0x470
[ 1372.022828][T19424]  tcp_v6_rcv+0x220a/0x2fb0
[ 1372.027385][T19424]  ? __pfx_tcp_v6_rcv+0x10/0x10
[ 1372.032256][T19424]  ? csum_partial+0x234/0x2c0
[ 1372.036937][T19424]  ? __pfx_tcp_v6_rcv+0x10/0x10
[ 1372.041803][T19424]  ? __pfx_tcp_v6_rcv+0x10/0x10
[ 1372.046668][T19424]  ip6_protocol_deliver_rcu+0xc76/0x1570
[ 1372.052413][T19424]  ? ip6_input_finish+0xdc/0x2d0
[ 1372.057350][T19424]  ip6_input_finish+0x187/0x2d0
[ 1372.062204][T19424]  ? __pfx_ip6_input_finish+0x10/0x10
[ 1372.067590][T19424]  NF_HOOK+0x3a4/0x450
[ 1372.071674][T19424]  ? NF_HOOK+0x9a/0x450
[ 1372.075824][T19424]  ? __pfx_NF_HOOK+0x10/0x10
[ 1372.080428][T19424]  ? __pfx_ip6_input_finish+0x10/0x10
[ 1372.085824][T19424]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1372.091032][T19424]  NF_HOOK+0x3a4/0x450
[ 1372.095109][T19424]  ? skb_orphan+0x4b/0xd0
[ 1372.099448][T19424]  ? NF_HOOK+0x9a/0x450
[ 1372.103600][T19424]  ? __pfx_NF_HOOK+0x10/0x10
[ 1372.108197][T19424]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1372.113397][T19424]  ? __pfx_ipv6_rcv+0x10/0x10
[ 1372.118068][T19424]  __netif_receive_skb+0x1ea/0x650
[ 1372.123179][T19424]  ? __pfx_lock_acquire+0x10/0x10
[ 1372.128213][T19424]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 1372.134588][T19424]  ? __pfx___netif_receive_skb+0x10/0x10
[ 1372.140234][T19424]  ? __kasan_slab_alloc+0x66/0x80
[ 1372.145261][T19424]  ? read_tsc+0x9/0x20
[ 1372.149346][T19424]  ? timekeeping_get_ns+0x2c0/0x420
[ 1372.154574][T19424]  ? netif_receive_skb+0x131/0x890
[ 1372.159687][T19424]  ? netif_receive_skb+0x131/0x890
[ 1372.164794][T19424]  netif_receive_skb+0x1e8/0x890
[ 1372.169736][T19424]  ? tun_rx_batched+0x160/0x8f0
[ 1372.174589][T19424]  ? __pfx_netif_receive_skb+0x10/0x10
[ 1372.180066][T19424]  ? tun_rx_batched+0x160/0x8f0
[ 1372.184930][T19424]  tun_rx_batched+0x1b7/0x8f0
[ 1372.189627][T19424]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1372.195956][T19424]  ? __pfx_lock_acquire+0x10/0x10
[ 1372.200999][T19424]  ? __pfx_tun_rx_batched+0x10/0x10
[ 1372.206219][T19424]  tun_get_user+0x2f84/0x4720
[ 1372.210898][T19424]  ? tun_get_user+0x2a78/0x4720
[ 1372.215770][T19424]  ? __lock_acquire+0x137a/0x2040
[ 1372.220806][T19424]  ? __pfx_tun_get_user+0x10/0x10
[ 1372.225847][T19424]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1372.231316][T19424]  ? tun_get+0x1e/0x2f0
[ 1372.235470][T19424]  ? __pfx_lock_release+0x10/0x10
[ 1372.240516][T19424]  ? tun_get+0x1e/0x2f0
[ 1372.244668][T19424]  ? tun_get+0x27d/0x2f0
[ 1372.248928][T19424]  tun_chr_write_iter+0x113/0x1f0
[ 1372.253960][T19424]  vfs_write+0xa72/0xc90
[ 1372.258220][T19424]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1372.263790][T19424]  ? __pfx_vfs_write+0x10/0x10
[ 1372.268591][T19424]  ksys_write+0x1a0/0x2c0
[ 1372.272944][T19424]  ? __pfx_ksys_write+0x10/0x10
[ 1372.277807][T19424]  ? do_syscall_64+0x100/0x230
[ 1372.282591][T19424]  ? do_syscall_64+0xb6/0x230
[ 1372.287284][T19424]  do_syscall_64+0xf3/0x230
[ 1372.291805][T19424]  ? clear_bhb_loop+0x35/0x90
[ 1372.296492][T19424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.302401][T19424] RIP: 0033:0x7ff8d95746df
[ 1372.306821][T19424] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48
[ 1372.326438][T19424] RSP: 002b:00007ff8da39a010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1372.334866][T19424] RAX: ffffffffffffffda RBX: 00007ff8d9706038 RCX: 00007ff8d95746df
[ 1372.342851][T19424] RDX: 0000000000000056 RSI: 0000000020000140 RDI: 00000000000000c8
[ 1372.350841][T19424] RBP: 00007ff8da39a0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1372.358834][T19424] R10: 0000000000000056 R11: 0000000000000293 R12: 0000000000000002
[ 1372.366816][T19424] R13: 000000000000006e R14: 00007ff8d9706038 R15: 00007fffdaf0a828
[ 1372.374810][T19424]  </TASK>
[ 1372.382314][ T5198] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1372.405836][ T5198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1372.471217][ T5198] usb 4-1: config 0 descriptor??
[ 1372.484092][ T5198] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1372.904508][ T5198] gspca_sonixj: reg_w1 err -71
[ 1372.914097][ T5198] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[ 1372.937317][ T5198] usb 4-1: USB disconnect, device number 82
[ 1374.926627][ T5223] usb 3-1: new full-speed USB device number 84 using dummy_hcd
[ 1375.108811][ T5223] usb 3-1: not running at top speed; connect to a high speed hub
[ 1375.144822][ T5223] usb 3-1: config 4 has an invalid interface number: 130 but max is 1
[ 1375.175147][ T5223] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1375.221177][ T5223] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1375.243175][ T5223] usb 3-1: config 4 has an invalid interface number: 227 but max is 1
[ 1375.278558][ T5223] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1375.298940][ T5223] usb 3-1: config 4 has an invalid descriptor of length 222, skipping remainder of the config
[ 1375.320653][ T5223] usb 3-1: config 4 has no interface number 0
[ 1375.330864][ T5223] usb 3-1: config 4 has no interface number 1
[ 1375.339164][ T5223] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1375.355590][ T5223] usb 3-1: config 4 interface 130 altsetting 190 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1375.378205][ T5223] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0x86 has invalid maxpacket 22708, setting to 64
[ 1375.434772][ T5223] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1375.472597][ T5223] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1375.496830][ T5223] usb 3-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1375.518615][ T5223] usb 3-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1375.541466][ T5223] usb 3-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1375.570108][ T5223] usb 3-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1375.594084][ T5223] usb 3-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1375.629488][ T5223] usb 3-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1375.667162][ T5223] usb 3-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1375.694185][ T5223] usb 3-1: config 4 interface 130 has no altsetting 0
[ 1375.703590][ T5223] usb 3-1: config 4 interface 227 has no altsetting 0
[ 1375.735129][ T5223] usb 3-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1375.748213][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1375.762958][ T5223] usb 3-1: Product: В
[ 1375.767420][ T5223] usb 3-1: Manufacturer: 
[ 1375.772100][ T5223] usb 3-1: SerialNumber: ꌇद폈㻲빦☠놧ᖍ쨦๽≔ᭀ᳓眍媁뇄፿豾㶃乏쐊ᆏ䵄搸䞋쏓
[ 1375.825578][T19455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1375.840376][T19455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1375.896909][T19455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1375.955697][T19472] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1376.578061][  T931] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1376.833701][  T931] usb 1-1: device descriptor read/64, error -71
[ 1377.676622][  T931] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1379.222179][ T5223] usb_serial_simple 3-1:4.130: nokia converter detected
[ 1379.239211][ T5223] usb 3-1: nokia converter now attached to ttyUSB0
[ 1379.287603][ T5223] usb_serial_simple 3-1:4.227: nokia converter detected
[ 1379.311209][ T5223] usb 3-1: nokia converter now attached to ttyUSB1
[ 1379.337536][ T5223] usb 3-1: USB disconnect, device number 84
[ 1379.379609][ T5223] nokia ttyUSB0: nokia converter now disconnected from ttyUSB0
[ 1379.410753][ T5223] usb_serial_simple 3-1:4.130: device disconnected
[ 1379.446244][ T5223] nokia ttyUSB1: nokia converter now disconnected from ttyUSB1
[ 1379.470934][ T5223] usb_serial_simple 3-1:4.227: device disconnected
[ 1379.880276][    C1] vcan0: j1939_tp_rxtimer: 0xffff888067c5e000: rx timeout, send abort
[ 1379.890908][    C1] vcan0: j1939_tp_rxtimer: 0xffff888067c5c000: rx timeout, send abort
[ 1379.899680][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888067c5e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1379.917390][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888067c5c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1380.234359][T19514] FAULT_INJECTION: forcing a failure.
[ 1380.234359][T19514] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1380.248077][T19514] CPU: 1 PID: 19514 Comm: syz.0.3853 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1380.257877][T19514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1380.267919][T19514] Call Trace:
[ 1380.271181][T19514]  <TASK>
[ 1380.274093][T19514]  dump_stack_lvl+0x241/0x360
[ 1380.278766][T19514]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1380.283953][T19514]  ? __pfx__printk+0x10/0x10
[ 1380.288549][T19514]  ? __pfx_lock_release+0x10/0x10
[ 1380.293600][T19514]  should_fail_ex+0x3b0/0x4e0
[ 1380.298391][T19514]  _copy_from_user+0x2f/0xe0
[ 1380.302997][T19514]  memdup_user+0x64/0xc0
[ 1380.307259][T19514]  strndup_user+0x68/0xc0
[ 1380.311589][T19514]  __se_sys_mount+0x9f/0x3c0
[ 1380.316173][T19514]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1380.322150][T19514]  ? __pfx___se_sys_mount+0x10/0x10
[ 1380.327348][T19514]  ? do_syscall_64+0x100/0x230
[ 1380.332107][T19514]  ? __x64_sys_mount+0x20/0xc0
[ 1380.336867][T19514]  do_syscall_64+0xf3/0x230
[ 1380.341363][T19514]  ? clear_bhb_loop+0x35/0x90
[ 1380.346035][T19514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.351920][T19514] RIP: 0033:0x7efc07f75b59
[ 1380.356329][T19514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1380.375932][T19514] RSP: 002b:00007efc08cdf048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1380.384342][T19514] RAX: ffffffffffffffda RBX: 00007efc08105f60 RCX: 00007efc07f75b59
[ 1380.392307][T19514] RDX: 00000000200001c0 RSI: 00000000200020c0 RDI: 0000000000000000
[ 1380.400273][T19514] RBP: 00007efc08cdf0a0 R08: 00000000200010c0 R09: 0000000000000000
[ 1380.408236][T19514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1380.416201][T19514] R13: 000000000000000b R14: 00007efc08105f60 R15: 00007fff7aad44c8
[ 1380.424178][T19514]  </TASK>
[ 1383.326637][ T5103] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[ 1383.629903][ T5103] usb 4-1: not running at top speed; connect to a high speed hub
[ 1383.657347][ T5103] usb 4-1: config 4 has an invalid interface number: 130 but max is 1
[ 1383.680347][ T5103] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1383.761369][ T5103] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1383.786605][ T5103] usb 4-1: config 4 has an invalid interface number: 227 but max is 1
[ 1383.815311][ T5103] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1383.847912][ T5103] usb 4-1: config 4 has an invalid descriptor of length 222, skipping remainder of the config
[ 1383.928801][ T5103] usb 4-1: config 4 has no interface number 0
[ 1383.949717][ T5103] usb 4-1: config 4 has no interface number 1
[ 1383.969320][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1384.001210][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1384.034102][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x86 has invalid maxpacket 22708, setting to 64
[ 1384.057055][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1384.078579][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1384.113446][ T5103] usb 4-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1384.182448][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1384.244253][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1384.275775][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1384.305213][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1384.455312][ T5103] usb 4-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1384.479992][ T5103] usb 4-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1384.553265][ T5103] usb 4-1: config 4 interface 130 has no altsetting 0
[ 1384.561152][ T5103] usb 4-1: config 4 interface 227 has no altsetting 0
[ 1384.574984][ T5103] usb 4-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1384.584844][ T5103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.593373][ T5103] usb 4-1: Product: В
[ 1384.598275][ T5103] usb 4-1: Manufacturer: 
[ 1384.603176][ T5103] usb 4-1: SerialNumber: ꌇद폈㻲빦☠놧ᖍ쨦๽≔ᭀ᳓眍媁뇄፿豾㶃乏쐊ᆏ䵄搸䞋쏓
[ 1384.639890][T19531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1384.648358][T19531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1384.656293][T19531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1386.010033][ T5103] usb_serial_simple 4-1:4.130: nokia converter detected
[ 1386.039176][ T5103] usb 4-1: nokia converter now attached to ttyUSB0
[ 1386.079503][ T5103] usb_serial_simple 4-1:4.227: nokia converter detected
[ 1386.101017][ T5103] usb 4-1: nokia converter now attached to ttyUSB1
[ 1386.124346][ T5103] usb 4-1: USB disconnect, device number 83
[ 1386.163860][ T5103] nokia ttyUSB0: nokia converter now disconnected from ttyUSB0
[ 1386.197009][ T5103] usb_serial_simple 4-1:4.130: device disconnected
[ 1386.219937][ T5103] nokia ttyUSB1: nokia converter now disconnected from ttyUSB1
[ 1386.230991][ T5103] usb_serial_simple 4-1:4.227: device disconnected
[ 1386.506644][ T9865] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1387.212350][ T9865] usb 3-1: Using ep0 maxpacket: 8
[ 1387.234732][ T9865] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[ 1387.243771][ T9865] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[ 1387.253467][ T9865] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 1387.300420][ T9865] usb 3-1: config 250 has no interface number 0
[ 1387.310618][ T9865] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[ 1387.322657][ T9865] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1387.333437][ T9865] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1387.343978][ T9865] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[ 1387.357190][ T9865] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[ 1387.371113][ T9865] usb 3-1: config 250 interface 228 has no altsetting 0
[ 1387.380547][ T9865] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 1387.401594][T19589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3878'.
[ 1387.406529][ T9865] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 1387.463089][ T9865] usb 3-1: Product: syz
[ 1387.479722][ T9865] usb 3-1: SerialNumber: syz
[ 1387.511572][ T9865] hub 3-1:250.228: bad descriptor, ignoring hub
[ 1387.521884][ T9865] hub 3-1:250.228: probe with driver hub failed with error -5
[ 1387.996584][ T9865] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 85 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[ 1388.022317][T19602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1388.046774][T19602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1388.278094][  T928] usb 3-1: USB disconnect, device number 85
[ 1388.309095][  T928] usblp0: removed
[ 1388.397652][ T9865] usb 1-1: new full-speed USB device number 101 using dummy_hcd
[ 1389.566006][ T9865] usb 1-1: not running at top speed; connect to a high speed hub
[ 1389.673172][ T9865] usb 1-1: config 4 has an invalid interface number: 130 but max is 1
[ 1389.790754][ T9865] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1389.922591][ T9865] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping
[ 1390.013940][ T9865] usb 1-1: config 4 has an invalid interface number: 227 but max is 1
[ 1390.087670][ T9865] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[ 1390.168246][ T9865] usb 1-1: config 4 has an invalid descriptor of length 222, skipping remainder of the config
[ 1390.207268][ T9865] usb 1-1: config 4 has no interface number 0
[ 1390.213798][ T9865] usb 1-1: config 4 has no interface number 1
[ 1390.222539][ T9865] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0xC has an invalid bInterval 72, changing to 4
[ 1390.237404][ T9865] usb 1-1: config 4 interface 130 altsetting 190 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1390.251000][ T9865] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0x86 has invalid maxpacket 22708, setting to 64
[ 1390.255118][T19635] FAULT_INJECTION: forcing a failure.
[ 1390.255118][T19635] name failslab, interval 1, probability 0, space 0, times 0
[ 1390.263972][ T9865] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1390.301315][T19636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3890'.
[ 1390.317742][ T9865] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1390.323026][T19635] CPU: 1 PID: 19635 Comm: syz.3.3887 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1390.338691][T19635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1390.346580][ T9865] usb 1-1: config 4 interface 130 altsetting 190 endpoint 0x9 has invalid maxpacket 1040, setting to 64
[ 1390.348739][T19635] Call Trace:
[ 1390.348751][T19635]  <TASK>
[ 1390.348759][T19635]  dump_stack_lvl+0x241/0x360
[ 1390.366523][ T9865] usb 1-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x5, skipping
[ 1390.370705][T19635]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1390.386755][T19635]  ? __pfx__printk+0x10/0x10
[ 1390.388953][ T9865] usb 1-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1390.391352][T19635]  ? __pfx___might_resched+0x10/0x10
[ 1390.402507][ T9865] usb 1-1: config 4 interface 130 altsetting 190 has a duplicate endpoint with address 0x9, skipping
[ 1390.407667][T19635]  ? validate_chain+0x11e/0x5900
[ 1390.407702][T19635]  should_fail_ex+0x3b0/0x4e0
[ 1390.418653][ T9865] usb 1-1: config 4 interface 130 altsetting 190 has an invalid descriptor for endpoint zero, skipping
[ 1390.423468][T19635]  should_failslab+0x9/0x20
[ 1390.443724][T19635]  __kmalloc_cache_node_noprof+0x74/0x300
[ 1390.449445][T19635]  ? __get_vm_area_node+0x113/0x270
[ 1390.454637][T19635]  __get_vm_area_node+0x113/0x270
[ 1390.459657][T19635]  __vmalloc_node_range_noprof+0x3bc/0x1460
[ 1390.465547][T19635]  ? bpf_prog_alloc_no_stats+0x4d/0x4b0
[ 1390.471086][T19635]  ? mark_lock+0x9a/0x350
[ 1390.475429][T19635]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1390.481762][T19635]  ? bpf_prog_alloc_no_stats+0x4d/0x4b0
[ 1390.487309][T19635]  __vmalloc_noprof+0x79/0x90
[ 1390.491979][T19635]  ? bpf_prog_alloc_no_stats+0x4d/0x4b0
[ 1390.497516][T19635]  bpf_prog_alloc_no_stats+0x4d/0x4b0
[ 1390.502882][T19635]  ? bpf_prog_alloc+0x28/0x1b0
[ 1390.507641][T19635]  bpf_prog_alloc+0x3a/0x1b0
[ 1390.512224][T19635]  bpf_prog_load+0x7f7/0x20f0
[ 1390.516903][T19635]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1390.522004][T19635]  ? __pfx___might_resched+0x10/0x10
[ 1390.527294][T19635]  ? __might_fault+0xc6/0x120
[ 1390.531966][T19635]  ? bpf_lsm_bpf+0x9/0x10
[ 1390.536283][T19635]  ? security_bpf+0x87/0xb0
[ 1390.540786][T19635]  __sys_bpf+0x4ee/0x810
[ 1390.545028][T19635]  ? __pfx___sys_bpf+0x10/0x10
[ 1390.549803][T19635]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1390.555776][T19635]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1390.562099][T19635]  ? do_syscall_64+0x100/0x230
[ 1390.566858][T19635]  __x64_sys_bpf+0x7c/0x90
[ 1390.571269][T19635]  do_syscall_64+0xf3/0x230
[ 1390.575762][T19635]  ? clear_bhb_loop+0x35/0x90
[ 1390.580440][T19635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.586325][T19635] RIP: 0033:0x7f2998575b59
[ 1390.590730][T19635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1390.610323][T19635] RSP: 002b:00007f2999274048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1390.618729][T19635] RAX: ffffffffffffffda RBX: 00007f2998705f60 RCX: 00007f2998575b59
[ 1390.626691][T19635] RDX: 0000000000000090 RSI: 0000000020000000 RDI: 0000000000000005
[ 1390.634656][T19635] RBP: 00007f29992740a0 R08: 0000000000000000 R09: 0000000000000000
[ 1390.642618][T19635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1390.650581][T19635] R13: 000000000000000b R14: 00007f2998705f60 R15: 00007ffc82f03cd8
[ 1390.658556][T19635]  </TASK>
[ 1390.676593][ T9865] usb 1-1: config 4 interface 130 altsetting 190 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 1390.710956][ T9865] usb 1-1: config 4 interface 227 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1390.721925][T19635] syz.3.3887: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1390.756775][ T9865] usb 1-1: config 4 interface 130 has no altsetting 0
[ 1390.763590][ T9865] usb 1-1: config 4 interface 227 has no altsetting 0
[ 1390.774114][ T9865] usb 1-1: New USB device found, idVendor=0421, idProduct=069a, bcdDevice=4c.a5
[ 1390.784595][ T9865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1390.792758][T19635] CPU: 0 PID: 19635 Comm: syz.3.3887 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1390.802578][T19635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1390.812631][T19635] Call Trace:
[ 1390.815911][T19635]  <TASK>
[ 1390.818844][T19635]  dump_stack_lvl+0x241/0x360
[ 1390.823528][T19635]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1390.828759][T19635]  ? __pfx__printk+0x10/0x10
[ 1390.833363][T19635]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[ 1390.839778][T19635]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[ 1390.846367][T19635]  warn_alloc+0x278/0x410
[ 1390.850711][T19635]  ? __pfx_warn_alloc+0x10/0x10
[ 1390.855567][T19635]  ? __get_vm_area_node+0x113/0x270
[ 1390.860763][T19635]  ? __get_vm_area_node+0x261/0x270
[ 1390.865958][T19635]  __vmalloc_node_range_noprof+0x3e0/0x1460
[ 1390.871847][T19635]  ? mark_lock+0x9a/0x350
[ 1390.876193][T19635]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1390.882523][T19635]  ? bpf_prog_alloc_no_stats+0x4d/0x4b0
[ 1390.888080][T19635]  __vmalloc_noprof+0x79/0x90
[ 1390.892753][T19635]  ? bpf_prog_alloc_no_stats+0x4d/0x4b0
[ 1390.898292][T19635]  bpf_prog_alloc_no_stats+0x4d/0x4b0
[ 1390.903656][T19635]  ? bpf_prog_alloc+0x28/0x1b0
[ 1390.908415][T19635]  bpf_prog_alloc+0x3a/0x1b0
[ 1390.912998][T19635]  bpf_prog_load+0x7f7/0x20f0
[ 1390.917680][T19635]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1390.922785][T19635]  ? __pfx___might_resched+0x10/0x10
[ 1390.928082][T19635]  ? __might_fault+0xc6/0x120
[ 1390.932747][T19635]  ? bpf_lsm_bpf+0x9/0x10
[ 1390.937065][T19635]  ? security_bpf+0x87/0xb0
[ 1390.941571][T19635]  __sys_bpf+0x4ee/0x810
[ 1390.945813][T19635]  ? __pfx___sys_bpf+0x10/0x10
[ 1390.950579][T19635]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1390.956577][T19635]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1390.962922][T19635]  ? do_syscall_64+0x100/0x230
[ 1390.967692][T19635]  __x64_sys_bpf+0x7c/0x90
[ 1390.972115][T19635]  do_syscall_64+0xf3/0x230
[ 1390.976620][T19635]  ? clear_bhb_loop+0x35/0x90
[ 1390.981303][T19635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.987191][T19635] RIP: 0033:0x7f2998575b59
[ 1390.991599][T19635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1391.011195][T19635] RSP: 002b:00007f2999274048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1391.019615][T19635] RAX: ffffffffffffffda RBX: 00007f2998705f60 RCX: 00007f2998575b59
[ 1391.027579][T19635] RDX: 0000000000000090 RSI: 0000000020000000 RDI: 0000000000000005
[ 1391.035538][T19635] RBP: 00007f29992740a0 R08: 0000000000000000 R09: 0000000000000000
[ 1391.043498][T19635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1391.051458][T19635] R13: 000000000000000b R14: 00007f2998705f60 R15: 00007ffc82f03cd8
[ 1391.059434][T19635]  </TASK>
[ 1391.062494][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1391.070232][ T9865] usb 1-1: Product: В
[ 1391.074335][ T9865] usb 1-1: Manufacturer: 
[ 1391.079968][ T9865] usb 1-1: SerialNumber: ꌇद폈㻲빦☠놧ᖍ쨦๽≔ᭀ᳓眍媁뇄፿豾㶃乏쐊ᆏ䵄搸䞋쏓
[ 1391.106828][ T5103] usb 3-1: new full-speed USB device number 86 using dummy_hcd
[ 1391.134464][ T9865] usb 1-1: can't set config #4, error -71
[ 1391.139560][T19635] Mem-Info:
[ 1391.141760][ T9865] usb 1-1: USB disconnect, device number 101
[ 1391.143453][T19635] active_anon:2421 inactive_anon:3497 isolated_anon:0
[ 1391.143453][T19635]  active_file:25441 inactive_file:36441 isolated_file:0
[ 1391.143453][T19635]  unevictable:768 dirty:209 writeback:0
[ 1391.143453][T19635]  slab_reclaimable:10198 slab_unreclaimable:112986
[ 1391.143453][T19635]  mapped:18485 shmem:3403 pagetables:680
[ 1391.143453][T19635]  sec_pagetables:0 bounce:0
[ 1391.143453][T19635]  kernel_misc_reclaimable:0
[ 1391.143453][T19635]  free:1357772 free_pcp:2496 free_cma:0
[ 1391.257073][T19635] Node 0 active_anon:1184kB inactive_anon:13988kB active_file:101632kB inactive_file:145764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73888kB dirty:836kB writeback:0kB shmem:3576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10484kB pagetables:2720kB sec_pagetables:0kB all_unreclaimable? no
[ 1391.289637][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1391.325632][T19635] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1391.355958][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1391.389286][T19635] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1391.416414][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1391.438645][ T5103] usb 3-1: not running at top speed; connect to a high speed hub
[ 1391.472026][ T5103] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1391.496603][ T5103] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1391.503468][T19635] lowmem_reserve[]: 0 2571 2571 0 0
[ 1391.510240][T19635] Node 0 DMA32 free:1462196kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:1164kB inactive_anon:14884kB active_file:101372kB inactive_file:145700kB unevictable:1536kB writepending:848kB present:3129332kB managed:2659804kB mlocked:0kB bounce:0kB free_pcp:17380kB local_pcp:14440kB free_cma:0kB
[ 1391.541333][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1391.558158][ T5103] usb 3-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40
[ 1391.576587][ T5103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1391.587838][T19635] lowmem_reserve[]: 0 0 0 0 0
[ 1391.593177][ T5103] usb 3-1: Product: 囋✼郓ᷣ쾽䤇Ó⯛葴믰ꮘ睢
[ 1391.606556][T19635] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:260kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1391.633456][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1391.640061][ T5103] usb 3-1: Manufacturer: Ь
[ 1391.644599][ T5103] usb 3-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊ꃎꞧ欍㜶ꢒ䡔駌࠭놶昄㳐笑㏉濋筞䲵呻萷橴烗际鑦␵ꏯ੊퓰稏췭⦛炈霢⇢摸
[ 1391.682722][T19635] lowmem_reserve[]: 0 0 0 0 0
[ 1391.687644][T19635] Node 1 Normal free:3953532kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1391.716477][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1391.727168][T19635] lowmem_reserve[]: 0 0 0 0 0
[ 1391.733078][T19635] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1391.747619][T19635] Node 0 DMA32: 433*4kB (UME) 1152*8kB (UM) 379*16kB (UME) 684*32kB (UME) 291*64kB (UME) 34*128kB (UME) 24*256kB (UME) 11*512kB (M) 6*1024kB (UME) 5*2048kB (ME) 335*4096kB (UM) = 1462196kB
[ 1391.766459][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1391.773820][T19635] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1391.786134][T19635] Node 1 Normal: 5*4kB (UM) 9*8kB (UM) 14*16kB (UM) 18*32kB (UM) 10*64kB (UM) 3*128kB (UM) 4*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 3*2048kB (UM) 961*4096kB (UM) = 3953532kB
[ 1391.805043][T19635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1391.814731][T19635] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1391.824415][T19635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1391.834194][T19635] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1391.866612][T19635] 64684 total pagecache pages
[ 1391.871422][T19635] 7 pages in swap cache
[ 1391.875628][T19635] Free swap  = 124404kB
[ 1391.896567][T19635] Total swap = 124996kB
[ 1391.900852][T19635] 2097051 pages RAM
[ 1391.914959][T19635] 0 pages HighMem/MovableOnly
[ 1391.919826][T19635] 400890 pages reserved
[ 1391.924092][T19635] 0 pages cma reserved
[ 1391.947149][ T5103] usbhid 3-1:1.0: can't add hid device: -71
[ 1391.960176][ T5103] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 1391.973897][ T5103] usb 3-1: USB disconnect, device number 86
[ 1392.773216][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'.
[ 1393.316233][T19687] pimreg: entered allmulticast mode
[ 1393.451878][T19690] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1393.514301][T19694] FAULT_INJECTION: forcing a failure.
[ 1393.514301][T19694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1393.546932][ T5103] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1393.572639][T19694] CPU: 0 PID: 19694 Comm: syz.0.3911 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1393.582475][T19694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1393.592518][T19694] Call Trace:
[ 1393.595782][T19694]  <TASK>
[ 1393.598699][T19694]  dump_stack_lvl+0x241/0x360
[ 1393.603368][T19694]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1393.608578][T19694]  ? __pfx__printk+0x10/0x10
[ 1393.613152][T19694]  ? __pfx_lock_release+0x10/0x10
[ 1393.618166][T19694]  should_fail_ex+0x3b0/0x4e0
[ 1393.622828][T19694]  _copy_from_user+0x2f/0xe0
[ 1393.627409][T19694]  ucma_write+0x183/0x430
[ 1393.631724][T19694]  ? __pfx_ucma_write+0x10/0x10
[ 1393.636566][T19694]  ? bpf_lsm_file_permission+0x9/0x10
[ 1393.641928][T19694]  ? rw_verify_area+0x1d2/0x6b0
[ 1393.646764][T19694]  ? __pfx_ucma_write+0x10/0x10
[ 1393.651595][T19694]  vfs_write+0x2a2/0xc90
[ 1393.655827][T19694]  ? __pfx_vfs_write+0x10/0x10
[ 1393.660577][T19694]  ? __fget_files+0x29/0x470
[ 1393.665175][T19694]  ? __fget_files+0x3f6/0x470
[ 1393.669836][T19694]  ? __fget_files+0x29/0x470
[ 1393.674417][T19694]  ksys_write+0x1a0/0x2c0
[ 1393.678736][T19694]  ? __pfx_ksys_write+0x10/0x10
[ 1393.683572][T19694]  ? do_syscall_64+0x100/0x230
[ 1393.688319][T19694]  ? do_syscall_64+0xb6/0x230
[ 1393.692981][T19694]  do_syscall_64+0xf3/0x230
[ 1393.697472][T19694]  ? clear_bhb_loop+0x35/0x90
[ 1393.702130][T19694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1393.708005][T19694] RIP: 0033:0x7efc07f75b59
[ 1393.712410][T19694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1393.732001][T19694] RSP: 002b:00007efc08cdf048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1393.740408][T19694] RAX: ffffffffffffffda RBX: 00007efc08105f60 RCX: 00007efc07f75b59
[ 1393.748392][T19694] RDX: 0000000000000010 RSI: 00000000200000c0 RDI: 0000000000000006
[ 1393.756361][T19694] RBP: 00007efc08cdf0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1393.764311][T19694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1393.772355][T19694] R13: 000000000000000b R14: 00007efc08105f60 R15: 00007fff7aad44c8
[ 1393.780318][T19694]  </TASK>
[ 1393.783424][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1393.970497][ T5103] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1394.004218][ T5103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1394.035459][ T5103] usb 5-1: config 0 descriptor??
[ 1394.098618][ T5103] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1394.303682][T19703] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3914'.
[ 1394.336956][ T5103] gspca_sonixj: reg_w1 err -71
[ 1394.341921][ T5103] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[ 1394.398144][ T5103] usb 5-1: USB disconnect, device number 86
[ 1394.618764][T19712] lo: entered promiscuous mode
[ 1394.658834][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'.
[ 1394.717402][T19717] FAULT_INJECTION: forcing a failure.
[ 1394.717402][T19717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1394.743307][T19717] CPU: 1 PID: 19717 Comm: syz.3.3920 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1394.753174][T19717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1394.760693][T19718] vlan2: entered promiscuous mode
[ 1394.763231][T19717] Call Trace:
[ 1394.763244][T19717]  <TASK>
[ 1394.763254][T19717]  dump_stack_lvl+0x241/0x360
[ 1394.763288][T19717]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1394.763313][T19717]  ? __pfx__printk+0x10/0x10
[ 1394.763338][T19717]  ? __pfx_lock_release+0x10/0x10
[ 1394.763369][T19717]  should_fail_ex+0x3b0/0x4e0
[ 1394.763401][T19717]  _copy_from_iter+0x1f6/0x1960
[ 1394.763426][T19717]  ? __virt_addr_valid+0x183/0x530
[ 1394.763452][T19717]  ? __pfx_lock_release+0x10/0x10
[ 1394.763481][T19717]  ? __alloc_skb+0x28f/0x440
[ 1394.763502][T19717]  ? __pfx__copy_from_iter+0x10/0x10
[ 1394.763527][T19717]  ? __virt_addr_valid+0x183/0x530
[ 1394.763551][T19717]  ? __virt_addr_valid+0x183/0x530
[ 1394.763574][T19717]  ? __virt_addr_valid+0x45f/0x530
[ 1394.763599][T19717]  ? __check_object_size+0x49c/0x900
[ 1394.763624][T19717]  netlink_sendmsg+0x73d/0xcb0
[ 1394.763655][T19717]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1394.763678][T19717]  ? __import_iovec+0x536/0x820
[ 1394.763704][T19717]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1394.763726][T19717]  ? security_socket_sendmsg+0x87/0xb0
[ 1394.763751][T19717]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1394.763766][T19717]  __sock_sendmsg+0x221/0x270
[ 1394.763793][T19717]  ____sys_sendmsg+0x525/0x7d0
[ 1394.763822][T19717]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1394.763857][T19717]  __sys_sendmsg+0x2b0/0x3a0
[ 1394.763882][T19717]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1394.763899][T19717]  ? vfs_write+0x7c4/0xc90
[ 1394.763958][T19717]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1394.763983][T19717]  ? do_syscall_64+0x100/0x230
[ 1394.764005][T19717]  ? do_syscall_64+0xb6/0x230
[ 1394.764026][T19717]  do_syscall_64+0xf3/0x230
[ 1394.764044][T19717]  ? clear_bhb_loop+0x35/0x90
[ 1394.764067][T19717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.764087][T19717] RIP: 0033:0x7f2998575b59
[ 1394.764107][T19717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1394.764124][T19717] RSP: 002b:00007f2999274048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1394.764146][T19717] RAX: ffffffffffffffda RBX: 00007f2998705f60 RCX: 00007f2998575b59
[ 1394.764162][T19717] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003
[ 1394.764175][T19717] RBP: 00007f29992740a0 R08: 0000000000000000 R09: 0000000000000000
[ 1394.764189][T19717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1394.764201][T19717] R13: 000000000000000b R14: 00007f2998705f60 R15: 00007ffc82f03cd8
[ 1394.780765][T19718] vlan2: entered allmulticast mode
[ 1394.785273][T19717]  </TASK>
[ 1395.158529][T19718] hsr_slave_1: entered allmulticast mode
[ 1395.187719][T19718] hsr_slave_1: left allmulticast mode
[ 1395.448622][T19734] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1395.618393][T19738] FAULT_INJECTION: forcing a failure.
[ 1395.618393][T19738] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1395.676350][T19738] CPU: 0 PID: 19738 Comm: syz.3.3927 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1395.686224][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1395.696297][T19738] Call Trace:
[ 1395.699590][T19738]  <TASK>
[ 1395.702529][T19738]  dump_stack_lvl+0x241/0x360
[ 1395.707231][T19738]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1395.712453][T19738]  ? __pfx__printk+0x10/0x10
[ 1395.717083][T19738]  should_fail_ex+0x3b0/0x4e0
[ 1395.721787][T19738]  prepare_alloc_pages+0x1da/0x5d0
[ 1395.726923][T19738]  __alloc_pages_noprof+0x166/0x6c0
[ 1395.732138][T19738]  ? __pfx___alloc_pages_noprof+0x10/0x10
[ 1395.737893][T19738]  alloc_pages_mpol_noprof+0x3e8/0x680
[ 1395.743376][T19738]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[ 1395.749381][T19738]  ? alloc_pages_noprof+0xef/0x170
[ 1395.754512][T19738]  get_free_pages_noprof+0xc/0x30
[ 1395.759551][T19738]  kasan_populate_vmalloc_pte+0x38/0xe0
[ 1395.765115][T19738]  __apply_to_page_range+0x8a8/0xe50
[ 1395.770435][T19738]  ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10
[ 1395.776702][T19738]  ? __pfx___apply_to_page_range+0x10/0x10
[ 1395.782519][T19738]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1395.787715][T19738]  ? kmem_cache_alloc_node_noprof+0x1c4/0x320
[ 1395.793777][T19738]  alloc_vmap_area+0x1d41/0x23e0
[ 1395.798723][T19738]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1395.803999][T19738]  ? __kasan_kmalloc+0x98/0xb0
[ 1395.808755][T19738]  ? __kmalloc_cache_node_noprof+0x1d3/0x300
[ 1395.814724][T19738]  ? __get_vm_area_node+0x113/0x270
[ 1395.819910][T19738]  ? reuseport_array_alloc+0x99/0x120
[ 1395.825278][T19738]  __get_vm_area_node+0x1a9/0x270
[ 1395.830301][T19738]  __vmalloc_node_range_noprof+0x3bc/0x1460
[ 1395.836189][T19738]  ? reuseport_array_alloc+0x99/0x120
[ 1395.841577][T19738]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1395.847899][T19738]  ? cap_capable+0x1b4/0x250
[ 1395.852484][T19738]  ? safesetid_security_capable+0xb2/0x1d0
[ 1395.858288][T19738]  bpf_map_area_alloc+0xfc/0x120
[ 1395.863225][T19738]  ? reuseport_array_alloc+0x99/0x120
[ 1395.868590][T19738]  reuseport_array_alloc+0x99/0x120
[ 1395.873782][T19738]  map_create+0x90c/0x1200
[ 1395.878198][T19738]  ? security_bpf+0x87/0xb0
[ 1395.882699][T19738]  __sys_bpf+0x6d1/0x810
[ 1395.886934][T19738]  ? __pfx___sys_bpf+0x10/0x10
[ 1395.891700][T19738]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1395.897676][T19738]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1395.903996][T19738]  ? do_syscall_64+0x100/0x230
[ 1395.908751][T19738]  __x64_sys_bpf+0x7c/0x90
[ 1395.913164][T19738]  do_syscall_64+0xf3/0x230
[ 1395.917658][T19738]  ? clear_bhb_loop+0x35/0x90
[ 1395.922328][T19738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1395.928214][T19738] RIP: 0033:0x7f2998575b59
[ 1395.932620][T19738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1395.952221][T19738] RSP: 002b:00007f2999274048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1395.960627][T19738] RAX: ffffffffffffffda RBX: 00007f2998705f60 RCX: 00007f2998575b59
[ 1395.968587][T19738] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000000
[ 1395.976550][T19738] RBP: 00007f29992740a0 R08: 0000000000000000 R09: 0000000000000000
[ 1395.984519][T19738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1395.992482][T19738] R13: 000000000000000b R14: 00007f2998705f60 R15: 00007ffc82f03cd8
[ 1396.000458][T19738]  </TASK>
[ 1396.146803][   T29] audit: type=1326 audit(1721516845.195:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1396.216343][   T29] audit: type=1326 audit(1721516845.195:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1396.272223][   T29] audit: type=1326 audit(1721516845.195:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1396.336692][   T29] audit: type=1326 audit(1721516845.205:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1396.418795][   T29] audit: type=1326 audit(1721516845.225:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1396.458471][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3932'.
[ 1396.526919][   T29] audit: type=1326 audit(1721516845.225:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1396.630268][   T29] audit: type=1326 audit(1721516845.225:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1396.780102][   T29] audit: type=1326 audit(1721516845.225:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1396.812404][   T29] audit: type=1326 audit(1721516845.225:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1396.850011][T10389] Bluetooth: hci5: Received unexpected HCI Event 0x00
[ 1396.866586][   T29] audit: type=1326 audit(1721516845.225:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19742 comm="syz.2.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5360975b59 code=0x7ffc0000
[ 1423.548039][ T1241] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.554383][ T1241] ieee802154 phy1 wpan1: encryption failed: -22
[ 1503.816473][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1503.823478][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P14134/2:b..l P19784/1:b..l
[ 1503.833452][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=111825, q=306 ncpus=2)
[ 1503.841263][    C0] task:syz.2.3940      state:R  running task     stack:25856 pid:19784 tgid:19782 ppid:17604  flags:0x00000000
[ 1503.854656][    C0] Call Trace:
[ 1503.857947][    C0]  <TASK>
[ 1503.860891][    C0]  __schedule+0x17ae/0x4a10
[ 1503.865425][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1503.870639][    C0]  ? __pfx___schedule+0x10/0x10
[ 1503.875506][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1503.881504][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1503.886724][    C0]  ? preempt_schedule_irq+0xf0/0x1c0
[ 1503.892025][    C0]  preempt_schedule_irq+0xfb/0x1c0
[ 1503.897151][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1503.902908][    C0]  irqentry_exit+0x5e/0x90
[ 1503.907339][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1503.913330][    C0] RIP: 0010:__local_bh_enable_ip+0x170/0x200
[ 1503.919326][    C0] Code: 8b e8 64 e3 2e 0a 65 66 8b 05 84 c9 ac 7e 66 85 c0 75 5d bf 01 00 00 00 e8 6d a4 0b 00 e8 38 ab 43 00 fb 65 8b 05 48 c9 ac 7e <85> c0 75 05 e8 c7 aa a9 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c
[ 1503.938955][    C0] RSP: 0018:ffffc90003647a80 EFLAGS: 00000282
[ 1503.945038][    C0] RAX: 0000000080000000 RBX: 1ffff920006c8f54 RCX: ffffffff816fee5a
[ 1503.953020][    C0] RDX: dffffc0000000000 RSI: ffffffff8bcac920 RDI: ffffffff8c1f9600
[ 1503.960998][    C0] RBP: ffffc90003647b40 R08: ffffffff92fc163f R09: 1ffffffff25f82c7
[ 1503.968978][    C0] R10: dffffc0000000000 R11: fffffbfff25f82c8 R12: dffffc0000000000
[ 1503.976970][    C0] R13: 1ffff920006c8f58 R14: ffffc90003647ac0 R15: 0000000000000201
[ 1503.985005][    C0]  ? mark_lock+0x9a/0x350
[ 1503.989366][    C0]  ? cfg80211_mlme_unregister_socket+0x2c0/0x6c0
[ 1503.995713][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1504.001447][    C0]  ? cfg80211_mlme_unregister_socket+0x2c0/0x6c0
[ 1504.007792][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1504.013009][    C0]  ? cfg80211_mlme_unregister_socket+0x5b/0x6c0
[ 1504.019281][    C0]  cfg80211_mlme_unregister_socket+0x2c0/0x6c0
[ 1504.025471][    C0]  nl80211_netlink_notify+0x339/0x840
[ 1504.030871][    C0]  ? nl80211_netlink_notify+0x7a/0x840
[ 1504.036449][    C0]  notifier_call_chain+0x19f/0x3e0
[ 1504.041586][    C0]  blocking_notifier_call_chain+0x69/0x90
[ 1504.047328][    C0]  netlink_release+0x11a6/0x1b10
[ 1504.052281][    C0]  ? netlink_release+0x10d/0x1b10
[ 1504.057317][    C0]  ? __pfx_netlink_release+0x10/0x10
[ 1504.062613][    C0]  ? down_write+0x18c/0x220
[ 1504.067128][    C0]  ? __pfx_down_write+0x10/0x10
[ 1504.071996][    C0]  ? file_close_fd+0x67/0x80
[ 1504.076595][    C0]  ? do_raw_spin_lock+0x14f/0x370
[ 1504.081633][    C0]  sock_close+0xbc/0x240
[ 1504.085890][    C0]  ? __pfx_sock_close+0x10/0x10
[ 1504.090755][    C0]  __fput+0x24a/0x8a0
[ 1504.094758][    C0]  __x64_sys_close+0x7f/0x110
[ 1504.099448][    C0]  do_syscall_64+0xf3/0x230
[ 1504.103959][    C0]  ? clear_bhb_loop+0x35/0x90
[ 1504.108645][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.114549][    C0] RIP: 0033:0x7f536097488a
[ 1504.118970][    C0] RSP: 002b:00007f5361777fa0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1504.127402][    C0] RAX: ffffffffffffffda RBX: 0000000000000023 RCX: 00007f536097488a
[ 1504.135384][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a
[ 1504.143364][    C0] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000
[ 1504.151339][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1504.159314][    C0] R13: 000000000000000b R14: 00007f5360b05f60 R15: 00007ffedb1bee88
[ 1504.167307][    C0]  </TASK>
[ 1504.170333][    C0] task:syz-executor    state:R  running task     stack:20432 pid:14134 tgid:14134 ppid:14122  flags:0x00000002
[ 1504.182083][    C0] Call Trace:
[ 1504.185368][    C0]  <TASK>
[ 1504.188307][    C0]  __schedule+0x17ae/0x4a10
[ 1504.192848][    C0]  ? __pfx___schedule+0x10/0x10
[ 1504.197713][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1504.203716][    C0]  ? preempt_schedule_irq+0xf0/0x1c0
[ 1504.209013][    C0]  preempt_schedule_irq+0xfb/0x1c0
[ 1504.214136][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1504.219881][    C0]  irqentry_exit+0x5e/0x90
[ 1504.224312][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1504.230305][    C0] RIP: 0010:seqcount_lockdep_reader_access+0x1d6/0x220
[ 1504.237171][    C0] Code: 62 e8 8e f4 7b ff 4d 85 f6 48 bb 00 00 00 00 00 fc ff df 75 07 e8 7a f4 7b ff eb 06 e8 73 f4 7b ff fb 48 c7 04 24 0e 36 e0 45 <4a> c7 04 23 00 00 00 00 66 42 c7 44 23 09 00 00 42 c6 44 23 0b 00
[ 1504.256788][    C0] RSP: 0018:ffffc900034c7760 EFLAGS: 00000293
[ 1504.262873][    C0] RAX: ffffffff82175e4d RBX: dffffc0000000000 RCX: ffff88802fa41e00
[ 1504.270851][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1504.278834][    C0] RBP: ffffc900034c7810 R08: ffffffff82175e28 R09: 1ffffffff25f82c7
[ 1504.286819][    C0] R10: dffffc0000000000 R11: fffffbfff25f82c8 R12: 1ffff92000698eec
[ 1504.294799][    C0] R13: ffffc900034c7780 R14: 0000000000000200 R15: 0000000000000046
[ 1504.302792][    C0]  ? seqcount_lockdep_reader_access+0x1a8/0x220
[ 1504.309049][    C0]  ? seqcount_lockdep_reader_access+0x1cd/0x220
[ 1504.315306][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[ 1504.321921][    C0]  prepend_path+0x2d6/0xbe0
[ 1504.326436][    C0]  ? prepend_path+0x2f/0xbe0
[ 1504.331041][    C0]  d_absolute_path+0x179/0x310
[ 1504.335831][    C0]  ? __pfx_d_absolute_path+0x10/0x10
[ 1504.341129][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1504.345906][    C0]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[ 1504.351642][    C0]  ? trace_kmalloc+0x1f/0xd0
[ 1504.356238][    C0]  ? __kmalloc_noprof+0x21a/0x400
[ 1504.361278][    C0]  tomoyo_realpath_from_path+0x2b4/0x5e0
[ 1504.366938][    C0]  tomoyo_path_perm+0x2b7/0x740
[ 1504.371810][    C0]  ? tomoyo_path_perm+0x287/0x740
[ 1504.376847][    C0]  ? __pfx_tomoyo_path_perm+0x10/0x10
[ 1504.382265][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1504.387479][    C0]  ? __d_lookup+0x64/0x7b0
[ 1504.391907][    C0]  ? hook_path_unlink+0x18a/0x4b0
[ 1504.396944][    C0]  tomoyo_path_unlink+0xd0/0x110
[ 1504.401892][    C0]  ? __pfx_tomoyo_path_unlink+0x10/0x10
[ 1504.407456][    C0]  security_path_unlink+0xe1/0x140
[ 1504.412584][    C0]  do_unlinkat+0x3e6/0x830
[ 1504.417024][    C0]  ? __pfx_do_unlinkat+0x10/0x10
[ 1504.421975][    C0]  ? __check_object_size+0x49c/0x900
[ 1504.427282][    C0]  ? getname_flags+0x1e3/0x540
[ 1504.432060][    C0]  __x64_sys_unlink+0x47/0x50
[ 1504.436764][    C0]  do_syscall_64+0xf3/0x230
[ 1504.441293][    C0]  ? clear_bhb_loop+0x35/0x90
[ 1504.445985][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1504.451884][    C0] RIP: 0033:0x7f01797751a7
[ 1504.456305][    C0] RSP: 002b:00007fff6a3c15a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[ 1504.464732][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f01797751a7
[ 1504.472722][    C0] RDX: 00007fff6a3c15d0 RSI: 00007fff6a3c1660 RDI: 00007fff6a3c1660
[ 1504.480719][    C0] RBP: 00007fff6a3c1660 R08: 0000000000000000 R09: 0000000000000000
[ 1504.488698][    C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff6a3c2720
[ 1504.496679][    C0] R13: 00007f01797e344c R14: 0000000000155543 R15: 0000000000154f9f
[ 1504.504680][    C0]  </TASK>
[ 1504.507719][    C0] rcu: rcu_preempt kthread starved for 10108 jiffies! g111825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1504.519006][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1504.528978][    C0] rcu: RCU grace-period kthread stack dump:
[ 1504.534872][    C0] task:rcu_preempt     state:R  running task     stack:25168 pid:17    tgid:17    ppid:2      flags:0x00004000
[ 1504.546630][    C0] Call Trace:
[ 1504.549917][    C0]  <TASK>
[ 1504.552863][    C0]  __schedule+0x17ae/0x4a10
[ 1504.557397][    C0]  ? __pfx___schedule+0x10/0x10
[ 1504.562260][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1504.567295][    C0]  ? __asan_memset+0x23/0x50
[ 1504.571897][    C0]  ? __pfx_lockdep_init_map_type+0x10/0x10
[ 1504.577719][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1504.584065][    C0]  ? schedule+0x90/0x320
[ 1504.588315][    C0]  schedule+0x14b/0x320
[ 1504.592484][    C0]  schedule_timeout+0x1be/0x310
[ 1504.597341][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1504.602725][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1504.608029][    C0]  ? prepare_to_swait_event+0x32e/0x350
[ 1504.613592][    C0]  rcu_gp_fqs_loop+0x2df/0x1330
[ 1504.618457][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[ 1504.623679][    C0]  ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10
[ 1504.629758][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1504.635057][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1504.640986][    C0]  ? finish_swait+0xd4/0x1e0
[ 1504.645599][    C0]  rcu_gp_kthread+0xa7/0x3b0
[ 1504.650206][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1504.655411][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1504.661317][    C0]  ? __kthread_parkme+0x169/0x1d0
[ 1504.666354][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1504.671560][    C0]  kthread+0x2f0/0x390
[ 1504.675643][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1504.680855][    C0]  ? __pfx_kthread+0x10/0x10
[ 1504.685460][    C0]  ret_from_fork+0x4b/0x80
[ 1504.689889][    C0]  ? __pfx_kthread+0x10/0x10
[ 1504.694491][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1504.699283][    C0]  </TASK>
[ 1504.702308][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1504.708633][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-syzkaller-10729-g3c3ff7be9729 #0
[ 1504.718005][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 1504.728076][    C0] RIP: 0010:acpi_safe_halt+0x21/0x30
[ 1504.733374][    C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 40 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d c5 30 a3 00 f3 0f 1e fa fb f4 <fa> c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
[ 1504.753000][    C0] RSP: 0018:ffffffff8e007ca8 EFLAGS: 00000246
[ 1504.759085][    C0] RAX: ffffffff8e094680 RBX: ffff88801baa1064 RCX: 000000000146d761
[ 1504.767066][    C0] RDX: 0000000000000001 RSI: ffff88801baa1000 RDI: ffff88801baa1064
[ 1504.775046][    C0] RBP: 000000000003a4b8 R08: ffff8880b9437c7b R09: 1ffff11017286f8f
[ 1504.783026][    C0] R10: dffffc0000000000 R11: ffffffff8b8602d0 R12: ffff888019f6d800
[ 1504.791001][    C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eac9cc0
[ 1504.798978][    C0] FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[ 1504.807914][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1504.814501][    C0] CR2: 00007ffdb5441f60 CR3: 000000001b364000 CR4: 00000000003506f0
[ 1504.822482][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1504.830460][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1504.838449][    C0] Call Trace:
[ 1504.841744][    C0]  <IRQ>
[ 1504.844607][    C0]  ? rcu_check_gp_kthread_starvation+0x278/0x310
[ 1504.850969][    C0]  ? print_other_cpu_stall+0x1470/0x15a0
[ 1504.856639][    C0]  ? __pfx_print_other_cpu_stall+0x10/0x10
[ 1504.862444][    C0]  ? __pfx_lock_release+0x10/0x10
[ 1504.867457][    C0]  ? kvm_check_and_clear_guest_paused+0x6a/0xd0
[ 1504.873681][    C0]  ? rcu_sched_clock_irq+0xa2c/0x10d0
[ 1504.879068][    C0]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[ 1504.884726][    C0]  ? hrtimer_run_queues+0x16c/0x460
[ 1504.889955][    C0]  ? update_process_times+0x1ce/0x230
[ 1504.895367][    C0]  ? tick_nohz_handler+0x37c/0x500
[ 1504.900507][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[ 1504.905988][    C0]  ? __hrtimer_run_queues+0x551/0xd50
[ 1504.911391][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[ 1504.917417][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1504.923165][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[ 1504.929274][    C0]  ? hrtimer_interrupt+0x396/0x990
[ 1504.934431][    C0]  ? __sysvec_apic_timer_interrupt+0x110/0x3f0
[ 1504.940615][    C0]  ? sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1504.946451][    C0]  </IRQ>
[ 1504.949397][    C0]  <TASK>
[ 1504.952340][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1504.958517][    C0]  ? __pfx_acpi_idle_enter+0x10/0x10
[ 1504.963793][    C0]  ? acpi_safe_halt+0x21/0x30
[ 1504.968457][    C0]  acpi_idle_enter+0xe4/0x140
[ 1504.973121][    C0]  cpuidle_enter_state+0x112/0x480
[ 1504.978218][    C0]  ? __pfx_menu_select+0x10/0x10
[ 1504.983144][    C0]  cpuidle_enter+0x5d/0xa0
[ 1504.987553][    C0]  do_idle+0x375/0x5d0
[ 1504.991611][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1504.996197][    C0]  ? poll_idle+0xa0/0xb0
[ 1505.000443][    C0]  ? rest_init+0x31/0x300
[ 1505.004768][    C0]  cpu_startup_entry+0x42/0x60
[ 1505.009533][    C0]  rest_init+0x2dc/0x300
[ 1505.013764][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1505.019297][    C0]  start_kernel+0x47a/0x500
[ 1505.023790][    C0]  x86_64_start_reservations+0x2a/0x30
[ 1505.029238][    C0]  x86_64_start_kernel+0x9f/0xa0
[ 1505.034159][    C0]  common_startup_64+0x13e/0x147
[ 1505.039086][    C0]  </TASK>
[ 1505.737817][ T1241] ieee802154 phy0 wpan0: encryption failed: -22
[ 1505.746704][ T1241] ieee802154 phy1 wpan1: encryption failed: -22
SYZFAIL: failed to send rpc
fd=3 want=384 sent=0 n=-1 (errno 32: Broken pipe)
[ 1506.569590][T17610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1506.584274][T17610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1506.634059][T17610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1506.675289][T17610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1506.690927][T17610] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1506.700724][T17610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1507.250283][ T1107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.437671][ T1107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.479098][T19794] chnl_net:caif_netlink_parms(): no params data found
[ 1507.521929][ T1107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.605677][ T1107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.624857][T19794] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1507.633983][T19794] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1507.641403][T19794] bridge_slave_0: entered allmulticast mode
[ 1507.649106][T19794] bridge_slave_0: entered promiscuous mode
[ 1507.657646][T19794] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1507.664754][T19794] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1507.673009][T19794] bridge_slave_1: entered allmulticast mode
[ 1507.681299][T19794] bridge_slave_1: entered promiscuous mode
[ 1507.716306][T19794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1507.729912][T19794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1507.779063][T19794] team0: Port device team_slave_0 added
[ 1507.793600][T19794] team0: Port device team_slave_1 added
[ 1508.076660][ T1107] team0: Port device geneve2 removed
[ 1508.204597][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1508.215790][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1508.228101][ T1107] bond0 (unregistering): Released all slaves
[ 1508.239754][T19794] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1508.252102][T19794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1508.283883][T19794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1508.309305][T19794] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1508.316271][T19794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1508.344513][T19794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1508.394182][T19794] hsr_slave_0: entered promiscuous mode
[ 1508.406718][T19794] hsr_slave_1: entered promiscuous mode
[ 1508.412859][T19794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1508.420663][T19794] Cannot create hsr debugfs directory
[ 1508.542004][T19794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.621918][T19794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.686790][T19794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.750939][T17610] Bluetooth: hci2: command tx timeout
[ 1508.781754][T19794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.926535][T19794] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1508.936019][T19794] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1508.946106][T19794] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1508.955889][T19794] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1509.046387][T19794] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1509.076067][T19794] 8021q: adding VLAN 0 to HW filter on device team0
[ 1509.093770][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1509.100884][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1509.129034][T13246] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1509.136180][T13246] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1509.296235][T19794] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1509.340001][T19794] veth0_vlan: entered promiscuous mode
[ 1509.353684][T19794] veth1_vlan: entered promiscuous mode
[ 1509.383927][T19794] veth0_macvtap: entered promiscuous mode
[ 1509.393769][T19794] veth1_macvtap: entered promiscuous mode
[ 1509.413034][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1509.423643][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.433610][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1509.444931][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.455248][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1509.465926][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.476193][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1509.487019][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.497095][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1509.507582][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.517947][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1509.529073][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.539267][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1509.550473][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.561338][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1509.572040][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.581906][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1509.592420][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.603469][T19794] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1509.618538][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1509.629556][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.640210][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1509.650872][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.661724][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1509.672181][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.682050][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1509.692501][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.702702][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1509.713288][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.723125][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1509.733558][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.743373][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1509.753809][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.764224][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1509.775242][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.785560][T19794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1509.796039][T19794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1509.808452][T19794] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1509.821812][T19794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1509.830771][T19794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1509.839503][T19794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1509.848729][T19794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1509.991064][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1510.009064][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1510.066159][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1510.082914][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1510.424238][ T1107] hsr_slave_0: left promiscuous mode
[ 1510.431931][ T1107] hsr_slave_1: left promiscuous mode
[ 1510.439248][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1510.451587][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1510.459410][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1510.467194][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1510.491830][ T1107] veth1_macvtap: left promiscuous mode
[ 1510.497681][ T1107] veth0_macvtap: left promiscuous mode
[ 1510.503251][ T1107] veth1_vlan: left promiscuous mode
[ 1510.508789][ T1107] veth0_vlan: left promiscuous mode
[ 1510.978903][ T1107] team0 (unregistering): Port device team_slave_1 removed
[ 1511.025729][ T1107] team0 (unregistering): Port device team_slave_0 removed
[ 1511.859998][ T1107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1511.871524][ T1107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1511.952537][ T1107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1511.962969][ T1107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1512.043887][ T1107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.054251][ T1107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1512.126300][ T1107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.138873][ T1107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1512.267623][ T1107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.365409][ T1107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.448562][ T1107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.510833][ T1107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.677385][ T1107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.754621][ T1107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.830807][ T1107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.919401][ T1107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1513.003062][ T1107] bridge_slave_1: left allmulticast mode
[ 1513.009010][ T1107] bridge_slave_1: left promiscuous mode
[ 1513.014675][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1513.024496][ T1107] bridge_slave_0: left allmulticast mode
[ 1513.030412][ T1107] bridge_slave_0: left promiscuous mode
[ 1513.037184][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1513.048423][ T1107] bridge_slave_1: left allmulticast mode
[ 1513.054061][ T1107] bridge_slave_1: left promiscuous mode
[ 1513.062893][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1513.071896][ T1107] bridge_slave_0: left allmulticast mode
[ 1513.079409][ T1107] bridge_slave_0: left promiscuous mode
[ 1513.085061][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1513.100404][ T1107] bridge_slave_1: left allmulticast mode
[ 1513.106061][ T1107] bridge_slave_1: left promiscuous mode
[ 1513.111985][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1513.123420][ T1107] bridge_slave_0: left allmulticast mode
[ 1513.129126][ T1107] bridge_slave_0: left promiscuous mode
[ 1513.134782][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1513.150238][ T1107] bridge_slave_1: left allmulticast mode
[ 1513.155922][ T1107] bridge_slave_1: left promiscuous mode
[ 1513.161697][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1513.172397][ T1107] bridge_slave_0: left allmulticast mode
[ 1513.178178][ T1107] bridge_slave_0: left promiscuous mode
[ 1513.183933][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state