last executing test programs:

13.55025425s ago: executing program 3 (id=231):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
creat(0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f00003ea000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x4010, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000200), 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video(0x0, 0x0, 0x0)

12.18872686s ago: executing program 3 (id=233):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000080)=""/29, 0x1d) (fail_nth: 1)
io_setup(0x3, &(0x7f0000000140)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x100, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x5, 0x4004000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x7fff, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x7f, 0x0, 0xfffffffd, 0x0, 0x0, 0x3ff, 0x40000000, 0x80002, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x3, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x1, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r7, 0x5501)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x1c8, 0x1c8, 0x410, 0x130, 0x328, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000300), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff00, 0x0, 'ip_vti0\x00', 'vlan0\x00', {}, {}, 0x21, 0x0, 0x44}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x9]}}, @common=@addrtype={{0x30}, {0xf28, 0x10, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x0, 0x2], 0x3}, {0x2, [0x6, 0x2, 0x4, 0x0, 0x2]}}}}, {{@ip={@loopback, @empty, 0xffffffff, 0xff000000, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x73, 0x1, 0x2c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0x0, 0x0, 0xffffffff], @ipv4=@empty, [0xffff00, 0xff000000, 0xff000000], @ipv6=@empty, [0xff000000, 0xffffff00, 0xff], @ipv4=@local, [0x0, 0xffffff00, 0xff, 0xffffffff], 0x0, 0x5, 0x16, 0x4e21, 0x4e20, 0x4e20, 0x4e20, 0x205a, 0x88}, 0x1, 0x880}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40000000, 0xccb, @remote, 0x4e21}}}, {{@ip={@private=0xa010102, @multicast1, 0x5aabe60e4f786391, 0xffffff00, 'caif0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3d, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)

11.642636216s ago: executing program 3 (id=234):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469"], 0xe0}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L'], 0x3c}}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

11.623837155s ago: executing program 4 (id=236):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket(0x28, 0x5, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
prlimit64(0x0, 0x3, &(0x7f00000007c0)={0x9, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x3, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82)
writev(r2, &(0x7f0000000080), 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c)
socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x4})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)

10.651486594s ago: executing program 4 (id=238):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = fsopen(&(0x7f0000000100)='minix\x00', 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, <r4=>0xffffffffffffffff}, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ipvlan0\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r7, r6, 0x25, 0x1c, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r2, 0x0, 0x1)
fchdir(r8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x128)
getdents64(r9, &(0x7f0000000080)=""/29, 0x1d)
io_setup(0x3, &(0x7f0000000140)=<r10=>0x0)
io_submit(r10, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)

8.182802243s ago: executing program 4 (id=243):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000c40)={{0x12, 0x1, 0x110, 0xb1, 0x37, 0xea, 0x8, 0xc45, 0x6011, 0x3643, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x9, 0x8, 0xe0, 0x6, [{{0x9, 0x4, 0xfb, 0x8a, 0x0, 0xd, 0x13, 0x7c, 0x4}}, {{0x9, 0x4, 0x0, 0x2, 0x0, 0x34, 0x67, 0x23, 0x2}}]}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x210001)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
fcntl$setown(r0, 0x8, r1)

8.048694156s ago: executing program 0 (id=244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x8000, 0x2})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000000003})
fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0)

7.93826186s ago: executing program 1 (id=245):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
syz_open_procfs(r0, &(0x7f0000000080)='wchan\x00')
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r6, @ANYRESHEX=r6, @ANYRES32=r6, @ANYRESHEX=r6], 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_dev$cec(0x0, 0x0, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000180)=0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), 0x0}, 0x20)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xfc00}, &(0x7f0000000180)=0x8)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x52, 0x2, r2})

7.088588013s ago: executing program 0 (id=246):
socket$netlink(0x10, 0x3, 0x10)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

6.926595087s ago: executing program 3 (id=247):
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2)
r0 = syz_io_uring_setup(0x1e21, 0x0, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8000, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0)
r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585", @ANYRESDEC], 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
r9 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
syz_usb_control_io(r10, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="000d05"], 0x0, 0x0, 0x0, 0x0}, 0x0)
write$binfmt_elf32(r9, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58)
close(r9)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

6.864892269s ago: executing program 1 (id=248):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={@remote, 0x1, 0x0, 0x70, 0x0, [{@multicast2}, {@multicast1}, {@empty}, {}, {@private}, {}, {}]}})
syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60f4adf700502c00fe800000000000000000000000000000ff0200000000000000000000000000013c030000000000040102c910"], 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0xf5, 0xffd, 0xffffffb8})

6.65554226s ago: executing program 1 (id=249):
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2)
r0 = syz_io_uring_setup(0x1e21, 0x0, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
r7 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x4000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r9}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r9}]}}}]}, 0x40}}, 0x0)

5.726377044s ago: executing program 4 (id=250):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2a8004, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1d, &(0x7f0000000180)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x761c, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @tail_call, @exit], &(0x7f0000000100)='GPL\x00', 0x2, 0x66, &(0x7f0000000280)=""/102, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x6, 0x10, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000000c0)='ext4_da_reserve_space\x00', r1, 0x0, 0x1}, 0x18)
r2 = dup(r0)
sendfile(r2, r2, 0x0, 0x20003)
syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c338e4201e84023f710d0102030109022e00010040100009040f0000fffaa800052406000005240008000d240f0100000000000008b77c0c240100cb"], 0x0)

5.60067411s ago: executing program 0 (id=251):
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES16=r0], 0x0)

5.461908719s ago: executing program 1 (id=252):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4)
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x20044044)
socket$inet(0x2, 0x5, 0x7fff)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x1, 0xfffffffc)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

5.302111905s ago: executing program 2 (id=253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r3}}, 0x48)
close(r1)
read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0x40, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000195c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x400)
setresuid(0x0, r6, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1242008, &(0x7f0000000140)={[{@huge_always}, {@noswap}, {@uid={'uid', 0x3d, r4}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x6d, 0x6b, 0x33, 0x74, 0x2d]}}, {@inode64}], [{@uid_eq={'uid', 0x3d, r5}}, {@euid_eq={'euid', 0x3d, r6}}]})

4.904744073s ago: executing program 1 (id=254):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L'], 0x3c}}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

4.874412608s ago: executing program 2 (id=255):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)

4.799575401s ago: executing program 2 (id=256):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000002000)=""/4096, &(0x7f0000000180)=0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400000000008000000000000000000080000000bbff020400000000000000000000000001020090780000000060508359000000001102000000000000009b5810000000000000fc02000000000000000000000000795f7f4cc310d5261ba05cf7410bc340bea5c267f16c61d2b7df1023ce8ac41fac2d86d0c098e42eebf5c92b49a669b182fee7d961cf3c0636aab5c79f4ca7461731f931d61e5b8b5561f0746114f6bdddfbe5efc502bef49fa23bb2dfb3ef16f056d31c45b53a4d05c1614b37311d524c123ee9812ab5d07653858373f3f224b402fcf86acfb6e06c43fe568cb07af71520b92351d912cedbf82930dcb6619550bc2cdc8a6174e3c62a"], 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
readahead(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
write$input_event(0xffffffffffffffff, &(0x7f0000000140)={{}, 0x1, 0x37, 0x6}, 0x18)
mkdir(0x0, 0x0)

4.348426143s ago: executing program 2 (id=257):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
getdents(0xffffffffffffffff, &(0x7f0000000000)=""/141, 0x8d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f, 0x2}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r3=>0x0})
socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r5, r4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r4, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7797, 0x3)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), 0x4)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x4800, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000fe0f07000000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x40840)
inotify_init1(0x80800)

4.20152589s ago: executing program 2 (id=258):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8)
syz_open_procfs(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

2.859228366s ago: executing program 2 (id=259):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001700000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0)
preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4080, 0xff0}], 0x1, 0x2b, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00004fe000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaad11, 0xa, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.808824686s ago: executing program 0 (id=260):
syz_emit_vhci(&(0x7f0000000ec0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc9}}}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[])
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000003800010325bd7000fadbdb2504"], 0x14}}, 0x4008000)
mount(&(0x7f00000002c0)=@nullb, 0x0, 0x0, 0x1000, 0x0)

2.424604269s ago: executing program 3 (id=261):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x17)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffffcb, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x2000c0c0)
r7 = semget$private(0x0, 0x5, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r8, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0x5, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x1ff, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0x5, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x80, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x8, 0x200, 0xfffffff8], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x3, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0xd, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x403, 0x3, 0x6, 0x100fffd, 0x2005, 0x0, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x107f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0x1, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x6, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r8, 0x5501)
readv(r8, &(0x7f0000001900)=[{0x0, 0xea}], 0x1)
semtimedop(r7, &(0x7f0000000080)=[{0x0, 0x7c, 0x1000}, {0x2, 0x1}], 0x2, &(0x7f0000000400))
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = syz_open_dev$ndb(0x0, 0x0, 0x82)
lseek(r4, 0x5, 0x3)
ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f0000000200))

2.424299838s ago: executing program 4 (id=262):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200100, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8800)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000040), 0x20000000}, 0x20)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @multicast}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', r5, 0x40, 0x10, 0x12, 0x8, {{0x2c, 0x4, 0x1, 0x9, 0xb0, 0x68, 0x0, 0xf2, 0x29, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x1b, 0xfc, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @local, @multicast1]}, @timestamp={0x44, 0x18, 0x72, 0x0, 0x6, [0x5, 0x21, 0x0, 0x0, 0x3ff]}, @cipso={0x86, 0x5e, 0x3, [{0x0, 0x11, "7b4020d1a34e758bcd73c3e1f48b75"}, {0x1, 0x10, "44ae5c9e53919e210e9ad362d841"}, {0x0, 0x11, "6337f0fc6ccb05c8ffb636a1c0dd79"}, {0x7, 0x11, "037d7c7586f73e49f004222d4d16c2"}, {0x7, 0x5, "f0514e"}, {0x0, 0x4, "f9e0"}, {0x0, 0x8, "1a3e0ed24260"}, {0x0, 0x4, "2fd5"}]}, @lsrr={0x83, 0xb, 0xda, [@private=0xa010102, @private=0xa010100]}]}}}}})
r6 = add_key$keyring(&(0x7f00000014c0), &(0x7f0000001500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0)
keyctl$get_persistent(0x16, 0x0, r6)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x45, 0xfffff02c}, {0x6, 0x0, 0x0, 0x8000}]})

1.696086417s ago: executing program 0 (id=263):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = open_tree(0xffffffffffffff9c, 0x0, 0x80900)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x1, 0x3}, 0x6)
mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1001052, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@fscache}, {@access_any}, {@cache_mmap}, {@afid={'afid', 0x3d, 0x1}}, {@privport}, {@access_client}, {@ignoreqv}, {@cache_mmap}], [{@subj_role={'subj_role', 0x3d, ',}['}}]}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a0d090300000040dc7000fbdbdf25010018000e090000b437648b85de95202afe22e88fc88e8de9c22a398ce03f8ac5774b2e3fb34f0927723bfb950c00ef1ebb"], 0x18}}, 0x4c004)

282.456018ms ago: executing program 1 (id=264):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r1 = creat(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041c0500c8", @ANYRESHEX=r1, @ANYRES32=r1], 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000100)=0xd0)
semget$private(0x0, 0x207, 0x53)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, 0x0)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})

79.003672ms ago: executing program 3 (id=265):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002afe0620e60405000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000160000000800000002"], 0x48)
r1 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0)
ftruncate(r1, 0x51a9497)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1106, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x39, 0x3, 0x0, "d50000000000001c00000000000000000000000000e5a24da000", 0x34524742})
clock_gettime(0x0, &(0x7f0000000040))
setreuid(0x0, 0xee00)
request_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

286.611µs ago: executing program 4 (id=266):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0)

0s ago: executing program 0 (id=267):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x17)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffffcb, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r6, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x2000c0c0)
r7 = semget$private(0x0, 0x5, 0x0)
semop(r7, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1000}], 0x1)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r8, 0x5501)
readv(r8, &(0x7f0000001900)=[{0x0, 0xea}], 0x1)
semtimedop(r7, &(0x7f0000000080)=[{0x0, 0x7c, 0x1000}, {0x2, 0x1}], 0x2, &(0x7f0000000400))
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = syz_open_dev$ndb(0x0, 0x0, 0x82)
lseek(r4, 0x5, 0x3)
ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f0000000200))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts.
[   76.389424][ T5805] cgroup: Unknown subsys name 'net'
[   76.541333][ T5805] cgroup: Unknown subsys name 'cpuset'
[   76.550764][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.097131][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.630607][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.640911][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.649111][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.656427][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.664414][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.671994][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.682598][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.690769][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.699185][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.707251][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.715762][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.735576][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.753987][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   80.761968][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.767272][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.776806][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   80.776905][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.786829][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   80.798368][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.810171][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.812906][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   80.824878][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.825328][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.842061][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.850538][   T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.370786][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   81.456828][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   81.641800][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   81.684396][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   81.760571][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   81.776066][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.783591][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.791418][ T5823] bridge_slave_0: entered allmulticast mode
[   81.799326][ T5823] bridge_slave_0: entered promiscuous mode
[   81.847711][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.855059][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.862359][ T5823] bridge_slave_1: entered allmulticast mode
[   81.870089][ T5823] bridge_slave_1: entered promiscuous mode
[   81.883111][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.890353][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.897466][ T5815] bridge_slave_0: entered allmulticast mode
[   81.905195][ T5815] bridge_slave_0: entered promiscuous mode
[   81.960556][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.968092][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.975262][ T5815] bridge_slave_1: entered allmulticast mode
[   81.982710][ T5815] bridge_slave_1: entered promiscuous mode
[   82.020969][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.028236][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.035349][ T5827] bridge_slave_0: entered allmulticast mode
[   82.042771][ T5827] bridge_slave_0: entered promiscuous mode
[   82.087101][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.094615][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.102493][ T5827] bridge_slave_1: entered allmulticast mode
[   82.110589][ T5827] bridge_slave_1: entered promiscuous mode
[   82.120732][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.144506][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.198776][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.235286][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.269598][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.276775][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.284320][ T5819] bridge_slave_0: entered allmulticast mode
[   82.292061][ T5819] bridge_slave_0: entered promiscuous mode
[   82.301645][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.314093][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.334307][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.341649][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.349704][ T5820] bridge_slave_0: entered allmulticast mode
[   82.356730][ T5820] bridge_slave_0: entered promiscuous mode
[   82.379875][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.386995][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.394601][ T5819] bridge_slave_1: entered allmulticast mode
[   82.402772][ T5819] bridge_slave_1: entered promiscuous mode
[   82.423687][ T5823] team0: Port device team_slave_0 added
[   82.429908][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.437030][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.445204][ T5820] bridge_slave_1: entered allmulticast mode
[   82.452935][ T5820] bridge_slave_1: entered promiscuous mode
[   82.462804][ T5815] team0: Port device team_slave_0 added
[   82.472951][ T5815] team0: Port device team_slave_1 added
[   82.518690][ T5827] team0: Port device team_slave_0 added
[   82.526241][ T5823] team0: Port device team_slave_1 added
[   82.570306][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.583192][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.593906][ T5827] team0: Port device team_slave_1 added
[   82.684094][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.691637][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.717953][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.732366][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.742094][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.749099][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.775090][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.787063][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.794266][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.820786][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.835462][ T5819] team0: Port device team_slave_0 added
[   82.841530][ T5818] Bluetooth: hci0: command tx timeout
[   82.842479][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.853922][ T5818] Bluetooth: hci2: command tx timeout
[   82.859878][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.886274][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.898225][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.905188][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.918809][   T56] Bluetooth: hci4: command tx timeout
[   82.931153][ T5826] Bluetooth: hci1: command tx timeout
[   82.936830][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.942196][ T5818] Bluetooth: hci3: command tx timeout
[   82.959625][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.987370][ T5819] team0: Port device team_slave_1 added
[   82.993892][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.001145][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.027648][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.067658][ T5820] team0: Port device team_slave_0 added
[   83.076651][ T5820] team0: Port device team_slave_1 added
[   83.151673][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.158999][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.184944][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.196993][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.203995][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.230118][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.277941][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.284945][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.311236][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.334970][ T5823] hsr_slave_0: entered promiscuous mode
[   83.341539][ T5823] hsr_slave_1: entered promiscuous mode
[   83.367634][ T5815] hsr_slave_0: entered promiscuous mode
[   83.374628][ T5815] hsr_slave_1: entered promiscuous mode
[   83.381166][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.388908][ T5815] Cannot create hsr debugfs directory
[   83.418474][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.425443][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.451468][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.511499][ T5827] hsr_slave_0: entered promiscuous mode
[   83.518195][ T5827] hsr_slave_1: entered promiscuous mode
[   83.524315][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.532156][ T5827] Cannot create hsr debugfs directory
[   83.599413][ T5819] hsr_slave_0: entered promiscuous mode
[   83.605829][ T5819] hsr_slave_1: entered promiscuous mode
[   83.612142][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.620071][ T5819] Cannot create hsr debugfs directory
[   83.774260][ T5820] hsr_slave_0: entered promiscuous mode
[   83.781097][ T5820] hsr_slave_1: entered promiscuous mode
[   83.787308][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.795710][ T5820] Cannot create hsr debugfs directory
[   84.169032][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.182495][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.208685][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.226865][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.276786][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   84.287186][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   84.305853][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   84.317232][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   84.401502][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.420022][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.434361][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.445397][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.552060][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.571452][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.582934][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.622452][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   84.686530][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.714720][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.750292][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   84.763139][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.792548][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   84.800264][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.812801][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.820154][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.835526][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.842697][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.869211][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.884494][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.914582][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.918529][ T5818] Bluetooth: hci2: command tx timeout
[   84.921727][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.927070][ T5818] Bluetooth: hci0: command tx timeout
[   84.962817][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.969975][ T4535] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.998532][ T5826] Bluetooth: hci1: command tx timeout
[   85.004056][ T5818] Bluetooth: hci3: command tx timeout
[   85.011712][ T5826] Bluetooth: hci4: command tx timeout
[   85.026849][ T5815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   85.037234][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.082671][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.206444][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   85.226564][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.254243][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.261460][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.296906][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   85.320302][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.327501][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.359206][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.366387][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.445114][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.452376][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.473277][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.545064][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.575662][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.674565][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   85.726654][  T998] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.734277][  T998] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.755557][  T998] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.762746][  T998] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.827539][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.065988][ T5823] veth0_vlan: entered promiscuous mode
[   86.127167][ T5823] veth1_vlan: entered promiscuous mode
[   86.226634][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.266529][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.337241][ T5823] veth0_macvtap: entered promiscuous mode
[   86.366548][ T5823] veth1_macvtap: entered promiscuous mode
[   86.431677][ T5815] veth0_vlan: entered promiscuous mode
[   86.437498][ T5820] veth0_vlan: entered promiscuous mode
[   86.449764][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.482879][ T5820] veth1_vlan: entered promiscuous mode
[   86.496797][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.512123][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.532680][ T5827] veth0_vlan: entered promiscuous mode
[   86.546424][ T5827] veth1_vlan: entered promiscuous mode
[   86.556190][ T5815] veth1_vlan: entered promiscuous mode
[   86.593369][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.607078][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.619618][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.628532][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.704743][ T5827] veth0_macvtap: entered promiscuous mode
[   86.754465][ T5819] veth0_vlan: entered promiscuous mode
[   86.777597][ T5827] veth1_macvtap: entered promiscuous mode
[   86.786614][ T5820] veth0_macvtap: entered promiscuous mode
[   86.820508][ T5820] veth1_macvtap: entered promiscuous mode
[   86.827917][ T5815] veth0_macvtap: entered promiscuous mode
[   86.856413][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.868498][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.880182][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.902056][ T5819] veth1_vlan: entered promiscuous mode
[   86.917384][ T5815] veth1_macvtap: entered promiscuous mode
[   86.944273][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.956656][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.969060][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.977494][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.989133][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.000229][ T5826] Bluetooth: hci2: command tx timeout
[   87.005691][ T5818] Bluetooth: hci0: command tx timeout
[   87.011565][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.022287][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.034967][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.083466][ T5818] Bluetooth: hci3: command tx timeout
[   87.089253][ T5818] Bluetooth: hci4: command tx timeout
[   87.094667][ T5818] Bluetooth: hci1: command tx timeout
[   87.103580][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.112582][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.122531][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.133733][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.180577][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.194465][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.202988][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.206168][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.213363][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.231299][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.242686][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.253395][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.264329][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.283657][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.294703][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.305780][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.320004][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.331229][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.348512][ T5819] veth0_macvtap: entered promiscuous mode
[   87.371623][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.382666][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.393478][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.405586][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.415545][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.425998][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.437715][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.447377][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.456452][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.466405][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.475228][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.504441][ T4535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.515888][ T5819] veth1_macvtap: entered promiscuous mode
[   87.523630][ T4535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.576250][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.595125][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.604017][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.612784][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.637318][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.649197][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.656049][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   87.659449][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.685836][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.695871][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.709803][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.721019][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.731601][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.742896][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.762238][  T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.772840][  T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.776203][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.792615][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.811597][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.823343][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.839367][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.854976][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.866281][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.881935][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.896523][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.918566][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.927331][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.936426][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.945070][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.954661][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.022421][ T5907] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.085248][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.101905][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   88.113206][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.176560][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.206481][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.298422][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   88.708128][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.799535][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.807401][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.896106][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.911510][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.006450][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.034016][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.063217][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.078937][ T5818] Bluetooth: hci0: command tx timeout
[   89.084626][ T5818] Bluetooth: hci2: command tx timeout
[   89.105597][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.159188][ T5818] Bluetooth: hci3: command tx timeout
[   89.163720][   T56] Bluetooth: hci1: command tx timeout
[   89.164739][ T5818] Bluetooth: hci4: command tx timeout
[   89.220627][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.240734][ T5873] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   89.606665][ T5922] FAULT_INJECTION: forcing a failure.
[   89.606665][ T5922] name failslab, interval 1, probability 0, space 0, times 1
[   89.702895][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.716109][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.3.8 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[   89.716134][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   89.716152][ T5922] Call Trace:
[   89.716163][ T5922]  <TASK>
[   89.716174][ T5922]  dump_stack_lvl+0x189/0x250
[   89.716214][ T5922]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.716238][ T5922]  ? __pfx__printk+0x10/0x10
[   89.716270][ T5922]  ? lock_acquire+0x175/0x360
[   89.716293][ T5922]  ? __pfx___might_resched+0x10/0x10
[   89.716326][ T5922]  should_fail_ex+0x414/0x560
[   89.716349][ T5922]  ? proc_sys_call_handler+0x3f2/0x7c0
[   89.716369][ T5922]  should_failslab+0xa8/0x100
[   89.716388][ T5922]  __kvmalloc_node_noprof+0x168/0x5e0
[   89.716406][ T5922]  ? proc_sys_call_handler+0x3f2/0x7c0
[   89.716433][ T5922]  proc_sys_call_handler+0x3f2/0x7c0
[   89.716462][ T5922]  ? __pfx_proc_sys_call_handler+0x10/0x10
[   89.716499][ T5922]  vfs_write+0x54b/0xa90
[   89.716529][ T5922]  ? __pfx_proc_sys_write+0x10/0x10
[   89.716552][ T5922]  ? __pfx_vfs_write+0x10/0x10
[   89.716588][ T5922]  ? __fget_files+0x2a/0x420
[   89.716614][ T5922]  ksys_write+0x145/0x250
[   89.716638][ T5922]  ? rcu_is_watching+0x15/0xb0
[   89.716665][ T5922]  ? __pfx_ksys_write+0x10/0x10
[   89.716694][ T5922]  ? do_syscall_64+0xba/0x210
[   89.716721][ T5922]  do_syscall_64+0xf6/0x210
[   89.716745][ T5922]  ? clear_bhb_loop+0x60/0xb0
[   89.716767][ T5922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.716785][ T5922] RIP: 0033:0x7fd5b9d8e969
[   89.716810][ T5922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.716825][ T5922] RSP: 002b:00007fd5b7bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   89.716844][ T5922] RAX: ffffffffffffffda RBX: 00007fd5b9fb5fa0 RCX: 00007fd5b9d8e969
[   89.716856][ T5922] RDX: 0000000000000012 RSI: 0000200000000600 RDI: 0000000000000003
[   89.716868][ T5922] RBP: 00007fd5b7bf6090 R08: 0000000000000000 R09: 0000000000000000
[   89.716879][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.716889][ T5922] R13: 0000000000000000 R14: 00007fd5b9fb5fa0 R15: 00007ffdab907b48
[   89.716918][ T5922]  </TASK>
[   89.936031][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.982074][ T5873] usb 2-1: Using ep0 maxpacket: 16
[   90.073338][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024
[   90.085072][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[   90.095039][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   90.104789][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   90.127211][ T5873] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[   90.136360][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.146020][ T5873] usb 2-1: Product: syz
[   90.150317][ T5873] usb 2-1: Manufacturer: syz
[   90.154925][ T5873] usb 2-1: SerialNumber: syz
[   90.208544][ T5873] usb 2-1: config 0 descriptor??
[   90.216608][ T5915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   90.236936][ T5873] port100 2-1:0.0: NFC: Could not get supported command types
[   90.499242][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   90.607864][ T5934] FAULT_INJECTION: forcing a failure.
[   90.607864][ T5934] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   90.622708][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.4.5 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[   90.622737][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   90.622749][ T5934] Call Trace:
[   90.622757][ T5934]  <TASK>
[   90.622765][ T5934]  dump_stack_lvl+0x189/0x250
[   90.622795][ T5934]  ? __lock_acquire+0xaac/0xd20
[   90.622824][ T5934]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.622849][ T5934]  ? __pfx__printk+0x10/0x10
[   90.622880][ T5934]  ? __might_fault+0xb0/0x130
[   90.622921][ T5934]  should_fail_ex+0x414/0x560
[   90.622954][ T5934]  _copy_from_user+0x2d/0xb0
[   90.622982][ T5934]  ___sys_sendmsg+0x158/0x2a0
[   90.623012][ T5934]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.623034][ T5934]  ? sched_clock_cpu+0x74/0x430
[   90.623098][ T5934]  ? __fget_files+0x2a/0x420
[   90.623115][ T5934]  ? __fget_files+0x3a0/0x420
[   90.623142][ T5934]  __sys_sendmmsg+0x227/0x430
[   90.623173][ T5934]  ? __pfx___sys_sendmmsg+0x10/0x10
[   90.623229][ T5934]  ? irqentry_exit+0x74/0x90
[   90.623264][ T5934]  __x64_sys_sendmmsg+0xa0/0xc0
[   90.623293][ T5934]  do_syscall_64+0xf6/0x210
[   90.623318][ T5934]  ? asm_sysvec_call_function_single+0x1a/0x20
[   90.623338][ T5934]  ? clear_bhb_loop+0x60/0xb0
[   90.623361][ T5934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.623380][ T5934] RIP: 0033:0x7fdec038e969
[   90.623397][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.623413][ T5934] RSP: 002b:00007fdec11a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   90.623434][ T5934] RAX: ffffffffffffffda RBX: 00007fdec05b6080 RCX: 00007fdec038e969
[   90.623448][ T5934] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000004
[   90.623460][ T5934] RBP: 00007fdec11a7090 R08: 0000000000000000 R09: 0000000000000000
[   90.623472][ T5934] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000001
[   90.623483][ T5934] R13: 0000000000000000 R14: 00007fdec05b6080 R15: 00007ffc64b09648
[   90.623524][ T5934]  </TASK>
[   90.631474][  T976] usb 2-1: USB disconnect, device number 2
[   90.971895][   T10] usb 4-1: Using ep0 maxpacket: 8
[   91.022119][   T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[   91.049269][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.251633][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.325161][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   91.347895][ T5941] xt_connbytes: Forcing CT accounting to be enabled
[   91.354903][ T5941] Cannot find add_set index 0 as target
[   91.897895][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   91.906299][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   91.915392][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.923926][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.933679][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.949584][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.223012][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   92.223068][   T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[   92.223092][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.245715][   T10] usb 4-1: config 0 descriptor??
[   92.271040][  T882] cfg80211: failed to load regulatory.db
[   92.891882][   T10] usbhid 4-1:0.0: can't add hid device: -71
[   92.922975][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   93.000303][   T10] usb 4-1: USB disconnect, device number 2
[   93.417790][ T5963] netfs: Couldn't get user pages (rc=-14)
[   93.426806][   T30] audit: type=1800 audit(1747100299.649:2): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.17" name="/" dev="9p" ino=2 res=0 errno=0
[   94.077885][  T976] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.239523][  T976] usb 4-1: Using ep0 maxpacket: 16
[   94.247293][  T976] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.391268][  T976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.416670][  T976] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.447477][  T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.475693][  T976] usb 4-1: Product: syz
[   94.491762][  T976] usb 4-1: Manufacturer: syz
[   94.502120][  T976] usb 4-1: SerialNumber: syz
[   94.731190][  T976] usb 4-1: 0:2 : does not exist
[   94.763275][  T976] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   94.847494][  T976] usb 4-1: USB disconnect, device number 3
[   95.080449][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.480755][ T5985] IPVS: length: 4096 != 8
[   95.639279][ T5992] input: syz1 as /devices/virtual/input/input5
[   97.240812][ T6002] warning: `syz.3.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   97.260362][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.409222][  T882] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.419765][ T6006] FAULT_INJECTION: forcing a failure.
[   97.419765][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.419793][ T6006] CPU: 1 UID: 0 PID: 6006 Comm: syz.2.32 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[   97.419811][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   97.419820][ T6006] Call Trace:
[   97.419826][ T6006]  <TASK>
[   97.419832][ T6006]  dump_stack_lvl+0x189/0x250
[   97.419855][ T6006]  ? __lock_acquire+0xaac/0xd20
[   97.419878][ T6006]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.419897][ T6006]  ? __pfx__printk+0x10/0x10
[   97.419919][ T6006]  ? __might_fault+0xb0/0x130
[   97.419949][ T6006]  should_fail_ex+0x414/0x560
[   97.419968][ T6006]  _copy_from_user+0x2d/0xb0
[   97.419989][ T6006]  ___sys_sendmsg+0x158/0x2a0
[   97.420011][ T6006]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.420058][ T6006]  ? __fget_files+0x2a/0x420
[   97.420071][ T6006]  ? __fget_files+0x3a0/0x420
[   97.420092][ T6006]  __x64_sys_sendmsg+0x19b/0x260
[   97.420113][ T6006]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   97.420145][ T6006]  ? do_syscall_64+0xba/0x210
[   97.420167][ T6006]  do_syscall_64+0xf6/0x210
[   97.420185][ T6006]  ? clear_bhb_loop+0x60/0xb0
[   97.420203][ T6006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.420216][ T6006] RIP: 0033:0x7f673138e969
[   97.420240][ T6006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.420252][ T6006] RSP: 002b:00007f6732182038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.420268][ T6006] RAX: ffffffffffffffda RBX: 00007f67315b5fa0 RCX: 00007f673138e969
[   97.420278][ T6006] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004
[   97.420287][ T6006] RBP: 00007f6732182090 R08: 0000000000000000 R09: 0000000000000000
[   97.420295][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.420303][ T6006] R13: 0000000000000000 R14: 00007f67315b5fa0 R15: 00007ffd4a1a7938
[   97.420326][ T6006]  </TASK>
[   97.539511][  T882] usb 2-1: device descriptor read/64, error -71
[   98.143694][  T976] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   98.144609][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[   98.311402][  T976] usb 1-1: device descriptor read/64, error -32
[   98.397945][  T882] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   98.614081][  T882] usb 2-1: device descriptor read/64, error -71
[   98.756168][  T976] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   99.304404][  T882] usb usb2-port1: attempt power cycle
[   99.433331][  T976] usb 1-1: Using ep0 maxpacket: 16
[   99.445814][  T976] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[   99.454523][  T976] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   99.454561][  T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   99.454612][  T976] usb 1-1: Product: syz
[   99.454667][  T976] usb 1-1: Manufacturer: syz
[   99.454719][  T976] usb 1-1: SerialNumber: syz
[   99.638290][  T882] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   99.658622][  T882] usb 2-1: device descriptor read/8, error -71
[   99.895837][ T6026] process 'syz.0.34' launched './file0' with NULL argv: empty string added
[   99.951944][  T882] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  100.091069][  T882] usb 2-1: device descriptor read/8, error -71
[  100.232305][  T882] usb usb2-port1: unable to enumerate USB device
[  100.278959][ T5818] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  100.281008][ T5818] Bluetooth: hci2: Injecting HCI hardware error event
[  100.281681][ T5818] Bluetooth: hci2: hardware error 0x00
[  100.551187][  T976] cdc_ncm 1-1:1.0: bind() failure
[  100.568720][  T976] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  100.568766][  T976] cdc_ncm 1-1:1.1: bind() failure
[  100.575302][  T976] usb 1-1: USB disconnect, device number 3
[  100.779668][ T5871] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  100.913171][ T6019] tty tty24: ldisc open failed (-12), clearing slot 23
[  100.958029][ T5871] usb 2-1: Using ep0 maxpacket: 16
[  101.420428][ T5871] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  101.513851][ T5871] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  101.557363][ T5871] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[  101.597925][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.651759][ T5871] usb 2-1: config 0 descriptor??
[  102.379298][ T5818] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  102.764237][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'.
[  102.773972][ T6053] openvswitch: netlink: Message has 3 unknown bytes.
[  102.775969][ T6051] xt_connbytes: Forcing CT accounting to be enabled
[  102.780906][ T6053] openvswitch: netlink: Actions may not be safe on all matching packets
[  102.787512][ T6051] Cannot find add_set index 0 as target
[  102.807503][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  102.988025][    T9] usb 3-1: Using ep0 maxpacket: 16
[  102.997543][    T9] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  103.008664][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  103.017773][    T9] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[  103.102863][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.154351][ T6061] =======================================================
[  103.154351][ T6061] WARNING: The mand mount option has been deprecated and
[  103.154351][ T6061]          and is ignored by this kernel. Remove the mand
[  103.154351][ T6061]          option from the mount to silence this warning.
[  103.154351][ T6061] =======================================================
[  103.157498][    T9] usb 3-1: config 0 descriptor??
[  103.200192][ T6061] 9p: Unknown access argument ©úò¢C¨§þ¼å©Áƒ
“Ì&Ùûuser: -22
[  103.567103][ T6067] FAULT_INJECTION: forcing a failure.
[  103.567103][ T6067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.580987][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.0.50 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  103.581012][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  103.581023][ T6067] Call Trace:
[  103.581037][ T6067]  <TASK>
[  103.581044][ T6067]  dump_stack_lvl+0x189/0x250
[  103.581073][ T6067]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.581094][ T6067]  ? __pfx__printk+0x10/0x10
[  103.581123][ T6067]  should_fail_ex+0x414/0x560
[  103.581140][ T6067]  _copy_to_user+0x31/0xb0
[  103.581160][ T6067]  __x64_sys_ustat+0x167/0x1e0
[  103.581178][ T6067]  ? __pfx___x64_sys_ustat+0x10/0x10
[  103.581198][ T6067]  ? irqentry_exit+0x74/0x90
[  103.581228][ T6067]  do_syscall_64+0xf6/0x210
[  103.581245][ T6067]  ? asm_sysvec_call_function_single+0x1a/0x20
[  103.581258][ T6067]  ? clear_bhb_loop+0x60/0xb0
[  103.581273][ T6067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.581286][ T6067] RIP: 0033:0x7f3ef538e969
[  103.581297][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.581307][ T6067] RSP: 002b:00007f3ef31d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088
[  103.581321][ T6067] RAX: ffffffffffffffda RBX: 00007f3ef55b6080 RCX: 00007f3ef538e969
[  103.581330][ T6067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0400010000000007
[  103.581338][ T6067] RBP: 00007f3ef31d5090 R08: 0000000000000000 R09: 0000000000000000
[  103.581346][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.581354][ T6067] R13: 0000000000000001 R14: 00007f3ef55b6080 R15: 00007fff0ea92c78
[  103.581374][ T6067]  </TASK>
[  104.089807][ T5881] usb 2-1: USB disconnect, device number 7
[  104.245159][ T6071] misc userio: Begin command sent, but we're already running
[  104.272154][ T5913] kernel read not supported for file /swradio2 (pid: 5913 comm: kworker/1:6)
[  104.335712][ T5913] kernel read not supported for file /swradio2 (pid: 5913 comm: kworker/1:6)
[  104.927104][ T6090] option changes via remount are deprecated (pid=6087 comm=syz.3.58)
[  104.958510][  T882] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  105.107887][  T882] usb 5-1: device descriptor read/64, error -71
[  105.299412][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'.
[  105.316540][ T6094] xt_connbytes: Forcing CT accounting to be enabled
[  105.323787][ T6094] --map-set only usable from mangle table
[  105.851398][  T882] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  105.920822][ T6096] 9p: Unknown access argument ©úò¢C¨§þ¼å©Áƒ
“Ì&Ùûuser: -22
[  106.026025][ T5870] usb 3-1: USB disconnect, device number 2
[  106.032175][  T882] usb 5-1: device descriptor read/64, error -71
[  106.178348][  T882] usb usb5-port1: attempt power cycle
[  106.231763][ T6104] openvswitch: netlink: Message has 20 unknown bytes.
[  106.239054][ T6104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.504611][ T6107] input: syz1 as /devices/virtual/input/input7
[  107.028050][  T882] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  107.090113][  T882] usb 5-1: device descriptor read/8, error -71
[  107.158053][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  107.329341][  T882] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  107.402444][ T5870] usb 3-1: Using ep0 maxpacket: 16
[  107.409016][  T882] usb 5-1: device descriptor read/8, error -71
[  107.417784][ T5870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.429009][ T5870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.444692][ T5870] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  107.458875][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.467315][ T5870] usb 3-1: Product: syz
[  107.488127][ T5870] usb 3-1: Manufacturer: syz
[  107.497623][ T5870] usb 3-1: SerialNumber: syz
[  107.510805][ T6123] openvswitch: netlink: Message has 3 unknown bytes.
[  107.517871][ T6123] openvswitch: netlink: Actions may not be safe on all matching packets
[  107.678731][  T882] usb usb5-port1: unable to enumerate USB device
[  108.196523][ T5870] usb 3-1: 0:2 : does not exist
[  108.210538][ T5870] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  108.326700][ T5870] usb 3-1: USB disconnect, device number 3
[  108.328515][ T5913] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  108.364148][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.779184][ T5913] usb 2-1: Using ep0 maxpacket: 16
[  108.787440][ T5913] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  108.796753][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.824153][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  108.834067][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  108.847746][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  108.862378][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  108.871839][ T5913] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  108.880089][ T5913] usb 2-1: Manufacturer: syz
[  108.890807][ T5913] usb 2-1: config 0 descriptor??
[  109.572533][ T6148] openvswitch: netlink: Message has 3 unknown bytes.
[  109.579905][ T6148] openvswitch: netlink: Actions may not be safe on all matching packets
[  109.933155][ T5913] rc_core: IR keymap rc-hauppauge not found
[  109.960495][ T5913] Registered IR keymap rc-empty
[  109.983617][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.019523][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.102976][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  110.220296][ T5913] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  110.241549][ T5913] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8
[  110.278074][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.298021][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.331112][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.358103][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.378007][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.380874][  T882] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  110.399241][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.418463][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.438311][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.457949][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.477947][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  110.500381][ T5913] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  110.514956][ T5913] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  110.648974][ T5870] usb 2-1: USB disconnect, device number 8
[  110.767333][ T6164] openvswitch: netlink: Message has 3 unknown bytes.
[  110.774772][ T6164] openvswitch: netlink: Actions may not be safe on all matching packets
[  111.218403][ T5937] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  111.226956][  T882] usb 3-1: Using ep0 maxpacket: 16
[  111.266071][  T882] usb 3-1: config 4 has an invalid interface number: 205 but max is 0
[  111.297323][  T882] usb 3-1: config 4 has no interface number 0
[  111.324409][  T882] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=64.01
[  112.036139][  T882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.044240][  T882] usb 3-1: Product: syz
[  112.048481][ T5937] usb 5-1: Using ep0 maxpacket: 16
[  112.053756][  T882] usb 3-1: Manufacturer: syz
[  112.060316][  T882] usb 3-1: SerialNumber: syz
[  112.066079][ T5937] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  112.111596][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.153231][ T5937] usb 5-1: config 0 descriptor??
[  112.204754][ T5937] usb 5-1: invalid MIDI EP
[  112.251663][ T6175] nbd0: detected capacity change from 0 to 4294967296
[  112.261807][ T5937] usb 5-1: snd-bcd2000: error during probing
[  112.291674][ T6176] block nbd0: shutting down sockets
[  112.308156][ T6178] nbd1: detected capacity change from 0 to 4294967296
[  112.351240][ T6181] FAULT_INJECTION: forcing a failure.
[  112.351240][ T6181] name failslab, interval 1, probability 0, space 0, times 0
[  112.373015][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.1.85 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  112.373042][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  112.373055][ T6181] Call Trace:
[  112.373062][ T6181]  <TASK>
[  112.373071][ T6181]  dump_stack_lvl+0x189/0x250
[  112.373106][ T6181]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.373132][ T6181]  ? __pfx__printk+0x10/0x10
[  112.373168][ T6181]  ? __pfx___might_resched+0x10/0x10
[  112.373197][ T6181]  ? fs_reclaim_acquire+0x7d/0x100
[  112.373224][ T6181]  should_fail_ex+0x414/0x560
[  112.373249][ T6181]  should_failslab+0xa8/0x100
[  112.373270][ T6181]  __kmalloc_noprof+0xcb/0x4f0
[  112.373297][ T6181]  ? kfree+0x4d/0x440
[  112.373321][ T6181]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  112.373353][ T6181]  tomoyo_realpath_from_path+0xe3/0x5d0
[  112.373381][ T6181]  ? tomoyo_domain+0xda/0x130
[  112.373419][ T6181]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  112.373442][ T6181]  tomoyo_path_number_perm+0x1e8/0x5a0
[  112.373466][ T6181]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  112.373507][ T6181]  ? __lock_acquire+0xaac/0xd20
[  112.373566][ T6181]  ? __fget_files+0x2a/0x420
[  112.373588][ T6181]  ? __fget_files+0x3a0/0x420
[  112.373603][ T6181]  ? __fget_files+0x2a/0x420
[  112.373633][ T6181]  security_file_ioctl+0xcb/0x2d0
[  112.373656][ T6181]  __se_sys_ioctl+0x47/0x170
[  112.373680][ T6181]  do_syscall_64+0xf6/0x210
[  112.373703][ T6181]  ? clear_bhb_loop+0x60/0xb0
[  112.373725][ T6181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.373741][ T6181] RIP: 0033:0x7f9370f8e969
[  112.373756][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.373769][ T6181] RSP: 002b:00007f9371dd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  112.373787][ T6181] RAX: ffffffffffffffda RBX: 00007f93711b6080 RCX: 00007f9370f8e969
[  112.373800][ T6181] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000003
[  112.373810][ T6181] RBP: 00007f9371dd4090 R08: 0000000000000000 R09: 0000000000000000
[  112.373820][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.373829][ T6181] R13: 0000000000000001 R14: 00007f93711b6080 R15: 00007ffddcfc08d8
[  112.373856][ T6181]  </TASK>
[  112.373864][ T6181] ERROR: Out of memory at tomoyo_realpath_from_path.
[  112.489432][  T882] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.205/input/input9
[  112.610875][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.622139][ T5937] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  112.626369][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.651459][ T6181] block nbd1: shutting down sockets
[  112.651490][ T5959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.662613][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  112.675078][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  113.305904][ T6188] capability: warning: `syz.4.80' uses 32-bit capabilities (legacy support in use)
[  113.321370][ T5824] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  113.406599][ T5824] Buffer I/O error on dev nbd1, logical block 0, async page read
[  113.488203][ T5824] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  113.555408][ T5824] Buffer I/O error on dev nbd1, logical block 0, async page read
[  113.602859][ T5824] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  113.649231][ T5824] Buffer I/O error on dev nbd1, logical block 0, async page read
[  113.692291][ T5824] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  113.787097][ T5824] Buffer I/O error on dev nbd1, logical block 0, async page read
[  113.868395][ T5824] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  113.939990][ T5824] Buffer I/O error on dev nbd1, logical block 0, async page read
[  114.036701][ T5824] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.148698][ T5824] Buffer I/O error on dev nbd1, logical block 0, async page read
[  114.190542][  T882] usb 3-1: USB disconnect, device number 4
[  114.223696][ T5824] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.306439][ T5824] Buffer I/O error on dev nbd1, logical block 0, async page read
[  114.380723][ T5824] ldm_validate_partition_table(): Disk read failed.
[  114.459400][ T5824] Buffer I/O error on dev nbd1, logical block 0, async page read
[  114.623370][ T5959] ldm_validate_partition_table(): Disk read failed.
[  114.638493][ T5959] Dev nbd0: unable to read RDB block 0
[  114.646175][ T5959]  nbd0: unable to read partition table
[  114.680869][ T5959] ldm_validate_partition_table(): Disk read failed.
[  114.688414][ T5959] Dev nbd0: unable to read RDB block 0
[  114.695368][ T5959]  nbd0: unable to read partition table
[  114.710732][ T5824] Dev nbd1: unable to read RDB block 0
[  114.717037][ T5824]  nbd1: unable to read partition table
[  114.825696][ T5869] usb 5-1: USB disconnect, device number 6
[  114.913834][ T5824] ldm_validate_partition_table(): Disk read failed.
[  114.959265][ T5824] Dev nbd1: unable to read RDB block 0
[  114.965382][ T5824]  nbd1: unable to read partition table
[  115.180143][ T5937] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  115.342858][  T882] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  115.407972][ T5937] usb 4-1: device descriptor read/64, error -71
[  115.510099][ T5870] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  115.558862][  T882] usb 1-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22
[  115.626080][ T6208] input: syz1 as /devices/virtual/input/input10
[  116.009631][ T5937] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.022512][  T882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.136136][  T882] usb 1-1: config 0 descriptor??
[  116.299458][ T5937] usb 4-1: device descriptor read/64, error -71
[  116.573880][ T5937] usb usb4-port1: attempt power cycle
[  116.582360][ T5870] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  116.654864][ T6216] FAULT_INJECTION: forcing a failure.
[  116.654864][ T6216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.668919][ T6216] CPU: 0 UID: 0 PID: 6216 Comm: syz.4.94 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  116.668943][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  116.668955][ T6216] Call Trace:
[  116.668962][ T6216]  <TASK>
[  116.668969][ T6216]  dump_stack_lvl+0x189/0x250
[  116.668997][ T6216]  ? __lock_acquire+0xaac/0xd20
[  116.669025][ T6216]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.669049][ T6216]  ? __pfx__printk+0x10/0x10
[  116.669077][ T6216]  ? __might_fault+0xb0/0x130
[  116.669116][ T6216]  should_fail_ex+0x414/0x560
[  116.669146][ T6216]  _copy_from_user+0x2d/0xb0
[  116.669172][ T6216]  ___sys_sendmsg+0x158/0x2a0
[  116.669200][ T6216]  ? __pfx____sys_sendmsg+0x10/0x10
[  116.669221][ T6216]  ? preempt_schedule_notrace+0xd1/0x110
[  116.669277][ T6216]  ? __fget_files+0x2a/0x420
[  116.669294][ T6216]  ? __fget_files+0x3a0/0x420
[  116.669321][ T6216]  __x64_sys_sendmsg+0x19b/0x260
[  116.669348][ T6216]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  116.669388][ T6216]  ? do_syscall_64+0xba/0x210
[  116.669416][ T6216]  do_syscall_64+0xf6/0x210
[  116.669439][ T6216]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  116.669456][ T6216]  ? clear_bhb_loop+0x60/0xb0
[  116.669478][ T6216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.669495][ T6216] RIP: 0033:0x7fdec038e969
[  116.669512][ T6216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.669527][ T6216] RSP: 002b:00007fdec1186038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  116.669545][ T6216] RAX: ffffffffffffffda RBX: 00007fdec05b6160 RCX: 00007fdec038e969
[  116.669559][ T6216] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005
[  116.669570][ T6216] RBP: 00007fdec1186090 R08: 0000000000000000 R09: 0000000000000000
[  116.669581][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.669591][ T6216] R13: 0000000000000000 R14: 00007fdec05b6160 R15: 00007ffc64b09648
[  116.669619][ T6216]  </TASK>
[  116.984931][  T882] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0
[  116.996446][ T5870] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  117.008435][ T5870] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  117.017720][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.116066][ T6193] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  117.539969][  T882] gspca_sn9c20x: Write register 1000 failed -110
[  117.708363][ T5937] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  117.724201][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.755178][  T882] gspca_sn9c20x: Device initialization failed
[  117.802617][ T5937] usb 4-1: device descriptor read/8, error -71
[  117.827129][  T882] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -110
[  117.848400][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.140428][  T882] usb 1-1: USB disconnect, device number 4
[  118.385596][ T6230] 9p: Unknown access argument ©úò¢C¨§þ¼å©Áƒ
“Ì&Ùûuser: -22
[  118.481312][ T5870] usb 3-1: can't set config #27, error -71
[  118.506080][ T5870] usb 3-1: USB disconnect, device number 5
[  119.197905][ T6240] openvswitch: netlink: Message has 3 unknown bytes.
[  119.482378][ T6243] openvswitch: netlink: Message has 3 unknown bytes.
[  119.489318][ T6243] openvswitch: netlink: Actions may not be safe on all matching packets
[  119.505556][ T6240] openvswitch: netlink: Actions may not be safe on all matching packets
[  120.049635][ T5937] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  120.908508][ T5937] usb 4-1: Using ep0 maxpacket: 16
[  121.035669][ T5937] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  121.098047][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.201878][ T5937] usb 4-1: config 0 descriptor??
[  122.012864][ T5937] usb 4-1: invalid MIDI EP
[  122.017346][ T5937] usb 4-1: snd-bcd2000: error during probing
[  122.024369][ T5937] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  122.375972][   T30] audit: type=1326 audit(1747100328.469:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6264 comm="syz.0.106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ef538e969 code=0x0
[  122.408690][  T882] usb 4-1: USB disconnect, device number 8
[  122.424444][ T6272] FAULT_INJECTION: forcing a failure.
[  122.424444][ T6272] name failslab, interval 1, probability 0, space 0, times 0
[  122.766883][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.4.109 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  122.766910][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  122.766924][ T6272] Call Trace:
[  122.766931][ T6272]  <TASK>
[  122.766939][ T6272]  dump_stack_lvl+0x189/0x250
[  122.766981][ T6272]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.767004][ T6272]  ? __pfx__printk+0x10/0x10
[  122.767036][ T6272]  ? __pfx___might_resched+0x10/0x10
[  122.767061][ T6272]  ? fs_reclaim_acquire+0x7d/0x100
[  122.767085][ T6272]  should_fail_ex+0x414/0x560
[  122.767108][ T6272]  should_failslab+0xa8/0x100
[  122.767126][ T6272]  __kmalloc_noprof+0xcb/0x4f0
[  122.767150][ T6272]  ? kfree+0x4d/0x440
[  122.767170][ T6272]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  122.767198][ T6272]  tomoyo_realpath_from_path+0xe3/0x5d0
[  122.767223][ T6272]  ? tomoyo_domain+0xda/0x130
[  122.767251][ T6272]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  122.767269][ T6272]  tomoyo_path_number_perm+0x1e8/0x5a0
[  122.767291][ T6272]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  122.767326][ T6272]  ? __lock_acquire+0xaac/0xd20
[  122.767365][ T6272]  ? __fget_files+0x2a/0x420
[  122.767385][ T6272]  ? __fget_files+0x3a0/0x420
[  122.767399][ T6272]  ? __fget_files+0x2a/0x420
[  122.767428][ T6272]  security_file_ioctl+0xcb/0x2d0
[  122.767451][ T6272]  __se_sys_ioctl+0x47/0x170
[  122.767475][ T6272]  do_syscall_64+0xf6/0x210
[  122.767499][ T6272]  ? clear_bhb_loop+0x60/0xb0
[  122.767520][ T6272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.767536][ T6272] RIP: 0033:0x7fdec038e969
[  122.767558][ T6272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.767572][ T6272] RSP: 002b:00007fdec11c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  122.767598][ T6272] RAX: ffffffffffffffda RBX: 00007fdec05b5fa0 RCX: 00007fdec038e969
[  122.767610][ T6272] RDX: 0000000000000000 RSI: 0000000000005646 RDI: 0000000000000005
[  122.767620][ T6272] RBP: 00007fdec11c8090 R08: 0000000000000000 R09: 0000000000000000
[  122.767630][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.767640][ T6272] R13: 0000000000000000 R14: 00007fdec05b5fa0 R15: 00007ffc64b09648
[  122.767667][ T6272]  </TASK>
[  122.767674][ T6272] ERROR: Out of memory at tomoyo_realpath_from_path.
[  122.839712][ T6277] 9p: Unknown access argument ©úò¢C¨§þ¼å©Áƒ
“Ì&Ùûuser: -22
[  123.022712][ T6272] Debayer A: =================  START STATUS  =================
[  123.030799][ T6272] Debayer A: Debayer Mean Window Size: 3
[  123.037284][ T6272] Debayer A: ==================  END STATUS  ==================
[  124.436487][ T6288] openvswitch: netlink: Message has 3 unknown bytes.
[  124.443661][ T6288] openvswitch: netlink: Actions may not be safe on all matching packets
[  127.068272][ T5881] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  127.238732][ T5881] usb 4-1: Using ep0 maxpacket: 32
[  127.260618][ T5881] usb 4-1: config 0 has an invalid interface number: 235 but max is 0
[  127.287884][ T5881] usb 4-1: config 0 has no interface number 0
[  127.305145][ T5881] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  127.345322][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.374579][ T5881] usb 4-1: Product: syz
[  127.387875][ T5881] usb 4-1: Manufacturer: syz
[  127.418221][ T5881] usb 4-1: SerialNumber: syz
[  127.445806][ T5881] usb 4-1: config 0 descriptor??
[  127.517054][ T6300] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.120'.
[  127.690157][ T6301] 9pnet_fd: Insufficient options for proto=fd
[  127.693150][ T5881] kaweth 4-1:0.235: Firmware present in device.
[  127.776572][ T6303] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.873862][ T5881] kaweth 4-1:0.235: Statistics collection: 0
[  127.896835][ T5881] kaweth 4-1:0.235: Multicast filter limit: 0
[  127.910988][ T5881] kaweth 4-1:0.235: MTU: 0
[  127.932213][ T5881] kaweth 4-1:0.235: Read MAC address 00:00:00:00:00:00
[  128.180640][ T5881] kaweth 4-1:0.235: probe with driver kaweth failed with error -5
[  128.191839][ T5881] usb 4-1: USB disconnect, device number 9
[  128.593969][ T6322] input: syz1 as /devices/virtual/input/input11
[  129.526176][ T6328] openvswitch: netlink: Message has 3 unknown bytes.
[  129.532974][ T6328] openvswitch: netlink: Actions may not be safe on all matching packets
[  130.278090][ T6337] openvswitch: netlink: Message has 3 unknown bytes.
[  130.286059][ T6337] openvswitch: netlink: Actions may not be safe on all matching packets
[  130.331341][ T6344] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.132'.
[  130.617584][ T6346] tap0: tun_chr_ioctl cmd 1074025681
[  130.929790][ T6357] FAULT_INJECTION: forcing a failure.
[  130.929790][ T6357] name failslab, interval 1, probability 0, space 0, times 0
[  131.227200][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.1.138 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  131.227226][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  131.227237][ T6357] Call Trace:
[  131.227244][ T6357]  <TASK>
[  131.227252][ T6357]  dump_stack_lvl+0x189/0x250
[  131.227284][ T6357]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.227309][ T6357]  ? __pfx__printk+0x10/0x10
[  131.227342][ T6357]  ? __pfx___might_resched+0x10/0x10
[  131.227368][ T6357]  ? fs_reclaim_acquire+0x7d/0x100
[  131.227393][ T6357]  should_fail_ex+0x414/0x560
[  131.227417][ T6357]  should_failslab+0xa8/0x100
[  131.227435][ T6357]  __kmalloc_noprof+0xcb/0x4f0
[  131.227460][ T6357]  ? kfree+0x4d/0x440
[  131.227482][ T6357]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  131.227511][ T6357]  tomoyo_realpath_from_path+0xe3/0x5d0
[  131.227537][ T6357]  ? tomoyo_domain+0xda/0x130
[  131.227567][ T6357]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  131.227587][ T6357]  tomoyo_path_number_perm+0x1e8/0x5a0
[  131.227609][ T6357]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  131.227646][ T6357]  ? __lock_acquire+0xaac/0xd20
[  131.227690][ T6357]  ? __fget_files+0x2a/0x420
[  131.227711][ T6357]  ? __fget_files+0x3a0/0x420
[  131.227726][ T6357]  ? __fget_files+0x2a/0x420
[  131.227746][ T6357]  security_file_ioctl+0xcb/0x2d0
[  131.227770][ T6357]  __se_sys_ioctl+0x47/0x170
[  131.227799][ T6357]  do_syscall_64+0xf6/0x210
[  131.227824][ T6357]  ? clear_bhb_loop+0x60/0xb0
[  131.227847][ T6357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.227865][ T6357] RIP: 0033:0x7f9370f8e969
[  131.227881][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.227896][ T6357] RSP: 002b:00007f9371df5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  131.227925][ T6357] RAX: ffffffffffffffda RBX: 00007f93711b5fa0 RCX: 00007f9370f8e969
[  131.227937][ T6357] RDX: 0000200000000080 RSI: 00000000000007ab RDI: 0000000000000003
[  131.227948][ T6357] RBP: 00007f9371df5090 R08: 0000000000000000 R09: 0000000000000000
[  131.227958][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.227968][ T6357] R13: 0000000000000000 R14: 00007f93711b5fa0 R15: 00007ffddcfc08d8
[  131.228011][ T6357]  </TASK>
[  131.450580][    C1] vkms_vblank_simulate: vblank timer overrun
[  131.879016][ T6357] ERROR: Out of memory at tomoyo_realpath_from_path.
[  132.327527][ T6372] input: syz1 as /devices/virtual/input/input13
[  132.692406][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  132.707591][   T30] audit: type=1326 audit(1747100338.929:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  132.717474][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  132.734844][   T30] audit: type=1326 audit(1747100338.949:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  132.907885][   T30] audit: type=1326 audit(1747100339.129:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  132.929096][    C1] vkms_vblank_simulate: vblank timer overrun
[  132.997902][   T30] audit: type=1326 audit(1747100339.189:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  133.071387][   T30] audit: type=1326 audit(1747100339.199:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  133.337670][   T30] audit: type=1326 audit(1747100339.199:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  133.360033][   T30] audit: type=1326 audit(1747100339.199:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  133.381343][    C1] vkms_vblank_simulate: vblank timer overrun
[  133.542186][ T6390] openvswitch: netlink: Message has 3 unknown bytes.
[  133.550109][ T6390] openvswitch: netlink: Actions may not be safe on all matching packets
[  134.167970][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  134.354241][   T30] audit: type=1326 audit(1747100339.209:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  134.738939][   T30] audit: type=1326 audit(1747100339.209:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  134.817518][   T30] audit: type=1326 audit(1747100339.209:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6370 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b9d8e969 code=0x7ffc0000
[  135.143497][ T6407] FAULT_INJECTION: forcing a failure.
[  135.143497][ T6407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.147901][    T9] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  135.156652][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: syz.0.149 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  135.156676][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  135.156686][ T6407] Call Trace:
[  135.156695][ T6407]  <TASK>
[  135.156705][ T6407]  dump_stack_lvl+0x189/0x250
[  135.156737][ T6407]  ? __lock_acquire+0xaac/0xd20
[  135.156770][ T6407]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.156797][ T6407]  ? __pfx__printk+0x10/0x10
[  135.156829][ T6407]  ? __might_fault+0xb0/0x130
[  135.156873][ T6407]  should_fail_ex+0x414/0x560
[  135.156899][ T6407]  _copy_from_user+0x2d/0xb0
[  135.156930][ T6407]  __sys_sendto+0x25c/0x520
[  135.156959][ T6407]  ? __pfx___sys_sendto+0x10/0x10
[  135.156981][ T6407]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  135.157021][ T6407]  ? __fget_files+0x3a0/0x420
[  135.157052][ T6407]  ? ksys_write+0x1f0/0x250
[  135.157079][ T6407]  ? rcu_is_watching+0x15/0xb0
[  135.157118][ T6407]  __x64_sys_sendto+0xde/0x100
[  135.157147][ T6407]  do_syscall_64+0xf6/0x210
[  135.157175][ T6407]  ? clear_bhb_loop+0x60/0xb0
[  135.157201][ T6407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.157221][ T6407] RIP: 0033:0x7f3ef538e969
[  135.157238][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.157255][ T6407] RSP: 002b:00007f3ef31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  135.157277][ T6407] RAX: ffffffffffffffda RBX: 00007f3ef55b5fa0 RCX: 00007f3ef538e969
[  135.157292][ T6407] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[  135.157305][ T6407] RBP: 00007f3ef31f6090 R08: 0000200000000080 R09: 000000000000001c
[  135.157319][ T6407] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001
[  135.157330][ T6407] R13: 0000000000000000 R14: 00007f3ef55b5fa0 R15: 00007fff0ea92c78
[  135.157363][ T6407]  </TASK>
[  135.414014][ T6404] openvswitch: netlink: Message has 3 unknown bytes.
[  135.420841][ T6404] openvswitch: netlink: Actions may not be safe on all matching packets
[  136.348321][    T9] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 47115, setting to 1024
[  136.359655][    T9] usb 3-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024
[  136.369758][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  136.376394][    T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad
[  136.390296][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.129214][    T9] usb 3-1: config 0 descriptor??
[  137.138369][    T9] usb 3-1: can't set config #0, error -71
[  137.164884][    T9] usb 3-1: USB disconnect, device number 6
[  137.558261][  T976] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  137.602247][ T6425] openvswitch: netlink: Message has 3 unknown bytes.
[  137.609712][ T6425] openvswitch: netlink: Actions may not be safe on all matching packets
[  137.871367][  T976] usb 1-1: Using ep0 maxpacket: 16
[  137.998997][  T976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.014816][  T976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  138.031468][  T976] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  138.041653][  T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.049722][  T976] usb 1-1: Product: syz
[  138.054047][  T976] usb 1-1: Manufacturer: syz
[  138.058745][  T976] usb 1-1: SerialNumber: syz
[  138.187877][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  138.367890][    T9] usb 3-1: device descriptor read/64, error -71
[  138.380139][  T976] usb 1-1: 0:2 : does not exist
[  138.389252][  T976] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  138.421533][  T976] usb 1-1: USB disconnect, device number 5
[  138.450097][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.188059][ T5937] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  139.234536][ T6437] No source specified
[  139.246817][ T6437] fuse: Bad value for 'fd'
[  139.258698][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  139.296429][ T6437] sp0: Synchronizing with TNC
[  139.318797][ T6436] [U] è`
[  139.412067][ T6441] batman_adv: batadv0: Adding interface: dummy0
[  139.418535][ T6441] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.443954][ T6441] batman_adv: batadv0: Interface activated: dummy0
[  139.458076][ T6441] FAULT_INJECTION: forcing a failure.
[  139.458076][ T6441] name failslab, interval 1, probability 0, space 0, times 0
[  139.470905][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.3.159 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  139.470930][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  139.470941][ T6441] Call Trace:
[  139.470949][ T6441]  <TASK>
[  139.470956][ T6441]  dump_stack_lvl+0x189/0x250
[  139.470989][ T6441]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.471014][ T6441]  ? __pfx__printk+0x10/0x10
[  139.471048][ T6441]  ? __pfx___might_resched+0x10/0x10
[  139.471076][ T6441]  ? fs_reclaim_acquire+0x7d/0x100
[  139.471101][ T6441]  should_fail_ex+0x414/0x560
[  139.471125][ T6441]  should_failslab+0xa8/0x100
[  139.471145][ T6441]  __kmalloc_noprof+0xcb/0x4f0
[  139.471171][ T6441]  ? kfree+0x4d/0x440
[  139.471193][ T6441]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  139.471223][ T6441]  tomoyo_realpath_from_path+0xe3/0x5d0
[  139.471256][ T6441]  ? tomoyo_domain+0xda/0x130
[  139.471286][ T6441]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  139.471307][ T6441]  tomoyo_path_number_perm+0x1e8/0x5a0
[  139.471330][ T6441]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  139.471367][ T6441]  ? __lock_acquire+0xaac/0xd20
[  139.471410][ T6441]  ? __fget_files+0x2a/0x420
[  139.471432][ T6441]  ? __fget_files+0x3a0/0x420
[  139.471448][ T6441]  ? __fget_files+0x2a/0x420
[  139.471469][ T6441]  security_file_ioctl+0xcb/0x2d0
[  139.471493][ T6441]  __se_sys_ioctl+0x47/0x170
[  139.471519][ T6441]  do_syscall_64+0xf6/0x210
[  139.471543][ T6441]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  139.471561][ T6441]  ? clear_bhb_loop+0x60/0xb0
[  139.471584][ T6441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.471601][ T6441] RIP: 0033:0x7fd5b9d8e969
[  139.471617][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.471632][ T6441] RSP: 002b:00007fd5b7bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  139.471662][ T6441] RAX: ffffffffffffffda RBX: 00007fd5b9fb6080 RCX: 00007fd5b9d8e969
[  139.471675][ T6441] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000005
[  139.471686][ T6441] RBP: 00007fd5b7bd5090 R08: 0000000000000000 R09: 0000000000000000
[  139.471696][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.471706][ T6441] R13: 0000000000000000 R14: 00007fd5b9fb6080 R15: 00007ffdab907b48
[  139.471733][ T6441]  </TASK>
[  139.471746][ T6441] ERROR: Out of memory at tomoyo_realpath_from_path.
[  139.587311][    T9] usb 3-1: device descriptor read/64, error -71
[  139.751587][ T6441] batadv0: mtu less than device minimum
[  139.759416][ T6441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  139.771314][ T6441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  139.783166][ T6441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  139.794999][ T6441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  139.806752][ T6441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  142.495979][ T5937] usb 5-1: device descriptor read/all, error -71
[  142.742428][    T9] usb usb3-port1: attempt power cycle
[  144.801843][ T6472] random: crng reseeded on system resumption
[  144.941180][ T6462] Debayer A: =================  START STATUS  =================
[  144.949093][ T5870] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  144.962688][ T6462] Debayer A: Debayer Mean Window Size: 3
[  144.969949][ T6462] Debayer A: ==================  END STATUS  ==================
[  145.028967][ T5881] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  145.118033][ T5870] usb 3-1: Using ep0 maxpacket: 16
[  145.130140][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.147016][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  145.167867][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  145.177620][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  145.192716][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  145.210468][ T5870] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  145.223592][ T5870] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  145.232580][ T5870] usb 3-1: Manufacturer: syz
[  145.255066][ T5870] usb 3-1: config 0 descriptor??
[  145.337904][ T5881] usb 2-1: Using ep0 maxpacket: 16
[  145.353899][ T5881] usb 2-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config
[  145.381685][  T976] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  145.569856][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  145.687689][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  145.764677][  T976] usb 4-1: device descriptor read/64, error -71
[  145.854161][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  145.999809][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  146.014158][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  146.030572][ T5881] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  146.044911][ T6484] FAULT_INJECTION: forcing a failure.
[  146.044911][ T6484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.059198][ T5881] usb 2-1: Manufacturer: syz
[  146.066142][ T6484] CPU: 1 UID: 0 PID: 6484 Comm: syz.0.172 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  146.066166][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  146.066177][ T6484] Call Trace:
[  146.066184][ T6484]  <TASK>
[  146.066192][ T6484]  dump_stack_lvl+0x189/0x250
[  146.066220][ T6484]  ? __lock_acquire+0xaac/0xd20
[  146.066248][ T6484]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.066272][ T6484]  ? __pfx__printk+0x10/0x10
[  146.066310][ T6484]  ? __might_fault+0xb0/0x130
[  146.066346][ T6484]  should_fail_ex+0x414/0x560
[  146.066368][ T6484]  _copy_from_user+0x2d/0xb0
[  146.066392][ T6484]  ___sys_sendmsg+0x158/0x2a0
[  146.066418][ T6484]  ? __pfx____sys_sendmsg+0x10/0x10
[  146.066472][ T6484]  ? __fget_files+0x2a/0x420
[  146.066488][ T6484]  ? __fget_files+0x3a0/0x420
[  146.066513][ T6484]  __x64_sys_sendmsg+0x19b/0x260
[  146.066538][ T6484]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  146.066576][ T6484]  ? do_syscall_64+0xba/0x210
[  146.066602][ T6484]  do_syscall_64+0xf6/0x210
[  146.066624][ T6484]  ? clear_bhb_loop+0x60/0xb0
[  146.066645][ T6484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.066661][ T6484] RIP: 0033:0x7f3ef538e969
[  146.066676][ T6484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.066690][ T6484] RSP: 002b:00007f3ef31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.066708][ T6484] RAX: ffffffffffffffda RBX: 00007f3ef55b5fa0 RCX: 00007f3ef538e969
[  146.066720][ T6484] RDX: 0000000004008050 RSI: 0000200000000140 RDI: 0000000000000003
[  146.066731][ T6484] RBP: 00007f3ef31f6090 R08: 0000000000000000 R09: 0000000000000000
[  146.066741][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.066750][ T6484] R13: 0000000000000000 R14: 00007f3ef55b5fa0 R15: 00007fff0ea92c78
[  146.066777][ T6484]  </TASK>
[  146.133875][ T5870] rc_core: IR keymap rc-hauppauge not found
[  146.168357][ T5881] usb 2-1: config 0 descriptor??
[  146.187300][ T5870] Registered IR keymap rc-empty
[  146.217913][  T976] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  146.316197][   T30] audit: type=1326 audit(1747100352.539:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.354161][   T30] audit: type=1326 audit(1747100352.539:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.382783][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.390470][   T30] audit: type=1326 audit(1747100352.539:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.417183][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.425019][   T30] audit: type=1326 audit(1747100352.539:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.447655][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  146.498087][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16
[  146.528635][   T30] audit: type=1326 audit(1747100352.539:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.550068][  T976] usb 4-1: device descriptor read/64, error -71
[  146.578383][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.586204][   T30] audit: type=1326 audit(1747100352.549:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.611756][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.624317][   T30] audit: type=1326 audit(1747100352.549:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.646434][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.647900][ T5881] rc_core: IR keymap rc-hauppauge not found
[  146.663654][ T5881] Registered IR keymap rc-empty
[  146.670375][  T976] usb usb4-port1: attempt power cycle
[  146.677513][   T30] audit: type=1326 audit(1747100352.549:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.704761][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.704965][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.731637][   T30] audit: type=1326 audit(1747100352.549:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.748751][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.756250][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.767686][   T30] audit: type=1326 audit(1747100352.549:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.4.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdec038e969 code=0x7ffc0000
[  146.793696][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  146.809627][ T5881] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1
[  146.823957][ T5881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input17
[  146.851192][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.883813][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.909645][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.940272][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.971926][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.997979][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  147.017965][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  147.025086][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  147.037908][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  147.042030][  T976] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  147.052952][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  147.067975][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  147.078640][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  147.086236][  T976] usb 4-1: device descriptor read/8, error -71
[  147.098130][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  147.098192][ T5870] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  147.405323][ T5870] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  147.421315][ T5870] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  147.744946][ T5870] usb 3-1: USB disconnect, device number 10
[  147.824638][ T5881] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  147.833833][ T5881] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  147.856719][ T5881] usb 2-1: USB disconnect, device number 9
[  147.947933][  T976] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  149.028018][  T976] usb 4-1: device descriptor read/8, error -71
[  149.366091][  T976] usb usb4-port1: unable to enumerate USB device
[  150.118272][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  151.287905][  T976] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  152.307889][  T976] usb 1-1: Using ep0 maxpacket: 16
[  152.335831][  T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.355452][  T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.385022][  T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  152.427987][  T976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  152.457894][  T976] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.502032][  T976] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  152.542260][  T976] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  152.613702][  T976] usb 1-1: Manufacturer: syz
[  152.752997][  T976] usb 1-1: config 0 descriptor??
[  152.869489][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'.
[  153.133774][ T6558] netlink: 40 bytes leftover after parsing attributes in process `syz.1.191'.
[  153.188861][ T6558] Zero length message leads to an empty skb
[  153.221923][ T6556] delete_channel: no stack
[  153.368026][  T976] rc_core: IR keymap rc-hauppauge not found
[  153.384251][  T976] Registered IR keymap rc-empty
[  153.398867][ T6557] ALSA: mixer_oss: invalid OSS volume '`d#ètü&{W¯k¬ïsÓd:»ýEB|£åÃÓ'
[  153.417989][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  153.468026][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  153.510584][  T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  153.572581][  T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19
[  154.978128][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.107914][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.137916][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.157928][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.197614][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.257968][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.317974][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.362944][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.407954][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.499516][  T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.590639][  T976] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  155.617046][  T976] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  156.424150][ T6603] random: crng reseeded on system resumption
[  156.733184][  T976] usb 1-1: USB disconnect, device number 6
[  156.892077][ T6609] FAULT_INJECTION: forcing a failure.
[  156.892077][ T6609] name failslab, interval 1, probability 0, space 0, times 0
[  156.904758][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.1.204 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  156.904774][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  156.904782][ T6609] Call Trace:
[  156.904787][ T6609]  <TASK>
[  156.904792][ T6609]  dump_stack_lvl+0x189/0x250
[  156.904815][ T6609]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.904833][ T6609]  ? __pfx__printk+0x10/0x10
[  156.904857][ T6609]  ? __pfx___might_resched+0x10/0x10
[  156.904875][ T6609]  ? fs_reclaim_acquire+0x7d/0x100
[  156.904893][ T6609]  should_fail_ex+0x414/0x560
[  156.904909][ T6609]  should_failslab+0xa8/0x100
[  156.904922][ T6609]  kmem_cache_alloc_noprof+0x73/0x3c0
[  156.904959][ T6609]  ? getname_flags+0xb8/0x540
[  156.904971][ T6609]  ? __pfx_vfs_write+0x10/0x10
[  156.904992][ T6609]  getname_flags+0xb8/0x540
[  156.905008][ T6609]  do_sys_openat2+0xbc/0x1c0
[  156.905026][ T6609]  ? __pfx_do_sys_openat2+0x10/0x10
[  156.905044][ T6609]  ? ksys_write+0x1f0/0x250
[  156.905068][ T6609]  __x64_sys_openat+0x138/0x170
[  156.905087][ T6609]  do_syscall_64+0xf6/0x210
[  156.905106][ T6609]  ? clear_bhb_loop+0x60/0xb0
[  156.905123][ T6609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.905136][ T6609] RIP: 0033:0x7f9370f8e969
[  156.905148][ T6609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.905159][ T6609] RSP: 002b:00007f9371df5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  156.905173][ T6609] RAX: ffffffffffffffda RBX: 00007f93711b5fa0 RCX: 00007f9370f8e969
[  156.905183][ T6609] RDX: 0000000000000481 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  156.905192][ T6609] RBP: 00007f9371df5090 R08: 0000000000000000 R09: 0000000000000000
[  156.905200][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.905208][ T6609] R13: 0000000000000000 R14: 00007f93711b5fa0 R15: 00007ffddcfc08d8
[  156.905229][ T6609]  </TASK>
[  159.418035][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  160.092620][ T5881] usb 1-1: Using ep0 maxpacket: 16
[  160.114824][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.127893][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  160.268225][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  160.288165][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  160.310490][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  160.351776][ T5881] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  160.387704][ T5881] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  160.410982][ T5881] usb 1-1: Manufacturer: syz
[  160.452357][ T5881] usb 1-1: config 0 descriptor??
[  160.477740][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  160.477756][   T30] audit: type=1326 audit(1747100366.709:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.4.214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdec038e969 code=0x0
[  160.855302][ T5881] rc_core: IR keymap rc-hauppauge not found
[  160.867171][ T5881] Registered IR keymap rc-empty
[  160.880616][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  160.907982][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  160.953224][ T5881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  160.968978][ T6654] FAULT_INJECTION: forcing a failure.
[  160.968978][ T6654] name failslab, interval 1, probability 0, space 0, times 0
[  161.025351][ T5881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21
[  161.062252][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz.3.217 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  161.062279][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  161.062291][ T6654] Call Trace:
[  161.062300][ T6654]  <TASK>
[  161.062308][ T6654]  dump_stack_lvl+0x189/0x250
[  161.062345][ T6654]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.062372][ T6654]  ? __pfx__printk+0x10/0x10
[  161.062410][ T6654]  ? __pfx___might_resched+0x10/0x10
[  161.062441][ T6654]  ? fs_reclaim_acquire+0x7d/0x100
[  161.062469][ T6654]  should_fail_ex+0x414/0x560
[  161.062495][ T6654]  should_failslab+0xa8/0x100
[  161.062515][ T6654]  __kmalloc_noprof+0xcb/0x4f0
[  161.062543][ T6654]  ? kfree+0x4d/0x440
[  161.062580][ T6654]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  161.062612][ T6654]  tomoyo_realpath_from_path+0xe3/0x5d0
[  161.062640][ T6654]  ? tomoyo_domain+0xda/0x130
[  161.062672][ T6654]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  161.062694][ T6654]  tomoyo_path_number_perm+0x1e8/0x5a0
[  161.062718][ T6654]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  161.062770][ T6654]  ? __lock_acquire+0xaac/0xd20
[  161.062816][ T6654]  ? __fget_files+0x2a/0x420
[  161.062839][ T6654]  ? __fget_files+0x3a0/0x420
[  161.062855][ T6654]  ? __fget_files+0x2a/0x420
[  161.062877][ T6654]  security_file_ioctl+0xcb/0x2d0
[  161.062902][ T6654]  __se_sys_ioctl+0x47/0x170
[  161.062930][ T6654]  do_syscall_64+0xf6/0x210
[  161.062956][ T6654]  ? clear_bhb_loop+0x60/0xb0
[  161.062980][ T6654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.062998][ T6654] RIP: 0033:0x7fd5b9d8e969
[  161.063015][ T6654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.063031][ T6654] RSP: 002b:00007fd5b7bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.063052][ T6654] RAX: ffffffffffffffda RBX: 00007fd5b9fb6160 RCX: 00007fd5b9d8e969
[  161.063066][ T6654] RDX: 0000200000000000 RSI: 00000000000007a0 RDI: 0000000000000005
[  161.063078][ T6654] RBP: 00007fd5b7bb4090 R08: 0000000000000000 R09: 0000000000000000
[  161.063089][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.063100][ T6654] R13: 0000000000000000 R14: 00007fd5b9fb6160 R15: 00007ffdab907b48
[  161.063131][ T6654]  </TASK>
[  161.063139][ T6654] ERROR: Out of memory at tomoyo_realpath_from_path.
[  161.348146][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.368270][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.419205][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.444856][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.470189][ T6658] FAULT_INJECTION: forcing a failure.
[  161.470189][ T6658] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.568111][ T6658] CPU: 0 UID: 0 PID: 6658 Comm: syz.4.219 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  161.568138][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  161.568149][ T6658] Call Trace:
[  161.568157][ T6658]  <TASK>
[  161.568165][ T6658]  dump_stack_lvl+0x189/0x250
[  161.568191][ T6658]  ? __lock_acquire+0xaac/0xd20
[  161.568218][ T6658]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.568242][ T6658]  ? __pfx__printk+0x10/0x10
[  161.568270][ T6658]  ? __might_fault+0xb0/0x130
[  161.568319][ T6658]  should_fail_ex+0x414/0x560
[  161.568341][ T6658]  _copy_from_user+0x2d/0xb0
[  161.568365][ T6658]  __sys_bpf+0x1ed/0x860
[  161.568389][ T6658]  ? __pfx___sys_bpf+0x10/0x10
[  161.568420][ T6658]  ? ksys_write+0x1f0/0x250
[  161.568442][ T6658]  ? rcu_is_watching+0x15/0xb0
[  161.568476][ T6658]  __x64_sys_bpf+0x7c/0x90
[  161.568511][ T6658]  do_syscall_64+0xf6/0x210
[  161.568536][ T6658]  ? clear_bhb_loop+0x60/0xb0
[  161.568559][ T6658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.568576][ T6658] RIP: 0033:0x7fdec038e969
[  161.568592][ T6658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.568608][ T6658] RSP: 002b:00007fdec11c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  161.568627][ T6658] RAX: ffffffffffffffda RBX: 00007fdec05b5fa0 RCX: 00007fdec038e969
[  161.568641][ T6658] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 0000000000000000
[  161.568652][ T6658] RBP: 00007fdec11c8090 R08: 0000000000000000 R09: 0000000000000000
[  161.568663][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.568673][ T6658] R13: 0000000000000000 R14: 00007fdec05b5fa0 R15: 00007ffc64b09648
[  161.568709][ T6658]  </TASK>
[  161.767964][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.792136][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.841969][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.897975][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.910071][ T6649] syz.2.216 uses old SIOCAX25GETINFO
[  161.956837][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  162.007937][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  162.060016][ T5881] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  162.094011][ T5881] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  162.135242][ T5881] usb 1-1: USB disconnect, device number 7
[  162.257986][ T5870] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  162.417913][ T5870] usb 5-1: Using ep0 maxpacket: 16
[  162.428020][ T5870] usb 5-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config
[  162.448304][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  162.479320][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'.
[  162.481196][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  162.532043][ T5870] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  162.568493][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  162.614701][ T5870] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  162.637944][ T5870] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  162.668843][ T5870] usb 5-1: Manufacturer: syz
[  162.698844][ T5870] usb 5-1: config 0 descriptor??
[  163.111172][ T5870] rc_core: IR keymap rc-hauppauge not found
[  163.121254][ T5870] Registered IR keymap rc-empty
[  163.126280][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.176409][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.219391][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  163.264033][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22
[  163.310073][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.348214][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.388052][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.428690][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.457955][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.498001][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.547946][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.578704][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.617892][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.667911][ T5870] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  163.699708][ T5870] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  163.752548][ T5870] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  163.787221][ T5870] usb 5-1: USB disconnect, device number 9
[  164.467958][ T5870] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  164.638062][ T5870] usb 5-1: Using ep0 maxpacket: 16
[  164.647088][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.849910][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.861911][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.871506][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.879808][ T5870] usb 5-1: Product: syz
[  164.884071][ T5870] usb 5-1: Manufacturer: syz
[  164.907923][ T5870] usb 5-1: SerialNumber: syz
[  165.916958][ T5870] usb 5-1: 0:2 : does not exist
[  165.932847][ T5870] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  165.958718][ T5870] usb 5-1: USB disconnect, device number 10
[  166.183256][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.308639][ T6705] FAULT_INJECTION: forcing a failure.
[  166.308639][ T6705] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.321954][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.3.233 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  166.321978][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  166.321989][ T6705] Call Trace:
[  166.321996][ T6705]  <TASK>
[  166.322003][ T6705]  dump_stack_lvl+0x189/0x250
[  166.322036][ T6705]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.322061][ T6705]  ? __pfx__printk+0x10/0x10
[  166.322101][ T6705]  should_fail_ex+0x414/0x560
[  166.322125][ T6705]  _copy_to_user+0x31/0xb0
[  166.322152][ T6705]  simple_read_from_buffer+0xe1/0x170
[  166.322185][ T6705]  proc_fail_nth_read+0x1df/0x250
[  166.322207][ T6705]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  166.322230][ T6705]  ? rw_verify_area+0x258/0x650
[  166.322254][ T6705]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  166.322274][ T6705]  vfs_read+0x200/0x980
[  166.322304][ T6705]  ? __pfx___mutex_lock+0x10/0x10
[  166.322328][ T6705]  ? __pfx_vfs_read+0x10/0x10
[  166.322354][ T6705]  ? __fget_files+0x2a/0x420
[  166.322375][ T6705]  ? __fget_files+0x3a0/0x420
[  166.322396][ T6705]  ? __fget_files+0x2a/0x420
[  166.322421][ T6705]  ksys_read+0x145/0x250
[  166.322444][ T6705]  ? __pfx_filldir64+0x10/0x10
[  166.322470][ T6705]  ? __pfx_ksys_read+0x10/0x10
[  166.322498][ T6705]  ? do_syscall_64+0xba/0x210
[  166.322525][ T6705]  do_syscall_64+0xf6/0x210
[  166.322548][ T6705]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  166.322565][ T6705]  ? clear_bhb_loop+0x60/0xb0
[  166.322587][ T6705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.322610][ T6705] RIP: 0033:0x7fd5b9d8d37c
[  166.322627][ T6705] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  166.322642][ T6705] RSP: 002b:00007fd5b7bd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  166.322661][ T6705] RAX: ffffffffffffffda RBX: 00007fd5b9fb6080 RCX: 00007fd5b9d8d37c
[  166.322673][ T6705] RDX: 000000000000000f RSI: 00007fd5b7bd50a0 RDI: 000000000000000b
[  166.322684][ T6705] RBP: 00007fd5b7bd5090 R08: 0000000000000000 R09: 0000000000000000
[  166.322695][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.322705][ T6705] R13: 0000000000000000 R14: 00007fd5b9fb6080 R15: 00007ffdab907b48
[  166.322734][ T6705]  </TASK>
[  166.577971][ T6706] 9pnet_fd: Insufficient options for proto=fd
[  167.777892][ T5870] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  167.950161][ T6722] FAULT_INJECTION: forcing a failure.
[  167.950161][ T6722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  167.963749][ T6722] CPU: 1 UID: 0 PID: 6722 Comm: syz.1.239 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  167.963775][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  167.963786][ T6722] Call Trace:
[  167.963794][ T6722]  <TASK>
[  167.963802][ T6722]  dump_stack_lvl+0x189/0x250
[  167.963832][ T6722]  ? __lock_acquire+0xaac/0xd20
[  167.963862][ T6722]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.963888][ T6722]  ? __pfx__printk+0x10/0x10
[  167.963918][ T6722]  ? __might_fault+0xb0/0x130
[  167.963960][ T6722]  should_fail_ex+0x414/0x560
[  167.963985][ T6722]  _copy_from_user+0x2d/0xb0
[  167.964013][ T6722]  do_sock_getsockopt+0x1cd/0x650
[  167.964042][ T6722]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  167.964068][ T6722]  ? __fget_files+0x2a/0x420
[  167.964086][ T6722]  ? __fget_files+0x3a0/0x420
[  167.964102][ T6722]  ? __fget_files+0x2a/0x420
[  167.964128][ T6722]  __x64_sys_getsockopt+0x1a5/0x250
[  167.964163][ T6722]  do_syscall_64+0xf6/0x210
[  167.964188][ T6722]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  167.964208][ T6722]  ? clear_bhb_loop+0x60/0xb0
[  167.964231][ T6722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.964257][ T6722] RIP: 0033:0x7f9370f8e969
[  167.964274][ T6722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.964290][ T6722] RSP: 002b:00007f9371dd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  167.964310][ T6722] RAX: ffffffffffffffda RBX: 00007f93711b6080 RCX: 00007f9370f8e969
[  167.964324][ T6722] RDX: 000000000000003b RSI: 0000000000000029 RDI: 0000000000000005
[  167.964336][ T6722] RBP: 00007f9371dd4090 R08: 0000200000000840 R09: 0000000000000000
[  167.964348][ T6722] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001
[  167.964360][ T6722] R13: 0000000000000000 R14: 00007f93711b6080 R15: 00007ffddcfc08d8
[  167.964391][ T6722]  </TASK>
[  168.270662][ T6724] net_ratelimit: 14 callbacks suppressed
[  168.278268][ T6724] openvswitch: netlink: Message has 3 unknown bytes.
[  168.285417][ T6724] openvswitch: netlink: Actions may not be safe on all matching packets
[  169.041084][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  169.058822][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.118045][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  169.216749][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  169.226584][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  169.236581][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.260447][ T5870] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  169.277892][ T5870] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  169.286040][ T5870] usb 4-1: Manufacturer: syz
[  169.303473][ T5870] usb 4-1: config 0 descriptor??
[  170.161084][ T5870] rc_core: IR keymap rc-hauppauge not found
[  170.167317][ T5870] Registered IR keymap rc-empty
[  170.187861][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  170.217923][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  170.393733][ T5870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  170.422901][ T5870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24
[  170.448195][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  170.471308][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  170.498126][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  170.518584][ T5937] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  170.527839][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  170.547954][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  170.678676][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  170.833802][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  170.947967][ T5937] usb 5-1: Using ep0 maxpacket: 8
[  170.979774][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  171.061961][ T5937] usb 5-1: config 9 has an invalid interface number: 251 but max is 1
[  171.108524][ T6750] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  171.124122][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  171.134671][ T5937] usb 5-1: config 9 has no interface number 1
[  171.147909][ T5937] usb 5-1: config 9 interface 251 has no altsetting 0
[  171.158153][ T5870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  171.177029][ T5937] usb 5-1: config 9 interface 0 has no altsetting 0
[  171.186524][ T5937] usb 5-1: New USB device found, idVendor=0c45, idProduct=6011, bcdDevice=36.43
[  171.198244][ T5870] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  171.207951][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.216104][ T5870] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  171.226226][ T5937] usb 5-1: Product: syz
[  171.234725][ T5937] usb 5-1: Manufacturer: syz
[  171.248298][ T5870] usb 4-1: USB disconnect, device number 14
[  171.257974][ T5937] usb 5-1: SerialNumber: syz
[  171.563061][ T5937] gspca_main: sonixb-2.14.0 probing 0c45:6011
[  171.580113][ T5937] sonixb 5-1:9.0: Error reading register 00: -71
[  171.592559][ T5937] usb 5-1: USB disconnect, device number 11
[  172.247413][ T5870] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  172.885971][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4
[  172.921251][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023
[  172.950718][ T5870] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  172.961894][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.985907][ T5870] usb 4-1: Product: syz
[  172.994405][ T5870] usb 4-1: Manufacturer: syz
[  173.003303][ T5870] usb 4-1: SerialNumber: syz
[  173.013001][ T5870] usb 4-1: config 0 descriptor??
[  173.438048][  T976] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  173.447877][ T5871] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  173.572044][ T6780] IPVS: length: 4096 != 8
[  173.601279][ T5870] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25
[  173.622261][  T976] usb 1-1: Using ep0 maxpacket: 16
[  173.627529][ T5871] usb 5-1: Using ep0 maxpacket: 32
[  173.655090][ T5871] usb 5-1: config 0 has an invalid interface number: 15 but max is 0
[  173.668483][  T976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.697848][ T5871] usb 5-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config
[  173.716574][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  173.724700][  T976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  173.759234][ T5871] usb 5-1: config 0 has no interface number 0
[  173.782549][  T976] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  173.792627][ T5871] usb 5-1: New USB device found, idVendor=841e, idProduct=3f02, bcdDevice= d.71
[  173.808509][  T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.822139][   T53] usb 4-1: USB disconnect, device number 15
[  173.836454][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.846155][  T976] usb 1-1: Product: syz
[  173.885520][  T976] usb 1-1: Manufacturer: syz
[  173.890621][ T5871] usb 5-1: Product: syz
[  173.894843][ T5871] usb 5-1: Manufacturer: syz
[  173.907331][  T976] usb 1-1: SerialNumber: syz
[  173.922968][ T5913] usb 2-1: Using ep0 maxpacket: 16
[  173.950600][ T5913] usb 2-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config
[  173.961547][ T5871] usb 5-1: SerialNumber: syz
[  173.966296][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  174.002217][ T5871] usb 5-1: config 0 descriptor??
[  174.012281][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  174.034990][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  174.047850][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.065599][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  174.075469][ T5913] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  174.080348][ T6785] 9pnet_fd: Insufficient options for proto=fd
[  174.090422][ T5913] usb 2-1: Manufacturer: syz
[  174.102865][ T5913] usb 2-1: config 0 descriptor??
[  174.185209][  T976] usb 1-1: 0:2 : does not exist
[  174.198156][  T976] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  174.436495][ T5871] usb 5-1: USB disconnect, device number 12
[  174.672218][ T6790] evm: overlay not supported
[  175.407244][ T5913] rc_core: IR keymap rc-hauppauge not found
[  175.413264][   T53] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  175.421129][ T5913] Registered IR keymap rc-empty
[  175.428032][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  175.448785][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  175.503871][ T5913] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  175.552453][  T976] usb 1-1: USB disconnect, device number 8
[  175.570230][ T5913] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26
[  175.655822][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  175.692119][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  175.728055][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  175.842626][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  176.456655][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  176.477939][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  176.514021][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  176.587533][ T6797] udevd[6797]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.747943][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  176.781705][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  177.308265][ T6808] openvswitch: netlink: Message has 3 unknown bytes.
[  177.315148][ T6808] openvswitch: netlink: Actions may not be safe on all matching packets
[  177.526773][ T6807] input: syz1 as /devices/virtual/input/input27
[  177.735085][ T5913] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  178.027700][ T5913] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  178.055389][ T5913] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  178.317957][ T5913] usb 2-1: USB disconnect, device number 10
[  283.547751][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  283.554840][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=15589, q=260 ncpus=2)
[  283.562572][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10499 (4294965487-4294954988), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  283.576049][    C1] rcu: rcu_preempt kthread starved for 10499 jiffies! g15589 f0x2 RCU_GP_CLEANUP(7) ->state=0x0 ->cpu=0
[  283.587189][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  283.597174][    C1] rcu: RCU grace-period kthread stack dump:
[  283.603070][    C1] task:rcu_preempt     state:R  running task     stack:27496 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  283.616602][    C1] Call Trace:
[  283.619896][    C1]  <TASK>
[  283.622845][    C1]  __schedule+0x168f/0x4c70
[  283.627642][    C1]  ? __lock_acquire+0xaac/0xd20
[  283.632525][    C1]  ? do_raw_spin_lock+0x121/0x290
[  283.637567][    C1]  ? preempt_schedule_common+0x83/0xd0
[  283.643744][    C1]  ? __pfx___schedule+0x10/0x10
[  283.648624][    C1]  ? __lock_acquire+0xaac/0xd20
[  283.653509][    C1]  ? preempt_schedule+0xae/0xc0
[  283.658377][    C1]  preempt_schedule_common+0x83/0xd0
[  283.663678][    C1]  preempt_schedule+0xae/0xc0
[  283.668378][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[  283.673815][    C1]  preempt_schedule_thunk+0x16/0x30
[  283.679040][    C1]  _raw_spin_unlock_irq+0x45/0x50
[  283.684093][    C1]  rcu_gp_cleanup+0x4f2/0xfb0
[  283.688796][    C1]  ? finish_swait+0xcd/0x1f0
[  283.693407][    C1]  rcu_gp_kthread+0xa7/0x390
[  283.698022][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  283.703242][    C1]  ? __kthread_parkme+0x7b/0x200
[  283.708196][    C1]  ? __kthread_parkme+0x1a1/0x200
[  283.713245][    C1]  kthread+0x70e/0x8a0
[  283.717337][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  283.722557][    C1]  ? __pfx_kthread+0x10/0x10
[  283.727183][    C1]  ? __pfx_kthread+0x10/0x10
[  283.731804][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  283.737021][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.742238][    C1]  ? __pfx_kthread+0x10/0x10
[  283.746841][    C1]  ret_from_fork+0x4b/0x80
[  283.751272][    C1]  ? __pfx_kthread+0x10/0x10
[  283.755891][    C1]  ret_from_fork_asm+0x1a/0x30
[  283.760705][    C1]  </TASK>
[  283.763739][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  283.770090][    C1] Sending NMI from CPU 1 to CPUs 0:
[  283.775329][    C0] NMI backtrace for cpu 0
[  283.775345][    C0] CPU: 0 UID: 0 PID: 6820 Comm: syz.1.264 Not tainted 6.15.0-rc6-syzkaller-00025-g627277ba7c23 #0 PREEMPT(full) 
[  283.775366][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  283.775377][    C0] RIP: 0010:__this_cpu_preempt_check+0x0/0x20
[  283.775409][    C0] Code: 16 9c e3 f5 eb a7 e8 8f e3 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 89 fe 48 c7 c7 e0 04 c1 8b e9 bd fe ff ff cc cc cc
[  283.775425][    C0] RSP: 0018:ffffc90000007250 EFLAGS: 00000006
[  283.775440][    C0] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 93edd1a766e6de00
[  283.775452][    C0] RDX: 0000000000010100 RSI: ffffffff8bc104c0 RDI: ffffffff8d74bc97
[  283.775464][    C0] RBP: ffff88806a628d50 R08: ffff88806a628c87 R09: 1ffff1100d4c5190
[  283.775477][    C0] R10: dffffc0000000000 R11: ffffed100d4c5191 R12: ffff88805ab64340
[  283.775490][    C0] R13: ffffffff8970ae9f R14: ffff88805ab64300 R15: ffff888032738000
[  283.775503][    C0] FS:  00007f9371dd46c0(0000) GS:ffff8881260fb000(0000) knlGS:0000000000000000
[  283.775519][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  283.775530][    C0] CR2: 0000001b2fcfc000 CR3: 000000007cd54000 CR4: 00000000003526f0
[  283.775545][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  283.775555][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  283.775566][    C0] Call Trace:
[  283.775573][    C0]  <IRQ>
[  283.775580][    C0]  lock_release+0xbc/0x3e0
[  283.775611][    C0]  ? taprio_set_budgets+0x375/0x3b0
[  283.775647][    C0]  _raw_spin_unlock+0x16/0x50
[  283.775671][    C0]  advance_sched+0x99f/0xc90
[  283.775707][    C0]  ? __pfx_advance_sched+0x10/0x10
[  283.775727][    C0]  __hrtimer_run_queues+0x529/0xc60
[  283.775761][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  283.775784][    C0]  ? ktime_get_update_offsets_now+0x3ab/0x3d0
[  283.775810][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  283.775848][    C0]  __sysvec_apic_timer_interrupt+0x108/0x410
[  283.775871][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  283.775890][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  283.775908][    C0] RIP: 0010:debug_lockdep_rcu_enabled+0x6/0x40
[  283.775929][    C0] Code: 0b 90 90 90 eb c4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 <83> 3d 27 a5 2e 04 00 74 1e 83 3d ea d2 2e 04 00 74 15 65 48 8b 0c
[  283.775943][    C0] RSP: 0018:ffffc90000007710 EFLAGS: 00000246
[  283.775956][    C0] RAX: 0000000000000000 RBX: ffffffff821fb886 RCX: 93edd1a766e6de00
[  283.775969][    C0] RDX: 0000000000000000 RSI: ffffffff8d9226df RDI: ffffffff8bc104e0
[  283.775980][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  283.775991][    C0] R10: 0000000000000000 R11: ffffffff8171ca05 R12: 1ffff92000000efd
[  283.776003][    C0] R13: ffffc90000007820 R14: ffffc900000077e8 R15: ffffffff8171ca05
[  283.776016][    C0]  ? unwind_next_frame+0xa5/0x2390
[  283.776037][    C0]  ? kasan_save_free_info+0x46/0x50
[  283.776055][    C0]  ? unwind_next_frame+0xa5/0x2390
[  283.776079][    C0]  unwind_next_frame+0xcb/0x2390
[  283.776102][    C0]  ? unwind_next_frame+0xa5/0x2390
[  283.776120][    C0]  ? kasan_save_track+0x3e/0x80
[  283.776145][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  283.776162][    C0]  arch_stack_walk+0x11c/0x150
[  283.776187][    C0]  ? kasan_save_free_info+0x46/0x50
[  283.776208][    C0]  stack_trace_save+0x9c/0xe0
[  283.776225][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  283.776247][    C0]  kasan_save_track+0x3e/0x80
[  283.776269][    C0]  ? kasan_save_track+0x3e/0x80
[  283.776290][    C0]  ? kasan_save_free_info+0x46/0x50
[  283.776342][    C0]  ? rcu_core+0xca8/0x1710
[  283.776364][    C0]  kasan_save_free_info+0x46/0x50
[  283.776383][    C0]  __kasan_slab_free+0x62/0x70
[  283.776406][    C0]  kmem_cache_free+0x192/0x3f0
[  283.776431][    C0]  ? rcu_core+0xc34/0x1710
[  283.776453][    C0]  ? __pfx_i_callback+0x10/0x10
[  283.776477][    C0]  ? rcu_core+0xc34/0x1710
[  283.776498][    C0]  rcu_core+0xca8/0x1710
[  283.776519][    C0]  ? sched_clock+0x3f/0x60
[  283.776553][    C0]  ? __pfx_rcu_core+0x10/0x10
[  283.776577][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  283.776595][    C0]  ? sched_clock_cpu+0x74/0x430
[  283.776620][    C0]  ? __resched_curr+0x2ca/0x3d0
[  283.776646][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  283.776671][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  283.776705][    C0]  handle_softirqs+0x286/0x870
[  283.776733][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  283.776760][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  283.776785][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  283.776805][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  283.776827][    C0]  __irq_exit_rcu+0xca/0x1f0
[  283.776852][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  283.776879][    C0]  ? rcu_is_watching+0x15/0xb0
[  283.776904][    C0]  irq_exit_rcu+0x9/0x30
[  283.776928][    C0]  sysvec_call_function_single+0xa3/0xc0
[  283.776946][    C0]  </IRQ>
[  283.776952][    C0]  <TASK>
[  283.776958][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  283.776976][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  283.776994][    C0] Code: 74 05 e8 8b c3 75 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 83 46 3f f6 65 8b 05 cc a5 20 07 85 c0 74 40 48 c7 04 24 0e 36
[  283.777008][    C0] RSP: 0018:ffffc9000dd9fb80 EFLAGS: 00000206
[  283.777022][    C0] RAX: 93edd1a766e6de00 RBX: 0000000000000a02 RCX: 93edd1a766e6de00
[  283.777035][    C0] RDX: 0000000000000007 RSI: ffffffff8d7387c2 RDI: 0000000000000001
[  283.777045][    C0] RBP: ffffc9000dd9fc10 R08: ffffffff8f7dd277 R09: 1ffffffff1efba4e
[  283.777058][    C0] R10: dffffc0000000000 R11: fffffbfff1efba4f R12: dffffc0000000000
[  283.777070][    C0] R13: ffff8880b88276c0 R14: ffff8880b88276c0 R15: 1ffff92001bb3f70
[  283.777094][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  283.777111][    C0]  ? read_tsc+0x9/0x20
[  283.777140][    C0]  clock_was_set+0x63b/0x7c0
[  283.777168][    C0]  ? __pfx_clock_was_set+0x10/0x10
[  283.777189][    C0]  ? do_settimeofday64+0x2d1/0x5e0
[  283.777208][    C0]  ? timekeeping_update_from_shadow+0x2b1/0x350
[  283.777229][    C0]  do_settimeofday64+0x2ec/0x5e0
[  283.777246][    C0]  ? safesetid_security_capable+0xa9/0x1a0
[  283.777269][    C0]  ? __pfx_do_settimeofday64+0x10/0x10
[  283.777286][    C0]  ? usbdux_ai_insn_read+0x2e2/0x830
[  283.777306][    C0]  ? bpf_lsm_settime+0x9/0x20
[  283.777339][    C0]  ? security_settime64+0x76/0x290
[  283.777362][    C0]  ? do_sys_settimeofday64+0x163/0x260
[  283.777383][    C0]  __x64_sys_clock_settime+0x22c/0x280
[  283.777403][    C0]  ? rcu_is_watching+0x15/0xb0
[  283.777428][    C0]  ? __pfx___x64_sys_clock_settime+0x10/0x10
[  283.777450][    C0]  ? do_syscall_64+0xba/0x210
[  283.777473][    C0]  do_syscall_64+0xf6/0x210
[  283.777494][    C0]  ? clear_bhb_loop+0x60/0xb0
[  283.777513][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.777529][    C0] RIP: 0033:0x7f9370f8e969
[  283.777615][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.777629][    C0] RSP: 002b:00007f9371dd4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
[  283.777645][    C0] RAX: ffffffffffffffda RBX: 00007f93711b6080 RCX: 00007f9370f8e969
[  283.777658][    C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000
[  283.777669][    C0] RBP: 00007f9371010ab1 R08: 0000000000000000 R09: 0000000000000000
[  283.777679][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.777689][    C0] R13: 0000000000000000 R14: 00007f93711b6080 R15: 00007ffddcfc08d8
[  283.777709][    C0]  </TASK>