last executing test programs:

1m0.921407779s ago: executing program 0 (id=616):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}]}, &(0x7f00000002c0)=0x10)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}})
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x27)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={<r3=>r2, 0x31, 0x8}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x0, 0x7f, 0x0, 0x9]}, &(0x7f00000000c0)=0xc)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={<r6=>r3, 0xc}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x9, 0x8}, &(0x7f00000001c0)=0x8)

1m0.82830267s ago: executing program 0 (id=617):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r1, &(0x7f000000aa40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/5, 0x5}, 0x800}], 0x1, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0x1, 0x3fff})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
unshare(0x2040400)
r5 = socket(0x22, 0x3, 0x0)
bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000180), 0x4)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r8, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x2000c800)
sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="00030000c2ac3a1a55e85a983fe79adf519ec02b1b9db555dd909e61e18e6e08fa1ecd941f55a27762a1db8fca8e343804ac5f372bc853808d84a59af22811c57c2149ca2055e9d7a9d4adb50caeeafe939441302fc9d63da1a0e2f7c0d7af084bf6343ff9697d18606233fafde40e133a09fffb878620dda72db55200e8c3a646ed883df38baf8031db7ff551f7d3b8106638310e0cbe3fd6f01aeecdec15bb70e1625fd00f643faa43", @ANYRES16=r6, @ANYRESHEX=r3], 0x300}, 0x1, 0x0, 0x0, 0x1000}, 0x40000)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb)
ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f00000001c0)={0x9})

57.929079945s ago: executing program 0 (id=622):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181201, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)={0x1000, [0x0]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

55.75404487s ago: executing program 0 (id=629):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000265, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xa487, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1a4860)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8302, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000001240)={0x14}, 0x14)
r8 = getpid()
sched_setscheduler(r8, 0x1, &(0x7f0000001280))
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xfffffffffffffff4, 0x400000000007]}})
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000007000000000061114d00000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000000d06010100005023e151ab7b9c000000000000000000000500010007000000"], 0x1c}}, 0x0)
openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load2\x00', 0x2, 0x0)

54.84190513s ago: executing program 3 (id=632):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpid()
r2 = getpid()
mlock(&(0x7f00000a8000/0x4000)=nil, 0x4000)
munlockall()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4d, 0x0, 0x200d}}}, 0x7)
r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={<r6=>0x0, @loopback}, &(0x7f00000003c0)=0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0xe2, &(0x7f00000002c0)=""/226, 0x41100, 0x11, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0xc, 0x8, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
setns(r5, 0x10000000)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000100)={0x0, 0x7, [{r1, 0x0, 0xfffffffffffff000}, {r1, 0x0, 0x2000, 0xfffff000}, {r0, 0x0, 0x0, 0x100000000}, {r0, 0x0, 0x100000000, 0x100000000}, {r0, 0x0, 0x1000000000000, 0x2000}, {r1, 0x0, 0x100000000, 0x1000000}, {r1, 0x0, 0xfffffffefefe3000, 0x1000000}]})
pwrite64(r0, &(0x7f0000000040)="67b24554800bd8a08defbb00c7287d24f4c6c213ff1679e3454f9f432c2e699571180d171e4217eb6f652d00bdfd18fdfb9ce0c51d7e947214d88465adea7636b34d5213ed179d3446f2980bb5b16d555d93687046b2db27fd131d9998b4dabcbffb27876d2282cdd9e5d72546350191f5108722b4809f0150abed62c32e2870e194d5858c67131c65d6a02a3b0646e8f300d22b55bbb42aff1d8be141df7c42093a8beec5a434bcb0f5b9769b8a055fea261d69a8e273", 0xb7, 0x8658)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
getsockopt$rose(r7, 0x104, 0x7, 0x0, &(0x7f0000000280))

53.715091196s ago: executing program 0 (id=633):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0x1, 0x3fff})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000180), 0x4)
sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x14)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800)

53.313734771s ago: executing program 3 (id=634):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000a5000000bf"], 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
getsockopt$sock_buf(r9, 0x1, 0x3b, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000)
socketpair(0x23, 0x5, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x8000002)
socket$inet_tcp(0x2, 0x1, 0x0)

51.781619509s ago: executing program 0 (id=636):
r0 = socket(0x2a, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x5, 0x8, 0xf}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x10}}, './file0\x00'})
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x5, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x80000000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000002140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000030000005637f880f14ee2dd0000f90e72cd0ea30cee982535"], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28)
syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
accept(0xffffffffffffffff, &(0x7f0000002080)=@l2tp6, &(0x7f0000002100)=0x80)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0)

50.317885887s ago: executing program 32 (id=636):
r0 = socket(0x2a, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x5, 0x8, 0xf}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x10}}, './file0\x00'})
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x5, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x80000000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000002140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000030000005637f880f14ee2dd0000f90e72cd0ea30cee982535"], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28)
syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
accept(0xffffffffffffffff, &(0x7f0000002080)=@l2tp6, &(0x7f0000002100)=0x80)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r7 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0)

50.302469962s ago: executing program 3 (id=639):
setrlimit(0x8, &(0x7f0000000080))
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0}) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000200102cca72b580"], 0x26}}, 0x0)
getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r3=>0x0, 0x40, 0x8000, 0x8, 0x9, {{0x44, 0x4, 0x0, 0x10, 0x110, 0x64, 0x0, 0xfe, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x21}, {[@noop, @end, @timestamp_prespec={0x44, 0x44, 0x3a, 0x3, 0xa, [{@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x3}, {@multicast1}, {@local, 0x3}, {@remote}, {@empty, 0xe}, {@empty, 0x7}]}, @cipso={0x86, 0x6e, 0xffffffffffffffff, [{0x5, 0x8, "8b3bb3b30c18"}, {0x0, 0x3, "02"}, {0x1, 0x2}, {0x0, 0x11, "c5b57a59ecba2e94b280a36e4aef1f"}, {0x5, 0xc, "b59ca203ea57476400bf"}, {0x5, 0x8, "1b8e8c341ab2"}, {0x0, 0x12, "c7ee70162a07c71bf379837536f0cb65"}, {0x0, 0x4, "4a98"}, {0x0, 0xf, "01dee85de4957fac920e15dc60"}, {0x0, 0x11, "7e752991ba2eb85210159a9bf48b8d"}]}, @noop, @lsrr={0x83, 0x1b, 0xbc, [@local, @multicast1, @remote, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}]}, @lsrr={0x83, 0xb, 0x8a, [@dev={0xac, 0x14, 0x14, 0x12}, @remote]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x9, 0x0, 0x0, [0x4, 0x6, 0x93, 0xc, 0x3ff, 0x8]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@mpls_getnetconf={0x4c, 0x52, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffff000}]}, 0x4c}}, 0x4004014) (async)
mlockall(0x7)

48.429993482s ago: executing program 3 (id=643):
mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async)
mq_unlink(&(0x7f0000000280)='fd/3\x00') (async)
r0 = socket(0x200000100000011, 0x3, 0x0)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

47.802657372s ago: executing program 3 (id=645):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000453d850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0xfcea)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c00028006"], 0x24}}, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBLED(r10, 0x4b64, &(0x7f0000000000))
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000100)="dc", 0x1}], 0x1)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)

45.993945825s ago: executing program 3 (id=647):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
r3 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x38011, r2, 0x1f4c3000)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000500))
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r5, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

30.472547378s ago: executing program 33 (id=647):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
r3 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x38011, r2, 0x1f4c3000)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000500))
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r5, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

19.55984721s ago: executing program 2 (id=678):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000000000040580411500000000000010902240001000000000904000002030000000921feff000122050009058103"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=<r5=>0x0)
r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x4, 0xc0})
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f0000000340), 0x11000)
vmsplice(r7, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0)
r8 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000580), &(0x7f0000000380))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000140)=[0x0, 0x7fff], 0x2)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa}]}}, 0x0}, 0x0)
r9 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0xaaaaaaaaaaaaad9, [{r7, 0x0, 0x100000000, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0x0, 0x8000}, {0xffffffffffffffff, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x4000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000}]})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/227, 0xe3}, {&(0x7f0000000300)=""/7, 0x7}], 0x2)
fsetxattr$security_smack_transmute(r9, &(0x7f0000000080), &(0x7f0000000100), 0x4, 0x3)

12.522282694s ago: executing program 2 (id=683):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x31)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x1382, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000340), &(0x7f0000000180))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000100100000a0000002900"], 0x18}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$inet6(0xa, 0x6, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)

11.950496217s ago: executing program 1 (id=686):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = dup(r1)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000300000000000019078ac1e01ac1414aa0300b0780009000745c0fffa00640081ea3200000a0101017f000001"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$swradio(&(0x7f0000003900), 0x1, 0x2)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0)
r7 = dup(r0)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600})

11.030215374s ago: executing program 4 (id=687):
futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x2)
r0 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000100)='\x00\x00\a\x00\x00\x0f\x00\x00\f\xed\xce)\xd2\x19\xe4\xba\x9f\xee\bQ\x14\x8c\v\xfdA\xa7\xff\x84 \\\xbf2\x11\xde\x8dX\xec\x87\xb08\xc7\xde[/~\xf4!\'h}s\xc4\xa1?\x95\b(7hV#\x90\xaem5,\xc1\xfbK\xa6\x95\x05\xf5T\x84\xdb\x9ci\x05\xca\xfaL.B\x92P\xa1\xa91\x87m\xc8`K\x0f\x8f\xc6\xa5\xe1\xedMB\x8aC\x83\x18\x96\x7ft=\xf1\x00'/121, 0xfffffffffffffffd)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
keyctl$assume_authority(0x10, r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x88, 0x3, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xdc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000011)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)

9.81374478s ago: executing program 4 (id=688):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000001540)={0x10000b, 0x0, 0x5, 0x7ffffffb, 0x3, "5f73f3cccd22890348a63fe3ea52426448b90d", 0x9, 0x80000001})
write$UHID_INPUT(r7, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100fefffffffedbdf25ffffffff000000000000000000000000fc0100000000150000000000000000010001071c4e23000200000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d66c0000000801010100000000000000000000000000000000000000009201000000000000a39b00000000000002000000000000001c250000000000000300000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000080000000023500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$nl_xfrm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x4)
lseek(r2, 0x1000000, 0x0)
sendto$inet(r2, &(0x7f0000000300)="bd9f63ec2934ffec178f7475b8f07988bd5fa40835b7e9deca5d862d1f1fd807b2dcfa48d6ed0230969711d0e29db86844d4586b7a19a590844319b141ac25952f8aa201a807775622cdd106a70290c6b699298d4e78f35b89a13ad9e05020a186d58e2e3e0b1db7cfbb7b933c266bdb22e12720f79b0b402e1ef09f1a766fd3ed5f93416060f4acc03c1e5412d42d66d38838d526f61629a184c1", 0x9b, 0x4, 0x0, 0x0)

7.637904372s ago: executing program 1 (id=689):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x6)
sendmsg$netlink(r5, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f00000000c0)=0x7fff, 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x70bd25, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2=0xfe800000, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
r10 = getpgrp(0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r10})
sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)

6.214106594s ago: executing program 4 (id=690):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1, 0x0, 0x26}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x3, 0x4}, {0x3, 0xa}]}, 0x14, 0x1)

6.079950119s ago: executing program 2 (id=691):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = semget$private(0x0, 0x4, 0x29b)
semop(r1, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000))
semctl$GETPID(r1, 0x0, 0xb, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x100)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0xf00, 0x0, 0x404c84d}, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x1494)
fcntl$setstatus(r2, 0x4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000340)=@abs, 0x6e)
nanosleep(&(0x7f00000001c0), 0x0)
sendmmsg$unix(r6, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x44}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000740)="d608ada2fa2ebeecbde99601f63dcb1754fc5b41d82465687df678ab6d9b614dd388a1d3e2cb2396cd5dd49f06351bb09f085ebc82cfd215897110990b349ae079de6922b383411f6f498333e6c68387189e258804902f11f21480935749660cd199c22ef7556e95", 0x68}, {&(0x7f00000007c0)="b869251a8afe03569ad96f3af53e83e7a3d380ba27696e7cdbe81759369c4403f731c2913c36564fdb8931dd7c58a9badaa66e5675e0ba45e21102566a5def584c0a601b25859535014e97e67a6e6d46170980f0a04c678fdcb6abcf70ea6de9e1533f3198ddbdbee0e8d251b932fe8f2d9d1e6d8572ea9f63acf9dd548af2f79430965da9874a23db27a552e0", 0x8d}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="e97f34f12ba74ec96611b175e97d9b6839eafdcd894dec87d8c99981db921719bc7f7fecc27a984f1c0c33448b7dbde01b8c2f1802e35d750e015706fe801fcadd22d2cd9f74a7127d9addc9edb984d4e9716d162d3554fff8a2964f4e955c28a181ebfa715e29682bbe45e397794eb570c64fba23328a7f0228cf1f084fb547ce6a43a111c32ed527427db6ec6366dc115c680697cf0438b522e2501a31fb0607ad", 0xa2}], 0x4, &(0x7f0000003980)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}}], 0x2, 0x4000011)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)

5.721338238s ago: executing program 1 (id=692):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
fsopen(&(0x7f0000000080)='gfs2\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0xd31d2016ce0094df)
open_tree(r2, &(0x7f0000000640)='\x00', 0x89901)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
dup2(0xffffffffffffffff, r0)
r5 = dup2(r4, r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030168b56bca0342696d0389af607500010100000a24010000000201020c1115075a0c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff00", @ANYRESOCT=r1, @ANYBLOB="05"], 0x0)

5.421872176s ago: executing program 4 (id=693):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
r4 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000a5000000bf"], 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4205, r5, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
getsockopt$sock_buf(r8, 0x1, 0x3b, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000)
socketpair(0x23, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4.401718274s ago: executing program 2 (id=694):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x0, @multicast1}], 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34324258, 0x3, @discrete={0x3b79f0fc, 0xffffffff}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
sched_getattr(r0, &(0x7f0000000340)={0x38}, 0x38, 0x0)
fanotify_init(0x0, 0x0)
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x60040, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
fsetxattr$security_ima(r6, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="0403"], 0x13, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0, 0x8}, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
timerfd_gettime(0xffffffffffffffff, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x111200, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3)
openat$mice(0xffffffffffffff9c, 0x0, 0x800000)
socket$nl_route(0x10, 0x3, 0x0)

2.239703639s ago: executing program 4 (id=695):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/56)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000100)=""/63)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x62)

2.02609174s ago: executing program 1 (id=696):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_procfs(0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, 0x0)
eventfd2(0x8, 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x23, 0x6, 0x10)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

1.989456442s ago: executing program 4 (id=697):
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88880, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r4 = dup(r3)
read$msr(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
pipe(0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
accept4(r5, 0x0, 0x0, 0x80800)
r6 = syz_usb_connect(0x0, 0x5d, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000093007a402104070051b80102030109024b00010000000009040000000202ff00052406000105240000000d240f0100000000000000000006241a0000000524010000052406000005240900000d240f"], 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@known='security.apparmor\x00')
syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x20, 0x5, 0x2a, {0x2a, 0x23, "c58c8f35468f141dc3bb3779c201e5860948ebc7a1c7cf2a7418492941f2af8b8ed3dd37f5ce4776"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000240)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x2, "62f4"}, @main=@item_4={0x3, 0x0, 0xb, "d0b70a04"}, @global=@item_012={0x2, 0x1, 0x7, "4aa3"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xdbf}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x12, 0x31, "fd598de68049da6d2ed017e2c422f190227be4f7477f2a063fa24d40f92e9d606b846b360bafdc9b78b648677d3d73a687"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x1, 0x28, "62bca9b3b95eb919accf77202ac457d3af4d40024722ad7b845480acf2d5f777d7e5d87e7fdcea5c"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x6}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.716517451s ago: executing program 2 (id=698):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x0, 0x0)
r5 = accept4$unix(r4, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x80000)
sendto$unix(r5, &(0x7f0000000440)="7365893a80686522bbb311660300a7a152d01836a0c8dbcfa6961c4ac85b58fa5f7cf0cab8c5a7aa011d068c5549f446c051c8db627cd93d397987ff598605165c98544e72a455f839096be67e90127adb505c3a0fdd2ffd01a6d6a7da24b83f2f012902b02dadda9103edc9c4b57f561c5802003249d9adeece5be11f0b3f682c916f2206e0", 0x86, 0x0, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000d0", @ANYRES16=r3, @ANYBLOB="00032abd7000fedbdf250d0000000a000900aaaaaaaaaa20000005002f000000000008003a00ff07000008003b0006000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xe7)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r7, 0x0, &(0x7f00004fc000/0x2000)=nil, 0x2000, 0x802})
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$tcp_congestion(r8, 0x0, 0xee0000)
syz_emit_ethernet(0x76, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x1, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x6}, {@empty}]}]}}}}}}}, 0x0)
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000001c0)={0x28, 0x4, r7, r7, 0x3, 0xfffffffffffffff9, 0x4003})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = dup(r9)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, 0x0, &(0x7f00000002c0))
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000007c641d90f0f2792c010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000400900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480340001800b000100657874686472000024000280080001400000000c0800064000000004080004400000002205000200070000000900010073797a3000000000140000001100010000000000000000000700000a"], 0xd4}}, 0x0)

1.318196298s ago: executing program 1 (id=699):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x31)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x1382, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000340), &(0x7f0000000180))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000100100000a0000002900"], 0x18}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$inet6(0xa, 0x6, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)

240.081737ms ago: executing program 2 (id=700):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = fanotify_init(0x0, 0x0)
fanotify_mark(r3, 0x90, 0x40100000, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000009000000420000004000000000000000", @ANYRES32], 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="08000800030004000010140000004a0e00bc00650000520690780a010102ffffffff44c79181ffffffff00000080e0000002000000dae00000010000000744140711ac14140500009b88ffffffff000000091414bbfffffff27f00000100007fffac1414aa0000000a440ce7f00000000300000007443c2871ac1414bb000001000000000000000005ac1414aa0000000064010100fffffff9e0000002000004010a01010200000001e0000002000080014e234e200000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010001090780001"], 0xca)

0s ago: executing program 1 (id=701):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2982, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r5, &(0x7f00000006c0)}, 0x20)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r6, &(0x7f0000000200)=0x93, 0x2)

kernel console output (not intermixed with test programs):

 T6531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.298046][ T5911] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9
[  161.309476][ T6531] syzkaller0: entered promiscuous mode
[  161.318540][ T6531] syzkaller0: entered allmulticast mode
[  161.324754][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.337226][ T5911] usb 3-1: Product: syz
[  161.345491][ T5911] usb 3-1: Manufacturer: syz
[  161.350603][ T5911] usb 3-1: SerialNumber: syz
[  161.360531][ T5940] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  161.367863][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'.
[  161.379356][ T5911] usb 3-1: config 0 descriptor??
[  161.388677][ T6521] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  161.398590][ T5911] usb-storage 3-1:0.231: USB Mass Storage device detected
[  161.418205][ T6533] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  161.430020][ T6533] macvtap1: entered allmulticast mode
[  161.457515][ T6533] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  161.477306][ T6531] tipc: Resetting bearer <eth:syzkaller0>
[  161.506941][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'.
[  161.549092][ T6517] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow!
[  161.660046][  T980] usb 3-1: USB disconnect, device number 13
[  161.747435][ T6544] netlink: 3 bytes leftover after parsing attributes in process `syz.4.150'.
[  161.761123][ T5911] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  161.780878][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  161.800840][ T5940] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  161.812152][ T6544] batadv1: entered promiscuous mode
[  161.817489][ T6544] batadv1: entered allmulticast mode
[  161.853855][ T5820] usb 5-1: USB disconnect, device number 8
[  161.932157][ T5911] usb 1-1: Using ep0 maxpacket: 32
[  161.944491][   T24] usb 2-1: Using ep0 maxpacket: 32
[  161.952494][ T5911] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[  161.964910][   T24] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  161.971022][ T5911] usb 1-1: config 0 has no interface number 0
[  161.974872][   T24] usb 2-1: config 0 has no interface number 0
[  161.989209][ T5911] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  162.001252][ T5911] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  162.001568][ T5940] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  162.014151][ T5911] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  162.026064][   T24] usb 2-1: config 0 interface 4 has no altsetting 0
[  162.036492][ T5911] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  162.051125][ T5940] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  162.051154][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  162.051193][ T5940] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  162.071784][ T5911] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  162.094834][ T5911] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  162.095128][   T24] usb 2-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=3c.48
[  162.112521][ T5911] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  162.128480][ T5911] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[  162.140979][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  162.151224][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.166334][   T24] usb 2-1: Product: syz
[  162.170617][   T24] usb 2-1: Manufacturer: syz
[  162.175482][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  162.192521][   T24] usb 2-1: SerialNumber: syz
[  162.205355][ T5940] usb 4-1: string descriptor 0 read error: -22
[  162.215311][ T5940] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  162.241869][   T24] usb 2-1: config 0 descriptor??
[  162.253530][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.270943][ T5911] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  162.290994][ T5911] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  162.311832][ T5940] usb 4-1: config 0 descriptor??
[  162.330146][ T5940] hub 4-1:0.0: bad descriptor, ignoring hub
[  162.332572][  T977] tipc: Node number set to 3364644436
[  162.374081][ T5911] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  162.383402][ T5940] hub 4-1:0.0: probe with driver hub failed with error -5
[  162.383676][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.439675][ T5911] usb 1-1: Product: syz
[  162.448721][ T5911] usb 1-1: Manufacturer: syz
[  162.468623][ T5911] usb 1-1: SerialNumber: syz
[  162.483334][ T5911] usb 1-1: config 0 descriptor??
[  162.484085][   T24] sierra 2-1:0.4: Sierra USB modem converter detected
[  162.496201][ T6536] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  162.496490][ T6536] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  162.500059][ T5911] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  162.504382][ T5911] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  162.510636][ T5911] scsi host1: microtekX6
[  162.613890][ T6530] tipc: Resetting bearer <eth:syzkaller0>
[  162.643592][   T24] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  162.691175][   T24] usb 2-1: USB disconnect, device number 9
[  162.699624][  T980] usb 4-1: USB disconnect, device number 14
[  162.727384][   T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  162.729256][ T6530] tipc: Disabling bearer <eth:syzkaller0>
[  162.739189][   T24] sierra 2-1:0.4: device disconnected
[  162.787003][  T980] usb 1-1: USB disconnect, device number 6
[  163.452235][   T24] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  163.652380][   T24] usb 2-1: No LPM exit latency info found, disabling LPM.
[  163.715373][   T24] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  163.766000][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  163.789865][   T24] usb 2-1: string descriptor 0 read error: -22
[  163.798812][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40
[  163.812303][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.301063][ T5911] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  164.362430][ T6574] 9pnet_fd: Insufficient options for proto=fd
[  164.374416][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.384762][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.255933][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.730887][  T977] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  165.911092][  T977] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  165.941715][  T977] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  165.978968][  T977] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  165.993938][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.019014][  T977] usb 3-1: Product: syz
[  166.037008][  T977] usb 3-1: Manufacturer: syz
[  166.056243][  T977] usb 3-1: SerialNumber: syz
[  166.088609][  T977] usb 3-1: config 0 descriptor??
[  166.105941][ T6577] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  166.125603][ T6577] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  166.258210][   T24] usbhid 2-1:1.0: can't add hid device: -71
[  166.355506][   T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  166.382675][ T6577] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  166.401078][ T6577] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  166.404248][   T24] usb 2-1: USB disconnect, device number 10
[  167.108167][ T5911] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  167.147339][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.191990][ T5911] usb 5-1: config 0 descriptor??
[  167.198542][ T5911] usb 5-1: can't set config #0, error -71
[  167.242287][ T5911] usb 5-1: USB disconnect, device number 9
[  167.736120][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  167.741066][  T977] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  167.768935][  T977] usb 3-1: USB disconnect, device number 14
[  167.930839][   T24] usb 1-1: device descriptor read/64, error -71
[  168.204326][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  168.401819][   T24] usb 1-1: device descriptor read/64, error -71
[  168.521557][   T24] usb usb1-port1: attempt power cycle
[  168.935341][ T6622] netlink: 'syz.2.172': attribute type 39 has an invalid length.
[  169.602948][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  169.641482][   T24] usb 1-1: device descriptor read/8, error -71
[  169.891034][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  169.992597][ T6626] lo speed is unknown, defaulting to 1000
[  170.014321][   T24] usb 1-1: device descriptor read/8, error -71
[  170.502631][ T6630] batadv1: entered promiscuous mode
[  170.701425][   T24] usb usb1-port1: unable to enumerate USB device
[  171.070405][ T6632] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.174'.
[  171.181511][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.174'.
[  171.697449][ T6644] netlink: 2 bytes leftover after parsing attributes in process `syz.4.177'.
[  171.905181][ T6654] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.178'.
[  172.196915][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'.
[  174.080881][ T5911] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  174.191076][ T6673] vxcan3: entered allmulticast mode
[  174.233637][ T5911] usb 5-1: config 5 has an invalid descriptor of length 32, skipping remainder of the config
[  174.261942][ T5911] usb 5-1: config 5 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  174.808159][ T5911] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  174.825017][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.840984][ T5911] usb 5-1: Product: syz
[  174.847032][ T5911] usb 5-1: Manufacturer: syz
[  174.859844][ T5911] usb 5-1: SerialNumber: syz
[  175.464195][ T6671] input: syz1 as /devices/virtual/input/input8
[  175.526531][ T5911] comedi comedi5: Wrong number of endpoints
[  175.534621][ T5911] ni6501 5-1:5.0: driver 'ni6501' failed to auto-configure device.
[  175.601926][ T5911] usb 5-1: USB disconnect, device number 10
[  175.856525][ T6685] lo speed is unknown, defaulting to 1000
[  176.050298][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.061611][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.870929][  T977] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  177.094068][  T977] usb 5-1: no configurations
[  177.098792][  T977] usb 5-1: can't read configurations, error -22
[  177.260859][  T977] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  177.441500][  T977] usb 5-1: no configurations
[  177.446307][  T977] usb 5-1: can't read configurations, error -22
[  177.477288][  T977] usb usb5-port1: attempt power cycle
[  178.012580][  T977] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  178.120636][  T977] usb 5-1: no configurations
[  178.163374][  T977] usb 5-1: can't read configurations, error -22
[  178.476640][  T977] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  178.663081][  T977] usb 5-1: no configurations
[  178.667786][  T977] usb 5-1: can't read configurations, error -22
[  178.723595][  T977] usb usb5-port1: unable to enumerate USB device
[  179.770889][ T6728] bond0: entered promiscuous mode
[  179.790144][ T6728] bond_slave_0: entered promiscuous mode
[  179.894899][ T6728] bond_slave_1: entered promiscuous mode
[  181.319298][ T5841] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  181.474025][ T5841] usb 5-1: Using ep0 maxpacket: 32
[  181.707762][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  181.788221][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  181.808946][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  181.932301][ T5841] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  181.941618][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.019078][ T5841] usb 5-1: config 0 descriptor??
[  182.056466][ T6746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  182.211010][ T5841] hub 5-1:0.0: USB hub found
[  183.275584][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'.
[  183.321285][ T5911] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  183.493026][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.204'.
[  183.571313][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  183.810163][ T5911] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  183.821050][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.833083][ T5911] usb 3-1: config 0 descriptor??
[  183.853922][ T5911] as10x_usb: device has been detected
[  183.860338][ T5911] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  183.894883][ T5911] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  183.930101][ T6782] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  183.962811][ T5911] as10x_usb: error during firmware upload part1
[  183.982850][ T5911] Registered device nBox DVB-T Dongle
[  184.053993][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.111376][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.230848][ T5911] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  184.542798][ T5911] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.560796][ T5911] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  184.580878][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.587783][ T5911] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  184.620783][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.642171][ T5911] usb 2-1: config 0 descriptor??
[  184.814564][ T5841] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  184.854869][ T5841] usbhid 5-1:0.0: can't add hid device: -71
[  184.873890][ T5841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  184.923789][ T5841] usb 5-1: USB disconnect, device number 15
[  185.058881][ T5911] kye 0003:0458:501A.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  185.084372][ T5911] kye 0003:0458:501A.0004: hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0
[  185.127280][ T5911] kye 0003:0458:501A.0004: tablet-enabling feature report not found
[  185.136943][ T5911] kye 0003:0458:501A.0004: tablet enabling failed
[  185.281111][ T5911] usb 2-1: USB disconnect, device number 11
[  186.315750][ T5841] usb 3-1: USB disconnect, device number 15
[  186.392995][ T5841] Unregistered device nBox DVB-T Dongle
[  186.398427][ T5841] as10x_usb: device has been disconnected
[  186.506644][ T6825] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  186.572614][ T6825] CIFS mount error: No usable UNC path provided in device string!
[  186.572614][ T6825] 
[  186.603655][ T6825] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  186.739018][ T6835] fuse: Unknown parameter 'rootode'
[  188.128136][ T6856] netlink: 'syz.2.233': attribute type 1 has an invalid length.
[  188.130332][ T6858] netlink: 'syz.2.233': attribute type 1 has an invalid length.
[  188.878459][ T6856] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  189.041864][ T6868] kAFS: unparsable volume name
[  190.184328][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.239'.
[  190.560953][ T6892] netlink: 96 bytes leftover after parsing attributes in process `syz.1.240'.
[  190.924973][ T6895] =======================================================
[  190.924973][ T6895] WARNING: The mand mount option has been deprecated and
[  190.924973][ T6895]          and is ignored by this kernel. Remove the mand
[  190.924973][ T6895]          option from the mount to silence this warning.
[  190.924973][ T6895] =======================================================
[  190.983215][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[  190.994239][ T6899] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  191.007980][ T6899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.033606][ T6899] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  191.054354][ T6899] capability: warning: `syz.0.243' uses deprecated v2 capabilities in a way that may be insecure
[  191.390794][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  191.556376][   T24] usb 2-1: device descriptor read/64, error -71
[  191.832494][   T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  191.890964][ T5820] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  191.990932][   T24] usb 2-1: device descriptor read/64, error -71
[  192.040930][ T5820] usb 1-1: Using ep0 maxpacket: 16
[  192.083651][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.105058][   T24] usb usb2-port1: attempt power cycle
[  192.114893][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.126434][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  192.139867][ T5820] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  192.162858][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.191227][ T5820] usb 1-1: config 0 descriptor??
[  192.194507][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'.
[  192.424146][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.449555][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.458051][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  192.493431][   T24] usb 2-1: device descriptor read/8, error -71
[  192.750163][  T980] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  192.802697][ T6931] fuse: Unknown parameter ''
[  192.890960][   T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  192.911930][   T24] usb 2-1: device descriptor read/8, error -71
[  193.033590][   T24] usb usb2-port1: unable to enumerate USB device
[  193.674952][ T6936] sctp: [Deprecated]: syz.3.254 (pid 6936) Use of int in maxseg socket option.
[  193.674952][ T6936] Use struct sctp_assoc_value instead
[  193.864447][ T6940] sctp: [Deprecated]: syz.4.255 (pid 6940) Use of int in max_burst socket option deprecated.
[  193.864447][ T6940] Use struct sctp_assoc_value instead
[  195.366539][ T5820] usbhid 1-1:0.0: can't add hid device: -71
[  195.376664][ T5820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  195.419147][ T5820] usb 1-1: USB disconnect, device number 11
[  195.880164][ T6959] lo speed is unknown, defaulting to 1000
[  196.340795][ T5820] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  196.501604][ T5820] usb 5-1: device descriptor read/64, error -71
[  197.300889][ T5820] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  197.423901][   T31] kauditd_printk_skb: 61 callbacks suppressed
[  197.423922][   T31] audit: type=1326 audit(1755420096.958:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  197.461715][ T5820] usb 5-1: device descriptor read/64, error -71
[  197.475983][   T31] audit: type=1326 audit(1755420096.998:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  197.515128][ T6961] lo speed is unknown, defaulting to 1000
[  197.541110][   T31] audit: type=1326 audit(1755420096.998:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  197.590932][ T6991] netlink: 52 bytes leftover after parsing attributes in process `syz.2.269'.
[  197.661316][   T31] audit: type=1326 audit(1755420096.998:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  198.051587][ T5820] usb usb5-port1: attempt power cycle
[  198.051652][   T31] audit: type=1326 audit(1755420096.998:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  198.057814][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'.
[  198.078788][    C1] vkms_vblank_simulate: vblank timer overrun
[  198.231800][   T31] audit: type=1326 audit(1755420096.998:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  198.260288][   T31] audit: type=1326 audit(1755420096.998:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  198.428796][   T31] audit: type=1326 audit(1755420097.008:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  198.485617][   T31] audit: type=1326 audit(1755420097.588:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  198.642333][ T5820] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  199.884881][   T31] audit: type=1326 audit(1755420097.588:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6984 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86018ebe9 code=0x7ffc0000
[  200.177949][ T5820] usb 5-1: device descriptor read/8, error -71
[  200.195781][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  200.210768][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  200.567665][ T7010] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  201.011640][ T7028] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.314248][ T7036] ubi31: attaching mtd0
[  201.827691][ T7036] ubi31: scanning is finished
[  201.832590][ T7036] ubi31: empty MTD device detected
[  201.912273][ T7036] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  201.919980][ T7036] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  201.929634][ T7036] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  201.936790][ T7036] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  201.944354][ T7036] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  201.951342][ T7036] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  201.959566][ T7036] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1369279750
[  201.969839][ T7036] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  201.981368][ T7042] ubi31: background thread "ubi_bgt31d" started, PID 7042
[  202.310123][ T7052] 9pnet_fd: Insufficient options for proto=fd
[  202.504476][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'.
[  202.568889][ T7062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.283'.
[  202.592528][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'.
[  203.054140][  T977] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  203.444701][ T7087] sp0: Synchronizing with TNC
[  203.583233][  T977] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  203.607090][  T977] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xCD, changing to 0x8D
[  203.677173][ T5820] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  203.851416][  T977] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 11971, setting to 1024
[  203.916567][  T977] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024
[  203.958031][  T977] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  203.983156][ T5820] usb 1-1: Using ep0 maxpacket: 16
[  204.178943][  T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.212540][ T5820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.228341][ T7069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  204.272109][ T5820] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.309119][  T977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  204.317361][ T5820] usb 1-1: config 0 interface 0 has no altsetting 0
[  204.327521][ T5820] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  204.341386][  T977] usb 5-1: invalid MIDI out EP 0
[  204.370486][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.443965][ T5820] usb 1-1: config 0 descriptor??
[  204.585746][  T977] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  204.609298][  T977] usb 5-1: USB disconnect, device number 20
[  204.936547][ T5841] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  204.945512][ T7105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.083197][ T5820] cougar 0003:060B:500A.0005: unexpected long global item
[  205.091222][ T5820] cougar 0003:060B:500A.0005: parse failed
[  205.097210][ T5820] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22
[  205.124901][ T5841] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  205.143329][ T5841] usb 2-1: config 0 has no interface number 0
[  205.149812][ T5841] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  205.150878][ T5820] usb 1-1: USB disconnect, device number 12
[  205.178267][ T5841] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  205.222433][ T5841] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79
[  205.234482][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.243907][ T5841] usb 2-1: Product: syz
[  205.259860][ T5841] usb 2-1: Manufacturer: syz
[  205.269866][ T5841] usb 2-1: SerialNumber: syz
[  205.291851][ T5841] usb 2-1: config 0 descriptor??
[  205.321405][ T5841] vmk80xx 2-1:0.255: driver 'vmk80xx' failed to auto-configure device.
[  205.358276][ T5841] vmk80xx 2-1:0.255: probe with driver vmk80xx failed with error -22
[  205.425674][  T977] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  205.523565][ T5844] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  205.528959][ T5841] usb 2-1: USB disconnect, device number 16
[  205.602941][  T977] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  205.612568][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.624375][  T977] usb 3-1: config 0 descriptor??
[  205.633859][  T977] cp210x 3-1:0.0: cp210x converter detected
[  205.850294][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.859692][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.211214][  T977] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  206.312425][  T977] cp210x 3-1:0.0: GPIO initialisation failed: -524
[  206.441366][ T5820] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  206.570195][  T977] usb 3-1: cp210x converter now attached to ttyUSB0
[  206.590465][  T977] usb 3-1: USB disconnect, device number 16
[  206.610892][ T5841] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  206.624418][  T977] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  206.641783][  T977] cp210x 3-1:0.0: device disconnected
[  206.721083][ T5820] usb 5-1: Using ep0 maxpacket: 32
[  206.729515][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  206.742605][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  206.754185][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  206.764621][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  206.776295][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  206.791183][ T5820] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  206.802264][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.810487][ T5820] usb 5-1: Product: syz
[  206.830545][ T5820] usb 5-1: Manufacturer: syz
[  206.846052][ T5820] usb 5-1: SerialNumber: syz
[  206.872154][ T5820] usb 5-1: config 0 descriptor??
[  207.000832][ T5841] usb 1-1: Using ep0 maxpacket: 32
[  207.011340][ T5841] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  207.031491][ T5841] usb 1-1: config 0 has an invalid interface number: 92 but max is 0
[  207.039752][ T5841] usb 1-1: config 0 has no interface number 0
[  207.071684][ T5841] usb 1-1: too many endpoints for config 0 interface 92 altsetting 176: 107, using maximum allowed: 30
[  207.851216][ T5155] Bluetooth: hci4: command 0x0405 tx timeout
[  207.861823][ T5841] usb 1-1: config 0 interface 92 altsetting 176 has 0 endpoint descriptors, different from the interface descriptor's value: 107
[  207.881175][ T5841] usb 1-1: config 0 interface 92 has no altsetting 0
[  207.890791][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -32
[  207.911578][ T5841] usb 1-1: config 0 has an invalid interface number: 92 but max is 0
[  207.953741][ T5841] usb 1-1: config 0 has no interface number 0
[  207.980179][ T5841] usb 1-1: too many endpoints for config 0 interface 92 altsetting 176: 107, using maximum allowed: 30
[  208.016222][ T7132] lo speed is unknown, defaulting to 1000
[  208.038728][ T5841] usb 1-1: config 0 interface 92 altsetting 176 has 0 endpoint descriptors, different from the interface descriptor's value: 107
[  208.080153][ T5841] usb 1-1: config 0 interface 92 has no altsetting 0
[  208.100373][ T5841] usb 1-1: config 0 has an invalid interface number: 92 but max is 0
[  208.106142][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[  208.127557][ T5841] usb 1-1: config 0 has no interface number 0
[  208.144438][ T5841] usb 1-1: too many endpoints for config 0 interface 92 altsetting 176: 107, using maximum allowed: 30
[  208.167356][ T5841] usb 1-1: config 0 interface 92 altsetting 176 has 0 endpoint descriptors, different from the interface descriptor's value: 107
[  208.212940][ T5841] usb 1-1: config 0 interface 92 has no altsetting 0
[  208.244907][ T5841] usb 1-1: config 0 has an invalid interface number: 92 but max is 0
[  208.267351][ T5841] usb 1-1: config 0 has no interface number 0
[  208.287023][ T5841] usb 1-1: too many endpoints for config 0 interface 92 altsetting 176: 107, using maximum allowed: 30
[  208.333224][ T5841] usb 1-1: config 0 interface 92 altsetting 176 has 0 endpoint descriptors, different from the interface descriptor's value: 107
[  208.373569][ T5841] usb 1-1: config 0 interface 92 has no altsetting 0
[  208.398653][ T5841] usb 1-1: config 0 has an invalid interface number: 92 but max is 0
[  208.430488][ T5841] usb 1-1: config 0 has no interface number 0
[  208.454097][ T5841] usb 1-1: too many endpoints for config 0 interface 92 altsetting 176: 107, using maximum allowed: 30
[  208.482289][ T5841] usb 1-1: config 0 interface 92 altsetting 176 has 0 endpoint descriptors, different from the interface descriptor's value: 107
[  208.517769][ T5841] usb 1-1: config 0 interface 92 has no altsetting 0
[  208.538835][ T5841] usb 1-1: config 0 has an invalid interface number: 92 but max is 0
[  208.562621][ T5841] usb 1-1: config 0 has no interface number 0
[  208.577426][ T5841] usb 1-1: too many endpoints for config 0 interface 92 altsetting 176: 107, using maximum allowed: 30
[  208.604177][ T5841] usb 1-1: config 0 interface 92 altsetting 176 has 0 endpoint descriptors, different from the interface descriptor's value: 107
[  208.628001][ T5841] usb 1-1: config 0 interface 92 has no altsetting 0
[  208.641821][ T5841] usb 1-1: config 0 has an invalid interface number: 92 but max is 0
[  208.655483][ T5841] usb 1-1: config 0 has no interface number 0
[  208.666114][ T5841] usb 1-1: too many endpoints for config 0 interface 92 altsetting 176: 107, using maximum allowed: 30
[  208.694448][ T5841] usb 1-1: config 0 interface 92 altsetting 176 has 0 endpoint descriptors, different from the interface descriptor's value: 107
[  208.725137][ T5841] usb 1-1: config 0 interface 92 has no altsetting 0
[  208.737949][ T5841] usb 1-1: config 0 has an invalid interface number: 92 but max is 0
[  208.751851][ T5841] usb 1-1: config 0 has no interface number 0
[  208.781036][ T5841] usb 1-1: too many endpoints for config 0 interface 92 altsetting 176: 107, using maximum allowed: 30
[  208.810815][ T5911] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  208.811628][ T5841] usb 1-1: config 0 interface 92 altsetting 176 has 0 endpoint descriptors, different from the interface descriptor's value: 107
[  208.880802][ T5841] usb 1-1: config 0 interface 92 has no altsetting 0
[  208.900794][ T5841] usb 1-1: string descriptor 0 read error: -71
[  208.907182][ T5841] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  208.937663][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -110
[  208.945971][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=30, SerialNumber=0
[  208.956232][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -32
[  208.963036][ T5911] usb 2-1: Invalid ep0 maxpacket: 64
[  209.042216][ T5841] usb 1-1: config 0 descriptor??
[  209.101211][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.108027][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.126016][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.132500][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.146299][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.152569][ T5911] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  209.164965][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.179856][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.192680][ T5841] usb 1-1: can't set config #0, error -71
[  209.206349][ T5841] usb 1-1: USB disconnect, device number 13
[  209.210944][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.219713][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.291502][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.306301][ T7153] lo speed is unknown, defaulting to 1000
[  209.311573][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.307'.
[  209.322681][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.307'.
[  209.345397][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.353316][ T5911] usb 2-1: Invalid ep0 maxpacket: 64
[  209.359189][ T5911] usb usb2-port1: attempt power cycle
[  209.374349][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.391298][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.403061][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.410207][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.417195][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.429679][ T5820] iforce 5-1:0.0: usb_submit_urb failed: -71
[  209.469690][ T5820] input input9: Timeout waiting for response from device.
[  209.500882][ T5841] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  209.650900][ T5841] usb 1-1: device descriptor read/64, error -71
[  209.786522][ T5820] usb 5-1: USB disconnect, device number 21
[  209.821753][ T5911] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  209.854032][ T5911] usb 2-1: Invalid ep0 maxpacket: 64
[  209.911281][ T5841] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  210.001013][ T5911] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  210.036196][ T5911] usb 2-1: Invalid ep0 maxpacket: 64
[  210.046484][ T5911] usb usb2-port1: unable to enumerate USB device
[  210.070879][ T5841] usb 1-1: device descriptor read/64, error -71
[  210.205190][ T5841] usb usb1-port1: attempt power cycle
[  210.581236][ T5841] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  210.621644][ T5841] usb 1-1: device descriptor read/8, error -71
[  211.074132][ T5841] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  211.108056][ T5841] usb 1-1: device descriptor read/8, error -71
[  211.305252][ T5841] usb usb1-port1: unable to enumerate USB device
[  211.981941][ T7168] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  212.050837][  T980] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  212.233954][  T980] usb 4-1: device descriptor read/64, error -71
[  212.488455][ T7186] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  212.761133][  T980] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  212.830858][ T5820] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  212.911132][  T980] usb 4-1: device descriptor read/64, error -71
[  212.992777][ T5820] usb 5-1: Using ep0 maxpacket: 8
[  213.031155][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  213.031548][  T980] usb usb4-port1: attempt power cycle
[  213.058089][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  213.072967][ T7191] netlink: 'syz.2.317': attribute type 1 has an invalid length.
[  213.111529][ T5820] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  213.134273][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.177184][ T5820] usb 5-1: Product: syz
[  213.198333][ T5820] usb 5-1: Manufacturer: syz
[  213.210960][ T5820] usb 5-1: SerialNumber: syz
[  213.238687][ T5820] usb 5-1: config 0 descriptor??
[  213.247232][ T7191] 8021q: adding VLAN 0 to HW filter on device bond1
[  213.352860][ T7193] bond1: (slave gretap1): making interface the new active one
[  213.385210][ T7193] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  213.430883][  T980] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  213.477287][  T980] usb 4-1: device descriptor read/8, error -71
[  213.609682][ T7194] bond1 (unregistering): (slave gretap1): Releasing active interface
[  213.628763][ T7194] bond1 (unregistering): Released all slaves
[  213.731848][  T980] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  213.743827][   T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  213.782627][  T980] usb 4-1: device descriptor read/8, error -71
[  213.812707][   T43] usb 5-1: USB disconnect, device number 22
[  213.902539][  T980] usb usb4-port1: unable to enumerate USB device
[  213.915140][   T24] usb 2-1: Using ep0 maxpacket: 8
[  213.925415][   T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  213.942485][   T24] usb 2-1: config 179 has no interface number 0
[  213.949046][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  213.963404][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  213.980183][   T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  214.000655][   T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  214.020449][   T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  214.038546][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.056122][ T7201] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  214.921767][ T5820] usb 2-1: USB disconnect, device number 21
[  214.921777][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  214.940789][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  215.380816][  T977] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  215.544069][  T977] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  215.590813][  T977] usb 1-1: config 0 has no interface number 0
[  215.608039][  T977] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  215.719701][  T977] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  215.756459][  T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.800788][  T977] usb 1-1: Product: syz
[  215.805262][  T977] usb 1-1: Manufacturer: syz
[  215.809917][  T977] usb 1-1: SerialNumber: syz
[  215.857478][  T977] usb 1-1: config 0 descriptor??
[  216.099152][  T977] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  216.133877][  T977] keyspan 1-1:0.133: unsupported endpoint type 0
[  216.187547][  T977] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  216.230934][  T977] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  216.238942][  T977] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  216.358880][  T977] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  216.408322][  T977] usb 1-1: USB disconnect, device number 18
[  216.480773][  T980] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  216.922877][  T977] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  216.961242][  T977] keyspan 1-1:0.133: device disconnected
[  217.081011][  T980] usb 3-1: device descriptor read/64, error -71
[  217.472377][  T980] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  217.632662][  T980] usb 3-1: device descriptor read/64, error -71
[  217.791134][  T980] usb usb3-port1: attempt power cycle
[  217.891189][ T5820] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  218.180784][ T5820] usb 1-1: Using ep0 maxpacket: 16
[  218.189298][ T5820] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  218.210748][ T5820] usb 1-1: config 1 has no interface number 1
[  218.217016][ T5820] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  218.409713][ T7283] netlink: 'syz.3.341': attribute type 3 has an invalid length.
[  219.091501][  T980] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  219.111494][  T980] usb 3-1: device descriptor read/8, error -71
[  219.169936][ T5820] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  219.200879][ T5820] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  219.216256][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.252726][ T5820] usb 1-1: Product: syz
[  219.257282][ T5820] usb 1-1: Manufacturer: syz
[  219.262184][ T5820] usb 1-1: SerialNumber: syz
[  219.349403][ T7285] capability: warning: `syz.4.342' uses 32-bit capabilities (legacy support in use)
[  219.400851][  T977] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  219.433205][  T980] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  219.540851][  T977] usb 4-1: device descriptor read/64, error -71
[  219.797001][  T980] usb 3-1: device not accepting address 20, error -71
[  219.824640][  T980] usb usb3-port1: unable to enumerate USB device
[  220.260760][  T977] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  220.513208][  T977] usb 4-1: device descriptor read/64, error -71
[  220.631594][  T977] usb usb4-port1: attempt power cycle
[  220.906819][ T7301] xt_CT: You must specify a L4 protocol and not use inversions on it
[  220.991067][  T977] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  221.381075][  T977] usb 4-1: device not accepting address 22, error -71
[  221.459221][ T7311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'.
[  221.468554][ T7311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'.
[  221.647636][ T7313] bridge1: the hash_elasticity option has been deprecated and is always 16
[  221.821220][ T5820] usb 1-1: found format II with max.bitrate = 2, frame size=30167
[  221.841234][ T5820] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  221.870782][ T5911] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  221.899024][ T5820] usb 1-1: USB disconnect, device number 19
[  222.041020][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  222.050428][ T5911] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  222.065216][ T5911] usb 3-1: config 0 has no interface number 0
[  222.075445][ T5911] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  222.085041][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.093270][ T5911] usb 3-1: Product: syz
[  222.098190][ T5911] usb 3-1: Manufacturer: syz
[  222.103406][ T5911] usb 3-1: SerialNumber: syz
[  222.112327][ T5911] usb 3-1: config 0 descriptor??
[  222.122114][ T5911] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  222.131441][ T5911] usb 3-1: selecting invalid altsetting 1
[  222.137348][ T5911] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  222.178319][ T5911] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  222.201596][ T5911] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  222.220980][ T5911] usb 3-1: media controller created
[  222.265195][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  222.480851][ T5820] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  222.745630][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.821002][ T7326] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[  222.858179][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.941141][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  223.153496][ T5820] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  223.180533][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.209369][ T5820] usb 1-1: config 0 descriptor??
[  223.861470][ T7315] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  224.137004][ T5911] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  224.158827][ T5820] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  224.180894][ T5911] zl10353_read_register: readreg error (reg=127, ret==-32)
[  224.928017][ T5911] usb 3-1: USB disconnect, device number 21
[  225.012281][ T5924] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  225.172753][ T5924] usb 2-1: Using ep0 maxpacket: 16
[  225.190209][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11
[  225.206307][ T5924] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  225.218277][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.239019][ T5924] usb 2-1: config 0 descriptor??
[  225.479824][ T5820] usb 1-1: reset high-speed USB device number 20 using dummy_hcd
[  225.661823][ T5820] usb 1-1: device descriptor read/64, error -32
[  225.685956][ T5924] hid-alps 0003:044E:120B.0007: hidraw1: USB HID v0.06 Device [HID 044e:120b] on usb-dummy_hcd.1-1/input0
[  225.708164][ T7361] fuse: root generation should be zero
[  225.716630][ T7365] netlink: 'syz.2.363': attribute type 29 has an invalid length.
[  225.749039][ T7365] netlink: 'syz.2.363': attribute type 29 has an invalid length.
[  225.765088][ T7365] netlink: 500 bytes leftover after parsing attributes in process `syz.2.363'.
[  225.777093][ T7365] unsupported nla_type 58
[  225.872530][   T43] usb 2-1: USB disconnect, device number 22
[  225.931909][ T5820] usb 1-1: reset high-speed USB device number 20 using dummy_hcd
[  225.945135][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'.
[  225.961059][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'.
[  226.114144][ T5820] usb 1-1: device descriptor read/64, error -32
[  226.370935][ T5820] usb 1-1: reset high-speed USB device number 20 using dummy_hcd
[  226.441839][ T5820] usb 1-1: device descriptor read/8, error -71
[  228.238946][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  228.239275][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  228.245287][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  228.252774][ T5155] Bluetooth: hci3: command 0x0406 tx timeout
[  228.261611][ T7383] fscrypt: Error allocating hmac(sha512): -2
[  228.445273][ T5911] usb 1-1: USB disconnect, device number 20
[  228.612136][ T5925] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  228.788239][ T5925] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.896784][ T5925] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.942653][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0
[  228.978484][ T5925] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  229.090929][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.140866][ T5925] usb 2-1: config 0 descriptor??
[  229.486954][ T5925] usbhid 2-1:0.0: can't add hid device: -71
[  229.505572][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  229.523277][ T5925] usb 2-1: USB disconnect, device number 23
[  229.753126][ T7433] Invalid source name
[  229.757278][ T7433] UBIFS error (pid: 7433): cannot open "usrquota", error -22
[  232.681086][ T7452] netlink: 64 bytes leftover after parsing attributes in process `syz.0.384'.
[  233.433721][ T7462] overlayfs: failed to resolve './file0': -2
[  233.471150][ T5924] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  233.623056][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.632675][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[  233.642297][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'.
[  233.650794][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  233.685010][ T5924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  233.692597][ T7467] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  233.709637][ T7467] loop2: detected capacity change from 0 to 7
[  233.717979][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.740980][ T7467] Dev loop2: unable to read RDB block 7
[  233.746802][ T7467]  loop2: unable to read partition table
[  233.752883][ T7467] loop2: partition table beyond EOD, truncated
[  233.759205][ T7467] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  233.784592][ T5924] usb 3-1: Product: syz
[  233.805860][ T7472] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  233.813786][ T5924] usb 3-1: Manufacturer: syz
[  233.818459][ T5924] usb 3-1: SerialNumber: syz
[  233.876099][ T7472] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  234.073425][ T5924] usb 3-1: 0:2 : does not exist
[  234.102802][ T5924] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  234.175938][ T5924] usb 3-1: USB disconnect, device number 22
[  236.363903][ T5925] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  236.612975][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.649864][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.682389][ T7505] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  236.690025][ T5925] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  236.716728][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.737374][ T5925] usb 5-1: config 0 descriptor??
[  236.941422][ T7514] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  237.447423][ T5925] usbhid 5-1:0.0: can't add hid device: -71
[  238.104811][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  238.115436][ T5925] usb 5-1: USB disconnect, device number 23
[  239.337604][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.408'.
[  239.422754][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.408'.
[  239.431753][ T7533] nbd: device at index 64 is going down
[  239.507730][ T7525] syz.0.406: vmalloc error: size 85983232, failed to allocated page array size 167936, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  239.593663][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.0.406 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  239.593688][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  239.593704][ T7525] Call Trace:
[  239.593715][ T7525]  <TASK>
[  239.593722][ T7525]  dump_stack_lvl+0x189/0x250
[  239.593757][ T7525]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.593776][ T7525]  ? __pfx__printk+0x10/0x10
[  239.593797][ T7525]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  239.593818][ T7525]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  239.593839][ T7525]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  239.593860][ T7525]  warn_alloc+0x214/0x310
[  239.593884][ T7525]  ? __pfx_warn_alloc+0x10/0x10
[  239.593917][ T7525]  ? __get_vm_area_node+0x28f/0x300
[  239.593934][ T7525]  ? drm_property_create_blob+0x65/0x300
[  239.593962][ T7525]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  239.593979][ T7525]  ? __kasan_slab_free+0x62/0x70
[  239.594014][ T7525]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  239.594036][ T7525]  ? rcu_is_watching+0x15/0xb0
[  239.594055][ T7525]  ? drm_property_create_blob+0x65/0x300
[  239.594078][ T7525]  ? drm_property_create_blob+0x65/0x300
[  239.594101][ T7525]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  239.594118][ T7525]  ? drm_property_create_blob+0x65/0x300
[  239.594143][ T7525]  ? drm_dev_enter+0x49/0x150
[  239.594161][ T7525]  ? acpi_ev_finish_gpe+0x3e/0xd0
[  239.594183][ T7525]  drm_property_create_blob+0x65/0x300
[  239.594212][ T7525]  drm_mode_createblob_ioctl+0xbf/0x400
[  239.594247][ T7525]  drm_ioctl_kernel+0x2cf/0x390
[  239.594266][ T7525]  ? __pfx_drm_mode_createblob_ioctl+0x10/0x10
[  239.594292][ T7525]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  239.594316][ T7525]  drm_ioctl+0x67f/0xb10
[  239.594332][ T7525]  ? smk_tskacc+0x2fc/0x370
[  239.594357][ T7525]  ? __pfx_drm_mode_createblob_ioctl+0x10/0x10
[  239.594386][ T7525]  ? __pfx_drm_ioctl+0x10/0x10
[  239.594412][ T7525]  ? __fget_files+0x2a/0x420
[  239.594433][ T7525]  ? bpf_lsm_file_ioctl+0x9/0x20
[  239.594451][ T7525]  ? __pfx_drm_ioctl+0x10/0x10
[  239.594467][ T7525]  __se_sys_ioctl+0xfc/0x170
[  239.594493][ T7525]  do_syscall_64+0xfa/0x3b0
[  239.594511][ T7525]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.594532][ T7525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.594548][ T7525]  ? clear_bhb_loop+0x60/0xb0
[  239.594568][ T7525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.594583][ T7525] RIP: 0033:0x7fd8b458ebe9
[  239.594602][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.594616][ T7525] RSP: 002b:00007fd8b5335038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.594633][ T7525] RAX: ffffffffffffffda RBX: 00007fd8b47b5fa0 RCX: 00007fd8b458ebe9
[  239.594645][ T7525] RDX: 00002000000000c0 RSI: 00000000c01064bd RDI: 0000000000000003
[  239.594655][ T7525] RBP: 00007fd8b4611e19 R08: 0000000000000000 R09: 0000000000000000
[  239.594665][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.594674][ T7525] R13: 00007fd8b47b6038 R14: 00007fd8b47b5fa0 R15: 00007ffeb70f8868
[  239.594697][ T7525]  </TASK>
[  239.597015][ T7525] Mem-Info:
[  239.790899][  T980] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  239.820483][ T7525] active_anon:3122 inactive_anon:7736 isolated_anon:0
[  239.820483][ T7525]  active_file:13679 inactive_file:38728 isolated_file:0
[  239.820483][ T7525]  unevictable:768 dirty:119 writeback:0
[  239.820483][ T7525]  slab_reclaimable:10754 slab_unreclaimable:99135
[  239.820483][ T7525]  mapped:33463 shmem:7256 pagetables:1147
[  239.820483][ T7525]  sec_pagetables:0 bounce:0
[  239.820483][ T7525]  kernel_misc_reclaimable:0
[  239.820483][ T7525]  free:1295623 free_pcp:18657 free_cma:0
[  240.018791][ T7525] Node 0 active_anon:12488kB inactive_anon:31744kB active_file:54516kB inactive_file:154912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134652kB dirty:472kB writeback:0kB shmem:28288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12016kB pagetables:4436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  240.082668][ T7525] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  240.121164][ T7525] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  240.163014][  T980] usb 5-1: device descriptor read/64, error -71
[  240.316750][ T7525] lowmem_reserve[]: 0 2500 2502 2502 2502
[  240.382988][ T7525] Node 0 DMA32 free:1264032kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12484kB inactive_anon:37556kB active_file:52752kB inactive_file:154852kB unevictable:1536kB writepending:480kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:50304kB local_pcp:22752kB free_cma:0kB
[  240.418223][  T980] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  240.478052][ T7525] lowmem_reserve[]: 0 0 1 1 1
[  240.483144][ T7525] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1764kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  240.517558][ T7525] lowmem_reserve[]: 0 0 0 0 0
[  240.522575][ T7525] Node 1 Normal free:3897600kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20544kB local_pcp:8736kB free_cma:0kB
[  240.573915][ T7525] lowmem_reserve[]: 0 0 0 0 0
[  240.578721][ T7525] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  240.600876][ T7525] Node 0 DMA32: 30*4kB (UE) 655*8kB (U) 73*16kB (UME) 651*32kB (UME) 242*64kB (UME) 104*128kB (UME) 44*256kB (UM) 25*512kB (UM) 8*1024kB (UE) 4*2048kB (UM) 285*4096kB (M) = 1263968kB
[  240.622542][  T980] usb 5-1: device descriptor read/64, error -71
[  240.685516][ T7525] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  240.711778][ T7525] Node 1 Normal: 220*4kB (UM) 54*8kB (UME) 50*16kB (UME) 110*32kB (UME) 26*64kB (UME) 7*128kB (UM) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3897600kB
[  240.732334][  T980] usb usb5-port1: attempt power cycle
[  240.774777][ T7525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.821652][ T7525] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.849859][ T7525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  240.879345][ T7525] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  240.910784][ T7525] 61048 total pagecache pages
[  240.924900][ T7525] 0 pages in swap cache
[  240.935662][ T7525] Free swap  = 124996kB
[  240.946899][ T7525] Total swap = 124996kB
[  240.960524][ T7525] 2097051 pages RAM
[  240.973796][ T7525] 0 pages HighMem/MovableOnly
[  240.986289][ T7525] 424695 pages reserved
[  240.995145][ T7525] 0 pages cma reserved
[  241.080810][  T980] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  241.111762][  T980] usb 5-1: device descriptor read/8, error -71
[  241.381368][ T7556] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  241.600822][   T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  241.756644][   T43] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  241.773285][   T43] usb 2-1: New USB device strings: Mfr=1, Product=51, SerialNumber=161
[  241.806510][   T43] usb 2-1: Product: syz
[  241.830839][   T43] usb 2-1: Manufacturer: syz
[  241.835583][   T43] usb 2-1: SerialNumber: syz
[  241.876500][   T43] usb 2-1: config 0 descriptor??
[  241.897124][   T43] usb 2-1: interface 1 not found
[  241.930807][   T24] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[  241.952597][ T7573] 9pnet_fd: Insufficient options for proto=fd
[  242.093304][   T24] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  242.110767][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.118851][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.138123][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.157675][   T24] usb 1-1: config 0 descriptor??
[  242.162464][ T5924] usb 2-1: USB disconnect, device number 24
[  242.203119][ T7576] lo speed is unknown, defaulting to 1000
[  243.617823][ T7590] usb usb8: usbfs: process 7590 (syz.4.422) did not claim interface 0 before use
[  244.798539][   T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  244.815818][   T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  245.001197][   T24] asix 1-1:0.0: probe with driver asix failed with error -71
[  245.042762][   T24] usb 1-1: USB disconnect, device number 21
[  245.827096][ T7633] netlink: 48 bytes leftover after parsing attributes in process `syz.0.433'.
[  245.980957][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  246.052378][ T7640] binder: BINDER_SET_CONTEXT_MGR already set
[  246.058915][ T7640] binder: 7637:7640 ioctl 4018620d 2000000002c0 returned -16
[  246.177367][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.290160][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.366405][ T5925] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  246.463539][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.790289][ T5925] usb 4-1: config 0 descriptor??
[  247.268538][ T7654] fuse: Unknown parameter '000000000000000000040x0000000000000004'
[  247.573324][ T5925] hid-retrode 0003:0403:97C1.0008: item fetching failed at offset 5/7
[  247.801958][ T5925] hid-retrode 0003:0403:97C1.0008: probe with driver hid-retrode failed with error -22
[  248.129013][ T7672] fuse: Unknown parameter 'subj_type'
[  248.159536][ T7673] tty tty20: ldisc open failed (-12), clearing slot 19
[  248.298064][   T43] usb 4-1: USB disconnect, device number 24
[  248.310996][ T5925] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  248.338839][ T7672] netlink: 'syz.2.445': attribute type 1 has an invalid length.
[  248.347163][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'.
[  248.360889][  T980] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  248.451055][ T5925] usb 5-1: device descriptor read/64, error -71
[  248.512829][  T980] usb 3-1: device descriptor read/64, error -71
[  248.538365][ T7683] Sensor B: =================  START STATUS  =================
[  248.547367][ T7683] Sensor B: Test Pattern: 75% Colorbar
[  248.554685][ T7683] Sensor B: Show Information: All
[  248.560183][ T7683] Sensor B: Vertical Flip: false
[  248.571369][ T7683] Sensor B: Horizontal Flip: false
[  248.578349][ T7683] Sensor B: Brightness: 128
[  248.584783][ T7683] Sensor B: Contrast: 128
[  248.589408][ T7683] Sensor B: Hue: 0
[  248.594587][ T7683] Sensor B: Saturation: 128
[  248.599425][ T7683] Sensor B: ==================  END STATUS  ==================
[  248.704664][ T5925] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  248.753268][  T980] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  248.841006][ T5925] usb 5-1: device descriptor read/64, error -71
[  248.867144][ T7695] xt_hashlimit: max too large, truncated to 1048576
[  248.890809][  T980] usb 3-1: device descriptor read/64, error -71
[  248.998765][ T5925] usb usb5-port1: attempt power cycle
[  249.370953][ T5925] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  250.192536][  T980] usb usb3-port1: attempt power cycle
[  250.223175][ T5925] usb 5-1: device descriptor read/8, error -71
[  250.704831][ T5925] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  251.098956][  T980] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  251.215197][ T5925] usb 5-1: device descriptor read/8, error -71
[  251.361775][ T5841] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  251.372543][  T980] usb 3-1: device descriptor read/8, error -71
[  251.433617][ T7714] netlink: 36 bytes leftover after parsing attributes in process `syz.2.459'.
[  251.462892][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'.
[  251.472109][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.459'.
[  251.489955][ T5925] usb usb5-port1: unable to enumerate USB device
[  251.540622][ T5841] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  251.565984][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.582263][ T5841] usb 1-1: Product: syz
[  251.586808][ T5841] usb 1-1: Manufacturer: syz
[  251.591654][ T5841] usb 1-1: SerialNumber: syz
[  251.600029][ T5841] usb 1-1: config 0 descriptor??
[  251.794206][ T7735] xt_l2tp: wrong L2TP version: 0
[  251.825015][ T5841] usb 1-1: ignoring: probably an ADSL modem
[  251.891004][  T980] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  251.976674][  T980] usb 3-1: Using ep0 maxpacket: 16
[  252.035420][  T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.042824][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.055489][  T980] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  252.091766][ T5925] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  252.121339][  T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.127425][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.317595][  T980] usb 3-1: config 0 descriptor??
[  252.352665][ T5925] usb 4-1: Using ep0 maxpacket: 16
[  252.518898][  T980] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10
[  252.528898][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.567829][ T5925] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  252.576584][ T7729] loop6: detected capacity change from 0 to 2560
[  252.578903][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.600124][ T5841] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  252.608445][ T5925] usb 4-1: config 0 descriptor??
[  252.614591][ T7729] buffer_io_error: 7 callbacks suppressed
[  252.614611][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.630340][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.654897][ T5841] usb 1-1: USB disconnect, device number 22
[  252.655924][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.682916][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.698038][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.706768][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.726319][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.742388][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.750409][ T7729] ldm_validate_partition_table(): Disk read failed.
[  252.824796][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.866635][ T7746] gtp0: entered promiscuous mode
[  252.871434][ T5925] kye 0003:0458:5016.0009: control desc unexpectedly large
[  252.892033][ T7746] gtp0: entered allmulticast mode
[  252.910407][ T7729] Buffer I/O error on dev loop6, logical block 0, async page read
[  252.931544][ T7729] Dev loop6: unable to read RDB block 0
[  252.942579][ T5925] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0009/input/input11
[  252.944536][ T7729]  loop6: unable to read partition table
[  253.035556][ T7752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'.
[  253.206671][ T7729] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  253.221387][ T5924] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  253.250538][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.615399][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.642316][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.652637][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.674952][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.683385][ T5924] usb 5-1: device descriptor read/64, error -71
[  253.706848][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.260845][ T5924] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  254.400891][ T5924] usb 5-1: device descriptor read/64, error -71
[  254.521034][ T5924] usb usb5-port1: attempt power cycle
[  254.865848][ T5190] bcm5974 3-1:0.0: could not read from device
[  254.881766][ T5190] bcm5974 3-1:0.0: could not read from device
[  254.898030][  T980] usb 3-1: USB disconnect, device number 26
[  254.954199][ T5925] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0009/input/input12
[  255.108855][ T5925] kye 0003:0458:5016.0009: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0
[  255.183283][ T5841] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  255.410473][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.840768][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.926851][ T5841] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  255.976323][ T5925] usb 4-1: USB disconnect, device number 25
[  256.008778][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.067242][ T5841] usb 2-1: config 0 descriptor??
[  256.572397][ T5841] usbhid 2-1:0.0: can't add hid device: -71
[  256.595337][ T5841] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  256.641197][ T5841] usb 2-1: USB disconnect, device number 25
[  257.110982][ T5925] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  257.280855][ T5925] usb 1-1: Using ep0 maxpacket: 8
[  257.295662][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.309208][ T5925] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  257.325405][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.339389][ T5925] usb 1-1: config 0 descriptor??
[  257.353783][ T5925] gspca_main: vc032x-2.14.0 probing 046d:0892
[  258.012322][ T7827] 9pnet_fd: p9_fd_create_tcp (7827): problem connecting socket to 127.0.0.1
[  258.768454][ T5925] gspca_vc032x: reg_r err -110
[  258.782920][ T5925] vc032x 1-1:0.0: probe with driver vc032x failed with error -110
[  258.831040][ T5911] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  258.846034][ T5841] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  259.222640][ T5911] usb 2-1: device descriptor read/64, error -71
[  259.333196][ T5841] usb 5-1: Using ep0 maxpacket: 32
[  259.405876][ T5841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[  259.572301][ T5841] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  259.573567][ T5911] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  259.671325][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.679414][ T5841] usb 5-1: Product: syz
[  259.701143][ T5841] usb 5-1: Manufacturer: syz
[  259.705927][ T5841] usb 5-1: SerialNumber: syz
[  259.723743][ T5841] usb 5-1: config 0 descriptor??
[  259.730075][ T7822] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  259.748592][ T5841] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  259.791030][ T5911] usb 2-1: device descriptor read/64, error -71
[  259.827697][ T7836] Invalid source name
[  259.831850][ T7836] UBIFS error (pid: 7836): cannot open "/dev/sg0", error -22
[  259.838197][ T7836] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  259.860344][ T7836] Invalid source name
[  259.867835][ T7836] UBIFS error (pid: 7836): cannot open "/dev/sg0", error -22
[  259.901261][ T5911] usb usb2-port1: attempt power cycle
[  260.048876][ T7841] tc_dump_action: action bad kind
[  260.082981][ T7841] netlink: 'syz.4.484': attribute type 10 has an invalid length.
[  260.091220][ T7841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.484'.
[  260.104466][ T7841] dummy0: entered promiscuous mode
[  260.128323][ T7841] bridge0: port 1(dummy0) entered blocking state
[  260.138212][ T7841] bridge0: port 1(dummy0) entered disabled state
[  260.155668][ T7841] dummy0: entered allmulticast mode
[  260.343695][ T5841] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  260.419377][ T5911] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  260.611622][ T5911] usb 2-1: device descriptor read/8, error -71
[  260.627218][  T980] usb 5-1: USB disconnect, device number 35
[  261.410272][  T977] usb 1-1: USB disconnect, device number 23
[  261.695139][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  261.702030][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  262.914498][ T7852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  263.541146][   T43] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  263.570750][ T5841] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  263.601617][  T980] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  263.724645][   T43] usb 5-1: not running at top speed; connect to a high speed hub
[  263.740893][  T980] usb 2-1: device descriptor read/64, error -71
[  263.760337][ T5841] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  263.771770][   T43] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  263.808438][ T5841] usb 3-1: config 0 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  263.824691][   T43] usb 5-1: config 1 interface 0 has no altsetting 0
[  263.831830][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0
[  263.847007][   T43] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.40
[  263.860595][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.876377][ T5841] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  263.888174][   T43] usb 5-1: Product: ࠁ
[  263.892854][   T43] usb 5-1: SerialNumber: ᐊ
[  263.897667][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.919753][ T7875] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  263.935747][ T5841] usb 3-1: config 0 descriptor??
[  263.953641][ T5841] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  264.011604][  T980] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  264.065540][ T7895] fuse: Unknown parameter '���9k���}
Q��YϪ'
[  264.161903][  T980] usb 2-1: device descriptor read/64, error -71
[  264.185525][ T7898] tmpfs: Bad value for 'mpol'
[  264.293161][  T980] usb usb2-port1: attempt power cycle
[  264.353261][ T7875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.363688][ T7875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.550516][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.498'.
[  264.579395][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'.
[  264.588853][ T7875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.597853][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'.
[  264.598416][ T7875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.625956][ T7875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.649326][ T7875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.658567][  T980] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  264.677883][   T43] usbhid 5-1:1.0: can't add hid device: -71
[  264.687274][  T980] usb 2-1: device descriptor read/8, error -71
[  264.694461][   T43] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  264.705859][   T43] usb 5-1: USB disconnect, device number 36
[  264.930843][  T980] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  264.942650][  T977] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  264.954076][  T980] usb 2-1: device descriptor read/8, error -71
[  265.073584][  T980] usb usb2-port1: unable to enumerate USB device
[  265.115829][  T977] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf
[  265.125769][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.134313][  T977] usb 4-1: Product: syz
[  265.138801][  T977] usb 4-1: Manufacturer: syz
[  265.144082][  T977] usb 4-1: SerialNumber: syz
[  265.151470][  T977] usb 4-1: config 0 descriptor??
[  265.160156][  T977] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now attached
[  265.243053][   T31] kauditd_printk_skb: 11 callbacks suppressed
[  265.243074][   T31] audit: type=1326 audit(1755420164.778:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7917 comm="syz.4.509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda5758ebe9 code=0x0
[  265.359409][  T977] usb 4-1: USB disconnect, device number 26
[  265.369487][  T977] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now disconnected
[  266.606574][  T977] usb 3-1: USB disconnect, device number 28
[  267.130107][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.516'.
[  267.489325][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[  267.812043][ T7958] Invalid ELF header magic: != ELF
[  270.333169][ T7968] C: renamed from lo (while UP)
[  270.749562][ T7968] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  270.817204][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'.
[  270.828645][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.520'.
[  271.207623][ T7988] comedi comedi3: 8255: I/O port conflict (0x10003,4)
[  271.218147][  T980] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  271.238787][ T7988] comedi comedi3: 8255: I/O port conflict (0x10000,4)
[  271.250778][   T43] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  271.269705][ T7988] comedi comedi3: 8255: I/O port conflict (0x7f,4)
[  271.307738][ T7988] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  271.317160][ T7988] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  271.333157][ T7988] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  271.380815][  T980] usb 4-1: Using ep0 maxpacket: 8
[  271.395344][  T980] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  271.411302][   T43] usb 3-1: Using ep0 maxpacket: 16
[  271.420850][  T980] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  271.455073][   T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  271.470383][  T980] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8224, setting to 1024
[  271.491211][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  271.506583][  T980] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  271.523662][   T43] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  271.533256][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.541567][  T980] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.561058][   T43] usb 3-1: Product: syz
[  271.570314][   T43] usb 3-1: Manufacturer: syz
[  271.580957][ T7741] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  271.600870][  T980] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  271.622324][   T43] usb 3-1: SerialNumber: syz
[  271.634278][  T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.655731][   T43] usb 3-1: config 0 descriptor??
[  271.731757][   T43] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  271.741374][   T43] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  271.799142][ T7741] usb 1-1: Using ep0 maxpacket: 8
[  271.808528][ T7741] usb 1-1: config 0 has an invalid interface number: 186 but max is 0
[  271.820936][ T7741] usb 1-1: config 0 has no interface number 0
[  271.923322][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'.
[  271.961177][ T7977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.524'.
[  272.079114][  T980] usb 4-1: GET_CAPABILITIES returned 0
[  272.087027][  T980] usbtmc 4-1:16.0: can't read capabilities
[  272.093124][ T7741] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  272.115241][ T7741] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  272.127798][ T7741] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  272.141912][   T43] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  272.149258][ T7741] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  272.162968][   T43] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  272.178008][   T43] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  272.186546][   T43] em28xx 3-1:0.0: No AC97 audio processor
[  272.187817][ T7741] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  272.221441][ T7741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.229810][ T7741] usb 1-1: Product: syz
[  272.237399][ T7741] usb 1-1: Manufacturer: syz
[  272.310403][   T43] usb 3-1: USB disconnect, device number 29
[  272.319867][ T7741] usb 1-1: SerialNumber: syz
[  273.142611][   T43] em28xx 3-1:0.0: Disconnecting em28xx
[  273.264280][ T7741] usb 1-1: config 0 descriptor??
[  273.452611][   T43] em28xx 3-1:0.0: Freeing device
[  274.217901][ T7741] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1
[  275.336018][ T8019] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  275.453735][   T43] usb 4-1: USB disconnect, device number 27
[  275.486904][ T5911] usb 1-1: USB disconnect, device number 24
[  275.790939][ T7741] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  276.105836][ T7741] usb 2-1: config 0 has an invalid interface number: 200 but max is 0
[  277.323233][ T7741] usb 2-1: config 0 has no interface number 0
[  277.361506][ T7741] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  277.388042][ T7741] usb 2-1: config 0 interface 200 has no altsetting 0
[  277.400167][ T7741] usb 2-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  277.420573][ T7741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.447805][ T7741] usb 2-1: Product: syz
[  277.474911][ T7741] usb 2-1: Manufacturer: syz
[  277.479761][ T7741] usb 2-1: SerialNumber: syz
[  277.501140][ T7741] usb 2-1: config 0 descriptor??
[  277.698652][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'.
[  277.741191][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'.
[  279.088716][ T7741] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input13
[  279.128106][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'.
[  279.219433][ T7741] usb 2-1: USB disconnect, device number 34
[  279.420544][ T8062] xt_TPROXY: Can be used only with -p tcp or -p udp
[  279.776771][ T8067] C: renamed from lo (while UP)
[  280.521755][ T8067] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  281.258740][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'.
[  281.267987][ T8078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.549'.
[  281.908264][ T8090] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  282.200939][   T43] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  282.364929][   T43] usb 2-1: unable to get BOS descriptor or descriptor too short
[  282.393058][ T7741] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  282.520427][   T43] usb 2-1: unable to read config index 0 descriptor/start: -71
[  282.659031][   T43] usb 2-1: can't read configurations, error -71
[  282.755691][ T8109] veth1_macvtap: left promiscuous mode
[  282.761617][ T8109] macsec0: entered promiscuous mode
[  282.766980][ T8109] macsec0: entered allmulticast mode
[  282.871091][ T7741] usb 5-1: Using ep0 maxpacket: 16
[  282.987186][ T8109] netlink: 56 bytes leftover after parsing attributes in process `syz.0.559'.
[  283.100787][ T7741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.188403][ T7741] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  283.264806][ T7741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.316685][ T7741] usb 5-1: config 0 descriptor??
[  285.357604][ T7741] creative-sb0540 0003:041E:3100.000A: unknown main item tag 0x0
[  285.385061][ T7741] creative-sb0540 0003:041E:3100.000A: item fetching failed at offset 3/5
[  285.415447][ T7741] creative-sb0540 0003:041E:3100.000A: parse failed
[  285.485523][ T7741] creative-sb0540 0003:041E:3100.000A: probe with driver creative-sb0540 failed with error -22
[  285.702312][ T8131] FAULT_INJECTION: forcing a failure.
[  285.702312][ T8131] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  285.718029][ T8131] CPU: 0 UID: 0 PID: 8131 Comm: syz.2.564 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  285.718063][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  285.718081][ T8131] Call Trace:
[  285.718090][ T8131]  <TASK>
[  285.718100][ T8131]  dump_stack_lvl+0x189/0x250
[  285.718133][ T8131]  ? __pfx____ratelimit+0x10/0x10
[  285.718157][ T8131]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.718182][ T8131]  ? __pfx__printk+0x10/0x10
[  285.718212][ T8131]  ? __might_fault+0xb0/0x130
[  285.718249][ T8131]  should_fail_ex+0x414/0x560
[  285.718279][ T8131]  _copy_from_user+0x2d/0xb0
[  285.718311][ T8131]  ___sys_recvmsg+0x12e/0x510
[  285.718341][ T8131]  ? __pfx____sys_recvmsg+0x10/0x10
[  285.718393][ T8131]  ? __fget_files+0x3a0/0x420
[  285.718431][ T8131]  __x64_sys_recvmsg+0x198/0x260
[  285.718457][ T8131]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  285.718491][ T8131]  ? __pfx_ksys_write+0x10/0x10
[  285.718519][ T8131]  ? do_syscall_64+0xbe/0x3b0
[  285.718548][ T8131]  do_syscall_64+0xfa/0x3b0
[  285.718572][ T8131]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.718596][ T8131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.718618][ T8131]  ? clear_bhb_loop+0x60/0xb0
[  285.718656][ T8131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.718678][ T8131] RIP: 0033:0x7fb86018ebe9
[  285.718698][ T8131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.718718][ T8131] RSP: 002b:00007fb860fc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  285.718743][ T8131] RAX: ffffffffffffffda RBX: 00007fb8603b6090 RCX: 00007fb86018ebe9
[  285.718759][ T8131] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005
[  285.718774][ T8131] RBP: 00007fb860fc2090 R08: 0000000000000000 R09: 0000000000000000
[  285.718788][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.718801][ T8131] R13: 00007fb8603b6128 R14: 00007fb8603b6090 R15: 00007ffd73d4e5a8
[  285.718837][ T8131]  </TASK>
[  286.838817][ T5911] usb 5-1: USB disconnect, device number 37
[  288.717255][ T8157] : entered promiscuous mode
[  290.741178][ T8150] fscrypt: Error allocating hmac(sha512): -2
[  291.132236][ T8174] Non-string source
[  291.138824][ T8168] misc userio: No port type given on /dev/userio
[  291.159583][ T8174] Non-string source
[  291.390805][ T7741] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  291.540770][ T7741] usb 5-1: device descriptor read/64, error -71
[  291.652376][   T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  291.777023][ T8184] tmpfs: Cannot disable swap on remount
[  291.783307][ T7741] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  291.820760][   T43] usb 3-1: Using ep0 maxpacket: 32
[  291.835186][   T43] usb 3-1: unable to get BOS descriptor or descriptor too short
[  291.844939][   T43] usb 3-1: config 176 has an invalid interface number: 240 but max is 0
[  291.867170][   T43] usb 3-1: config 176 has no interface number 0
[  291.907681][   T43] usb 3-1: config 176 interface 240 has no altsetting 0
[  291.923005][ T7741] usb 5-1: device descriptor read/64, error -71
[  291.945881][   T43] usb 3-1: language id specifier not provided by device, defaulting to English
[  291.963999][   T43] usb 3-1: New USB device found, idVendor=19d2, idProduct=fff6, bcdDevice=c3.db
[  291.977713][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.996514][   T43] usb 3-1: Product: syz
[  292.002824][   T43] usb 3-1: Manufacturer: ᘩ弸摯ȶ§誒愳ṇᒻࣣ뻖友몴릌俈佫⌋㴒✫硉࿾ᤖ붗嵿呈弳ጚ臰䣋恗ꟸ楞痡䐶⇾ᇵ鹓᤻濾뷐谿兵ꈵ䏀ﯠ樃ꏻ䕇䂒췼쓜
[  292.022708][   T43] usb 3-1: SerialNumber: syz
[  292.061575][ T7741] usb usb5-port1: attempt power cycle
[  292.230857][  T980] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  292.334164][   T43] option 3-1:176.240: GSM modem (1-port) converter detected
[  292.349911][   T43] usb 3-1: USB disconnect, device number 30
[  292.361111][   T43] option 3-1:176.240: device disconnected
[  292.390811][  T980] usb 4-1: Using ep0 maxpacket: 32
[  292.398979][  T980] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  292.412962][ T7741] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  292.421333][  T980] usb 4-1: config 0 has no interface number 0
[  292.437967][  T980] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  292.447646][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.456014][  T980] usb 4-1: Product: syz
[  292.461326][ T7741] usb 5-1: device descriptor read/8, error -71
[  292.468047][  T980] usb 4-1: Manufacturer: syz
[  292.472735][  T980] usb 4-1: SerialNumber: syz
[  292.480845][  T980] usb 4-1: config 0 descriptor??
[  292.688356][  T980] radio-si470x 4-1:0.35: this is not a si470x device.
[  292.700953][ T7741] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  292.721876][ T7741] usb 5-1: device descriptor read/8, error -71
[  292.835952][ T7741] usb usb5-port1: unable to enumerate USB device
[  292.888970][  T980] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  292.906152][  T980] usb 4-1: USB disconnect, device number 28
[  293.030874][   T43] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  293.120957][  T977] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[  293.270932][   T43] usb 2-1: Using ep0 maxpacket: 16
[  293.277237][   T43] usb 2-1: too many configurations: 249, using maximum allowed: 8
[  293.287560][   T43] usb 2-1: config index 0 descriptor too short (expected 259, got 18)
[  293.295890][   T43] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  293.305560][   T43] usb 2-1: can't read configurations, error -22
[  293.333463][  T977] usb 1-1: unable to get BOS descriptor or descriptor too short
[  293.354083][  T977] usb 1-1: config 2 has an invalid interface number: 252 but max is 0
[  293.390773][  T977] usb 1-1: config 2 has no interface number 0
[  293.400946][  T977] usb 1-1: config 2 interface 252 altsetting 11 endpoint 0xE has invalid maxpacket 16, setting to 8
[  293.432246][  T977] usb 1-1: config 2 interface 252 altsetting 11 endpoint 0xF has invalid maxpacket 1024, setting to 8
[  293.443596][  T977] usb 1-1: config 2 interface 252 altsetting 11 endpoint 0x3 has invalid maxpacket 512, setting to 0
[  293.455664][  T977] usb 1-1: config 2 interface 252 has no altsetting 0
[  293.474288][   T43] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  293.515776][  T977] usb 1-1: string descriptor 0 read error: -22
[  293.522640][  T977] usb 1-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=dd.98
[  293.547515][  T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.584367][ T8199] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  293.594750][  T977] usb 1-1: Could not find all expected endpoints
[  293.680856][   T43] usb 2-1: Using ep0 maxpacket: 16
[  293.688800][   T43] usb 2-1: too many configurations: 249, using maximum allowed: 8
[  293.708273][   T43] usb 2-1: config index 0 descriptor too short (expected 259, got 18)
[  293.750298][   T43] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  293.796475][  T977] usb 1-1: USB disconnect, device number 26
[  293.810803][   T43] usb 2-1: can't read configurations, error -22
[  293.831772][   T43] usb usb2-port1: attempt power cycle
[  293.873481][ T8214] C speed is unknown, defaulting to 1000
[  293.884275][ T8216] netlink: 'syz.3.587': attribute type 10 has an invalid length.
[  294.150398][ T8216] team0: Port device dummy0 added
[  294.169936][ T8216] syz.3.587 (8216) used greatest stack depth: 19480 bytes left
[  294.198299][   T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  294.243275][   T43] usb 2-1: Using ep0 maxpacket: 16
[  294.249294][   T43] usb 2-1: too many configurations: 249, using maximum allowed: 8
[  294.289521][   T43] usb 2-1: config index 0 descriptor too short (expected 259, got 18)
[  294.298082][   T43] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  294.306768][   T43] usb 2-1: can't read configurations, error -22
[  294.530820][   T43] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  294.677884][   T43] usb 2-1: Using ep0 maxpacket: 16
[  294.689531][   T43] usb 2-1: too many configurations: 249, using maximum allowed: 8
[  294.709435][   T43] usb 2-1: config index 0 descriptor too short (expected 259, got 18)
[  294.718453][   T43] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  294.757839][   T43] usb 2-1: can't read configurations, error -22
[  294.823975][   T43] usb usb2-port1: unable to enumerate USB device
[  295.190760][   T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  295.373042][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.421665][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.449695][   T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  295.515842][   T43] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  295.616552][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.733602][   T43] usb 1-1: config 0 descriptor??
[  296.021423][ T8230] trusted_key: syz.3.590 sent an empty control message without MSG_MORE.
[  296.308318][   T43] razer 0003:1532:011B.000B: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0
[  297.212956][ T8236] xt_CT: No such helper "pptp"
[  297.484895][ T8250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.595'.
[  298.452255][ T7741] usb 5-1: new low-speed USB device number 42 using dummy_hcd
[  298.724872][ T5911] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  298.737263][ T7741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  298.781055][ T7741] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  298.815739][ T7741] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  298.846245][ T7741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.884922][ T7741] usb 5-1: config 0 descriptor??
[  298.890968][ T5911] usb 2-1: Using ep0 maxpacket: 8
[  298.916114][ T5911] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  298.953253][ T8257] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  298.961482][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.020829][ T5911] usb 2-1: Product: syz
[  299.054913][ T5911] usb 2-1: Manufacturer: syz
[  299.080757][ T5911] usb 2-1: SerialNumber: syz
[  299.121940][ T5911] usb 2-1: config 0 descriptor??
[  299.166573][ T5911] gspca_main: se401-2.14.0 probing 047d:5003
[  299.381887][ T8263] netlink: 'syz.1.600': attribute type 16 has an invalid length.
[  299.395456][ T7741] logitech 0003:046D:C298.000C: unknown main item tag 0x4
[  299.405220][ T7741] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  299.416966][ T7741] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  299.424922][ T7741] logitech 0003:046D:C298.000C: unbalanced collection at end of report description
[  299.436002][ T7741] logitech 0003:046D:C298.000C: parse failed
[  299.456303][ T7741] logitech 0003:046D:C298.000C: probe with driver logitech failed with error -22
[  299.596372][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.635419][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.747905][  T977] usb 5-1: USB disconnect, device number 42
[  299.822633][ T5911] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14
[  299.929736][ T5911] usb 2-1: USB disconnect, device number 41
[  301.901106][ T8289] ubi: mtd0 is already attached to ubi31
[  302.183627][   T24] usb 1-1: USB disconnect, device number 27
[  302.433168][ T8304] : entered promiscuous mode
[  302.489186][ T8297] tipc: Failed to remove unknown binding: 66,1,1/0:2601750991/2601750993
[  302.499371][ T8297] tipc: Failed to remove unknown binding: 66,1,1/0:2601750991/2601750993
[  302.508244][ T8297] tipc: Failed to remove unknown binding: 66,1,1/0:2601750991/2601750993
[  302.629797][ T8310] x_tables: duplicate underflow at hook 1
[  302.931901][ T5911] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  303.094644][ T5911] usb 5-1: device descriptor read/64, error -71
[  303.360846][ T5911] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  303.430871][ T5924] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  303.451431][  T977] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  303.500924][ T5911] usb 5-1: device descriptor read/64, error -71
[  303.590907][ T5924] usb 4-1: Using ep0 maxpacket: 32
[  303.609354][ T5924] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  303.623953][  T977] usb 2-1: Using ep0 maxpacket: 32
[  303.635512][ T5911] usb usb5-port1: attempt power cycle
[  303.646712][ T5924] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  303.660012][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  303.670096][ T5924] usb 4-1: config 1 has no interface number 0
[  303.670291][  T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.690606][ T5924] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  303.702487][ T5924] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  303.719937][ T5924] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  303.733247][  T977] usb 2-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13
[  303.743824][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.752515][  T977] usb 2-1: Product: syz
[  303.756815][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.765198][  T977] usb 2-1: Manufacturer: syz
[  303.769932][  T977] usb 2-1: SerialNumber: syz
[  303.789374][  T977] usb 2-1: config 0 descriptor??
[  303.792855][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[  303.795581][ T5924] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  303.813974][  T977] rndis_host 2-1:0.0: skipping garbage
[  303.820197][  T977] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22
[  303.993886][ T5924] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  304.020351][ T5911] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  304.033879][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.045866][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.057502][ T5924] usb 2-1: USB disconnect, device number 42
[  304.067809][ T5911] usb 5-1: device descriptor read/8, error -71
[  304.188445][ T7741] usb 4-1: USB disconnect, device number 29
[  304.201277][ T7741] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  304.324296][ T5911] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  304.354960][ T5911] usb 5-1: device descriptor read/8, error -71
[  304.481671][ T5911] usb usb5-port1: unable to enumerate USB device
[  309.831497][ T5911] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  310.754107][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  311.003902][ T8375] binder: BINDER_SET_CONTEXT_MGR already set
[  311.010072][ T8375] binder: 8374:8375 ioctl 4018620d 200000000040 returned -16
[  311.141979][ T5848] Bluetooth: hci4: unexpected event for opcode 0x200d
[  311.147885][ T5911] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  311.446086][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.455620][ T5911] usb 2-1: Product: syz
[  311.459836][ T5911] usb 2-1: Manufacturer: syz
[  311.464817][ T5911] usb 2-1: SerialNumber: syz
[  311.472717][ T5911] usb 2-1: config 0 descriptor??
[  311.882213][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'.
[  312.395981][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.446613][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.696123][ T5911] usb 2-1: f81604_write: reg: 105 data: 8a failed: -EPROTO
[  312.712286][ T5911] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  312.729716][ T5911] f81604 2-1:0.0: probe with driver f81604 failed with error -71
[  312.957488][ T5911] usb 2-1: USB disconnect, device number 43
[  314.312385][ T8392] netlink: 'syz.1.635': attribute type 83 has an invalid length.
[  314.346414][ T8392] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  314.361024][   T43] IPVS: starting estimator thread 0...
[  314.453493][ T8400] IPVS: using max 30 ests per chain, 72000 per kthread
[  314.886086][ T8409] netlink: 'syz.4.640': attribute type 8 has an invalid length.
[  315.169793][ T8409] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  315.169793][ T8409]    program syz.4.640 not setting count and/or reply_len properly
[  315.252938][ T5848] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  315.264088][ T5848] Bluetooth: hci4: Injecting HCI hardware error event
[  315.279438][ T5848] Bluetooth: hci4: hardware error 0x00
[  317.158822][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.170954][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.180102][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.200101][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  317.313214][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  317.951710][ T5848] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  318.164336][ T8428] C speed is unknown, defaulting to 1000
[  319.480812][ T5848] Bluetooth: hci2: command tx timeout
[  321.700869][ T8455] netlink: 204 bytes leftover after parsing attributes in process `syz.4.649'.
[  323.003346][ T5848] Bluetooth: hci2: command tx timeout
[  323.078629][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  323.085073][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  324.951065][ T8463] netlink: 'syz.2.650': attribute type 1 has an invalid length.
[  325.333443][ T5848] Bluetooth: hci2: command tx timeout
[  325.427361][ T8428] chnl_net:caif_netlink_parms(): no params data found
[  327.100482][ T8480] overlayfs: missing 'lowerdir'
[  327.224877][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.572882][ T5848] Bluetooth: hci2: command tx timeout
[  327.578571][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.601033][ T8428] bridge_slave_0: entered allmulticast mode
[  327.616063][ T8428] bridge_slave_0: entered promiscuous mode
[  327.630900][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.640033][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.651466][ T8428] bridge_slave_1: entered allmulticast mode
[  327.663503][ T8428] bridge_slave_1: entered promiscuous mode
[  327.755783][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.906823][ T8487] batadv1: entered promiscuous mode
[  327.952088][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.215918][ T8428] team0: Port device team_slave_0 added
[  328.238760][ T8428] team0: Port device team_slave_1 added
[  328.251007][ T8492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  328.491083][ T5925] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  328.509147][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.534074][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.640848][ T8428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.380928][ T5925] usb 2-1: Using ep0 maxpacket: 32
[  329.411516][ T5925] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 112, changing to 10
[  329.425881][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.453561][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.471588][ T5925] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.585000][ T8428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.620756][ T5925] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1024
[  329.650907][ T5925] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  329.682806][ T5925] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0
[  329.718312][ T5925] usb 2-1: config 1 interface 0 has no altsetting 0
[  329.767510][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  329.789793][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.814551][ T5925] usb 2-1: Product: syz
[  329.818824][ T5925] usb 2-1: Manufacturer: syz
[  329.880800][ T5925] usb 2-1: SerialNumber: syz
[  330.039618][ T8495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  330.095341][ T8428] hsr_slave_0: entered promiscuous mode
[  331.053692][ T8428] hsr_slave_1: entered promiscuous mode
[  331.061093][ T8428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  331.068940][ T8428] Cannot create hsr debugfs directory
[  331.133473][ T5925] usb 2-1: bad CDC descriptors
[  331.843008][ T5925] usb 2-1: USB disconnect, device number 44
[  334.363690][ T8428] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  334.441627][ T8428] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  334.531888][ T8428] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  334.582307][ T8428] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  334.730880][  T977] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  334.920962][  T977] usb 3-1: Using ep0 maxpacket: 16
[  334.990547][  T977] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  335.030506][  T977] usb 3-1: config 0 has no interface number 0
[  335.056079][  T977] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  335.085632][ T8428] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.117019][  T977] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  335.169288][  T977] usb 3-1: config 0 interface 41 has no altsetting 0
[  335.202279][ T8428] 8021q: adding VLAN 0 to HW filter on device team0
[  335.224046][  T977] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  335.264271][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.293640][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.301076][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.303130][  T977] usb 3-1: Product: syz
[  335.380779][  T977] usb 3-1: Manufacturer: syz
[  335.385563][  T977] usb 3-1: SerialNumber: syz
[  335.388375][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.397460][ T6995] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.457281][  T977] usb 3-1: config 0 descriptor??
[  335.525253][ T8523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  335.534199][ T8523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  335.588406][ T8428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  335.633873][ T8428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  335.734080][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  335.788403][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  335.798949][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  335.841656][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  335.850454][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  335.902018][ T8523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  335.941162][ T8523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  336.081656][ T8536] C speed is unknown, defaulting to 1000
[  336.120985][ T5924] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  336.292537][ T5924] usb 2-1: Using ep0 maxpacket: 16
[  336.345748][ T5924] usb 2-1: config 8 has an invalid interface number: 206 but max is 0
[  336.394663][ T5924] usb 2-1: config 8 has no interface number 0
[  336.423174][ T5924] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  336.435492][ T5925] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  336.444037][  T977] Error reading MAC address
[  336.450599][ T5924] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  336.503010][ T8523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  336.510526][ T8523] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  336.551821][ T5924] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  336.619407][ T5924] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024
[  336.651857][ T5925] usb 5-1: Using ep0 maxpacket: 16
[  336.688375][ T5925] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  336.712444][ T5924] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  336.740873][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  336.750525][ T5925] usb 5-1: Product: syz
[  336.755941][ T5924] usb 2-1: config 8 interface 206 has no altsetting 0
[  336.763009][ T5925] usb 5-1: Manufacturer: syz
[  336.769107][ T5925] usb 5-1: SerialNumber: syz
[  336.777806][ T5924] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  336.794287][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.812024][ T5925] usb 5-1: config 0 descriptor??
[  336.825211][ T5924] usb 2-1: Product: syz
[  336.835107][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'.
[  336.918900][  T977] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  336.946397][ T5924] usb 2-1: Manufacturer: syz
[  336.970694][ T5924] usb 2-1: SerialNumber: syz
[  337.022144][  T977] usb 3-1: USB disconnect, device number 31
[  337.181626][ T8535] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  338.212143][ T5844] Bluetooth: hci5: command tx timeout
[  339.692912][ T5924] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected
[  339.763591][ T5924] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  340.023966][ T5924] usb 2-1: USB disconnect, device number 45
[  340.272188][ T5844] Bluetooth: hci5: command tx timeout
[  340.504082][ T5924] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  340.526540][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.542449][ T8550] delete_channel: no stack
[  340.606293][ T5924] garmin_gps 2-1:8.206: device disconnected
[  340.613809][   T24] usb 5-1: USB disconnect, device number 47
[  341.945752][ T8561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  341.953596][ T8561] IPv6: NLM_F_CREATE should be set when creating new route
[  341.961018][ T8561] IPv6: NLM_F_CREATE should be set when creating new route
[  342.133850][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.642921][ T5844] Bluetooth: hci5: command tx timeout
[  342.684488][ T8564] x_tables: duplicate underflow at hook 3
[  343.177812][ T8573] loop6: detected capacity change from 0 to 63
[  343.611943][ T8568] buffer_io_error: 6 callbacks suppressed
[  343.611960][ T8568] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.626109][ T8568] Buffer I/O error on dev loop6, logical block 1, async page read
[  343.634164][ T8568] Buffer I/O error on dev loop6, logical block 2, async page read
[  343.642201][ T8568] Buffer I/O error on dev loop6, logical block 3, async page read
[  343.650165][ T8568] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.658280][ T8568] Buffer I/O error on dev loop6, logical block 1, async page read
[  343.666404][ T8568] Buffer I/O error on dev loop6, logical block 2, async page read
[  343.674402][ T8568] Buffer I/O error on dev loop6, logical block 3, async page read
[  343.682484][ T8568] Buffer I/O error on dev loop6, logical block 0, async page read
[  343.690722][ T8568] Buffer I/O error on dev loop6, logical block 1, async page read
[  344.013387][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.108918][ T8428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.679975][ T5844] Bluetooth: hci5: command tx timeout
[  345.160216][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.508901][ T8536] chnl_net:caif_netlink_parms(): no params data found
[  345.537810][   T12] bridge_slave_1: left allmulticast mode
[  345.549600][   T12] bridge_slave_1: left promiscuous mode
[  345.570415][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.595284][   T12] bridge_slave_0: left allmulticast mode
[  345.626058][   T12] bridge_slave_0: left promiscuous mode
[  345.670677][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.771173][ T5925] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  346.025857][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.005241][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.015912][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  348.029686][ T5925] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  348.044941][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.146690][ T5925] usb 3-1: config 0 descriptor??
[  349.728731][   T43] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  350.414176][ T5925] hid (null): bogus close delimiter
[  350.837352][   T43] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[  350.846118][   T43] usb 2-1: config 0 has no interface number 0
[  350.852835][   T43] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  350.862472][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.393933][ T5925] kye 0003:0458:5011.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  351.417780][ T5925] kye 0003:0458:5011.000D: bogus close delimiter
[  351.850191][   T43] usb 2-1: config 0 descriptor??
[  352.315445][   T43] usb 2-1: can't set config #0, error -71
[  352.382489][ T5925] kye 0003:0458:5011.000D: item 0 4 2 10 parsing failed
[  352.388465][   T43] usb 2-1: USB disconnect, device number 46
[  352.390566][ T5925] kye 0003:0458:5011.000D: parse failed
[  352.401379][ T5925] kye 0003:0458:5011.000D: probe with driver kye failed with error -22
[  352.414969][ T5925] usb 3-1: USB disconnect, device number 32
[  353.994482][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.380717][ T8648] netlink: 452 bytes leftover after parsing attributes in process `syz.4.688'.
[  356.705773][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  356.737896][   T12] bond0 (unregistering): Released all slaves
[  358.798232][ T8653] netlink: 104 bytes leftover after parsing attributes in process `syz.1.689'.
[  359.204970][ T8428] veth0_vlan: entered promiscuous mode
[  359.218615][ T8655] dummy0: left allmulticast mode
[  359.224128][ T8655] bridge0: port 1(dummy0) entered disabled state
[  359.287848][   T12] : left promiscuous mode
[  359.410293][   T12] : left promiscuous mode
[  359.416827][ T7741] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  359.457110][ T8428] veth1_vlan: entered promiscuous mode
[  359.485542][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.501121][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.508731][ T8536] bridge_slave_0: entered allmulticast mode
[  359.529461][ T8536] bridge_slave_0: entered promiscuous mode
[  359.564553][   T12] tipc: Left network mode
[  359.587351][ T8536] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.630444][ T7741] usb 2-1: unable to read config index 0 descriptor/start: -61
[  359.647572][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.658521][ T7741] usb 2-1: can't read configurations, error -61
[  359.679332][ T8536] bridge_slave_1: entered allmulticast mode
[  359.700390][ T8536] bridge_slave_1: entered promiscuous mode
[  360.760789][ T7741] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  361.716540][ T7741] usb 2-1: unable to read config index 0 descriptor/start: -61
[  361.735687][ T7741] usb 2-1: can't read configurations, error -61
[  361.743634][ T7741] usb usb2-port1: attempt power cycle
[  362.665744][ T8536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.737553][ T8536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.324475][ T8428] veth0_macvtap: entered promiscuous mode
[  363.388997][ T8536] team0: Port device team_slave_0 added
[  363.515312][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'.
[  363.590117][ T8536] team0: Port device team_slave_1 added
[  363.610816][   T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  364.210594][   T24] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  364.295681][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.436762][   T24] usb 5-1: Product: syz
[  364.515705][   T24] usb 5-1: Manufacturer: syz
[  364.520462][   T24] usb 5-1: SerialNumber: syz
[  364.573008][ T8428] veth1_macvtap: entered promiscuous mode
[  364.633961][   T24] usb 5-1: config 0 descriptor??
[  364.685095][   T24] rndis_host 5-1:0.0: More than one union descriptor, skipping ...
[  364.700782][   T24] usb 5-1: bad CDC descriptors
[  364.730384][   T24] cdc_acm 5-1:0.0: More than one union descriptor, skipping ...
[  364.778000][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.788067][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.839804][ T8536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.858522][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.886219][   T12] hsr_slave_0: left promiscuous mode
[  364.907134][   T12] hsr_slave_1: left promiscuous mode
[  364.921264][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.929020][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.959283][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.970201][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.010157][   T12] 
[  365.012577][   T12] ======================================================
[  365.019772][   T12] WARNING: possible circular locking dependency detected
[  365.027161][   T12] 6.16.0-syzkaller #0 Not tainted
[  365.032233][   T12] ------------------------------------------------------
[  365.039471][   T12] kworker/u8:0/12 is trying to acquire lock:
[  365.045489][   T12] ffff888058810e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  365.055578][   T12] 
[  365.055578][   T12] but task is already holding lock:
[  365.063071][   T12] ffff888058a60d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320
[  365.074741][   T12] 
[  365.074741][   T12] which lock already depends on the new lock.
[  365.074741][   T12] 
[  365.085389][   T12] 
[  365.085389][   T12] the existing dependency chain (in reverse order) is:
[  365.094447][   T12] 
[  365.094447][   T12] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  365.102955][   T12]        lock_acquire+0x120/0x360
[  365.108030][   T12]        __mutex_lock+0x182/0xe80
[  365.113113][   T12]        dev_set_mtu+0x10e/0x260
[  365.118145][   T12]        team_add_slave+0x8b8/0x2840
[  365.123605][   T12]        do_set_master+0x530/0x6d0
[  365.128775][   T12]        do_setlink+0xcf0/0x41c0
[  365.133766][   T12]        rtnl_newlink+0x160b/0x1c70
[  365.139024][   T12]        rtnetlink_rcv_msg+0x7cc/0xb70
[  365.144636][   T12]        netlink_rcv_skb+0x205/0x470
[  365.149988][   T12]        netlink_unicast+0x75c/0x8e0
[  365.155413][   T12]        netlink_sendmsg+0x805/0xb30
[  365.160734][   T12]        __sock_sendmsg+0x21c/0x270
[  365.165969][   T12]        ____sys_sendmsg+0x505/0x830
[  365.171382][   T12]        ___sys_sendmsg+0x21f/0x2a0
[  365.176606][   T12]        __x64_sys_sendmsg+0x19b/0x260
[  365.182155][   T12]        do_syscall_64+0xfa/0x3b0
[  365.187728][   T12]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.194224][   T12] 
[  365.194224][   T12] -> #0 (team->team_lock_key#5){+.+.}-{4:4}:
[  365.202437][   T12]        validate_chain+0xb9b/0x2140
[  365.207770][   T12]        __lock_acquire+0xab9/0xd20
[  365.213007][   T12]        lock_acquire+0x120/0x360
[  365.218073][   T12]        __mutex_lock+0x182/0xe80
[  365.223133][   T12]        team_device_event+0x182/0xa20
[  365.228731][   T12]        notifier_call_chain+0x1b3/0x3e0
[  365.234392][   T12]        dev_close_many+0x29c/0x410
[  365.239636][   T12]        unregister_netdevice_many_notify+0x619/0x2320
[  365.246597][   T12]        default_device_exit_batch+0x819/0x890
[  365.252951][   T12]        ops_undo_list+0x522/0x990
[  365.258106][   T12]        cleanup_net+0x4c5/0x800
[  365.263199][   T12]        process_scheduled_works+0xade/0x17b0
[  365.269309][   T12]        worker_thread+0x8a0/0xda0
[  365.274464][   T12]        kthread+0x70e/0x8a0
[  365.279079][   T12]        ret_from_fork+0x3fc/0x770
[  365.284227][   T12]        ret_from_fork_asm+0x1a/0x30
[  365.289655][   T12] 
[  365.289655][   T12] other info that might help us debug this:
[  365.289655][   T12] 
[  365.300166][   T12]  Possible unsafe locking scenario:
[  365.300166][   T12] 
[  365.307636][   T12]        CPU0                    CPU1
[  365.313127][   T12]        ----                    ----
[  365.318891][   T12]   lock(&dev_instance_lock_key#3);
[  365.324214][   T12]                                lock(team->team_lock_key#5);
[  365.331706][   T12]                                lock(&dev_instance_lock_key#3);
[  365.339499][   T12]   lock(team->team_lock_key#5);
[  365.344483][   T12] 
[  365.344483][   T12]  *** DEADLOCK ***
[  365.344483][   T12] 
[  365.352754][   T12] 5 locks held by kworker/u8:0/12:
[  365.357999][   T12]  #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  365.369784][   T12]  #1: ffffc90000117bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  365.380383][   T12]  #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  365.389959][   T12]  #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  365.400022][   T12]  #4: ffff888058a60d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320
[  365.412212][   T12] 
[  365.412212][   T12] stack backtrace:
[  365.418134][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  365.418163][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  365.418177][   T12] Workqueue: netns cleanup_net
[  365.418227][   T12] Call Trace:
[  365.418236][   T12]  <TASK>
[  365.418246][   T12]  dump_stack_lvl+0x189/0x250
[  365.418275][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  365.418299][   T12]  ? __pfx__printk+0x10/0x10
[  365.418328][   T12]  ? print_lock_name+0xde/0x100
[  365.418357][   T12]  print_circular_bug+0x2ee/0x310
[  365.418386][   T12]  check_noncircular+0x134/0x160
[  365.418416][   T12]  validate_chain+0xb9b/0x2140
[  365.418454][   T12]  __lock_acquire+0xab9/0xd20
[  365.418478][   T12]  ? team_device_event+0x182/0xa20
[  365.418497][   T12]  lock_acquire+0x120/0x360
[  365.418514][   T12]  ? team_device_event+0x182/0xa20
[  365.418537][   T12]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  365.418576][   T12]  __mutex_lock+0x182/0xe80
[  365.418598][   T12]  ? team_device_event+0x182/0xa20
[  365.418624][   T12]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  365.418654][   T12]  ? team_device_event+0x182/0xa20
[  365.418674][   T12]  ? __pfx___mutex_lock+0x10/0x10
[  365.418696][   T12]  ? __timer_delete_sync+0x218/0x2d0
[  365.418739][   T12]  team_device_event+0x182/0xa20
[  365.418761][   T12]  notifier_call_chain+0x1b3/0x3e0
[  365.418790][   T12]  dev_close_many+0x29c/0x410
[  365.418818][   T12]  ? __lock_acquire+0xab9/0xd20
[  365.418838][   T12]  ? __pfx_dev_close_many+0x10/0x10
[  365.418870][   T12]  unregister_netdevice_many_notify+0x619/0x2320
[  365.418898][   T12]  ? __local_bh_enable_ip+0x12d/0x1c0
[  365.418923][   T12]  ? __local_bh_enable_ip+0x12d/0x1c0
[  365.418945][   T12]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  365.418995][   T12]  ? unregister_netdevice_queue+0x1b3/0x380
[  365.419024][   T12]  ? batadv_meshif_destroy_netlink+0x1dd/0x270
[  365.419055][   T12]  default_device_exit_batch+0x819/0x890
[  365.419101][   T12]  ? __pfx___might_resched+0x10/0x10
[  365.419119][   T12]  ? __pfx_default_device_exit_batch+0x10/0x10
[  365.419141][   T12]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  365.419160][   T12]  ? net_generic+0x1e/0x240
[  365.419180][   T12]  ? __pfx_default_device_exit_batch+0x10/0x10
[  365.419201][   T12]  ops_undo_list+0x522/0x990
[  365.419225][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  365.419251][   T12]  cleanup_net+0x4c5/0x800
[  365.419273][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  365.419295][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  365.419308][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  365.419323][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  365.419342][   T12]  process_scheduled_works+0xade/0x17b0
[  365.419371][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  365.419394][   T12]  worker_thread+0x8a0/0xda0
[  365.419422][   T12]  kthread+0x70e/0x8a0
[  365.419444][   T12]  ? __pfx_worker_thread+0x10/0x10
[  365.419459][   T12]  ? __pfx_kthread+0x10/0x10
[  365.419480][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  365.419493][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  365.419509][   T12]  ? __pfx_kthread+0x10/0x10
[  365.419529][   T12]  ret_from_fork+0x3fc/0x770
[  365.419544][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  365.419561][   T12]  ? __switch_to_asm+0x39/0x70
[  365.419579][   T12]  ? __switch_to_asm+0x33/0x70
[  365.419597][   T12]  ? __pfx_kthread+0x10/0x10
[  365.419617][   T12]  ret_from_fork_asm+0x1a/0x30
[  365.419643][   T12]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  365.891766][   T12] veth1_macvtap: left promiscuous mode
[  365.897400][   T12] veth0_macvtap: left promiscuous mode
[  365.903088][   T12] veth1_vlan: left promiscuous mode
[  365.908397][   T12] veth0_vlan: left promiscuous mode
[  366.210513][   T12] team0 (unregistering): Port device team_slave_1 removed
[  366.277830][   T12] team0 (unregistering): Port device team_slave_0 removed
[  366.428839][   T12] team0 (unregistering): Port device dummy0 removed
[  366.473682][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.480988][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.507189][ T8536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.807360][   T24] usb 5-1: USB disconnect, device number 48
[  367.143176][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.188449][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.236578][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.280248][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.538063][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.576009][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.635690][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.692684][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.765608][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.806416][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.866513][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.915275][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.983919][   T12] bridge_slave_1: left allmulticast mode
[  367.989636][   T12] bridge_slave_1: left promiscuous mode
[  367.995569][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.004274][   T12] bridge_slave_0: left allmulticast mode
[  368.009984][   T12] bridge_slave_0: left promiscuous mode
[  368.016134][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.025124][   T12] bridge_slave_1: left allmulticast mode
[  368.031146][   T12] bridge_slave_1: left promiscuous mode
[  368.036878][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.047559][   T12] bridge_slave_0: left allmulticast mode
[  368.053956][   T12] bridge_slave_0: left promiscuous mode
[  368.059672][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.069701][   T12] bridge_slave_1: left allmulticast mode
[  368.075581][   T12] bridge_slave_1: left promiscuous mode
[  368.082392][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.090588][   T12] bridge_slave_0: left allmulticast mode
[  368.096324][   T12] bridge_slave_0: left promiscuous mode
[  368.102503][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.114004][   T12] bridge_slave_1: left allmulticast mode
[  368.119806][   T12] bridge_slave_1: left promiscuous mode
[  368.126018][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.134643][   T12] bridge_slave_0: left allmulticast mode
[  368.140323][   T12] bridge_slave_0: left promiscuous mode
[  368.146199][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.308499][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.319167][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.329310][   T12] bond0 (unregistering): Released all slaves
[  368.425821][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.437436][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.447176][   T12] bond0 (unregistering): Released all slaves
[  368.510395][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.520566][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.530358][   T12] bond0 (unregistering): Released all slaves
[  368.855479][   T12] bond0 (unregistering): Released all slaves
[  368.947157][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.957288][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.967540][   T12] bond0 (unregistering): Released all slaves
[  369.746226][   T12] hsr_slave_0: left promiscuous mode
[  369.752341][   T12] hsr_slave_1: left promiscuous mode
[  369.758107][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.772619][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.780848][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.788358][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.798693][   T12] hsr_slave_0: left promiscuous mode
[  369.806245][   T12] hsr_slave_1: left promiscuous mode
[  369.812145][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.819585][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.828170][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.836034][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.843878][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.855480][   T12] hsr_slave_0: left promiscuous mode
[  369.861330][   T12] hsr_slave_1: left promiscuous mode
[  369.870568][   T12] hsr_slave_0: left promiscuous mode
[  369.876528][   T12] hsr_slave_1: left promiscuous mode
[  369.882728][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.890165][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.898746][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.906304][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.924866][   T12] veth1_vlan: left promiscuous mode
[  369.930218][   T12] veth0_vlan: left promiscuous mode
[  369.936286][   T12] veth1_macvtap: left promiscuous mode
[  369.941901][   T12] veth0_macvtap: left promiscuous mode
[  369.947582][   T12] veth1_vlan: left promiscuous mode
[  369.954080][   T12] veth0_vlan: left promiscuous mode
[  369.959985][   T12] veth1_macvtap: left promiscuous mode
[  369.965589][   T12] veth0_macvtap: left promiscuous mode
[  369.971313][   T12] veth1_vlan: left promiscuous mode
[  369.976613][   T12] veth0_vlan: left promiscuous mode
[  369.983354][   T12] veth1_macvtap: left promiscuous mode
[  369.988922][   T12] veth0_macvtap: left promiscuous mode
[  369.994701][   T12] veth1_vlan: left promiscuous mode
[  370.000053][   T12] veth0_vlan: left promiscuous mode
[  370.286943][   T12] team0 (unregistering): Port device team_slave_1 removed
[  370.316940][   T12] team0 (unregistering): Port device team_slave_0 removed
[  370.548054][   T12] team0 (unregistering): Port device team_slave_1 removed
[  370.578421][   T12] team0 (unregistering): Port device team_slave_0 removed
[  370.719358][   T12] team0 (unregistering): Port device team_slave_1 removed
[  370.746959][   T12] team0 (unregistering): Port device team_slave_0 removed
[  371.328474][   T12] team0 (unregistering): Port device team_slave_1 removed
[  371.355280][   T12] team0 (unregistering): Port device team_slave_0 removed
[  371.444114][ T6376] smc: removing ib device syz0
[  371.452929][   T43] C speed is unknown, defaulting to 1000
[  371.459000][   T43] syz0: Port: 1 Link DOWN
[  372.423035][   T12] IPVS: stop unused estimator thread 0...