last executing test programs:

9.259749939s ago: executing program 0 (id=812):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x4, 0x1087, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0xd, 0x5, 0xfc, 0x20, 0x29}, 0x2d, &(0x7f0000000980)=ANY=[@ANYBLOB="050f2d000407100202a900080b10010c880000000000030b10012c180009080500010b1001080000030931ba07"], 0x6, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x422}}, {0x91, &(0x7f0000000a00)=@string={0x91, 0x3, "d8d05622facd3aa51dc556f0d8463741908d3f7b22220d4ede1b89240557505c327b2f90b8d1809228e80a6f0dc4e86c94b5148486617c4c17fda9e4c8d8175604ca1542c1e2dcdddfa6b9faf14d9ca76597be3dee5cc5ce79adcc1379100cce06e105200be8d2be05f1427e1125a2e0748e2e083c492b3c44a93f35e9e37c18890fd82e04a8e036073c25dfa36455"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x500a}}, {0x14, &(0x7f0000000b40)=@string={0x14, 0x3, "008ad34e3569fe293d06930a25f00b6526ee"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x446}}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
r4 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r5)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r5, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x20, 0x31, 0x26, {0x26, 0x4, "6ce8c4a3f786bcc83cf0fa8b8cc4023b0fd63e037467afe337752194face9558458a2e7d"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000780)={0x0, 0xf, 0x33, "eaa4dedaed0d4e82c3620086bbb342f1d1e8212833446c2f8df37cfcdd1ba1bb1bc17e93f035184ea0dba7f633c27f3e2f5ffe"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x5}})
setgroups(0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000e00)='irq_handler_exit\x00', r6}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f00000005c0)={0x101, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000cc0)=ANY=[@ANYRES64=r7, @ANYRES16=r5, @ANYRES64, @ANYRESHEX=r7, @ANYRES32=r3, @ANYRES8=r6, @ANYRES16=0x0, @ANYBLOB="46016fa9539097a43d468ec32645781238a66c173f4f35b3a767db23ac2cbff57ff9521ac29e7d14ac9f5196cd0841ef0b70bebb8813a83205654de2c291dc47766f8374067349b0b43dc67fae6badc214a59ba875743f5cd7c8a0768da685a58023e7f0dc9747a57207ade3c590de2a06405040254a7ec6691c", @ANYBLOB="e50d65a90252bd352ec57badd35e6e3f344f3a08d7a41ee747217ce24101ac00556b366771f28cf74f870b66a3413d74c79213560e991873fb68f42320c97be8917b876453edbc4abc32b9516fc606b4c36b4cc0bdfddab1283ef6343640cf021070fa7eaf2e8bc6c34a568b66376f08298a00b1566cca5a0e"], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r8}, 0x10)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0xa0, {0xa0, 0x0, "2c166262376fa074bdf28286693d667ce3685f6db86cb25e15337e76631397e5360d7c5b2400c5333cdebc6b47c6977b6b0f75a61619bea28519ab52661ab6f40a1a4f2d13b0a902c94f207af435c8adcd7f43080c5a9631167a52dd1c75171ea3cd1a31ef6906a7731204b44f2395d76a7336283f61dd7de9c5cf6db074c936814e52afcbb00e88e7046851e2043a2ca3005a00f09a09aef77c3cec039d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000280)={0x40, 0x28, 0xffffffffffffff74, {0x87, 0xa, "db9289373857c7cac18cbb37ee2f7f17eae37e312f74675bff946a6d775ba7985283169894eb18af1f13a8e643bf02ca8191b2e364dcfcb4188693040a1ed76a6123e263b50e23e4679e9264be284a810c17142b80aaab06e8829eab4678083eddcecf46f6b05df03f295a0f52a8065ac401f886ef49a4a6c69508e79a009f3360892abbf5"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000340)={0x0, 0x22, 0x14}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x80, 0x1, {0x22, 0x4d3}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0xf, 0x93, "f80d25ff691256543bd27f86710aae0f93abe26c156263c861c7bb0b5862e02c9ede2afa8b48bb2726546a96743acc55a9889ab57c36d15d83ec10533b6299ccf0a008cfd78b7322b13eb86af0fd2f81486e998e83eb61af8716743d912ca6806583e457038d05129e68941888e5fccea994be4d5809a68727135dc8ca4479559c1dfe4253de8bbafe3485bead93f9e729664e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x1, 0x7d, "3179dd0807aaaa672b4220aa5a96fc0f1781181bf2dab43d8c34f7e4ee4d188e98c1907d39c347f5b21693c4adc8f90968dcb20c4411c6a5a53d7b9b5185de2a43cd1c8652adee27ccbae399fbe68041ef2a5677b9e1181259056caa7b52845282369e6dee007b5d29d47cc3fe272be7fdf5be64b670749f75f23d5b23"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x80}})

8.949443039s ago: executing program 4 (id=813):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x6, 0xa, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @local, @broadcast}, 0xc)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r1, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
write$binfmt_elf64(r3, 0x0, 0xc63b9e35)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xdb, &(0x7f00000002c0)=""/219, 0x0, 0x67}, 0x90)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000001380)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000000050a0300000000000000000001000000090003007379eded7a320000000009000100737949c7756c95906151000010000100"/116], 0x74}}, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3})
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000040), 0x55af)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper})
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000040)=""/167, &(0x7f0000000100)=0xa7)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x44}}, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0)

7.291900824s ago: executing program 1 (id=818):
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x20020600)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0))
r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580)
ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"})
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10000)
read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x1)
read$dsp(r1, &(0x7f0000000200)=""/168, 0xa8)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x0, 0x0, 0xffffff90}]}, 0x10)
syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[], 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040202080006007c09e8fe08a10a0015c00200142603600e12080008000e0000000ede667a21230000a8080e0011000140030000000360e40ae8d8ef52a98516277ce06b90ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775738b872ed52d30835cdbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92950b43370e970100"/216, 0xd8}], 0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r6=>0x0, <r7=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000340)=@fd={0x8, 0x2, 0x4, 0x10, 0xfffb, {r6, r7/1000+10000}, {0x0, 0x0, 0x7, 0x0, 0xd, 0x2, "02f3ec5b"}, 0xfffffffa, 0x4, {}, 0x5, 0x0, r4})
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000080)=0x10000)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)

7.272146781s ago: executing program 4 (id=819):
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
r1 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000480)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f0000000200)}], 0x6, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x400)
getpid()
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
renameat2(r6, &(0x7f0000000080)='./mnt\x00', r6, 0x0, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
pread64(r7, &(0x7f0000000280)=""/169, 0xa9, 0x25)
unshare(0x20000480)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x48ccc0, 0x0)
r8 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x44, 0x6, 0xc28, 0x98, 0x98, 0x0, 0x228, 0x98, 0xb90, 0xb90, 0xb90, 0xb90, 0xb90, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xac8}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'veth0\x00', 'bond0\x00'}, 0x0, 0x878, 0x8a0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc88)
lstat(&(0x7f0000000000)='./file0\x00', 0x0)

6.775991258s ago: executing program 1 (id=821):
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000540)={'wg1\x00'})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r4, 0x0, 0xb)
splice(r6, 0x0, r5, 0x0, 0x1000, 0x0)
sendto$rxrpc(r4, &(0x7f0000000200)="5dddc4fb6101505e70cd0e4fa5614a7438004271e552b53ed589948044879295f13bf8d347d9a36af09ac3ebf4687aeecc78ce881c413367d1af378e2de452dfd5611796d44b29ec5dcd6ac2b911", 0x4e, 0x40, &(0x7f0000000500)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x6ce3a43c, @remote, 0x5e86}}, 0x24)
splice(r3, 0x0, r7, 0x0, 0x80, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
brk(0x20ffc004)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20)

5.816838867s ago: executing program 0 (id=824):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r4, 0xffff)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r7, 0x3, 0x6, @dev}, 0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000057c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r7}, 0x14)
fcntl$addseals(r4, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x4000})
r8 = dup2(r4, r3)
lseek(r8, 0x0, 0x4)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e24, 0x3d7a, @local, 0x6}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r2, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r9=>0x0}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000640)={<r10=>r9, 0x9, 0x0, [0xfffffffffffffffd, 0x0, 0x7fffffffffffffff, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x7, 0x1000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd74a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xb062, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x5]})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000900)={r10, 0x8000000000000000, 0xfffffffffffffffd})
sendmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)='bgb', 0x3}, {&(0x7f00000001c0)="0f", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)="bf", 0x1}], 0x1}}], 0x2, 0x0)
clock_gettime(0x3, &(0x7f0000000600))

5.686122758s ago: executing program 1 (id=825):
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
r1 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000480)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000140)=""/62, 0x3e}, {0x0}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f0000000200)}], 0x6, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0xfdf0}}], 0x1, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x400)
getpid()
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
renameat2(r6, &(0x7f0000000080)='./mnt\x00', r6, 0x0, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
pread64(r7, &(0x7f0000000280)=""/169, 0xa9, 0x25)
unshare(0x20000480)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x48ccc0, 0x0)
r8 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x44, 0x6, 0xc28, 0x98, 0x98, 0x0, 0x228, 0x98, 0xb90, 0xb90, 0xb90, 0xb90, 0xb90, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xac8}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'veth0\x00', 'bond0\x00'}, 0x0, 0x878, 0x8a0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc88)
lstat(&(0x7f0000000000)='./file0\x00', 0x0)

5.299858305s ago: executing program 3 (id=826):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@call={0xb7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {0x95, 0x0, 0x1200}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000140)=0xfffff000)
bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r3, r2, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_int(r10, &(0x7f0000000500)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_int(r11, &(0x7f0000000540), 0x12)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000580)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x802, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
openat(r1, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

5.296028541s ago: executing program 4 (id=827):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1b2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x100000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x474d5532, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010800ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7000000)

5.194853859s ago: executing program 0 (id=828):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x1, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

5.117686229s ago: executing program 1 (id=829):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000f5ff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000da82850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x76, 0x4e, 0x10, 0x5752, 0x75b9, 0xae00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x4000000fffd)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$tipc(0x1e, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00')
socket$nl_route(0x10, 0x3, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000050210600480012800b00010067656e6576650000380002800500090001000000080001000100000005000c000000000005000c0000000000"], 0x70}}, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, 0xffffffffffffffff, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
vmsplice(r7, &(0x7f00000006c0)=[{&(0x7f0000000280)="b1fa2b313a888b0b9dcd55499378ae776cd275b7e1f6d61bfbb2cccc", 0x1c}, {&(0x7f00000003c0)="f39599429f39cf4ce2432ec42cb27bec2e4dd00bea0f46acefe1ff0839960809e6a801cba8c75641a8d9b78fe566ec47e89266f237a77ffc411f7946f4012474dfa60600b53746c76a44429f0d8a6d073e2324ec31d81b86035094bfb09462c3f2f6e78ea820a001975e06e511a383af37d526faf42c0730102ccb7f2d93727ea280630d7c5c2d15e70d4d688baa166ac0f03a69758febd86b8293fff0b831f2e3432e45233fe7261d8d34bd4a196419edd630a19cd82e092d8f4ee098317a9afefbda1da679aa506a0e4407ad145e6f200f31e890b0f5f0cdafeec993a7b29e6455c8c05c94dffc920a46cb989747", 0xef}, {&(0x7f00000004c0)="d9732b206f0e34d8c4a7c1afeb9865daf61dd144eddd98f0faff22d3ad31152110c64bb1da9c0a28d42c644f8110e1b98474799640a9a65a858d68cf2d7d93b8abeb6bbe23a64e26a1e7997b5ed724d54f3131a4fe589cd5b4658d1863e89ffb7aba65eeaa658ff17f8b7b9304877e41e372860862de7617a1266d00078b974800886d2dd69122ec307cf52a2335813a4b353c5974b5", 0x96}, {&(0x7f0000000300)="a212b8c96e8f7cd5eaea700932dcdc155ffe1e1ba65137d242834e0cd254a54f", 0x20}, {&(0x7f0000000640)="abc0fa36218d7968cb2cff6a95fa0d6c39f1049bc184ca64c01be88b8cb4f2c6c1694197a7f1a69f2ce0cb5ebe4c0c89ed5ef8f67cb4c76d30ad1bb9312d5b1bf453b57fc61093b0199f215f627c6adb417ebc0c10033bd332bd6d3044e6843416aaaeaaffe49049", 0x68}], 0x5, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
r8 = userfaultfd(0x801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000004c0))
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x3})
syz_io_uring_submit(r6, 0x0, 0x0)
mbind(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, 0x3)

5.017673524s ago: executing program 0 (id=830):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x385002, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "1c1300"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
prlimit64(r0, 0x7, &(0x7f0000000100)={0x9, 0x1}, &(0x7f0000000180))
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c)
r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x200, 0xa, 0x2})
ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000080, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8811, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000064c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x35)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000040)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x0, 0xfffe, 0x0, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x8000, 0x0, 0x4], 0x4})

4.999566669s ago: executing program 3 (id=831):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x8, @private1, 0x20}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f00000005c0)="03", 0x1}], 0x1, &(0x7f00000042c0)=ANY=[@ANYBLOB="140000000000000084000000080000000400000000000000380000000000000029000000390000006c048b8000000000fe8000000000000000000000000000bb00000000000000020000ffffe000000190010000000000002900000036000000322e000000000000c204000000060730000000000a0403000500000000000000e3c6000000000000ffffffff000000000b000000000000000600000000000000c910fe8000000000000000000000000000340401100730000000000a057c000d00000000000000ff7f000000000000390e00000000000009000000000000000200000000000000000100050200670738000000030c0f0400040000000000000000000000000000000500000000000000000000000000000001000080000000001000000000000000050200010502000681aa8f91e54c2027ce0377bc8cef2a588c570885f4e463f583655ab54a26019f33897504895b8cf657fdaf65b93047c9eb2c318b4324c7ab7c31c21c04436e5e67ad7de7126b96e1b522bf8ba712fb3655f9ff23a4240d682d5fcf3b40541662f62a02fbeeb803f21cd50269e5c730d0d8035edb2d8de515165f9ae19485d207561ed26760ed8d7f94f9d7f3c8bcca3017f835de587148bf0301f9db86e47dd0fb1008c9b46b0187da768e230000000048000000000000002900000037000000000500000000000005020400000100072000000003060e08004cffffffffffffff080000000000000009000000000000000401000001000014000000000000002900000043000000d20000000000000058"], 0x298}}], 0x1, 0x40000)

4.815597084s ago: executing program 3 (id=832):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x3)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
r3 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040))
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x5a, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES64=r0, @ANYRESHEX=r2, @ANYRES8=0x0, @ANYRES64=r1], 0x54}}, 0x0)
shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
io_submit(0x0, 0x11, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000006b40)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x117, 0x3, [r5]}}], 0x18}}], 0x2, 0x0)
preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000800)=""/102385, 0x18ff1}], 0x1, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000040)={&(0x7f000020f000/0x1000)=nil, 0x1000})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0)
unshare(0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r7, &(0x7f00000000c0)='y', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)

3.879809206s ago: executing program 0 (id=835):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x4, 0x1087, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0xd, 0x5, 0xfc, 0x20, 0x29}, 0x2d, &(0x7f0000000980)=ANY=[@ANYBLOB="050f2d000407100202a900080b10010c880000000000030b10012c180009080500010b1001080000030931ba07"], 0x6, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x422}}, {0x91, &(0x7f0000000a00)=@string={0x91, 0x3, "d8d05622facd3aa51dc556f0d8463741908d3f7b22220d4ede1b89240557505c327b2f90b8d1809228e80a6f0dc4e86c94b5148486617c4c17fda9e4c8d8175604ca1542c1e2dcdddfa6b9faf14d9ca76597be3dee5cc5ce79adcc1379100cce06e105200be8d2be05f1427e1125a2e0748e2e083c492b3c44a93f35e9e37c18890fd82e04a8e036073c25dfa36455"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x500a}}, {0x14, &(0x7f0000000b40)=@string={0x14, 0x3, "008ad34e3569fe293d06930a25f00b6526ee"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x446}}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
r4 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r5)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r5, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x20, 0x31, 0x26, {0x26, 0x4, "6ce8c4a3f786bcc83cf0fa8b8cc4023b0fd63e037467afe337752194face9558458a2e7d"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000780)={0x0, 0xf, 0x33, "eaa4dedaed0d4e82c3620086bbb342f1d1e8212833446c2f8df37cfcdd1ba1bb1bc17e93f035184ea0dba7f633c27f3e2f5ffe"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x5}})
setgroups(0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000e00)='irq_handler_exit\x00', r6}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f00000005c0)={0x101, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000cc0)=ANY=[@ANYRES64=r7, @ANYRES16=r5, @ANYRES64, @ANYRESHEX=r7, @ANYRES32=r3, @ANYRES8=r6, @ANYRES16=0x0, @ANYBLOB="46016fa9539097a43d468ec32645781238a66c173f4f35b3a767db23ac2cbff57ff9521ac29e7d14ac9f5196cd0841ef0b70bebb8813a83205654de2c291dc47766f8374067349b0b43dc67fae6badc214a59ba875743f5cd7c8a0768da685a58023e7f0dc9747a57207ade3c590de2a06405040254a7ec6691c", @ANYBLOB="e50d65a90252bd352ec57badd35e6e3f344f3a08d7a41ee747217ce24101ac00556b366771f28cf74f870b66a3413d74c79213560e991873fb68f42320c97be8917b876453edbc4abc32b9516fc606b4c36b4cc0bdfddab1283ef6343640cf021070fa7eaf2e8bc6c34a568b66376f08298a00b1566cca5a0e"], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r8}, 0x10)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0xa0, {0xa0, 0x0, "2c166262376fa074bdf28286693d667ce3685f6db86cb25e15337e76631397e5360d7c5b2400c5333cdebc6b47c6977b6b0f75a61619bea28519ab52661ab6f40a1a4f2d13b0a902c94f207af435c8adcd7f43080c5a9631167a52dd1c75171ea3cd1a31ef6906a7731204b44f2395d76a7336283f61dd7de9c5cf6db074c936814e52afcbb00e88e7046851e2043a2ca3005a00f09a09aef77c3cec039d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000280)={0x40, 0x28, 0xffffffffffffff74, {0x87, 0xa, "db9289373857c7cac18cbb37ee2f7f17eae37e312f74675bff946a6d775ba7985283169894eb18af1f13a8e643bf02ca8191b2e364dcfcb4188693040a1ed76a6123e263b50e23e4679e9264be284a810c17142b80aaab06e8829eab4678083eddcecf46f6b05df03f295a0f52a8065ac401f886ef49a4a6c69508e79a009f3360892abbf5"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000340)={0x0, 0x22, 0x14}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x80, 0x1, {0x22, 0x4d3}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0xf, 0x93, "f80d25ff691256543bd27f86710aae0f93abe26c156263c861c7bb0b5862e02c9ede2afa8b48bb2726546a96743acc55a9889ab57c36d15d83ec10533b6299ccf0a008cfd78b7322b13eb86af0fd2f81486e998e83eb61af8716743d912ca6806583e457038d05129e68941888e5fccea994be4d5809a68727135dc8ca4479559c1dfe4253de8bbafe3485bead93f9e729664e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x1, 0x7d, "3179dd0807aaaa672b4220aa5a96fc0f1781181bf2dab43d8c34f7e4ee4d188e98c1907d39c347f5b21693c4adc8f90968dcb20c4411c6a5a53d7b9b5185de2a43cd1c8652adee27ccbae399fbe68041ef2a5677b9e1181259056caa7b52845282369e6dee007b5d29d47cc3fe272be7fdf5be64b670749f75f23d5b23"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x80}})

3.81190059s ago: executing program 3 (id=836):
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91})
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00'})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xb)
splice(r5, 0x0, r4, 0x0, 0x1000, 0x0)
sendto$rxrpc(r3, &(0x7f0000000200)="5dddc4fb6101505e70cd0e4fa5614a7438004271e552b53ed589948044879295f13bf8d347d9a36af09ac3ebf4687aeecc78ce881c413367d1af378e2de452dfd5611796d44b29ec5dcd6ac2b911", 0x4e, 0x40, &(0x7f0000000500)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x6ce3a43c, @remote, 0x5e86}}, 0x24)
splice(r2, 0x0, r6, 0x0, 0x80, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
brk(0x20ffc004)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20)

3.299054309s ago: executing program 3 (id=837):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x4, 0x1087, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0xd, 0x5, 0xfc, 0x20, 0x29}, 0x2d, &(0x7f0000000980)=ANY=[@ANYBLOB="050f2d000407100202a900080b10010c880000000000030b10012c180009080500010b1001080000030931ba07"], 0x6, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x422}}, {0x91, &(0x7f0000000a00)=@string={0x91, 0x3, "d8d05622facd3aa51dc556f0d8463741908d3f7b22220d4ede1b89240557505c327b2f90b8d1809228e80a6f0dc4e86c94b5148486617c4c17fda9e4c8d8175604ca1542c1e2dcdddfa6b9faf14d9ca76597be3dee5cc5ce79adcc1379100cce06e105200be8d2be05f1427e1125a2e0748e2e083c492b3c44a93f35e9e37c18890fd82e04a8e036073c25dfa36455"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x500a}}, {0x14, &(0x7f0000000b40)=@string={0x14, 0x3, "008ad34e3569fe293d06930a25f00b6526ee"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x446}}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
r4 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r5)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r5, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x20, 0x31, 0x26, {0x26, 0x4, "6ce8c4a3f786bcc83cf0fa8b8cc4023b0fd63e037467afe337752194face9558458a2e7d"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000780)={0x0, 0xf, 0x33, "eaa4dedaed0d4e82c3620086bbb342f1d1e8212833446c2f8df37cfcdd1ba1bb1bc17e93f035184ea0dba7f633c27f3e2f5ffe"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x5}})
setgroups(0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000e00)='irq_handler_exit\x00', r6}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f00000005c0)={0x101, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000cc0)=ANY=[@ANYRES64=r7, @ANYRES16=r5, @ANYRES64, @ANYRESHEX=r7, @ANYRES32=r3, @ANYRES8=r6, @ANYRES16=0x0, @ANYBLOB="46016fa9539097a43d468ec32645781238a66c173f4f35b3a767db23ac2cbff57ff9521ac29e7d14ac9f5196cd0841ef0b70bebb8813a83205654de2c291dc47766f8374067349b0b43dc67fae6badc214a59ba875743f5cd7c8a0768da685a58023e7f0dc9747a57207ade3c590de2a06405040254a7ec6691c", @ANYBLOB="e50d65a90252bd352ec57badd35e6e3f344f3a08d7a41ee747217ce24101ac00556b366771f28cf74f870b66a3413d74c79213560e991873fb68f42320c97be8917b876453edbc4abc32b9516fc606b4c36b4cc0bdfddab1283ef6343640cf021070fa7eaf2e8bc6c34a568b66376f08298a00b1566cca5a0e"], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='timer_start\x00', r8}, 0x10)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0xa0, {0xa0, 0x0, "2c166262376fa074bdf28286693d667ce3685f6db86cb25e15337e76631397e5360d7c5b2400c5333cdebc6b47c6977b6b0f75a61619bea28519ab52661ab6f40a1a4f2d13b0a902c94f207af435c8adcd7f43080c5a9631167a52dd1c75171ea3cd1a31ef6906a7731204b44f2395d76a7336283f61dd7de9c5cf6db074c936814e52afcbb00e88e7046851e2043a2ca3005a00f09a09aef77c3cec039d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000280)={0x40, 0x28, 0xffffffffffffff74, {0x87, 0xa, "db9289373857c7cac18cbb37ee2f7f17eae37e312f74675bff946a6d775ba7985283169894eb18af1f13a8e643bf02ca8191b2e364dcfcb4188693040a1ed76a6123e263b50e23e4679e9264be284a810c17142b80aaab06e8829eab4678083eddcecf46f6b05df03f295a0f52a8065ac401f886ef49a4a6c69508e79a009f3360892abbf5"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000340)={0x0, 0x22, 0x14}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x80, 0x1, {0x22, 0x4d3}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0xf, 0x93, "f80d25ff691256543bd27f86710aae0f93abe26c156263c861c7bb0b5862e02c9ede2afa8b48bb2726546a96743acc55a9889ab57c36d15d83ec10533b6299ccf0a008cfd78b7322b13eb86af0fd2f81486e998e83eb61af8716743d912ca6806583e457038d05129e68941888e5fccea994be4d5809a68727135dc8ca4479559c1dfe4253de8bbafe3485bead93f9e729664e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x1, 0x7d, "3179dd0807aaaa672b4220aa5a96fc0f1781181bf2dab43d8c34f7e4ee4d188e98c1907d39c347f5b21693c4adc8f90968dcb20c4411c6a5a53d7b9b5185de2a43cd1c8652adee27ccbae399fbe68041ef2a5677b9e1181259056caa7b52845282369e6dee007b5d29d47cc3fe272be7fdf5be64b670749f75f23d5b23"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x80}})

2.691888746s ago: executing program 2 (id=838):
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
r1 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000480)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000180)=""/22, 0x16}, {&(0x7f0000000200)}], 0x6, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x400)
getpid()
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
renameat2(r6, &(0x7f0000000080)='./mnt\x00', r6, 0x0, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
pread64(r7, &(0x7f0000000280)=""/169, 0xa9, 0x25)
unshare(0x20000480)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x48ccc0, 0x0)
r8 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x44, 0x6, 0xc28, 0x98, 0x98, 0x0, 0x228, 0x98, 0xb90, 0xb90, 0xb90, 0xb90, 0xb90, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xac8}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'veth0\x00', 'bond0\x00'}, 0x0, 0x878, 0x8a0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc88)
lstat(&(0x7f0000000000)='./file0\x00', 0x0)

1.773522527s ago: executing program 1 (id=839):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000d, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x15, 0x1, 0x2, "61ac5c8609360800f400008000"})
fanotify_init(0x0, 0x101000)
r2 = add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fd1b9b242fa6a73", 0xe, 0xfffffffffffffffe)
syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffd]}})
keyctl$set_reqkey_keyring(0xe, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x40840)
request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', r2)
r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0xc04501, 0x0)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='auto_da_alloc', 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x42, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
socket$packet(0x11, 0x2, 0x300)

1.467883028s ago: executing program 4 (id=840):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x14)
r3 = epoll_create1(0x0)
sendmmsg(r1, &(0x7f0000001680)=[{{&(0x7f0000000480)=@ax25={{0x3, @null, 0x3}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000400)="196a0f3bc4fbf5f938af76e41c73cb74f3e5da9c", 0x14}, {&(0x7f0000001500)="cfc10d6824df7fbf9466d4b43339c05920799179d177c498cf5f5d44142ed4b20ef893183654ab6d55baef19a05b2ab39bba5635dbd7ce6f4ae325868918d8a4e80fc5807582910b7e3b001b4921a4c15ee10048b2c36df2a14c9a21fb86728a3ab782b915cd238b7551ee44806caee7ca462864a099cc1febf33820e12f81c0b71803b07b309f34c94bd482132fc948cc357d3e056ffa897634fefc6b00552355bb4f2c5a70303896ea7acddf2a51df79425578104b7822a78c7eb9f040c1264319a343649afa9dbcbaf4dbf76cfd2eb1c927294e499cf6018c017108f0b52991982fdefd243d8c03ca2da6a88d9a", 0xef}, {&(0x7f0000001600)}], 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x208}}], 0x1, 0x11)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180))
write$ppp(r2, &(0x7f0000000440)=')z', 0x2)
ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1d8, 0x5, 0xa, 0x6, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xf1, 0xc, "68ba6874e2a6199c3551038492d72816a5c5ada9e922ba6e1ac0b1a4be313139dcbbd326d0316988285f6f3884c98165b42cc200deac3835075326bed2aec243eca77ae3a83cfa58ae45fc3d7e684b5d32b5e708090840c0eef6acb802915d0e5f13fca26b75d777ff78a7bcdc629c5e701fd5f35c22f95f18a29b1d907987b4a150368d16321387f2c68b03428f60fa17d22e8379370899922cf86f044d2b031cd46322b41247458fb983a6206c2de013326ed3d3bf2d2634cff6044af002a2e68e0ef6d5f8207582f99f8ff269ba85e626aee7bb9892f812db5db94bf48d33738167599b818ff29b864bf3d4"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x513db114}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe27bc4b}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x10000}]}], {0x14}}, 0x24c}}, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000180000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0)

1.463068759s ago: executing program 2 (id=841):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x1, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

925.868651ms ago: executing program 2 (id=842):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@call={0xb7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], {0x95, 0x0, 0x1200}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000140)=0xfffff000)
bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r3, r2, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_int(r10, &(0x7f0000000500)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_int(r11, &(0x7f0000000540), 0x12)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000580)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x802, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
openat(r1, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

661.486628ms ago: executing program 2 (id=843):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x8, @private1, 0x20}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f00000005c0)="0365", 0x2}], 0x1, &(0x7f00000042c0)=ANY=[@ANYBLOB="140000000000000029000000080000000400000000000000380000000000000029000000390000006c048b8000000000fe8000000000100000000000000000bb00000000000000000000ffffe000000190010000000000002900000036000000322e000000000000c204000000060730000000000a0403000500000000000000e3c6000000000000ffffffff000000000b000000000000000600000000000000c910fe8000000000000000000000000000340401100730000000000a057c000d00000000000000ff7f000000000000390e00000000000009000000000000000200000000000000000100050200670738000000030c0f0400040000000000000000000000000000000500000000000000000000000000000001000080000000001000000000000000050200010502000681aa8f91e54c2027ce0377bc8cef2a588c570885f4e463f583655ab54a26019f33897504895b8cf657fdaf65b93047c9eb2c318b4324c7ab7c31c21c04436e5e67ad7de7126b96e1b522bf8ba712fb3655f9ff23a4240d682d5fcf3b40541662f62a02fbeeb803f21cd50269e5c730d0d8035edb2d8de515165f9ae19485d207561ed26760ed8d7f94f9d7f3c8bcca3017f835de587148bf0301f9db86e47dd0fb1008c9b46b0187da768e230000000048000000000000002900000037000000000500000000000005020400000100072000000003060e08004cffffffffffffff080000000000000009000000000000000401000001000014000000000000002900000043000000d2000000000000005800"], 0x298}}, {{&(0x7f0000003180)={0xa, 0x4e23, 0xff5, @mcast1, 0x8001}, 0x1c, &(0x7f0000003240)=[{&(0x7f00000031c0)="1e1e708bed24", 0x6}], 0x1, 0x0}}], 0x2, 0x40000)

609.258276ms ago: executing program 0 (id=844):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES16=<r1=>0xffffffffffffffff], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'})
connect(r2, &(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x1, 0x0, 0x4, {0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}}, 0x80)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000280)="4abb1d8fb9ec59d06d02cc053ce6ac1168d484bfc91789aaedda7f345881d8e3299cca7bf6eb1730423b84df251adc5a6a3df5fbcdaba7541a96a745211d458ecbd25f7adabff10c56381424f96521b18ab8e2a5f92b0fc2997ff7102298726aff76f6f46139d32dadd2bf29ffa86c4902dc74bb62d15481c333ccb19d37853c99140df83581334f906b4cbe1849b81f6c0158c4485c080bde83d1b0c671742a9bcdd543", 0xa4}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4008000)
recvmmsg(r3, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000006580)=""/175, 0xaf}, {&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000900)=""/67, 0x43}, {&(0x7f0000000980)=""/102, 0x66}, {&(0x7f0000000a00)=""/89, 0x59}, {&(0x7f0000000b40)=""/232, 0xe8}, {&(0x7f0000000c40)=""/135, 0x87}], 0x7}}], 0x1, 0x0, 0x0)
sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x268, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "e8801e0a16218b7c1ace9e8c23dcba180b7c22dbd01a82217491678c4725cd02", "f05874ff3c43b1fa761a4eca41bbfdf464ea0a6bcc6976855fc63142f1be096b"}}}]}, 0x268}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910820000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x4, "c71a4713"}, 0x0, 0x0, 0x0, 0x0})

466.36643ms ago: executing program 1 (id=845):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x385002, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "1c1300"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
fcntl$setown(0xffffffffffffffff, 0x8, r0)
prlimit64(r0, 0x7, &(0x7f0000000100)={0x9, 0x1}, &(0x7f0000000180))
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c)
r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x200, 0xa, 0x2})
ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000080, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8811, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000064c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x35)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000040)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x0, 0xfffe, 0x0, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x8000, 0x0, 0x4], 0x4})

376.011034ms ago: executing program 2 (id=846):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x8, @private1, 0x20}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f00000005c0)="03", 0x1}], 0x1, &(0x7f00000042c0)=ANY=[@ANYBLOB="140000000000000084000000080000000400000000000000380000000000000029000000390000006c048b8000000000fe8000000000000000000000000000bb00000000000000840000ffffe000000190010000000000002900000036000000322e000000000000c204000000060730000000000a0403000500000000000000e3c6000000000000ffffffff000000000b000000000000000600000000000000c910fe8000000000000000000000000000340401100730000000000a057c000d00000000000000ff7f000000000000390e00000000000009000000000000000200000000000000000100050200670738000000030c0f0400040000000000000000000000000000000500000000000000000000000000000001000080000000001000000000000000050200010502000681aa8f91e54c2027ce0377bc8cef2a588c570885f4e463f583655ab54a26019f33897504895b8cf657fdaf65b93047c9eb2c318b4324c7ab7c31c21c04436e5e67ad7de7126b96e1b522bf8ba712fb3655f9ff23a4240d682d5fcf3b40541662f62a02fbeeb803f21cd50269e5c730d0d8035edb2d8de515165f9ae19485d207561ed26760ed8d7f94f9d7f3c8bcca3017f835de587148bf0301f9db86e47dd0fb1008c9b46b0187da768e230000000048000000000000002900000037000000000500000000000005020400000100072000000003060e08004cffffffffffffff080000000000000009000000000000000401000001000014000000000000002900000043000000d20000000000000058"], 0x298}}], 0x1, 0x40000)

323.895711ms ago: executing program 4 (id=847):
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91})
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00'})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xb)
splice(r5, 0x0, r4, 0x0, 0x1000, 0x0)
sendto$rxrpc(r3, &(0x7f0000000200)="5dddc4fb6101505e70cd0e4fa5614a7438004271e552b53ed589948044879295f13bf8d347d9a36af09ac3ebf4687aeecc78ce881c413367d1af378e2de452dfd5611796d44b29ec5dcd6ac2b911", 0x4e, 0x40, &(0x7f0000000500)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x6ce3a43c, @remote, 0x5e86}}, 0x24)
splice(r2, 0x0, r6, 0x0, 0x80, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
brk(0x20ffc004)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20)

219.716692ms ago: executing program 2 (id=848):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0413"], 0xa)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x28180, 0x100, 0x31}, 0x18)
syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xd)
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000dc7a2240c80a2103c9a1010203010902120001000000000904000000"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000180), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r4)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
recvmmsg(r2, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/79, 0x4f}], 0x1, &(0x7f0000000cc0)=""/1, 0x1}, 0xc1e1}, {{0x0, 0x0, &(0x7f0000002040), 0x3, &(0x7f0000000380)=""/190, 0xbc}, 0x3}, {{&(0x7f0000002180)=@nfc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002200)=""/181, 0xb5}, {&(0x7f00000022c0)=""/112, 0x70}, {&(0x7f0000000440)=""/163, 0xa3}], 0x3}, 0xe6}, {{&(0x7f0000002440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002600), 0x0, &(0x7f0000002640)=""/22, 0x15}}], 0x4000000000002b0, 0x0, &(0x7f0000002780)={0x0, 0x989680})

9.708816ms ago: executing program 3 (id=849):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000004f80))
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000070000000000000000850000005600000095000000000000003f6178b77d720e58940e8e741301ed488089ccc70f7e4795"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf090000000000005509010000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4)
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
r9 = dup2(r2, r3)
r10 = socket(0x1a, 0x2, 0x2)
r11 = epoll_create1(0x0)
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f00000002c0))
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000000)={0xe000202b})
r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r13, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r13, 0x5501)
r14 = dup(r13)
write$P9_RGETLOCK(r14, 0x0, 0x23)
ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000c60d00000000000000000027ee88e7ff77e8058594d3c29e0b4600ca7e3ccab2c0b00000000000"])
epoll_pwait(r12, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000040))
openat$cgroup_ro(r9, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)

0s ago: executing program 4 (id=850):
uname(&(0x7f0000000080)=""/77)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x1f8, 0x110, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac=@link_local, @loopback}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@random="492f869a9354"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x3)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x94, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
close(r4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000001200))
syz_usb_connect(0x0, 0x24, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0x8d, 0x7c, 0x41, 0x10, 0x6b9, 0x4061, 0x93b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x6a, 0xef}}]}}]}}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x2, 0x0, 0x80}, "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", "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"})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000001c0))
sendmsg$nl_generic(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a0000000820040000000000"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000001480))

kernel console output (not intermixed with test programs):

1
[  305.820510][ T7770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.921714][ T7770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.945988][ T5237] Bluetooth: hci4: command tx timeout
[  305.953255][ T7770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.979394][ T7770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.402689][   T11] hsr_slave_0: left promiscuous mode
[  306.427490][ T5617] usb 2-1: USB disconnect, device number 34
[  306.460551][   T11] hsr_slave_1: left promiscuous mode
[  306.515887][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.545011][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.594101][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.605397][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.686561][   T11] veth1_macvtap: left promiscuous mode
[  306.701003][   T11] veth0_macvtap: left promiscuous mode
[  306.714466][ T8069] loop0: detected capacity change from 0 to 7
[  306.721703][   T11] veth1_vlan: left promiscuous mode
[  306.740260][   T11] veth0_vlan: left promiscuous mode
[  306.765342][ T8069] Dev loop0: unable to read RDB block 7
[  306.808650][ T8069]  loop0: unable to read partition table
[  306.830087][ T8069] loop0: partition table beyond EOD, truncated
[  306.850961][ T8069] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  306.850961][ T8069] 
) failed (rc=-5)
[  306.899581][ T4678] Dev loop0: unable to read RDB block 7
[  306.919882][ T4678]  loop0: unable to read partition table
[  306.931389][ T4678] loop0: partition table beyond EOD, truncated
[  307.156498][ T8079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.483'.
[  307.825967][ T5231] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  307.863577][   T11] team0 (unregistering): Port device team_slave_1 removed
[  308.000212][ T5231] usb 1-1: device descriptor read/64, error -71
[  308.014376][   T11] team0 (unregistering): Port device team_slave_0 removed
[  308.025015][ T5237] Bluetooth: hci4: command tx timeout
[  308.297179][ T5231] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  308.474954][ T5231] usb 1-1: device descriptor read/64, error -71
[  308.605256][ T5231] usb usb1-port1: attempt power cycle
[  308.948528][ T8067] ip6gretap1: entered allmulticast mode
[  309.044897][ T5231] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  309.105671][ T5231] usb 1-1: device descriptor read/8, error -71
[  309.333497][ T8106] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  309.353271][ T8106] PKCS7: Only support pkcs7_signedData type
[  309.415494][ T5231] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  309.416149][ T7974] chnl_net:caif_netlink_parms(): no params data found
[  309.496639][ T5231] usb 1-1: device descriptor read/8, error -71
[  309.530594][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.592040][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.608936][   T11] IPVS: stop unused estimator thread 0...
[  309.676750][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.685393][ T5231] usb usb1-port1: unable to enumerate USB device
[  309.774497][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.105633][ T5237] Bluetooth: hci4: command tx timeout
[  310.211738][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.276217][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.325154][ T7974] bridge_slave_0: entered allmulticast mode
[  310.362474][ T7974] bridge_slave_0: entered promiscuous mode
[  310.390400][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.413669][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.440670][ T7974] bridge_slave_1: entered allmulticast mode
[  310.460912][ T5231] IPVS: starting estimator thread 0...
[  310.463188][ T7974] bridge_slave_1: entered promiscuous mode
[  310.605049][ T8128] IPVS: using max 24 ests per chain, 57600 per kthread
[  310.701003][ T7974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.774251][ T7974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.899028][ T8137] netlink: 'syz.0.490': attribute type 4 has an invalid length.
[  311.020351][ T7974] team0: Port device team_slave_0 added
[  311.073851][ T7974] team0: Port device team_slave_1 added
[  311.113658][ T8144] loop0: detected capacity change from 0 to 7
[  311.143274][ T8144] Dev loop0: unable to read RDB block 7
[  311.177331][ T8144]  loop0: unable to read partition table
[  311.235561][ T8144] loop0: partition table beyond EOD, truncated
[  311.268724][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.283562][ T8144] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  311.283562][ T8144] 
) failed (rc=-5)
[  311.298768][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.407774][ T7974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.444892][ T8151] netlink: 168 bytes leftover after parsing attributes in process `syz.0.494'.
[  311.493782][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.509883][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.591996][ T7974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.717769][ T8153] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  311.894599][ T7974] hsr_slave_0: entered promiscuous mode
[  311.938524][ T7974] hsr_slave_1: entered promiscuous mode
[  312.196671][ T8170] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  312.218677][ T5231] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  312.257037][ T8170] PKCS7: Only support pkcs7_signedData type
[  312.370854][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'.
[  312.473406][ T5231] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  312.611654][ T5231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.702209][ T5231] usb 3-1: Product: syz
[  312.713410][ T5231] usb 3-1: Manufacturer: syz
[  312.754016][ T5231] usb 3-1: SerialNumber: syz
[  312.787293][ T5231] usb 3-1: config 0 descriptor??
[  313.014808][ T5280] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  313.087677][ T5281] usb 3-1: USB disconnect, device number 41
[  313.185072][ T5280] usb 1-1: device descriptor read/64, error -71
[  313.475724][ T5280] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  313.656255][ T5280] usb 1-1: device descriptor read/64, error -71
[  313.783989][ T7974] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  313.805444][ T5280] usb usb1-port1: attempt power cycle
[  313.854017][ T7974] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  313.923147][ T7974] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  313.988187][ T7974] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  314.038223][ T8202] loop0: detected capacity change from 0 to 7
[  314.065575][ T8198] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  314.088520][ T8202] Dev loop0: unable to read RDB block 7
[  314.094181][ T8202]  loop0: unable to read partition table
[  314.116451][ T8202] loop0: partition table beyond EOD, truncated
[  314.153080][ T8202] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  314.153080][ T8202] 
) failed (rc=-5)
[  314.255688][ T5280] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  314.344839][ T5280] usb 1-1: device descriptor read/8, error -71
[  314.434419][ T7974] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.528514][ T7974] 8021q: adding VLAN 0 to HW filter on device team0
[  314.581146][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.588377][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.635064][ T5280] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  314.641798][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.649875][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.663338][ T5231] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  314.678989][ T5280] usb 1-1: device descriptor read/8, error -71
[  314.805752][ T5280] usb usb1-port1: unable to enumerate USB device
[  314.884814][ T5231] usb 3-1: Using ep0 maxpacket: 32
[  314.902863][ T5231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.953672][ T7974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.959329][ T5231] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  314.979797][ T5231] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  315.001278][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.026619][ T5231] usb 3-1: config 0 descriptor??
[  315.162985][ T7974] veth0_vlan: entered promiscuous mode
[  315.210949][ T7974] veth1_vlan: entered promiscuous mode
[  315.292578][ T5231] usb 3-1: USB disconnect, device number 42
[  315.293957][ T7974] veth0_macvtap: entered promiscuous mode
[  315.393877][ T7974] veth1_macvtap: entered promiscuous mode
[  315.535915][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.566448][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.597064][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.658679][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.709312][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.740424][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.801285][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.822265][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.834897][ T5282] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  315.862432][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.925808][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.943275][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.981861][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.015772][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.050460][ T5282] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  316.099574][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.110267][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.110300][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.141580][ T5282] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  316.171145][ T5282] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  316.184195][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.192628][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.192651][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.244512][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.262120][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.277888][ T5282] usb 2-1: config 0 descriptor??
[  316.298138][ T5231] IPVS: starting estimator thread 0...
[  316.314441][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.380940][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.386135][ T8253] IPVS: using max 19 ests per chain, 45600 per kthread
[  316.424076][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.458367][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.478184][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.490218][ T7974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.522826][ T7974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.562592][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.634491][ T7974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.678018][ T7974] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.713677][ T7974] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.728224][ T7974] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.788914][ T5282] usbhid 2-1:0.0: can't add hid device: -71
[  316.837796][ T5282] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  316.881542][ T5282] usb 2-1: USB disconnect, device number 35
[  317.053330][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.083965][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.142733][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.169729][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.227680][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  317.245602][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  317.442287][ T8269] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  317.464849][ T5231] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  317.681708][ T5231] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  317.774948][ T5282] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  317.806609][ T5231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.815252][ T5231] usb 3-1: Product: syz
[  317.840071][ T5231] usb 3-1: Manufacturer: syz
[  317.855430][ T5231] usb 3-1: SerialNumber: syz
[  317.867947][ T5231] usb 3-1: config 0 descriptor??
[  317.992195][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.020603][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.072763][ T5282] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  318.129393][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.162817][ T8262] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  318.187276][ T5282] usb 2-1: config 0 descriptor??
[  318.226167][  T966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.416154][ T5231] usb 3-1: USB disconnect, device number 43
[  318.675654][  T966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.838990][ T8270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.880707][ T8270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.893173][  T966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.187515][  T966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.562447][ T8270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.575511][  T966] bridge_slave_1: left allmulticast mode
[  319.591423][  T966] bridge_slave_1: left promiscuous mode
[  319.600977][  T966] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.609540][ T8270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.623484][ T8302] syz.2.526 (8302): /proc/8300/oom_adj is deprecated, please use /proc/8300/oom_score_adj instead.
[  319.638939][  T966] bridge_slave_0: left allmulticast mode
[  319.654814][ T5617] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  319.655942][  T966] bridge_slave_0: left promiscuous mode
[  319.682927][  T966] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.693092][ T5282] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0017/input/input37
[  319.804856][ T5281] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  319.858042][ T5282] uclogic 0003:256C:006D.0017: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  319.875081][ T5617] usb 1-1: Using ep0 maxpacket: 16
[  319.919151][ T4616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  319.929150][ T4616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  319.932217][ T5228] usb 2-1: USB disconnect, device number 36
[  319.942812][ T4616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  319.951141][ T5617] usb 1-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  319.961863][ T4616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  319.970772][ T4616] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  319.979344][ T4616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  320.015785][ T5281] usb 5-1: Using ep0 maxpacket: 16
[  320.028423][ T5281] usb 5-1: config 0 has an invalid interface number: 159 but max is 1
[  320.045992][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.046856][ T5281] usb 5-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[  320.065030][ T5281] usb 5-1: config 0 has no interface number 0
[  320.072483][ T5281] usb 5-1: config 0 interface 159 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  320.085847][ T5281] usb 5-1: config 0 interface 159 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  320.109759][ T5281] usb 5-1: config 0 interface 159 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  320.124354][ T5617] usb 1-1: Product: syz
[  320.124380][ T5617] usb 1-1: Manufacturer: syz
[  320.124400][ T5617] usb 1-1: SerialNumber: syz
[  320.148414][ T5281] usb 5-1: too many endpoints for config 0 interface 1 altsetting 1: 99, using maximum allowed: 30
[  320.159428][ T5281] usb 5-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 99
[  320.173759][ T5281] usb 5-1: config 0 interface 1 has no altsetting 0
[  320.188596][ T5617] usb 1-1: config 0 descriptor??
[  320.228039][ T5617] usb-storage 1-1:0.0: USB Mass Storage device detected
[  320.231526][ T5281] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9
[  320.276520][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.315516][ T5281] usb 5-1: config 0 descriptor??
[  320.346360][ T5281] usb 5-1: can't set config #0, error -71
[  320.403918][ T5281] usb 5-1: USB disconnect, device number 48
[  320.485759][ T8312] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  321.026174][  T966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  321.213226][  T966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  321.283916][  T966] bond0 (unregistering): Released all slaves
[  322.025396][ T4616] Bluetooth: hci3: command tx timeout
[  322.107139][  T966] hsr_slave_0: left promiscuous mode
[  322.125044][ T5617] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  322.176186][  T966] hsr_slave_1: left promiscuous mode
[  322.199668][  T966] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.228850][  T966] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.266619][  T966] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.289643][  T966] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.305161][ T5283] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  322.355221][ T5617] usb 3-1: Using ep0 maxpacket: 8
[  322.403651][ T5617] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e
[  322.409455][  T966] veth1_macvtap: left promiscuous mode
[  322.444172][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.470931][  T966] veth0_macvtap: left promiscuous mode
[  322.476222][ T5617] usb 3-1: Product: syz
[  322.495180][ T5617] usb 3-1: Manufacturer: syz
[  322.512179][ T5617] usb 3-1: SerialNumber: syz
[  322.525805][ T5283] usb 5-1: Using ep0 maxpacket: 32
[  322.532147][  T966] veth1_vlan: left promiscuous mode
[  322.542047][ T5617] usb 3-1: config 0 descriptor??
[  322.565879][ T5283] usb 5-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config
[  322.568523][ T5617] gspca_main: spca500-2.14.0 probing 046d:0900
[  322.593005][  T966] veth0_vlan: left promiscuous mode
[  322.598823][ T5281] usb 1-1: USB disconnect, device number 38
[  322.632269][ T5283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  322.665007][ T5283] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  322.734390][ T5283] usb 5-1: string descriptor 0 read error: -22
[  322.734550][ T5283] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  322.734579][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.756800][ T5283] cdc_ncm 5-1:1.0: skipping garbage
[  322.756827][ T5283] cdc_ncm 5-1:1.0: skipping garbage
[  322.756845][ T5283] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  322.756884][ T5283] cdc_ncm 5-1:1.0: bind() failure
[  322.893236][ T8353] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  322.893252][ T8353] PKCS7: Only support pkcs7_signedData type
[  323.018020][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'.
[  323.884152][ T8361] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  324.105002][ T4616] Bluetooth: hci3: command tx timeout
[  324.320104][ T8367] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  324.649859][  T966] team0 (unregistering): Port device team_slave_1 removed
[  324.786049][  T966] team0 (unregistering): Port device team_slave_0 removed
[  324.980467][ T5281] usb 5-1: USB disconnect, device number 49
[  325.623767][ T5617] gspca_spca500: reg write: error -71
[  325.647566][ T5617] usb 3-1: USB disconnect, device number 44
[  326.186129][ T4616] Bluetooth: hci3: command tx timeout
[  326.530576][ T8307] chnl_net:caif_netlink_parms(): no params data found
[  326.582856][ T5283] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  326.608357][ T8389] netlink: 168 bytes leftover after parsing attributes in process `syz.1.543'.
[  326.805692][ T5283] usb 5-1: Using ep0 maxpacket: 8
[  326.864327][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.868531][ T5617] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  326.889203][ T5283] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  326.906141][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  326.914527][ T5283] usb 5-1: SerialNumber: syz
[  326.923088][ T5283] usb 5-1: config 0 descriptor??
[  327.079071][ T8307] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.097337][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.121320][ T8307] bridge_slave_0: entered allmulticast mode
[  327.154825][ T5617] usb 1-1: Using ep0 maxpacket: 16
[  327.165353][ T5283] usb 5-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  327.173397][ T8307] bridge_slave_0: entered promiscuous mode
[  327.194242][ T5283] usb 5-1: No valid video chain found.
[  327.206291][ T8307] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.216779][ T5283] usb 5-1: USB disconnect, device number 50
[  327.222810][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.236546][ T8307] bridge_slave_1: entered allmulticast mode
[  327.241045][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.287926][ T8307] bridge_slave_1: entered promiscuous mode
[  327.307038][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.366156][ T5617] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  327.424757][ T5617] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  327.460335][ T8307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.460685][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.534826][ T8407] xt_bpf: check failed: parse error
[  327.540289][ T8307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.556089][ T5617] usb 1-1: config 0 descriptor??
[  327.713514][ T8407] syz.1.548 uses obsolete (PF_INET,SOCK_PACKET)
[  327.717650][ T8307] team0: Port device team_slave_0 added
[  327.758124][ T8307] team0: Port device team_slave_1 added
[  328.026397][ T8307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.033487][ T8307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.036327][ T5617] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0018/input/input38
[  328.111901][ T5231] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  328.161910][ T8307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.265430][ T4616] Bluetooth: hci3: command tx timeout
[  328.289940][ T8307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.297114][ T5231] usb 2-1: device descriptor read/64, error -71
[  328.324486][ T5617] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  328.338059][ T8307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.403290][ T5617] usb 1-1: USB disconnect, device number 39
[  328.434798][    T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  328.444741][ T8307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.575338][ T5231] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  328.635854][    T9] usb 5-1: Using ep0 maxpacket: 32
[  328.645771][    T9] usb 5-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config
[  328.664717][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  328.703400][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  328.728217][ T8307] hsr_slave_0: entered promiscuous mode
[  328.747020][ T5231] usb 2-1: device descriptor read/64, error -71
[  328.765865][ T8307] hsr_slave_1: entered promiscuous mode
[  328.771841][    T9] usb 5-1: string descriptor 0 read error: -22
[  328.795491][ T5621] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  328.812839][ T8307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  328.812930][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  328.850937][ T8307] Cannot create hsr debugfs directory
[  328.867091][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.879416][ T5231] usb usb2-port1: attempt power cycle
[  328.915233][    T9] cdc_ncm 5-1:1.0: skipping garbage
[  328.940956][    T9] cdc_ncm 5-1:1.0: skipping garbage
[  328.963205][    T9] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  329.013965][    T9] cdc_ncm 5-1:1.0: bind() failure
[  329.020547][ T5621] usb 3-1: Using ep0 maxpacket: 16
[  329.056648][ T5621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  329.074299][ T5621] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  329.104084][ T5621] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  329.134821][ T5621] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  329.186401][ T5621] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  329.216906][ T5621] usb 3-1: config 1 interface 0 has no altsetting 0
[  329.258087][ T5621] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  329.289693][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.315061][ T5231] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  329.333249][ T5621] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  329.377222][ T5231] usb 2-1: device descriptor read/8, error -71
[  329.543578][ T5621] scsi host1: usb-storage 3-1:1.0
[  329.655412][ T5231] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  329.745968][ T5231] usb 2-1: device descriptor read/8, error -71
[  329.777532][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.833340][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.865009][ T5617] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  329.885269][ T5231] usb usb2-port1: unable to enumerate USB device
[  329.904834][ T5280] usb 3-1: USB disconnect, device number 45
[  330.100638][ T5617] usb 1-1: config 0 has no interfaces?
[  330.121542][ T5617] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  330.151094][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  330.183269][ T5617] usb 1-1: SerialNumber: syz
[  330.204473][ T5617] usb 1-1: config 0 descriptor??
[  330.220283][ T8307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  330.259235][ T8307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  330.296088][ T8307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  330.340996][ T8307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  330.446498][ T5617] usb 1-1: USB disconnect, device number 40
[  330.576050][ T8307] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.660444][ T8307] 8021q: adding VLAN 0 to HW filter on device team0
[  330.688472][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.695738][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.744444][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.751615][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.922124][ T8307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.067445][    T9] usb 5-1: USB disconnect, device number 51
[  331.081500][ T8307] veth0_vlan: entered promiscuous mode
[  331.155115][ T5617] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  331.214243][ T8307] veth1_vlan: entered promiscuous mode
[  331.389786][ T8307] veth0_macvtap: entered promiscuous mode
[  331.433108][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.458731][ T8307] veth1_macvtap: entered promiscuous mode
[  331.478443][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.499393][ T5617] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  331.510967][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.596980][ T5617] usb 3-1: config 0 descriptor??
[  331.607700][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.695593][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.732107][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.779901][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.814883][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.842521][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.885662][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.923004][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.977796][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.042304][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.098018][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.139854][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.173491][ T8307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.275817][ T5617] usbhid 3-1:0.0: can't add hid device: -71
[  332.281857][ T5617] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  332.374412][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.395326][ T5617] usb 3-1: USB disconnect, device number 46
[  332.464903][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.512722][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.561867][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.610039][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.755043][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.800389][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.842045][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.947626][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.037324][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.084820][ T8307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.121075][ T8307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.275923][ T8307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.357724][ T8307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.402200][ T8307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.434719][ T8307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.465764][ T8307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.674751][ T5231] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  333.804306][ T8500] netlink: 168 bytes leftover after parsing attributes in process `syz.0.566'.
[  333.896321][ T5231] usb 3-1: Using ep0 maxpacket: 16
[  333.924847][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.954266][ T5231] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.978815][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.011718][ T5231] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.084571][ T5231] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  334.091782][ T2541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.171604][ T5231] usb 3-1: config 0 interface 0 has no altsetting 0
[  334.179897][ T2541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.185114][ T5231] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  334.245113][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.308135][ T5231] usb 3-1: config 0 descriptor??
[  334.516397][ T8515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.521'.
[  334.768344][ T5231] hid-generic 0003:045E:05DA.0019: ignoring exceeding usage max
[  334.782957][ T8524] netlink: 168 bytes leftover after parsing attributes in process `syz.0.568'.
[  334.835340][ T5231] hid-generic 0003:045E:05DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.2-1/input0
[  334.864850][  T940] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  335.044959][  T940] usb 4-1: device descriptor read/64, error -71
[  335.314937][  T940] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  335.494773][  T940] usb 4-1: device descriptor read/64, error -71
[  335.640815][  T940] usb usb4-port1: attempt power cycle
[  335.947056][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.007499][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.014772][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.078263][  T940] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  336.125304][ T5231] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  336.149089][  T940] usb 4-1: device descriptor read/8, error -71
[  336.316242][ T5280] usb 3-1: USB disconnect, device number 47
[  336.385060][ T5231] usb 5-1: Using ep0 maxpacket: 32
[  336.413679][ T5231] usb 5-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config
[  336.434321][ T5231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  336.447603][  T940] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  336.478365][ T5231] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  336.515536][ T5231] usb 5-1: string descriptor 0 read error: -22
[  336.523417][  T940] usb 4-1: device descriptor read/8, error -71
[  336.526042][ T5231] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  336.573419][ T5231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.616453][ T8564] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  336.623296][ T8564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  336.633733][ T8562] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  336.643172][ T5231] cdc_ncm 5-1:1.0: skipping garbage
[  336.665823][ T5231] cdc_ncm 5-1:1.0: skipping garbage
[  336.671083][ T5231] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  336.671552][  T940] usb usb4-port1: unable to enumerate USB device
[  336.704505][ T8562] PKCS7: Only support pkcs7_signedData type
[  336.720314][ T8564] vhci_hcd vhci_hcd.0: Device attached
[  336.724777][ T5231] cdc_ncm 5-1:1.0: bind() failure
[  336.974943][ T5280] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  336.982641][ T5283] usb 9-1: new low-speed USB device number 2 using vhci_hcd
[  338.035631][ T5231] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  338.305152][ T5231] usb 4-1: Using ep0 maxpacket: 8
[  338.336058][ T5231] usb 4-1: New USB device found, idVendor=11bb, idProduct=0901, bcdDevice=76.a0
[  338.367878][ T5231] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  338.408816][ T5231] usb 4-1: Product: syz
[  338.413047][ T5231] usb 4-1: Manufacturer: syz
[  338.438271][ T5231] usb 4-1: SerialNumber: syz
[  338.465734][ T5231] usb 4-1: config 0 descriptor??
[  338.843698][ T5231] usb 5-1: USB disconnect, device number 52
[  339.130142][ T8598] netlink: 13 bytes leftover after parsing attributes in process `syz.4.580'.
[  339.329150][ T8599] xt_CT: You must specify a L4 protocol and not use inversions on it
[  339.738040][ T5280] usb 1-1: unable to get BOS descriptor or descriptor too short
[  339.752927][ T8565] vhci_hcd: connection reset by peer
[  339.787607][ T4616] Bluetooth: hci0: command 0x0406 tx timeout
[  339.805994][ T5280] usb 1-1: unable to read config index 0 descriptor/start: -71
[  339.824997][ T5280] usb 1-1: can't read configurations, error -71
[  339.845634][   T52] vhci_hcd: stop threads
[  339.931930][   T52] vhci_hcd: release socket
[  339.953421][   T52] vhci_hcd: disconnect device
[  340.374847][ T5281] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  340.609353][ T5281] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  340.639982][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.653438][ T5281] usb 5-1: Product: syz
[  340.669219][ T5281] usb 5-1: Manufacturer: syz
[  340.689502][ T5281] usb 5-1: SerialNumber: syz
[  340.704095][ T5231] usb 4-1: USB disconnect, device number 29
[  340.723264][ T5281] usb 5-1: config 0 descriptor??
[  340.906041][ T5621] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  340.936856][ T8607] FAULT_INJECTION: forcing a failure.
[  340.936856][ T8607] name failslab, interval 1, probability 0, space 0, times 0
[  340.994952][ T8607] CPU: 1 UID: 0 PID: 8607 Comm: syz.4.584 Not tainted 6.11.0-rc4-syzkaller #0
[  341.003878][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  341.013972][ T8607] Call Trace:
[  341.017271][ T8607]  <TASK>
[  341.020207][ T8607]  dump_stack_lvl+0x241/0x360
[  341.024889][ T8607]  ? __pfx_dump_stack_lvl+0x10/0x10
[  341.030112][ T8607]  ? __pfx__printk+0x10/0x10
[  341.034721][ T8607]  ? fs_reclaim_acquire+0x93/0x140
[  341.039872][ T8607]  ? __pfx___might_resched+0x10/0x10
[  341.045265][ T8607]  should_fail_ex+0x3b0/0x4e0
[  341.049962][ T8607]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  341.055686][ T8607]  should_failslab+0xac/0x100
[  341.060387][ T8607]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  341.066304][ T8607]  __kmalloc_noprof+0xd8/0x400
[  341.071086][ T8607]  ? kfree+0x4e/0x360
[  341.075091][ T8607]  tomoyo_realpath_from_path+0xcf/0x5e0
[  341.080652][ T8607]  tomoyo_path_number_perm+0x23a/0x880
[  341.086114][ T8607]  ? tomoyo_path_number_perm+0x208/0x880
[  341.091745][ T8607]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  341.097745][ T8607]  ? __fget_files+0x29/0x470
[  341.102366][ T8607]  ? __fget_files+0x3f6/0x470
[  341.107045][ T8607]  ? __fget_files+0x29/0x470
[  341.111644][ T8607]  security_file_ioctl+0x75/0xb0
[  341.116581][ T8607]  __se_sys_ioctl+0x47/0x170
[  341.121173][ T8607]  do_syscall_64+0xf3/0x230
[  341.125685][ T8607]  ? clear_bhb_loop+0x35/0x90
[  341.130361][ T8607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.136252][ T8607] RIP: 0033:0x7f0032779e79
[  341.140659][ T8607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  341.160276][ T8607] RSP: 002b:00007f0033489038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  341.168689][ T8607] RAX: ffffffffffffffda RBX: 00007f0032915f80 RCX: 00007f0032779e79
[  341.176657][ T8607] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  341.184637][ T8607] RBP: 00007f0033489090 R08: 0000000000000000 R09: 0000000000000000
[  341.192641][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.200603][ T8607] R13: 0000000000000000 R14: 00007f0032915f80 R15: 00007f0032a3fa38
[  341.208581][ T8607]  </TASK>
[  341.233655][ T8607] ERROR: Out of memory at tomoyo_realpath_from_path.
[  341.290439][ T8607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  341.355016][ T5621] usb 3-1: Using ep0 maxpacket: 16
[  341.395271][ T5281] usb 5-1: Waiting for MOTU Microbook II to boot up...
[  341.402201][ T5281] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22
[  341.423689][ T5621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  341.449175][ T5281] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  341.458246][ T5621] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  341.465095][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.492511][ T5281] usb 5-1: USB disconnect, device number 53
[  341.505040][ T5621] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  341.519223][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.554936][ T5621] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  341.617867][ T5621] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  341.641658][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.589'.
[  341.659542][ T5621] usb 3-1: config 1 interface 0 has no altsetting 0
[  341.687614][ T5621] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  341.714814][  T940] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  341.728221][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.796274][ T5621] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  342.015356][ T5621] scsi host1: usb-storage 3-1:1.0
[  342.025316][ T5281] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  342.113093][ T4616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  342.120911][ T5283] vhci_hcd: vhci_device speed not set
[  342.135302][ T4616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  342.145013][ T4616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  342.153484][ T4616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  342.179294][ T4616] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  342.196324][ T4616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  342.208871][ T5281] usb 1-1: device descriptor read/64, error -71
[  342.311968][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.338881][ T5237] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  342.418890][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.489930][ T5621] usb 3-1: USB disconnect, device number 48
[  342.494979][ T5281] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  342.559287][ T2541] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.665184][ T5281] usb 1-1: device descriptor read/64, error -71
[  342.725657][ T2541] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.805369][ T5281] usb usb1-port1: attempt power cycle
[  342.839674][ T2541] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.854888][  T940] usb 4-1: device descriptor read/64, error -71
[  342.949807][ T2541] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.134826][  T940] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  343.234896][ T5281] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  343.319800][ T5281] usb 1-1: device descriptor read/8, error -71
[  343.386886][  T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.411218][  T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.443796][  T940] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  343.458140][  T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.484292][  T940] usb 4-1: config 0 descriptor??
[  343.496003][ T8630] chnl_net:caif_netlink_parms(): no params data found
[  343.527076][ T2541] bridge_slave_1: left allmulticast mode
[  343.532750][ T2541] bridge_slave_1: left promiscuous mode
[  343.554916][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.565166][ T5621] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  343.580783][ T2541] bridge_slave_0: left allmulticast mode
[  343.593320][ T2541] bridge_slave_0: left promiscuous mode
[  343.616171][ T5281] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  343.634977][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.675772][ T5281] usb 1-1: device descriptor read/8, error -71
[  343.756335][ T5621] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  343.801485][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.825557][ T5281] usb usb1-port1: unable to enumerate USB device
[  343.837628][ T5621] usb 3-1: Product: syz
[  343.841839][ T5621] usb 3-1: Manufacturer: syz
[  343.865497][ T5621] usb 3-1: SerialNumber: syz
[  343.883554][ T5621] usb 3-1: config 0 descriptor??
[  343.965581][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.998770][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.065122][   T46] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  344.078022][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.128159][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.142262][  T940] usbhid 4-1:0.0: can't add hid device: -32
[  344.156071][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.174056][  T940] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  344.182567][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.191972][ T8640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  344.257847][ T5621] usb 3-1: Waiting for MOTU Microbook II to boot up...
[  344.265194][ T5237] Bluetooth: hci7: command tx timeout
[  344.310762][ T5621] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22
[  344.320053][ T5621] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  344.363376][ T5621] usb 3-1: USB disconnect, device number 49
[  344.808672][ T2541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  344.841918][ T2541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.871646][ T2541] bond0 (unregistering): Released all slaves
[  344.927394][   T46] usb 5-1: device descriptor read/64, error -71
[  345.237709][   T46] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  345.527703][   T46] usb 5-1: config 0 has an invalid interface number: 18 but max is 0
[  345.607790][   T46] usb 5-1: config 0 has no interface number 0
[  345.614840][   T46] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.639916][   T46] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.658011][   T46] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  345.711650][   T46] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  345.720428][   T46] usb 5-1: Manufacturer: syz
[  345.744951][   T46] usb 5-1: config 0 descriptor??
[  346.082825][ T5281] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  346.088194][ T8669] ip6gretap1: entered allmulticast mode
[  346.104505][    T9] usb 4-1: USB disconnect, device number 31
[  346.130309][ T8653] QAT: Device 0 not found
[  346.227105][ T5281] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  346.345003][ T5237] Bluetooth: hci7: command tx timeout
[  346.402095][ T2541] hsr_slave_0: left promiscuous mode
[  346.455811][ T2541] hsr_slave_1: left promiscuous mode
[  346.510913][ T2541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.519608][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.598377][ T8681] netlink: 168 bytes leftover after parsing attributes in process `syz.3.599'.
[  346.605120][   T46] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.001B/input/input39
[  346.620764][ T2541] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.648047][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.741433][   T46] sony 0003:054C:03D5.001B: input,hidraw1: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18
[  346.833734][ T2541] veth1_macvtap: left promiscuous mode
[  346.845459][ T2541] veth0_macvtap: left promiscuous mode
[  346.865655][ T2541] veth1_vlan: left promiscuous mode
[  346.879257][ T2541] veth0_vlan: left promiscuous mode
[  347.357125][ T8697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.418944][ T8697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.634869][   T46] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  347.824892][   T46] usb 3-1: device descriptor read/64, error -71
[  347.956286][ T5283] usb 5-1: reset high-speed USB device number 55 using dummy_hcd
[  348.135070][   T46] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  348.228032][  T940] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  348.305039][   T46] usb 3-1: device descriptor read/64, error -71
[  348.425166][ T5237] Bluetooth: hci7: command tx timeout
[  348.442833][   T46] usb usb3-port1: attempt power cycle
[  348.453345][  T940] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  348.476159][  T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.499786][  T940] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  348.526821][  T940] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  348.552689][  T940] usb 1-1: Manufacturer: syz
[  348.590368][  T940] usb 1-1: config 0 descriptor??
[  348.848649][  T940] rc_core: IR keymap rc-hauppauge not found
[  348.874490][  T940] Registered IR keymap rc-empty
[  348.886736][   T46] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  348.926595][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.927908][  T940] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  348.986519][   T46] usb 3-1: device descriptor read/8, error -71
[  349.016034][  T940] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input40
[  349.029138][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.274993][   T46] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  349.341642][   T46] usb 3-1: device descriptor read/8, error -71
[  349.447663][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[  349.487207][   T46] usb usb3-port1: unable to enumerate USB device
[  349.668029][ T5621] usb 1-1: USB disconnect, device number 47
[  349.908849][ T5281] usb 5-1: USB disconnect, device number 55
[  349.917772][ T2541] team0 (unregistering): Port device team_slave_1 removed
[  350.095013][ T2541] team0 (unregistering): Port device team_slave_0 removed
[  350.136572][ T8729] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  350.143206][ T8729] PKCS7: Only support pkcs7_signedData type
[  350.510258][ T5237] Bluetooth: hci7: command tx timeout
[  350.803569][ T8741] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  351.549463][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.571327][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.593435][ T8630] bridge_slave_0: entered allmulticast mode
[  351.604953][ T8630] bridge_slave_0: entered promiscuous mode
[  351.630729][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.665897][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.683602][ T8630] bridge_slave_1: entered allmulticast mode
[  351.698601][ T8630] bridge_slave_1: entered promiscuous mode
[  351.999237][ T8752] FAULT_INJECTION: forcing a failure.
[  351.999237][ T8752] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.041812][ T8752] CPU: 1 UID: 0 PID: 8752 Comm: syz.0.617 Not tainted 6.11.0-rc4-syzkaller #0
[  352.050715][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  352.060796][ T8752] Call Trace:
[  352.064182][ T8752]  <TASK>
[  352.067114][ T8752]  dump_stack_lvl+0x241/0x360
[  352.071799][ T8752]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.076989][ T8752]  ? __pfx__printk+0x10/0x10
[  352.081577][ T8752]  ? __pfx_lock_release+0x10/0x10
[  352.086602][ T8752]  should_fail_ex+0x3b0/0x4e0
[  352.091272][ T8752]  _copy_from_iter+0x1f6/0x1960
[  352.096117][ T8752]  ? __virt_addr_valid+0x183/0x530
[  352.101215][ T8752]  ? __pfx_lock_release+0x10/0x10
[  352.106238][ T8752]  ? __alloc_skb+0x28f/0x440
[  352.110822][ T8752]  ? __pfx__copy_from_iter+0x10/0x10
[  352.116104][ T8752]  ? __virt_addr_valid+0x183/0x530
[  352.121210][ T8752]  ? __virt_addr_valid+0x183/0x530
[  352.126333][ T8752]  ? __virt_addr_valid+0x45f/0x530
[  352.131453][ T8752]  ? __check_object_size+0x49c/0x900
[  352.136731][ T8752]  netlink_sendmsg+0x73d/0xcb0
[  352.141490][ T8752]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.146776][ T8752]  ? __import_iovec+0x536/0x820
[  352.151618][ T8752]  ? aa_sock_msg_perm+0x91/0x160
[  352.156552][ T8752]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  352.161842][ T8752]  ? security_socket_sendmsg+0x87/0xb0
[  352.167316][ T8752]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.172594][ T8752]  __sock_sendmsg+0x221/0x270
[  352.177276][ T8752]  ____sys_sendmsg+0x525/0x7d0
[  352.182064][ T8752]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.187360][ T8752]  __sys_sendmsg+0x2b0/0x3a0
[  352.191953][ T8752]  ? __pfx___sys_sendmsg+0x10/0x10
[  352.197064][ T8752]  ? vfs_write+0x7c4/0xc90
[  352.201523][ T8752]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  352.207867][ T8752]  ? do_syscall_64+0x100/0x230
[  352.212630][ T8752]  ? do_syscall_64+0xb6/0x230
[  352.217302][ T8752]  do_syscall_64+0xf3/0x230
[  352.221812][ T8752]  ? clear_bhb_loop+0x35/0x90
[  352.226493][ T8752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.232385][ T8752] RIP: 0033:0x7f1efa779e79
[  352.236792][ T8752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.256394][ T8752] RSP: 002b:00007f1efb4a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.264806][ T8752] RAX: ffffffffffffffda RBX: 00007f1efa915f80 RCX: 00007f1efa779e79
[  352.272769][ T8752] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  352.280727][ T8752] RBP: 00007f1efb4a3090 R08: 0000000000000000 R09: 0000000000000000
[  352.288689][ T8752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.296655][ T8752] R13: 0000000000000000 R14: 00007f1efa915f80 R15: 00007f1efaa3fa38
[  352.304664][ T8752]  </TASK>
[  352.307791][    C1] vkms_vblank_simulate: vblank timer overrun
[  352.398183][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.442766][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.602414][ T8630] team0: Port device team_slave_0 added
[  352.624424][ T8630] team0: Port device team_slave_1 added
[  352.794833][ T5281] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  352.888810][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.922288][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.993722][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.009331][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.018175][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.044147][    C1] vkms_vblank_simulate: vblank timer overrun
[  353.081858][ T8777] netlink: 168 bytes leftover after parsing attributes in process `syz.4.622'.
[  353.088288][ T5281] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  353.127473][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.155417][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.163526][ T5281] usb 3-1: Product: syz
[  353.167856][ T5281] usb 3-1: Manufacturer: syz
[  353.172467][ T5281] usb 3-1: SerialNumber: syz
[  353.188476][ T5281] usb 3-1: config 0 descriptor??
[  353.286738][ T2541] IPVS: stop unused estimator thread 0...
[  353.341411][ T8630] hsr_slave_0: entered promiscuous mode
[  353.403535][ T5281] usb 3-1: Waiting for MOTU Microbook II to boot up...
[  353.426289][ T8630] hsr_slave_1: entered promiscuous mode
[  353.448590][ T5281] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22
[  353.465266][ T8785] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  353.489767][ T5281] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  353.505182][ T8785] PKCS7: Only support pkcs7_signedData type
[  353.535095][ T8630] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  353.562830][ T5281] usb 3-1: USB disconnect, device number 54
[  353.570091][ T8630] Cannot create hsr debugfs directory
[  353.924979][   T46] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  354.079410][   T25] IPVS: starting estimator thread 0...
[  354.127789][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.147912][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.164584][   T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  354.184938][ T8798] IPVS: using max 27 ests per chain, 64800 per kthread
[  354.193788][   T46] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  354.232106][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.276302][   T46] usb 4-1: config 0 descriptor??
[  354.710038][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.727702][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.327166][ T8630] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  355.394031][ T8630] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  355.477145][ T8821] veth0_vlan: entered allmulticast mode
[  355.625822][ T8630] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  355.659042][ T8829] binder: BINDER_SET_CONTEXT_MGR already set
[  355.686573][ T8829] binder: 8828:8829 ioctl 4018620d 20000040 returned -16
[  355.700969][ T8630] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  356.069679][ T8630] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.194207][ T8630] 8021q: adding VLAN 0 to HW filter on device team0
[  356.249837][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.257064][ T5741] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.326887][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.334117][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.577839][ T8630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  356.602430][ T8846] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  356.636913][ T8846] PKCS7: Only support pkcs7_signedData type
[  356.745252][   T46] usbhid 4-1:0.0: can't add hid device: -71
[  356.751328][   T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  356.815475][   T46] usb 4-1: USB disconnect, device number 32
[  356.823920][ T8630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.020275][ T8630] veth0_vlan: entered promiscuous mode
[  357.084957][ T8630] veth1_vlan: entered promiscuous mode
[  357.277909][ T8630] veth0_macvtap: entered promiscuous mode
[  357.317896][ T8630] veth1_macvtap: entered promiscuous mode
[  357.358676][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.390580][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.424074][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.439738][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.504790][ T5228] IPVS: starting estimator thread 0...
[  357.513660][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.574763][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.597545][ T8862] IPVS: using max 27 ests per chain, 64800 per kthread
[  357.615756][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.658658][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.692702][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.731532][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.772236][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  357.820374][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.864555][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  357.953670][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.000514][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.043614][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.090202][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.123121][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.150211][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.199888][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.227723][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.249473][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.276893][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.318864][ T8630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  358.335009][ T5228] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  358.356690][ T8630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  358.399395][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.473739][ T8630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.483477][ T8630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.493188][ T8630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.502415][ T8630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.557312][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.635256][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.679073][ T5228] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  358.701331][ T5228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.735181][ T5228] usb 5-1: config 0 descriptor??
[  358.814402][  T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.846948][  T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.921853][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.950326][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.967083][ T8883] netlink: 168 bytes leftover after parsing attributes in process `syz.3.643'.
[  359.200052][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.291372][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.408155][ T5228] usbhid 5-1:0.0: can't add hid device: -32
[  359.416812][ T5228] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  359.506613][ T8889] binder: BINDER_SET_CONTEXT_MGR already set
[  359.524055][ T8889] binder: 8888:8889 ioctl 4018620d 20000040 returned -16
[  359.601154][ T8891] FAULT_INJECTION: forcing a failure.
[  359.601154][ T8891] name failslab, interval 1, probability 0, space 0, times 0
[  359.614210][ T8891] CPU: 0 UID: 0 PID: 8891 Comm: syz.0.646 Not tainted 6.11.0-rc4-syzkaller #0
[  359.623092][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  359.633172][ T8891] Call Trace:
[  359.636471][ T8891]  <TASK>
[  359.639425][ T8891]  dump_stack_lvl+0x241/0x360
[  359.644152][ T8891]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.649390][ T8891]  ? __pfx__printk+0x10/0x10
[  359.654034][ T8891]  should_fail_ex+0x3b0/0x4e0
[  359.658744][ T8891]  ? skb_clone+0x20c/0x390
[  359.663188][ T8891]  should_failslab+0xac/0x100
[  359.667904][ T8891]  ? skb_clone+0x20c/0x390
[  359.672354][ T8891]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  359.677758][ T8891]  skb_clone+0x20c/0x390
[  359.682030][ T8891]  ? dev_queue_xmit_nit+0x220/0xc10
[  359.687279][ T8891]  dev_queue_xmit_nit+0x419/0xc10
[  359.692331][ T8891]  ? dev_queue_xmit_nit+0x2b/0xc10
[  359.697493][ T8891]  ? validate_xmit_skb+0x9f9/0x1120
[  359.702707][ T8891]  dev_hard_start_xmit+0x15f/0x7e0
[  359.707844][ T8891]  ? __pfx_validate_xmit_skb+0x10/0x10
[  359.713318][ T8891]  __dev_queue_xmit+0x1b63/0x3e90
[  359.718347][ T8891]  ? kasan_save_track+0x51/0x80
[  359.723234][ T8891]  ? do_syscall_64+0xf3/0x230
[  359.727920][ T8891]  ? __dev_queue_xmit+0x2da/0x3e90
[  359.733040][ T8891]  ? __pfx___dev_queue_xmit+0x10/0x10
[  359.738517][ T8891]  ? __copy_skb_header+0x437/0x5b0
[  359.743636][ T8891]  ? __asan_memcpy+0x40/0x70
[  359.748230][ T8891]  ? __copy_skb_header+0x437/0x5b0
[  359.753349][ T8891]  ? __skb_clone+0x454/0x6c0
[  359.757953][ T8891]  ? skb_clone+0x240/0x390
[  359.762382][ T8891]  __netlink_deliver_tap+0x54d/0x7c0
[  359.767676][ T8891]  ? netlink_deliver_tap+0x2e/0x1b0
[  359.772873][ T8891]  netlink_deliver_tap+0x19d/0x1b0
[  359.777985][ T8891]  netlink_unicast+0x7c4/0x990
[  359.782759][ T8891]  ? __pfx_netlink_unicast+0x10/0x10
[  359.788047][ T8891]  ? __virt_addr_valid+0x183/0x530
[  359.793161][ T8891]  ? __check_object_size+0x49c/0x900
[  359.798445][ T8891]  ? bpf_lsm_netlink_send+0x9/0x10
[  359.803568][ T8891]  netlink_sendmsg+0x8e4/0xcb0
[  359.808350][ T8891]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.813639][ T8891]  ? __import_iovec+0x536/0x820
[  359.818494][ T8891]  ? aa_sock_msg_perm+0x91/0x160
[  359.823441][ T8891]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  359.828756][ T8891]  ? security_socket_sendmsg+0x87/0xb0
[  359.834250][ T8891]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.839545][ T8891]  __sock_sendmsg+0x221/0x270
[  359.844243][ T8891]  ____sys_sendmsg+0x525/0x7d0
[  359.849033][ T8891]  ? __pfx_____sys_sendmsg+0x10/0x10
[  359.854346][ T8891]  __sys_sendmsg+0x2b0/0x3a0
[  359.858957][ T8891]  ? __pfx___sys_sendmsg+0x10/0x10
[  359.864077][ T8891]  ? vfs_write+0x7c4/0xc90
[  359.868545][ T8891]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  359.874891][ T8891]  ? do_syscall_64+0x100/0x230
[  359.879677][ T8891]  ? do_syscall_64+0xb6/0x230
[  359.884363][ T8891]  do_syscall_64+0xf3/0x230
[  359.888872][ T8891]  ? clear_bhb_loop+0x35/0x90
[  359.893557][ T8891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.899451][ T8891] RIP: 0033:0x7f1efa779e79
[  359.903875][ T8891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.923521][ T8891] RSP: 002b:00007f1efb4a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.931939][ T8891] RAX: ffffffffffffffda RBX: 00007f1efa915f80 RCX: 00007f1efa779e79
[  359.939915][ T8891] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  359.947888][ T8891] RBP: 00007f1efb4a3090 R08: 0000000000000000 R09: 0000000000000000
[  359.955862][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.963837][ T8891] R13: 0000000000000000 R14: 00007f1efa915f80 R15: 00007f1efaa3fa38
[  359.971842][ T8891]  </TASK>
[  360.000515][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.040208][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.226160][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'.
[  360.374821][   T46] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  360.568648][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.594934][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.631451][   T46] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  360.649092][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.663856][   T46] usb 2-1: config 0 descriptor??
[  360.800450][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'.
[  360.985028][ T5281] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  361.091700][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.111033][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.160464][   T46] usbhid 2-1:0.0: can't add hid device: -32
[  361.175286][   T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  361.177720][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.185390][ T5281] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  361.241535][ T5228] usb 5-1: USB disconnect, device number 56
[  361.277568][ T5281] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  361.294225][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.355207][ T5281] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  361.382885][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.469432][ T5281] usb 1-1: config 0 descriptor??
[  361.494369][ T5281] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  361.774752][ T5228] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  361.815392][   T46] usb 1-1: USB disconnect, device number 48
[  361.825180][   T29] audit: type=1400 audit(1724095789.739:4): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=8919 comm="syz.3.657"
[  361.894041][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'.
[  361.984823][ T5228] usb 5-1: Using ep0 maxpacket: 16
[  362.011880][ T5228] usb 5-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  362.042349][ T5228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.105205][ T5228] usb 5-1: Product: syz
[  362.110187][ T5228] usb 5-1: Manufacturer: syz
[  362.120792][ T5228] usb 5-1: SerialNumber: syz
[  362.142902][ T5228] usb 5-1: config 0 descriptor??
[  362.163073][ T5228] usb-storage 5-1:0.0: USB Mass Storage device detected
[  362.195662][   T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  362.387659][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11
[  362.441468][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024
[  362.516350][   T25] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  362.556166][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.599210][   T25] usb 4-1: config 0 descriptor??
[  362.622561][ T8922] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  362.639828][   T25] gspca_main: spca561-2.14.0 probing abcd:cdee
[  363.019095][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.045649][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.179469][   T25] spca561 4-1:0.0: probe with driver spca561 failed with error -22
[  363.203274][ T5281] usb 2-1: USB disconnect, device number 41
[  363.214913][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'.
[  363.251815][   T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  363.275271][   T25] usb 4-1: MIDIStreaming interface descriptor not found
[  363.290992][ T8947] FAULT_INJECTION: forcing a failure.
[  363.290992][ T8947] name failslab, interval 1, probability 0, space 0, times 0
[  363.348437][ T8947] CPU: 0 UID: 0 PID: 8947 Comm: syz.0.661 Not tainted 6.11.0-rc4-syzkaller #0
[  363.357315][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  363.367365][ T8947] Call Trace:
[  363.370634][ T8947]  <TASK>
[  363.373557][ T8947]  dump_stack_lvl+0x241/0x360
[  363.378246][ T8947]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.383432][ T8947]  ? __pfx__printk+0x10/0x10
[  363.388031][ T8947]  ? __kmalloc_cache_noprof+0x44/0x2c0
[  363.393487][ T8947]  ? __pfx___might_resched+0x10/0x10
[  363.398773][ T8947]  should_fail_ex+0x3b0/0x4e0
[  363.403446][ T8947]  should_failslab+0xac/0x100
[  363.408137][ T8947]  ? ip_set_create+0x330/0x1900
[  363.413006][ T8947]  __kmalloc_cache_noprof+0x6c/0x2c0
[  363.418288][ T8947]  ip_set_create+0x330/0x1900
[  363.422963][ T8947]  ? trace_raw_output_contention_end+0x62/0xd0
[  363.429116][ T8947]  ? __pfx_ip_set_create+0x10/0x10
[  363.434248][ T8947]  ? trace_contention_end+0x3c/0x120
[  363.439568][ T8947]  ? nfnetlink_rcv_msg+0x225/0x1180
[  363.444777][ T8947]  nfnetlink_rcv_msg+0xbec/0x1180
[  363.449805][ T8947]  ? kernel_text_address+0xa7/0xe0
[  363.454933][ T8947]  ? nfnetlink_rcv_msg+0x225/0x1180
[  363.460165][ T8947]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  363.465637][ T8947]  ? netlink_deliver_tap+0x19d/0x1b0
[  363.470914][ T8947]  ? netlink_unicast+0x7c4/0x990
[  363.475851][ T8947]  ? netlink_sendmsg+0x8e4/0xcb0
[  363.480782][ T8947]  ? __sock_sendmsg+0x221/0x270
[  363.485633][ T8947]  ? ____sys_sendmsg+0x525/0x7d0
[  363.490571][ T8947]  ? __sys_sendmsg+0x2b0/0x3a0
[  363.495425][ T8947]  ? do_syscall_64+0xf3/0x230
[  363.500092][ T8947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.506182][ T8947]  netlink_rcv_skb+0x1e3/0x430
[  363.510991][ T8947]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  363.516447][ T8947]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  363.521735][ T8947]  ? apparmor_capable+0x13b/0x1b0
[  363.526755][ T8947]  ? bpf_lsm_capable+0x9/0x10
[  363.531430][ T8947]  ? security_capable+0x90/0xb0
[  363.536279][ T8947]  nfnetlink_rcv+0x297/0x2ad0
[  363.540949][ T8947]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  363.546663][ T8947]  ? __dev_queue_xmit+0x2da/0x3e90
[  363.551792][ T8947]  ? __dev_queue_xmit+0x1763/0x3e90
[  363.557009][ T8947]  ? kasan_save_track+0x51/0x80
[  363.561881][ T8947]  ? do_syscall_64+0xf3/0x230
[  363.566563][ T8947]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  363.571679][ T8947]  ? __dev_queue_xmit+0x2da/0x3e90
[  363.576790][ T8947]  ? __pfx___dev_queue_xmit+0x10/0x10
[  363.582177][ T8947]  ? ref_tracker_free+0x643/0x7e0
[  363.587235][ T8947]  ? __asan_memcpy+0x40/0x70
[  363.591822][ T8947]  ? __pfx_ref_tracker_free+0x10/0x10
[  363.597201][ T8947]  ? netlink_deliver_tap+0x2e/0x1b0
[  363.602392][ T8947]  ? skb_clone+0x240/0x390
[  363.606821][ T8947]  ? __pfx_lock_release+0x10/0x10
[  363.611857][ T8947]  ? __netlink_deliver_tap+0x77e/0x7c0
[  363.617415][ T8947]  ? netlink_deliver_tap+0x2e/0x1b0
[  363.622617][ T8947]  netlink_unicast+0x7f6/0x990
[  363.627388][ T8947]  ? __pfx_netlink_unicast+0x10/0x10
[  363.632667][ T8947]  ? __virt_addr_valid+0x183/0x530
[  363.637770][ T8947]  ? __check_object_size+0x49c/0x900
[  363.643043][ T8947]  ? bpf_lsm_netlink_send+0x9/0x10
[  363.648152][ T8947]  netlink_sendmsg+0x8e4/0xcb0
[  363.652915][ T8947]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.658192][ T8947]  ? __import_iovec+0x536/0x820
[  363.663036][ T8947]  ? aa_sock_msg_perm+0x91/0x160
[  363.667966][ T8947]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  363.673254][ T8947]  ? security_socket_sendmsg+0x87/0xb0
[  363.678710][ T8947]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.683983][ T8947]  __sock_sendmsg+0x221/0x270
[  363.688667][ T8947]  ____sys_sendmsg+0x525/0x7d0
[  363.693450][ T8947]  ? __pfx_____sys_sendmsg+0x10/0x10
[  363.698763][ T8947]  __sys_sendmsg+0x2b0/0x3a0
[  363.703353][ T8947]  ? __pfx___sys_sendmsg+0x10/0x10
[  363.708477][ T8947]  ? vfs_write+0x7c4/0xc90
[  363.712946][ T8947]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  363.719278][ T8947]  ? do_syscall_64+0x100/0x230
[  363.724038][ T8947]  ? do_syscall_64+0xb6/0x230
[  363.728709][ T8947]  do_syscall_64+0xf3/0x230
[  363.733203][ T8947]  ? clear_bhb_loop+0x35/0x90
[  363.737886][ T8947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.743771][ T8947] RIP: 0033:0x7f1efa779e79
[  363.748179][ T8947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.767779][ T8947] RSP: 002b:00007f1efb4a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.776185][ T8947] RAX: ffffffffffffffda RBX: 00007f1efa915f80 RCX: 00007f1efa779e79
[  363.784167][ T8947] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  363.792135][ T8947] RBP: 00007f1efb4a3090 R08: 0000000000000000 R09: 0000000000000000
[  363.800122][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.808090][ T8947] R13: 0000000000000000 R14: 00007f1efa915f80 R15: 00007f1efaa3fa38
[  363.816085][ T8947]  </TASK>
[  364.174880][   T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  364.393559][ T5281] usb 5-1: USB disconnect, device number 57
[  364.399860][   T25] usb 2-1: Using ep0 maxpacket: 8
[  364.432086][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  364.467985][   T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  364.497796][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.526389][   T25] usb 2-1: Product: syz
[  364.536169][   T25] usb 2-1: Manufacturer: syz
[  364.544276][   T25] usb 2-1: SerialNumber: syz
[  364.560338][   T25] usb 2-1: config 0 descriptor??
[  364.580210][   T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  364.601144][ T8960] loop0: detected capacity change from 0 to 7
[  364.677064][ T8960] Dev loop0: unable to read RDB block 7
[  364.685162][ T8960]  loop0: unable to read partition table
[  364.699957][ T8960] loop0: partition table beyond EOD, truncated
[  364.714775][ T8960] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  364.714775][ T8960] 
) failed (rc=-5)
[  364.839561][   T46] usb 4-1: USB disconnect, device number 33
[  365.269471][ T8972] netlink: 168 bytes leftover after parsing attributes in process `syz.4.668'.
[  365.466604][   T46] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  365.665545][   T46] usb 4-1: Using ep0 maxpacket: 8
[  365.691081][   T46] usb 4-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=6a.96
[  365.710972][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.726389][   T46] usb 4-1: Product: syz
[  365.737872][   T46] usb 4-1: Manufacturer: syz
[  365.753164][   T46] usb 4-1: SerialNumber: syz
[  365.770193][   T46] usb 4-1: config 0 descriptor??
[  365.795249][   T46] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state.
[  365.834008][   T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  365.860382][   T46] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800))
[  365.884873][   T46] usb 4-1: media controller created
[  365.994534][   T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  366.096306][   T46] dvb-usb: bulk message failed: -22 (6/0)
[  366.120606][   T46] dvb-usb: bulk message failed: -22 (6/0)
[  366.133008][   T46] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)'
[  366.264963][   T46] rc_core: IR keymap rc-avermedia-m135a not found
[  366.277339][   T46] Registered IR keymap rc-empty
[  366.306515][   T25] gspca_zc3xx: reg_r err -32
[  366.318203][   T46] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  366.413435][   T46] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input41
[  366.443813][   T46] dvb-usb: schedule remote query interval to 150 msecs.
[  366.482001][   T46] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected.
[  366.533353][   T46] usb 4-1: USB disconnect, device number 34
[  366.687597][   T46] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected.
[  366.945810][   T25] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  366.981098][   T25] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32
[  367.500800][   T25] usb 2-1: USB disconnect, device number 42
[  367.806465][ T9011] loop0: detected capacity change from 0 to 7
[  367.861227][ T9011] Dev loop0: unable to read RDB block 7
[  367.884810][ T9011]  loop0: unable to read partition table
[  367.892951][ T9011] loop0: partition table beyond EOD, truncated
[  367.945148][ T9011] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  367.945148][ T9011] 
) failed (rc=-5)
[  368.104886][   T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  368.314628][   T25] usb 2-1: Using ep0 maxpacket: 32
[  368.355662][   T25] usb 2-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config
[  368.408034][   T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  368.431221][   T25] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  368.478734][   T25] usb 2-1: string descriptor 0 read error: -22
[  368.502226][ T9028] netlink: 168 bytes leftover after parsing attributes in process `syz.4.682'.
[  368.531697][   T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  368.574902][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.604471][   T25] cdc_ncm 2-1:1.0: skipping garbage
[  368.621952][   T25] cdc_ncm 2-1:1.0: skipping garbage
[  368.658133][   T25] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  368.690521][   T25] cdc_ncm 2-1:1.0: bind() failure
[  369.288922][ T9037] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.687'.
[  369.347782][ T9034] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.687'.
[  369.664903][   T46] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  369.808796][ T9042] netlink: 'syz.0.686': attribute type 4 has an invalid length.
[  369.870393][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.910996][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.988973][   T46] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  370.018677][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.046288][   T46] usb 5-1: config 0 descriptor??
[  370.495215][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.536134][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.618991][   T46] usbhid 5-1:0.0: can't add hid device: -32
[  370.659672][   T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  370.724766][   T25] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  370.753876][   T46] usb 2-1: USB disconnect, device number 43
[  370.945698][   T25] usb 1-1: Using ep0 maxpacket: 8
[  370.992365][ T9062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.020326][ T9060] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  371.036790][   T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  371.046266][ T9062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.065005][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.103267][   T25] usb 1-1: Product: syz
[  371.112927][   T25] usb 1-1: Manufacturer: syz
[  371.118403][   T25] usb 1-1: SerialNumber: syz
[  371.155885][   T25] usb 1-1: config 0 descriptor??
[  371.383792][   T25] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  372.084804][ T5617] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  372.319450][ T5617] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  372.347993][ T5617] usb 4-1: config 0 has no interface number 0
[  372.385078][ T5617] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  372.431117][ T5228] usb 5-1: USB disconnect, device number 58
[  372.443555][ T5617] usb 4-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28
[  372.467840][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.514837][ T5617] usb 4-1: Product: syz
[  372.529498][ T5617] usb 4-1: Manufacturer: syz
[  372.540030][ T5617] usb 4-1: SerialNumber: syz
[  372.568439][ T5617] usb 4-1: config 0 descriptor??
[  372.695276][    T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  372.818914][ T5617] usb 4-1: Found UVC 0.00 device syz (05ac:8600)
[  372.826356][ T5617] usb 4-1: No valid video chain found.
[  372.836898][ T5617] usb 4-1: USB disconnect, device number 35
[  372.864919][    T8] usb 2-1: device descriptor read/64, error -71
[  372.994850][ T5228] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  373.174992][    T8] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  373.206519][ T5228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.226248][ T5228] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  373.246536][ T5228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.274146][ T5228] usb 5-1: config 0 descriptor??
[  373.332574][ T5228] usb 5-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  373.345197][ T5228] usb 5-1: No valid video chain found.
[  373.364826][    T8] usb 2-1: device descriptor read/64, error -71
[  373.496635][    T8] usb usb2-port1: attempt power cycle
[  373.561425][ T5281] usb 5-1: USB disconnect, device number 59
[  373.945949][   T25] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  374.004770][    T8] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  374.065958][    T8] usb 2-1: device descriptor read/8, error -71
[  374.149721][   T25] usb 1-1: USB disconnect, device number 49
[  374.401857][    T8] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  374.464976][ T5228] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  374.515891][    T8] usb 2-1: device descriptor read/8, error -71
[  374.522322][ T5617] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  374.645507][    T8] usb usb2-port1: unable to enumerate USB device
[  374.654894][   T25] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  374.684825][ T5228] usb 4-1: Using ep0 maxpacket: 8
[  374.691961][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.706762][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.729042][ T9095] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  374.747824][ T5617] usb 3-1: Using ep0 maxpacket: 16
[  374.763982][ T9095] PKCS7: Only support pkcs7_signedData type
[  374.765536][ T5228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  374.807976][ T5617] usb 3-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  374.834820][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.847701][ T5228] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  374.859794][ T5617] usb 3-1: Product: syz
[  374.864361][ T5617] usb 3-1: Manufacturer: syz
[  374.875366][ T5617] usb 3-1: SerialNumber: syz
[  374.880267][ T5228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.897902][   T25] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  374.901489][ T5617] usb 3-1: config 0 descriptor??
[  374.915156][ T5228] usb 4-1: config 0 descriptor??
[  374.938784][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.962188][ T5617] usb-storage 3-1:0.0: USB Mass Storage device detected
[  374.981944][   T25] usb 1-1: Product: syz
[  374.994776][   T25] usb 1-1: Manufacturer: syz
[  375.011960][   T25] usb 1-1: SerialNumber: syz
[  375.028297][   T25] usb 1-1: config 0 descriptor??
[  375.055491][   T25] usb 1-1: Waiting for MOTU Microbook II to boot up...
[  375.079834][   T25] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22
[  375.098020][   T25] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  375.259695][   T25] usb 1-1: USB disconnect, device number 50
[  375.351771][ T5228] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0
[  375.419511][ T5228] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0
[  375.535237][ T5228] hid-picolcd 0003:04D8:C002.001C: No report with id 0x11 found
[  375.740926][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.755765][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.798598][    T8] usb 4-1: USB disconnect, device number 36
[  376.263830][ T9112] netlink: 168 bytes leftover after parsing attributes in process `syz.0.711'.
[  376.836038][   T46] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  377.044869][   T46] usb 4-1: Using ep0 maxpacket: 16
[  377.067266][   T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  377.117672][   T46] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  377.141420][   T46] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  377.141717][ T5237] Bluetooth: hci6: unexpected event 0x04 length: 14 > 10
[  377.168486][   T46] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  377.195521][ T5228] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  377.240738][   T46] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  377.286184][ T5617] usb 3-1: USB disconnect, device number 55
[  377.301181][   T46] usb 4-1: config 1 interface 0 has no altsetting 0
[  377.322516][   T46] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  377.403934][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.454930][ T5228] usb 2-1: Using ep0 maxpacket: 16
[  377.473933][ T5228] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  377.493983][   T46] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  377.518901][ T5228] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  377.569037][ T5228] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  377.598951][ T5228] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  377.726491][   T46] scsi host1: usb-storage 4-1:1.0
[  377.764782][ T5228] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  377.902187][ T5228] usb 2-1: config 1 interface 0 has no altsetting 0
[  377.912504][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.917421][ T5228] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  377.972819][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.980856][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.006525][   T46] usb 4-1: USB disconnect, device number 37
[  378.026022][ T5617] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  378.067566][ T5228] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  378.273019][ T5617] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  378.286489][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.294523][ T5617] usb 3-1: Product: syz
[  378.298861][ T5228] scsi host2: usb-storage 2-1:1.0
[  378.315529][ T5617] usb 3-1: Manufacturer: syz
[  378.320158][ T5617] usb 3-1: SerialNumber: syz
[  378.330711][ T5617] usb 3-1: config 0 descriptor??
[  378.362263][ T5617] usb 3-1: Waiting for MOTU Microbook II to boot up...
[  378.381803][ T5617] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22
[  378.391334][ T5617] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  378.595780][ T9119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.660284][ T9119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.669471][ T5281] usb 3-1: USB disconnect, device number 56
[  378.677780][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  378.684746][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  378.740957][   T46] usb 2-1: USB disconnect, device number 48
[  379.224782][ T5237] Bluetooth: hci6: command tx timeout
[  379.734997][ T5228] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  379.826931][ T9150] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.721'.
[  379.866720][ T9150] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) !
[  379.947376][ T5228] usb 1-1: Using ep0 maxpacket: 8
[  379.959809][ T9156] team0: Port device virt_wifi0 added
[  379.964004][ T5228] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  379.988694][ T5228] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  380.002106][ T5228] usb 1-1: Product: syz
[  380.010519][ T5228] usb 1-1: Manufacturer: syz
[  380.020930][ T5228] usb 1-1: SerialNumber: syz
[  380.033385][ T5228] usb 1-1: config 0 descriptor??
[  380.047332][ T5228] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  380.074615][ T5617] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  380.250605][ T5617] usb 4-1: device descriptor read/64, error -71
[  380.534987][ T5617] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  380.677768][ T5228] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input43
[  380.715345][ T5617] usb 4-1: device descriptor read/64, error -71
[  380.856605][ T5617] usb usb4-port1: attempt power cycle
[  380.924895][    T8] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  381.147399][    T8] usb 3-1: Using ep0 maxpacket: 16
[  381.165256][ T5228] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  381.181931][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.209573][ T5621] usb 1-1: USB disconnect, device number 51
[  381.221373][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.250750][    T8] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.20
[  381.271775][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.303659][ T9189] loop0: detected capacity change from 0 to 7
[  381.315147][ T5617] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  381.324150][    T8] usb 3-1: config 0 descriptor??
[  381.355904][ T5617] usb 4-1: device descriptor read/8, error -71
[  381.365330][ T9189] Dev loop0: unable to read RDB block 7
[  381.386818][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.391977][ T9189]  loop0: unable to read partition table
[  381.419723][ T9189] loop0: partition table beyond EOD, truncated
[  381.432922][ T9189] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  381.432922][ T9189] 
) failed (rc=-5)
[  381.442830][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.464847][ T5228] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  381.477924][ T5228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.489442][ T5228] usb 5-1: config 0 descriptor??
[  381.684913][ T5617] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  381.718552][ T5617] usb 4-1: device descriptor read/8, error -71
[  381.768200][    T8] usbhid 3-1:0.0: can't add hid device: -32
[  381.782544][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  381.860832][ T5617] usb usb4-port1: unable to enumerate USB device
[  381.936863][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.978311][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.014416][ T5228] usbhid 5-1:0.0: can't add hid device: -32
[  382.072537][ T5228] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  382.218940][   T25] usb 3-1: USB disconnect, device number 57
[  382.383209][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.422569][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.690346][ T9204] mac80211_hwsim hwsim49 ������: renamed from wlan1 (while UP)
[  383.344883][   T25] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  383.544750][   T25] usb 4-1: Using ep0 maxpacket: 16
[  383.586839][   T25] usb 4-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  383.625265][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.644776][   T25] usb 4-1: Product: syz
[  383.654455][   T25] usb 4-1: Manufacturer: syz
[  383.673369][   T25] usb 4-1: SerialNumber: syz
[  383.737914][   T25] usb 4-1: config 0 descriptor??
[  383.770534][   T29] audit: type=1400 audit(1724095811.679:5): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  383.800515][   T25] usb-storage 4-1:0.0: USB Mass Storage device detected
[  383.814173][   T29] audit: type=1400 audit(1724095811.679:6): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  383.854754][   T29] audit: type=1400 audit(1724095811.679:7): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  383.939554][   T29] audit: type=1400 audit(1724095811.679:8): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  383.974301][   T29] audit: type=1400 audit(1724095811.679:9): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  384.031079][   T29] audit: type=1400 audit(1724095811.679:10): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  384.061248][   T25] usb 5-1: USB disconnect, device number 60
[  384.140862][   T29] audit: type=1400 audit(1724095811.679:11): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  384.238965][   T29] audit: type=1400 audit(1724095811.679:12): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  384.309701][   T29] audit: type=1400 audit(1724095811.679:13): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  384.357239][   T29] audit: type=1400 audit(1724095811.679:14): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=9216 comm="syz.1.738"
[  384.546525][ T9235] loop0: detected capacity change from 0 to 7
[  384.557484][ T9235] Dev loop0: unable to read RDB block 7
[  384.579997][ T9235]  loop0: unable to read partition table
[  384.601540][ T9235] loop0: partition table beyond EOD, truncated
[  384.619555][ T9235] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  384.619555][ T9235] 
) failed (rc=-5)
[  385.254801][ T5228] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  385.464908][ T5228] usb 2-1: Using ep0 maxpacket: 16
[  385.550997][ T5228] usb 2-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  385.573436][ T5228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.602845][ T5228] usb 2-1: Product: syz
[  385.627361][ T5228] usb 2-1: Manufacturer: syz
[  385.641275][ T5228] usb 2-1: SerialNumber: syz
[  385.674458][ T5228] usb 2-1: config 0 descriptor??
[  385.727351][ T5228] usb-storage 2-1:0.0: USB Mass Storage device detected
[  386.243071][   T25] usb 4-1: USB disconnect, device number 42
[  387.544182][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.822128][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.033844][ T5283] usb 2-1: USB disconnect, device number 49
[  388.136300][ T5228] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  388.334735][ T5228] usb 3-1: Using ep0 maxpacket: 16
[  388.425020][ T5228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  388.470871][ T5228] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  388.501397][ T5228] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  388.524925][ T5228] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  388.564704][ T5228] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  388.600448][ T5228] usb 3-1: config 1 interface 0 has no altsetting 0
[  388.631127][ T5228] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  388.645470][ T5283] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  388.680283][ T9278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  388.688055][ T9278] IPv6: NLM_F_CREATE should be set when creating new route
[  388.695453][ T9278] IPv6: NLM_F_CREATE should be set when creating new route
[  388.712814][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.787553][ T5228] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  388.840021][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.944810][ T5617] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  388.963194][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.013753][ T5228] scsi host1: usb-storage 3-1:1.0
[  389.050050][ T5283] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  389.104811][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.170538][ T5283] usb 2-1: config 0 descriptor??
[  389.204765][   T46] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  389.387149][ T9268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.414759][   T46] usb 4-1: Using ep0 maxpacket: 32
[  389.437249][   T46] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  389.451014][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.468716][   T46] usb 4-1: config 0 descriptor??
[  389.492874][   T46] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state
[  389.519596][   T46] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  389.539848][   T46] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  389.616878][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.679687][ T9292] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  389.710751][ T9268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.789297][ T5281] usb 4-1: USB disconnect, device number 43
[  389.863578][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.927146][ T5283] usbhid 2-1:0.0: can't add hid device: -32
[  389.933202][ T5283] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  390.002918][    T9] usb 3-1: USB disconnect, device number 58
[  390.282046][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.405118][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.524186][ T5283] usb 2-1: USB disconnect, device number 50
[  393.425817][ T5281] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  393.446138][ T9330] loop0: detected capacity change from 0 to 7
[  393.493938][ T9330] Dev loop0: unable to read RDB block 7
[  393.499946][ T9328] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  393.511455][ T9330]  loop0: unable to read partition table
[  393.521328][ T9330] loop0: partition table beyond EOD, truncated
[  393.535920][ T9330] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  393.535920][ T9330] 
) failed (rc=-5)
[  393.687546][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.724810][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.743725][ T5281] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  393.764698][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.785915][ T5281] usb 4-1: config 0 descriptor??
[  393.907618][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'.
[  394.447168][ T9325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.549619][ T9325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.995027][ T5281] uclogic 0003:256C:006D.001D: interface is invalid, ignoring
[  395.255605][ T5228] usb 4-1: USB disconnect, device number 44
[  396.025031][ T5617] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  396.105110][ T5237] Bluetooth: hci5: command 0x0406 tx timeout
[  396.234878][ T5617] usb 3-1: Using ep0 maxpacket: 16
[  396.245677][ T5617] usb 3-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  396.262149][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.273026][ T5617] usb 3-1: Product: syz
[  396.277732][ T5617] usb 3-1: Manufacturer: syz
[  396.282482][ T5617] usb 3-1: SerialNumber: syz
[  396.293755][ T5617] usb 3-1: config 0 descriptor??
[  396.304127][ T5617] usb-storage 3-1:0.0: USB Mass Storage device detected
[  396.631415][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'.
[  397.240009][ T9382] bridge0: port 1(vlan2) entered blocking state
[  397.262105][ T9382] bridge0: port 1(vlan2) entered disabled state
[  397.307041][ T9382] vlan2: entered allmulticast mode
[  397.436488][ T9382] vlan2: left allmulticast mode
[  397.568334][ T5283] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  397.778340][ T5283] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  397.823575][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[  397.895642][ T5283] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  397.972266][ T5283] usb 1-1: string descriptor 0 read error: -22
[  397.991544][ T5283] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  398.021801][   T46] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  398.041662][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.082013][ T5283] usb 1-1: config 0 descriptor??
[  398.107946][ T5283] em28xx 1-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  398.123261][ T5283] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  398.188799][ T9393] netlink: 'syz.4.781': attribute type 4 has an invalid length.
[  398.234854][   T46] usb 2-1: Using ep0 maxpacket: 32
[  398.252442][   T46] usb 2-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config
[  398.299995][   T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  398.363285][   T46] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  398.412867][   T46] usb 2-1: string descriptor 0 read error: -22
[  398.423600][   T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  398.433243][ T5283] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  398.451663][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.464969][ T5283] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  398.493811][ T5283] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  398.506724][   T46] cdc_ncm 2-1:1.0: skipping garbage
[  398.537307][ T5283] em28xx 1-1:0.0: No AC97 audio processor
[  398.543189][   T46] cdc_ncm 2-1:1.0: skipping garbage
[  398.554730][   T46] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  398.583909][ T5283] usb 1-1: USB disconnect, device number 53
[  398.601008][   T46] cdc_ncm 2-1:1.0: bind() failure
[  398.612172][ T5283] em28xx 1-1:0.0: Disconnecting em28xx
[  398.671210][ T5283] em28xx 1-1:0.0: Freeing device
[  398.800845][   T46] usb 3-1: USB disconnect, device number 59
[  399.442087][ T9408] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  400.480904][ T9424] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  400.594966][   T46] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  400.743184][ T5281] usb 2-1: USB disconnect, device number 51
[  400.848743][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.894839][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.963312][   T46] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  400.995321][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.032726][   T46] usb 3-1: config 0 descriptor??
[  401.224956][ T5237] Bluetooth: hci6: command 0x0406 tx timeout
[  401.291707][ T9434] netlink: 168 bytes leftover after parsing attributes in process `syz.1.794'.
[  401.758041][ T9420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.798118][ T9420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.266353][   T46] uclogic 0003:256C:006D.001E: interface is invalid, ignoring
[  402.549287][   T46] usb 3-1: USB disconnect, device number 60
[  402.595572][ T9450] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  403.745107][ T9475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'.
[  403.874993][ T9476] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12)
[  403.881636][ T9476] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  403.926398][ T9476] vhci_hcd vhci_hcd.0: Device attached
[  404.044950][   T46] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  404.204824][   T46] usb 2-1: device descriptor read/64, error -71
[  404.267366][    T8] usb 10-1: SetAddress Request (2) to port 0
[  404.293714][    T8] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd
[  404.442547][ T9486] fuse: Bad value for 'fd'
[  404.484769][   T46] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  404.517332][ T9478] vhci_hcd: connection reset by peer
[  404.534061][  T966] vhci_hcd: stop threads
[  404.541753][  T966] vhci_hcd: release socket
[  404.564344][  T966] vhci_hcd: disconnect device
[  404.664994][   T46] usb 2-1: device descriptor read/64, error -71
[  404.809201][   T46] usb usb2-port1: attempt power cycle
[  405.004769][   T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  405.264727][   T25] usb 3-1: Using ep0 maxpacket: 16
[  405.273245][   T46] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  405.326151][   T25] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  405.357744][   T46] usb 2-1: device descriptor read/8, error -71
[  405.374212][   T25] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  405.403762][   T25] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  405.428530][   T25] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  405.449297][   T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  405.461452][   T25] usb 3-1: config 0 has no interface number 0
[  405.478416][   T25] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  405.497320][   T25] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  405.514352][   T25] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  405.531855][   T25] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  405.575924][ T5617] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  405.584829][   T25] usb 3-1: config 0 interface 125 has no altsetting 0
[  405.614866][   T25] usb 3-1: config 0 interface 125 has no altsetting 2
[  405.674870][   T46] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  405.710364][   T25] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  405.731980][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.750495][   T46] usb 2-1: device descriptor read/8, error -71
[  405.768361][   T25] usb 3-1: Product: syz
[  405.789508][   T25] usb 3-1: Manufacturer: syz
[  405.804786][   T25] usb 3-1: SerialNumber: syz
[  405.807033][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.817412][   T25] usb 3-1: config 0 descriptor??
[  405.847737][   T25] usb 3-1: selecting invalid altsetting 2
[  405.866718][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.907547][   T46] usb usb2-port1: unable to enumerate USB device
[  405.927450][ T5617] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  405.974731][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.995778][ T5617] usb 1-1: config 0 descriptor??
[  406.370405][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'.
[  406.427064][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.641949][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.678055][ T5617] usbhid 1-1:0.0: can't add hid device: -32
[  406.712330][ T5617] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  406.908292][   T25] get_1284_register timeout
[  406.937272][    C1] usb 3-1: async_complete: urb error -104
[  406.943273][    C1] usb 3-1: async_complete: urb error -104
[  406.949125][    C1] usb 3-1: async_complete: urb error -104
[  406.954986][    C1] usb 3-1: async_complete: urb error -104
[  406.960790][    C1] vkms_vblank_simulate: vblank timer overrun
[  407.055288][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.065371][   T25] uss720 3-1:0.125: probe with driver uss720 failed with error -5
[  407.119794][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.425433][ T9517] netlink: 168 bytes leftover after parsing attributes in process `syz.1.818'.
[  407.811794][   T46] usb 3-1: USB disconnect, device number 61
[  408.121388][ T9531] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  408.491730][   T46] usb 1-1: USB disconnect, device number 54
[  408.868533][ T9541] macsec0: entered promiscuous mode
[  409.171920][ T9540] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  409.385286][    T8] usb 10-1: device descriptor read/8, error -110
[  409.804794][    T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  409.835849][    T8] usb usb10-port1: attempt power cycle
[  410.064996][    T9] usb 2-1: Using ep0 maxpacket: 16
[  410.090961][    T9] usb 2-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  410.130898][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.251664][    T9] usb 2-1: Product: syz
[  410.259592][    T9] usb 2-1: Manufacturer: syz
[  410.267581][    T9] usb 2-1: SerialNumber: syz
[  410.297804][    T9] usb 2-1: config 0 descriptor??
[  410.412834][    T9] usb-storage 2-1:0.0: USB Mass Storage device detected
[  410.582003][    T8] usb usb10-port1: unable to enumerate USB device
[  410.594771][ T5281] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  410.880515][ T9563] team_slave_0: entered promiscuous mode
[  410.887119][ T9563] team_slave_1: entered promiscuous mode
[  410.960832][ T9563] team_slave_0: left promiscuous mode
[  410.966669][ T9563] team_slave_1: left promiscuous mode
[  410.990126][ T5281] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  411.012681][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.029294][ T5281] usb 5-1: Product: syz
[  411.033596][ T5281] usb 5-1: Manufacturer: syz
[  411.041667][ T5281] usb 5-1: SerialNumber: syz
[  411.054194][ T5281] usb 5-1: config 0 descriptor??
[  411.054809][    T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  411.093865][ T5281] usb 5-1: Waiting for MOTU Microbook II to boot up...
[  411.133669][ T5281] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22
[  411.184922][ T5281] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  411.286706][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.342211][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.370634][    T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  411.401973][   T46] usb 5-1: USB disconnect, device number 61
[  411.427280][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.460298][    T9] usb 1-1: config 0 descriptor??
[  411.604818][ T5281] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  411.828131][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.878440][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.936553][ T5281] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  411.987204][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.040140][ T5281] usb 4-1: config 0 descriptor??
[  412.062180][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.123818][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.175589][    T9] usbhid 1-1:0.0: can't add hid device: -32
[  412.200240][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  412.341474][ T9582] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  412.529492][ T9578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.562382][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.581066][ T5283] usb 2-1: USB disconnect, device number 56
[  412.637771][ T9578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.675884][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.693828][ T5281] usbhid 4-1:0.0: can't add hid device: -32
[  412.740637][ T5281] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  412.832386][ T9587] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  412.848204][ T9587] PKCS7: Only support pkcs7_signedData type
[  413.200374][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.272924][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.834056][ T5228] usb 1-1: USB disconnect, device number 55
[  414.298326][ T4616] Bluetooth: unknown link type 39
[  414.303565][ T4616] Bluetooth: hci5: connection err: -111
[  414.374753][ T5228] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  414.432056][    T8] usb 4-1: USB disconnect, device number 45
[  414.509519][   T30] INFO: task syz.0.399:7615 blocked for more than 143 seconds.
[  414.524865][   T30]       Not tainted 6.11.0-rc4-syzkaller #0
[  414.546875][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  414.564772][ T5281] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  414.576109][ T5228] usb 1-1: Using ep0 maxpacket: 32
[  414.604490][   T30] task:syz.0.399       state:D stack:24912 pid:7615  tgid:7615  ppid:6934   flags:0x00004004
[  414.627105][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.640923][   T30] Call Trace:
[  414.650566][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.663059][   T30]  <TASK>
[  414.677892][   T30]  __schedule+0x1800/0x4a60
[  414.695663][   T30]  ? __pfx___schedule+0x10/0x10
[  414.701654][ T5228] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  414.717162][   T30]  ? __pfx_lock_release+0x10/0x10
[  414.727907][ T5228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.738779][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  414.747198][   T30]  ? schedule+0x90/0x320
[  414.757971][   T30]  schedule+0x14b/0x320
[  414.762498][   T30]  schedule_preempt_disabled+0x13/0x30
[  414.768977][   T30]  __mutex_lock+0x6a4/0xd70
[  414.782809][ T5228] usb 1-1: config 0 descriptor??
[  414.801254][ T5228] hub 1-1:0.0: USB hub found
[  414.809447][   T30]  ? __mutex_lock+0x527/0xd70
[  414.837138][   T30]  ? hugetlb_wp+0x104d/0x3a90
[  414.854509][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  414.863439][ T5281] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[  414.863992][   T30]  ? __pfx_up_write+0x10/0x10
[  414.881554][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  414.900503][   T30]  ? vma_interval_tree_iter_next+0x193/0x340
[  414.911573][   T30]  hugetlb_wp+0x104d/0x3a90
[  414.930025][   T30]  ? mark_lock+0x9a/0x350
[  414.936238][   T30]  ? __pfx_hugetlb_wp+0x10/0x10
[  414.941363][   T30]  ? __pfx___might_resched+0x10/0x10
[  414.948097][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  414.965837][ T9617] input: syz1 as /devices/virtual/input/input45
[  414.992165][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  415.008185][ T5228] hub 1-1:0.0: 1 port detected
[  415.014078][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.026837][ T5283] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  415.026840][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  415.026877][   T30]  ? __filemap_get_folio+0x769/0xc10
[  415.055573][ T5281] usb 3-1: Product: syz
[  415.059769][ T5281] usb 3-1: Manufacturer: syz
[  415.060758][   T30]  hugetlb_fault+0x27b2/0x3770
[  415.064356][ T5281] usb 3-1: SerialNumber: syz
[  415.079276][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[  415.086114][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  415.092223][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  415.103590][   T30]  ? handle_mm_fault+0x3ee/0x1980
[  415.104862][ T5281] usb 3-1: config 0 descriptor??
[  415.114609][   T30]  handle_mm_fault+0x173f/0x1980
[  415.125752][   T30]  ? __pfx_lock_release+0x10/0x10
[  415.131926][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  415.140225][   T30]  ? lock_vma_under_rcu+0x592/0x6e0
[  415.140693][ T5281] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  415.146192][   T30]  ? lock_vma_under_rcu+0x18a/0x6e0
[  415.146231][   T30]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  415.146297][   T30]  ? exc_page_fault+0x113/0x8c0
[  415.146352][   T30]  exc_page_fault+0x459/0x8c0
[  415.146394][   T30]  asm_exc_page_fault+0x26/0x30
[  415.146472][   T30] RIP: 0033:0x7f4e7c040f93
[  415.146492][   T30] RSP: 002b:00007f4e7c43fb60 EFLAGS: 00010246
[  415.146521][   T30] RAX: 0000000020000040 RBX: 0000000000000002 RCX: 0000000000000000
[  415.146537][   T30] RDX: 000000000000000a RSI: 0000000000000000 RDI: 00005555637663c8
[  415.146552][   T30] RBP: 00007f4e7c43fc68 R08: 0000000000000000 R09: 0000000000000000
[  415.146567][   T30] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032
[  415.146625][   T30] R13: 00007f4e7c43fc90 R14: 00007f4e7c43fcb0 R15: fffffffffffffffe
[  415.146662][   T30]  </TASK>
[  415.146771][   T30] INFO: task syz.0.399:7616 blocked for more than 144 seconds.
[  415.146791][   T30]       Not tainted 6.11.0-rc4-syzkaller #0
[  415.146804][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  415.146816][   T30] task:syz.0.399       state:D stack:23056 pid:7616  tgid:7615  ppid:6934   flags:0x00004006
[  415.341647][ T5283] usb 5-1: Using ep0 maxpacket: 8
[  415.349449][   T30] Call Trace:
[  415.367124][ T5283] usb 5-1: config 0 has an invalid interface number: 228 but max is 0
[  415.374452][   T30]  <TASK>
[  415.381150][   T30]  __schedule+0x1800/0x4a60
[  415.387560][   T30]  ? __pfx___schedule+0x10/0x10
[  415.420631][ T5283] usb 5-1: config 0 has no interface number 0
[  415.434272][   T30]  ? __pfx_lock_release+0x10/0x10
[  415.473988][   T30]  ? irqentry_exit+0x63/0x90
[  415.488348][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  415.493961][   T30]  ? schedule+0x90/0x320
[  415.498651][   T30]  schedule+0x14b/0x320
[  415.503421][ T5283] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  415.503432][   T30]  io_schedule+0x8d/0x110
[  415.519951][   T30]  folio_wait_bit_common+0x882/0x12b0
[  415.525506][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  415.531570][   T30]  ? __pfx_wake_page_function+0x10/0x10
[  415.548411][   T30]  ? _raw_spin_unlock+0x28/0x50
[  415.571286][   T30]  ? __vma_reservation_common+0x498/0x7d0
[  415.574958][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.589879][   T30]  __filemap_get_folio+0xb7/0xc10
[  415.607827][ T5283] usb 5-1: Product: syz
[  415.611321][   T30]  hugetlb_fault+0x1b72/0x3770
[  415.633632][   T30]  ? __pfx_validate_chain+0x10/0x10
[  415.634828][ T5283] usb 5-1: Manufacturer: syz
[  415.654088][ T5283] usb 5-1: SerialNumber: syz
[  415.658141][   T30]  ? __pfx_hugetlb_fault+0x10/0x10
[  415.678167][ T5283] usb 5-1: config 0 descriptor??
[  415.684401][   T30]  ? mt_find+0x226/0x850
[  415.699778][   T30]  ? __pfx_lock_release+0x10/0x10
[  415.738135][   T30]  handle_mm_fault+0x173f/0x1980
[  415.744973][ T5281] gspca_vc032x: reg_r err -110
[  415.754800][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  415.756740][   T30]  ? mt_find+0x62d/0x850
[  415.780124][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  415.784893][   T30]  ? mt_find+0x226/0x850
[  415.794531][   T30]  ? __pfx_mt_find+0x10/0x10
[  415.808150][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  415.809927][   T30]  ? __pfx_handle_mm_fault+0x10/0x10
[  415.829194][   T30]  ? find_vma+0xf9/0x170
[  415.838362][   T30]  ? __pfx_find_vma+0x10/0x10
[  415.840934][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  415.849106][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  415.863514][ T5228] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  415.865113][ T5283] usb 1-1: USB disconnect, device number 56
[  415.878231][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  415.900601][   T30]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  415.911665][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  415.913966][   T30]  exc_page_fault+0x2b9/0x8c0
[  415.933839][   T30]  asm_exc_page_fault+0x26/0x30
[  415.934570][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  415.951095][   T30] RIP: 0010:__put_user_8+0x11/0x20
[  415.955339][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  415.979887][   T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90
[  415.980345][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.012589][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.024455][   T30] RSP: 0018:ffffc90002edf778 EFLAGS: 00050202
[  416.041084][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.042646][   T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020
[  416.055147][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.055168][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.055181][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.081382][   T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6c0 RDI: ffffffff8c606d00
[  416.081461][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.101504][   T30] RBP: ffffc90002edfec8 R08: ffffffff9017f12f R09: 1ffffffff202fe25
[  416.109805][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.124997][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.128761][   T30] R10: dffffc0000000000 R11: fffffbfff202fe26 R12: 1ffff920005dbf7d
[  416.135389][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.150973][   T30] R13: 1ffff920005dbf08 R14: 0000000020800000 R15: 0000000000800000
[  416.153837][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.177118][   T30]  userfaultfd_ioctl+0x28e7/0x70a0
[  416.183656][ T5281] gspca_vc032x: I2c Bus Busy Wait 00
[  416.190425][   T30]  ? stack_trace_save+0x118/0x1d0
[  416.195768][ T5281] gspca_vc032x: Unknown sensor...
[  416.195847][ T5281] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  416.237301][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  416.242899][   T30]  ? stack_depot_save_flags+0x29/0x830
[  416.248834][   T30]  ? kasan_save_track+0x51/0x80
[  416.253803][   T30]  ? kasan_save_track+0x3f/0x80
[  416.259057][   T30]  ? kasan_save_free_info+0x40/0x50
[  416.264378][   T30]  ? poison_slab_object+0xe0/0x150
[  416.269952][   T30]  ? __kasan_slab_free+0x37/0x60
[  416.276184][   T30]  ? kfree+0x149/0x360
[  416.281522][   T30]  ? tomoyo_path_number_perm+0x68d/0x880
[  416.288045][   T30]  ? security_file_ioctl+0x75/0xb0
[  416.293301][   T30]  ? __se_sys_ioctl+0x47/0x170
[  416.298377][   T30]  ? do_syscall_64+0xf3/0x230
[  416.303140][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.310735][   T30]  ? do_vfs_ioctl+0xf0e/0x2e50
[  416.316007][   T30]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  416.321443][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  416.331811][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[  416.337727][   T30]  ? __pfx_lock_release+0x10/0x10
[  416.342914][   T30]  ? kfree+0x149/0x360
[  416.347696][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[  416.353546][   T30]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  416.360045][   T30]  ? __fget_files+0x29/0x470
[  416.365178][   T30]  ? __fget_files+0x3f6/0x470
[  416.370031][   T30]  ? __fget_files+0x29/0x470
[  416.375256][   T30]  ? bpf_lsm_file_ioctl+0x9/0x10
[  416.380357][   T30]  ? security_file_ioctl+0x87/0xb0
[  416.387137][   T30]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  416.392752][   T30]  __se_sys_ioctl+0xfc/0x170
[  416.397846][   T30]  do_syscall_64+0xf3/0x230
[  416.402457][   T30]  ? clear_bhb_loop+0x35/0x90
[  416.407775][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.413765][   T30] RIP: 0033:0x7f4e7c179e79
[  416.418779][   T30] RSP: 002b:00007f4e7cfb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  416.432140][   T30] RAX: ffffffffffffffda RBX: 00007f4e7c315f80 RCX: 00007f4e7c179e79
[  416.442192][   T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000005
[  416.450815][   T30] RBP: 00007f4e7c1e7916 R08: 0000000000000000 R09: 0000000000000000
[  416.459226][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.476974][   T30] R13: 0000000000000000 R14: 00007f4e7c315f80 R15: 00007f4e7c43fa38
[  416.490476][   T30]  </TASK>
[  416.495113][   T30] 
[  416.495113][   T30] Showing all locks held in the system:
[  416.508179][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.553672][   T30] 1 lock held by khungtaskd/30:
[  416.563582][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'.
[  416.599767][   T30]  #0: ffffffff8e9382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  416.649917][   T30] 3 locks held by kworker/u8:2/35:
[  416.660880][   T30] 2 locks held by getty/4983:
[  416.671380][   T30]  #0: ffff88802ad070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  416.688061][   T30]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[  416.704718][   T30] 1 lock held by syz.2.3/5288:
[  416.713049][   T30] 2 locks held by syz.0.399/7615:
[  416.722995][   T30]  #0: ffff88802e46b658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0
[  416.744098][   T30]  #1: ffff88801baaa8d8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90
[  416.764976][   T30] 3 locks held by syz.0.399/7616:
[  416.770202][   T30]  #0: ffff888015872798 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  416.783545][   T30]  #1: ffff88801baaa8d8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770
[  416.805062][   T30]  #2: ffff88807563c4e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770
[  416.815458][   T30] 1 lock held by syz.4.850/9613:
[  416.820514][   T30]  #0: ffffffff8e93d580 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530
[  416.836262][   T30] 
[  416.840803][   T30] =============================================
[  416.840803][   T30] 
[  416.851491][   T30] NMI backtrace for cpu 0
[  416.855839][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller #0
[  416.864593][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  416.874665][   T30] Call Trace:
[  416.878076][   T30]  <TASK>
[  416.881007][   T30]  dump_stack_lvl+0x241/0x360
[  416.885700][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.890918][   T30]  ? __pfx__printk+0x10/0x10
[  416.895518][   T30]  ? vprintk_emit+0x631/0x770
[  416.900200][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  416.905232][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  416.910192][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  416.915654][   T30]  ? _printk+0xd5/0x120
[  416.919823][   T30]  ? __pfx__printk+0x10/0x10
[  416.924431][   T30]  ? __wake_up_klogd+0xcc/0x110
[  416.929293][   T30]  ? __pfx__printk+0x10/0x10
[  416.933887][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  416.938930][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  416.944923][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  416.950933][   T30]  watchdog+0xff4/0x1040
[  416.955189][   T30]  ? watchdog+0x1ea/0x1040
[  416.959612][   T30]  ? __pfx_watchdog+0x10/0x10
[  416.964290][   T30]  kthread+0x2f0/0x390
[  416.968370][   T30]  ? __pfx_watchdog+0x10/0x10
[  416.973046][   T30]  ? __pfx_kthread+0x10/0x10
[  416.977641][   T30]  ret_from_fork+0x4b/0x80
[  416.982062][   T30]  ? __pfx_kthread+0x10/0x10
[  416.986665][   T30]  ret_from_fork_asm+0x1a/0x30
[  416.991445][   T30]  </TASK>
[  416.996203][   T30] Sending NMI from CPU 0 to CPUs 1:
[  417.001479][    C1] NMI backtrace for cpu 1
[  417.001493][    C1] CPU: 1 UID: 0 PID: 966 Comm: kworker/u8:5 Not tainted 6.11.0-rc4-syzkaller #0
[  417.001523][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  417.001534][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[  417.001561][    C1] RIP: 0010:unwind_get_return_address+0x0/0xc0
[  417.001589][    C1] Code: b9 00 48 8d 7c 24 40 8b 74 24 14 e9 dd fe ff ff e8 25 84 75 0a 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff
[  417.001603][    C1] RSP: 0018:ffffc90003e069f8 EFLAGS: 00000293
[  417.001616][    C1] RAX: ffffffff8137848f RBX: ffffffff8b04cc3d RCX: ffff888021ac3c00
[  417.001629][    C1] RDX: 0000000000000000 RSI: 0000000080000201 RDI: ffffc90003e06a00
[  417.001641][    C1] RBP: ffffc90003e06a90 R08: ffffffff814145c5 R09: ffffffff814140bf
[  417.001654][    C1] R10: 0000000000000003 R11: ffff888021ac3c00 R12: ffff888021ac3c00
[  417.001666][    C1] R13: ffffffff817f30c0 R14: ffffc90003e06ae0 R15: ffffc90003e06a00
[  417.001678][    C1] FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[  417.001693][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  417.001704][    C1] CR2: 000000110c34afaf CR3: 00000000237c2000 CR4: 00000000003526f0
[  417.001719][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  417.001729][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  417.001739][    C1] Call Trace:
[  417.001745][    C1]  <NMI>
[  417.001752][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  417.001776][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  417.001800][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  417.001819][    C1]  ? nmi_handle+0x2a/0x5a0
[  417.001842][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  417.001862][    C1]  ? nmi_handle+0x14f/0x5a0
[  417.001877][    C1]  ? nmi_handle+0x2a/0x5a0
[  417.001893][    C1]  ? __pfx_unwind_get_return_address+0x10/0x10
[  417.001918][    C1]  ? default_do_nmi+0x63/0x160
[  417.001938][    C1]  ? exc_nmi+0x123/0x1f0
[  417.001957][    C1]  ? end_repeat_nmi+0xf/0x53
[  417.001978][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  417.001998][    C1]  ? cfg80211_inform_bss_data+0x3dd/0x5a70
[  417.002016][    C1]  ? unwind_next_frame+0x196f/0x2a00
[  417.002038][    C1]  ? unwind_next_frame+0x1e75/0x2a00
[  417.002061][    C1]  ? arch_stack_walk+0x15f/0x1b0
[  417.002078][    C1]  ? __pfx_unwind_get_return_address+0x10/0x10
[  417.002104][    C1]  ? __pfx_unwind_get_return_address+0x10/0x10
[  417.002130][    C1]  ? __pfx_unwind_get_return_address+0x10/0x10
[  417.002155][    C1]  </NMI>
[  417.002161][    C1]  <TASK>
[  417.002166][    C1]  arch_stack_walk+0x125/0x1b0
[  417.002185][    C1]  ? cfg80211_inform_bss_frame_data+0x3b8/0x720
[  417.002205][    C1]  stack_trace_save+0x118/0x1d0
[  417.002227][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  417.002248][    C1]  ? mark_lock+0x9a/0x350
[  417.002275][    C1]  kasan_save_track+0x3f/0x80
[  417.002296][    C1]  ? kasan_save_track+0x3f/0x80
[  417.002316][    C1]  ? kasan_save_free_info+0x40/0x50
[  417.002333][    C1]  ? poison_slab_object+0xe0/0x150
[  417.002359][    C1]  ? __kasan_slab_free+0x37/0x60
[  417.002380][    C1]  ? kfree+0x149/0x360
[  417.002394][    C1]  ? ieee80211_inform_bss+0xbb2/0x1080
[  417.002416][    C1]  ? cfg80211_inform_single_bss_data+0xe93/0x2030
[  417.002432][    C1]  ? cfg80211_inform_bss_data+0x3dd/0x5a70
[  417.002473][    C1]  ? ieee80211_inform_bss+0xbb2/0x1080
[  417.002493][    C1]  kasan_save_free_info+0x40/0x50
[  417.002511][    C1]  poison_slab_object+0xe0/0x150
[  417.002534][    C1]  __kasan_slab_free+0x37/0x60
[  417.002556][    C1]  ? ieee80211_inform_bss+0xbb2/0x1080
[  417.002576][    C1]  kfree+0x149/0x360
[  417.002593][    C1]  ieee80211_inform_bss+0xbb2/0x1080
[  417.002620][    C1]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  417.002645][    C1]  ? cfg80211_inform_single_bss_data+0xaff/0x2030
[  417.002662][    C1]  ? cfg80211_inform_single_bss_data+0xaff/0x2030
[  417.002679][    C1]  ? cfg80211_inform_single_bss_data+0xd3d/0x2030
[  417.002697][    C1]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  417.002720][    C1]  cfg80211_inform_single_bss_data+0xe93/0x2030
[  417.002738][    C1]  ? __read_once_word_nocheck+0x9/0x20
[  417.002765][    C1]  ? __read_once_word_nocheck+0x9/0x20
[  417.002789][    C1]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  417.002817][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  417.002840][    C1]  ? __kernel_text_address+0xd/0x40
[  417.002856][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  417.002879][    C1]  ? cfg80211_inform_bss_data+0x3c5/0x5a70
[  417.002898][    C1]  cfg80211_inform_bss_data+0x3dd/0x5a70
[  417.002927][    C1]  ? __pfx_validate_chain+0x10/0x10
[  417.002957][    C1]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  417.002978][    C1]  ? mark_lock+0x9a/0x350
[  417.003003][    C1]  ? __lock_acquire+0x137a/0x2040
[  417.003039][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  417.003060][    C1]  ? ieee80211_bss_info_update+0x3d9/0xbc0
[  417.003085][    C1]  cfg80211_inform_bss_frame_data+0x3b8/0x720
[  417.003110][    C1]  ? ieee80211_bss_info_update+0x3d9/0xbc0
[  417.003133][    C1]  ieee80211_bss_info_update+0x8a7/0xbc0
[  417.003159][    C1]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  417.003182][    C1]  ? __pfx_lock_release+0x10/0x10
[  417.003213][    C1]  ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70
[  417.003245][    C1]  ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70
[  417.003267][    C1]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  417.003295][    C1]  ? mark_lock+0x9a/0x350
[  417.003321][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  417.003349][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  417.003372][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  417.003399][    C1]  ieee80211_iface_work+0x8a5/0xf20
[  417.003428][    C1]  cfg80211_wiphy_work+0x2db/0x490
[  417.003451][    C1]  ? process_scheduled_works+0x945/0x1830
[  417.003472][    C1]  process_scheduled_works+0xa2c/0x1830
[  417.003507][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  417.003533][    C1]  ? assign_work+0x364/0x3d0
[  417.003555][    C1]  worker_thread+0x86d/0xd40
[  417.003581][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  417.003606][    C1]  ? __kthread_parkme+0x169/0x1d0
[  417.003630][    C1]  ? __pfx_worker_thread+0x10/0x10
[  417.003651][    C1]  kthread+0x2f0/0x390
[  417.003674][    C1]  ? __pfx_worker_thread+0x10/0x10
[  417.003696][    C1]  ? __pfx_kthread+0x10/0x10
[  417.003719][    C1]  ret_from_fork+0x4b/0x80
[  417.003741][    C1]  ? __pfx_kthread+0x10/0x10
[  417.003765][    C1]  ret_from_fork_asm+0x1a/0x30
[  417.003795][    C1]  </TASK>
[  417.683435][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  417.690440][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller #0
[  417.699191][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  417.709238][   T30] Call Trace:
[  417.712528][   T30]  <TASK>
[  417.715460][   T30]  dump_stack_lvl+0x241/0x360
[  417.720157][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  417.725366][   T30]  ? __pfx__printk+0x10/0x10
[  417.729971][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  417.735985][   T30]  ? vscnprintf+0x5d/0x90
[  417.740333][   T30]  panic+0x349/0x860
[  417.744254][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  417.750430][   T30]  ? __pfx_panic+0x10/0x10
[  417.754871][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  417.760269][   T30]  ? __irq_work_queue_local+0x137/0x410
[  417.765840][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  417.771225][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  417.777390][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  417.783569][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  417.789746][   T30]  watchdog+0x1033/0x1040
[  417.794106][   T30]  ? watchdog+0x1ea/0x1040
[  417.798554][   T30]  ? __pfx_watchdog+0x10/0x10
[  417.803246][   T30]  kthread+0x2f0/0x390
[  417.807422][   T30]  ? __pfx_watchdog+0x10/0x10
[  417.812113][   T30]  ? __pfx_kthread+0x10/0x10
[  417.816730][   T30]  ret_from_fork+0x4b/0x80
[  417.821190][   T30]  ? __pfx_kthread+0x10/0x10
[  417.825804][   T30]  ret_from_fork_asm+0x1a/0x30
[  417.830607][   T30]  </TASK>
[  417.833944][   T30] Kernel Offset: disabled
[  417.838272][   T30] Rebooting in 86400 seconds..